last executing test programs: 23.595144437s ago: executing program 2 (id=2364): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0x30500, 0x0) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f00000001c0)={0x17d, 0x10, 0x0, 0xc, 0x0, [@private2={0xfc, 0x2, '\x00', 0x1}, @local, @private2={0xfc, 0x2, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1]}, 0x88) write$USERIO_CMD_SEND_INTERRUPT(r1, &(0x7f0000000080)={0x2, 0x5}, 0x2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}], 0x10) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x200000) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x40014, &(0x7f000005ffe4)={0xa, 0x6e23, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0xffffffff}, 0x1c) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r3, 0x29, 0x2, &(0x7f0000000080)=0x2, 0x4) recvmmsg(r3, &(0x7f0000002640)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001fc0)=""/29, 0x1d}}], 0x1, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000240), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r4, 0x0) setsockopt$inet6_int(r3, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r5 = socket$packet(0x11, 0x3, 0x300) r6 = dup(r5) r7 = dup(r2) ioctl$VHOST_NET_SET_BACKEND(r7, 0x4008af30, &(0x7f0000000000)={0x1, r6}) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r8, 0x5609, 0x0) recvmmsg(r0, &(0x7f00000034c0)=[{{0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0xfffffffffffffd9b}, 0xffffffff}], 0x1, 0x12043, 0x0) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r9, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) r11 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r11, 0x84, 0x71, &(0x7f0000000100)={r10, 0x8}, 0x8) 22.801849432s ago: executing program 4 (id=2369): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000a0000000000000000000001b7080000000001007baaf8ff00000000b5080200000000007b8af0ff00000000bf8100000000000007010000a8d5b100bfa400000000000007040000f0ffffffb702000008000000182300", @ANYRES32=r0, @ANYBLOB="0000000001000000b705000008000000850000000800000095"], &(0x7f0000000300)='GPL\x00', 0x3, 0xff7, &(0x7f0000001e00)=""/4087, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 22.769671961s ago: executing program 4 (id=2370): pipe2(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = fsopen(&(0x7f0000000000)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af12, &(0x7f00000000c0)={0x3, 0xcc}) statx(r3, 0x0, 0x1000, 0x6000, &(0x7f0000000400)) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',default_permissions'], 0x0, 0x0, 0x0) mkdir(&(0x7f00000040c0)='./file0/file0\x00', 0x0) r4 = socket$packet(0x11, 0x2, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000100)={0x1c, 0x6, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x5}]}, 0x1c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendto$packet(r4, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x11, 0x86dd, r5, 0x1, 0x0, 0x6, @broadcast}, 0x34) close_range(r0, 0xffffffffffffffff, 0x0) 22.6478494s ago: executing program 2 (id=2371): ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18}, './file0\x00'}) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$dsp(r0, &(0x7f00000001c0)='\\', 0x1) syz_io_uring_setup(0x7dca, &(0x7f0000000340)={0x0, 0x0, 0x10100}, 0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}) syz_usb_connect(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12018000b63c3420f30c7593481c0102030109022400010000000009040000023883c80009050f0000040000000905080000020000003f68985c584cc4b30ba44603dc7809e2202197b5c71cc408622d363270247f67e65c38f2"], 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mprotect(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000300), 0x4421c1, 0x0) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000040)=0x400) ioctl$TCSETS2(r2, 0x402c542b, &(0x7f0000001c80)={0x7f, 0x36db, 0x0, 0x7, 0x7f, "740ce83e96e1535af9addb1a5b243d637c9b6d", 0x5, 0x74d}) bind$alg(0xffffffffffffffff, &(0x7f0000001800)={0x26, 'aead\x00', 0x0, 0x0, 'ccm-aes-ce\x00'}, 0x58) r3 = socket$can_j1939(0x1d, 0x2, 0x7) syz_emit_ethernet(0x2ce, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd6ef5c98002982901fec0ffff000000000000ffffe0000001fe8000000000000000000000000000aa"], 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) syz_emit_ethernet(0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x150) connect$can_j1939(r3, 0x0, 0x0) dup(r3) prctl$PR_SCHED_CORE(0x3e, 0x5, 0x0, 0x5, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="940000000b0600030000000000000000020000024c0007800c00184000000000000000070c00194000000000000000060c000180080001407f0000010900130073797a300000000008000a400000080006001d400006000005081500010000000900020073797a310000000008000940000001ff0900020073797a30000000000900020073797a30000000000800094000000000"], 0x94}, 0x1, 0x0, 0x0, 0x8080}, 0x4000015) preadv(r5, &(0x7f0000000140)=[{&(0x7f000001a880)=""/102384, 0x18ff0}], 0x1, 0x0, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000000)='h', 0xfdef}], 0x1) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) syz_usb_connect$uac1(0x0, 0x9b, &(0x7f0000000940)=ANY=[], 0x0) 22.530465945s ago: executing program 4 (id=2373): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r1 = syz_io_uring_setup(0x27f3, &(0x7f0000000340)={0x0, 0x400000, 0x10100}, &(0x7f0000000200), &(0x7f00000000c0)=0x0) syz_io_uring_setup(0x1868, &(0x7f00000003c0), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r1, 0x184c, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07}) ioctl$int_in(r0, 0x5421, &(0x7f0000000000)=0x1) r4 = fsopen(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_create1(0x0) epoll_wait(r5, 0x0, 0x0, 0x400) syz_open_procfs(0x0, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) set_mempolicy(0x3, 0x0, 0x8) fsmount(r4, 0x0, 0x0) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000040)={'full', 0x20, 0x3, 0x20, 0xc0fc}, 0x2f) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) r9 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r9, r8, &(0x7f0000002080)=0x3a, 0x100023b) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8042, 0x0) syz_emit_ethernet(0x547, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @gre_packet={0x2, 0x6, "6d7901", 0x511, 0x2f, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, {[@hopopts={0x21, 0x5, '\x00', [@calipso={0x7, 0x20, {0x1, 0x6, 0x18, 0x6, [0x4, 0x5, 0x8]}}, @enc_lim={0x4, 0x1, 0x8}, @enc_lim={0x4, 0x1, 0x9}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}]}, @hopopts={0x2b, 0x37, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0x2}, @generic={0xa, 0x99, "d4df6a7d216153379b1076c7f31c499c29e3bd64ef73e1ab12e51e696f9db0fd8e5131768e43b46402c691e622e647467e877edcdd02826a265733d0734e2aae0a24af4050bb5a44972250bee8f92e460ed06500ae9ffb7b1f68d76f5594713a3594b6546c2231e2a6a895851154425a611e79dfc1c0b657adc70f075dc3050b6f186cb6cf2c378e7cfd6925ecb6e85211bfde18fbc3fd6c31"}, @enc_lim={0x4, 0x1, 0x7}, @ra={0x5, 0x2, 0x9}, @generic={0x75, 0xf4, "339cbdb80df7462b034dcb2cb28e9b7cdda8fb85f455157238270d71ef784ef4746b487f97691c5e125305720f4a1904d7647cabb9125ef53bee2ccbcc3689e481550473e2c484fe3e23be52ed971ca82ff65fa782c5f8bd12419693c06f9d8c3bb439d4381244ce056ca899cf58969bddceb8d433112078b4ef869002ff9e6ff13bb72e421ee9dc2b8c5f9c6774e73d01d51ec0fc59bc4b33bcb70f5a47d64192a4f732fafde557a120307f2a4e67aa3e5d807a10c54e8072f2b2ce25cd79c67b99a49a1ce0e47ea5a9dc5da2784f54dfcca03838b2ff727182469aebc9445db72ae16f442c06cfd1ac67b2ebca5a91302e66b8"}, @pad1, @padn, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @jumbo={0xc2, 0x4, 0x2}]}, @hopopts={0x32, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x3}]}, @hopopts={0x5c}, @hopopts={0x2f, 0x2e, '\x00', [@pad1, @ra={0x5, 0x2, 0xff2b}, @generic={0x5, 0x160, "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"}, @jumbo={0xc2, 0x4, 0x8}, @jumbo={0xc2, 0x4, 0x9}]}, @srh={0x6, 0x2, 0x4, 0x1, 0xe, 0x50, 0xffe2, [@dev={0xfe, 0x80, '\x00', 0x28}]}, @hopopts={0x3b, 0x6, '\x00', [@calipso={0x7, 0x30, {0x1, 0xa, 0x4, 0x3ff, [0xb, 0x8, 0x0, 0xfffffffffffff801, 0x1]}}, @enc_lim={0x4, 0x1, 0x5}]}], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x17, 0x0, [], "d4a4a423af239c41915b96f4e5a0febe733c7c94c311eb"}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x1, 0xfffa], "ecd6d38ec04cfb186faaeaecc78572cb5b3cd771cfa42d0c0e65b3cc3aa393d6c1caf09c4dca"}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x86dd, [0x4, 0x87e], "26881c309c22190401bc26e9cec1bc8f09862723484dc1f732ae367f7201353f8381a9b405bdb626a09fee678f2d20b049de2a7d8e54eeaa6a6e47080ce59e94540bbe24c5498f1a56b05f98392595b70b4f1bf01212e92ab829810f81ec864be7d8596acaac5be8d5dab2442368032830258dd2b1731114e2087c460bfe7111e7dc2df5cfc3c9ac4526c8215fe9934e722d0e81e8cb80b2"}, {0x8, 0x88be, 0x3, {{0x5, 0x1, 0x6, 0x3, 0x1, 0x0, 0x4, 0x6}, 0x1, {0xec}}}, {0x8, 0x22eb, 0x3, {{0x8, 0x2, 0x80, 0x0, 0x0, 0x0, 0x5, 0x8}, 0x2, {0x3, 0x0, 0x0, 0x8, 0x0, 0x1, 0x3, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}}, 0x0) 21.852617321s ago: executing program 4 (id=2375): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x5, "0000000000000000001000"}}}]}, 0x48}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='net_prio.prioidx\x00', 0x275a, 0x0) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) dup2(r4, r3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r3, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYRES8=r4], 0x58}}, 0x0) syz_io_uring_setup(0x2c0c, &(0x7f0000000400)={0x0, 0x0, 0x4002}, &(0x7f0000000480), &(0x7f00000004c0)) 20.528605035s ago: executing program 2 (id=2380): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0x30500, 0x0) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f00000001c0)={0x17d, 0x10, 0x0, 0xc, 0x0, [@private2={0xfc, 0x2, '\x00', 0x1}, @local, @private2={0xfc, 0x2, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1]}, 0x88) write$USERIO_CMD_SEND_INTERRUPT(r1, &(0x7f0000000080)={0x2, 0x5}, 0x2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}], 0x10) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x200000) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x40014, &(0x7f000005ffe4)={0xa, 0x6e23, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0xffffffff}, 0x1c) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r3, 0x29, 0x2, &(0x7f0000000080)=0x2, 0x4) recvmmsg(r3, &(0x7f0000002640)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001fc0)=""/29, 0x1d}}], 0x1, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000240), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r4, 0x0) setsockopt$inet6_int(r3, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r5 = socket$packet(0x11, 0x3, 0x300) r6 = dup(r5) r7 = dup(r2) ioctl$VHOST_NET_SET_BACKEND(r7, 0x4008af30, &(0x7f0000000000)={0x1, r6}) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r8, 0x5609, 0x0) recvmmsg(r0, &(0x7f00000034c0)=[{{0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0xfffffffffffffd9b}, 0xffffffff}], 0x1, 0x12043, 0x0) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r9, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) r11 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r11, 0x84, 0x71, &(0x7f0000000100)={r10, 0x8}, 0x8) 20.244500406s ago: executing program 3 (id=2382): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000014c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)='8', 0x1}], 0x1}}], 0x1, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f00000002c0)=0x8001, 0x4) write$binfmt_elf64(r1, &(0x7f0000000240)=ANY=[@ANYRESDEC=r0], 0x78) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$KDGETKEYCODE(r2, 0x4b4c, &(0x7f00000001c0)={0x0, 0x34a29343}) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000200)={'vxcan1\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000100)={0x1d, r4, 0x40000000000}, 0x18) sendmsg$can_j1939(r3, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1d, 0x0, 0x0, {0x2}}, 0x18, &(0x7f00000004c0)={0x0}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) msync(&(0x7f00007ef000/0x4000)=nil, 0x4000, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000480)={'team0\x00', 0x0}) r8 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x11) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'vlan1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0xc09, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_PROTOCOL={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r7}, @IFLA_HSR_SLAVE1={0x8, 0x1, r9}, @IFLA_HSR_VERSION={0x5}]}}}]}, 0x50}}, 0x0) splice(r0, 0x0, r2, 0x0, 0x39000, 0x0) 19.525415969s ago: executing program 2 (id=2383): pipe2(&(0x7f0000000580), 0x80080) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000000)=r2) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) ioctl$int_in(r1, 0x5452, &(0x7f0000000080)=0x2) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r1, &(0x7f00000004c0)='<', 0x1, 0x805, 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',default_permissions'], 0x0, 0x0, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000140), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r3, 0xc0045516, &(0x7f0000000240)=0x3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) unshare(0x22020600) r5 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) r6 = fsmount(r5, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x34, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x1b}, {}, {0xfff2}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) close(r9) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r8, &(0x7f0000000000), 0xfffffecc) splice(r7, 0x0, r9, 0x0, 0x4ffe6, 0x0) syz_clone3(&(0x7f0000000340)={0x200000000, 0x0, 0x0, 0x0, {0x3e}, 0x0, 0x0, 0x0, 0x0, 0x0, {r6}}, 0x58) write$binfmt_script(r4, &(0x7f0000000000)={'#! ', './bus'}, 0x9) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0xc4c85513, &(0x7f0000000280)={{0x6, 0x6, 0x2, 0x2}, 0x1, [0xfffffffffffffffb, 0x3, 0x5, 0x6, 0x3, 0x46053c58, 0x0, 0x3da01594, 0x20a3, 0x8000000000401, 0x6, 0x7, 0x5, 0x3, 0x9, 0x0, 0x7fffffff, 0x800, 0x9, 0x9, 0x91, 0x7f, 0x1, 0x3, 0xfffffffffffffffe, 0x9, 0x8, 0x400, 0x9, 0x10000, 0x2, 0xe84, 0x7, 0x0, 0x9, 0x5e, 0xdad, 0x33, 0x2, 0x2, 0xffffffffffff0000, 0x0, 0x80000001, 0x3, 0x6, 0xfffffffffffffff7, 0x0, 0xe, 0x8000, 0x2, 0x10, 0x1, 0x405, 0x8, 0x462, 0x4, 0x6, 0x1e, 0x6, 0x18b8520, 0x8, 0xffffffffffffffff, 0x2, 0x7fffffffffffffff, 0x5, 0x58e0, 0xc, 0x3d2, 0x0, 0x100, 0x7, 0x6, 0x4, 0x7, 0x6a, 0xffffffff, 0x3, 0x0, 0x10001, 0x2, 0x2, 0x0, 0xffffffffffffffff, 0x2, 0x101, 0x100, 0x430, 0x369b, 0xffffffffffffff45, 0x1fb, 0x70826f92, 0x8b93, 0x4a, 0xfffffffffffffff4, 0x0, 0x4, 0x9, 0x3ff, 0xcfff, 0x0, 0xb, 0x3, 0x80000000, 0x1771, 0x1000000000000003, 0x7, 0x5, 0x4, 0x6ea, 0x6, 0x7fffffff, 0x3, 0xf, 0x8, 0xd, 0x6, 0xd, 0x4, 0x800, 0xffffffffffffffff, 0x1000000000, 0x7, 0x0, 0x7, 0xe18a, 0x4, 0xffffffffffffffff, 0xffff]}) 19.000567695s ago: executing program 3 (id=2385): syz_usb_connect(0x279e10a61e5f6009, 0x44, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x7a, 0x2e, 0x35, 0xff, 0x1199, 0x9061, 0x3229, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x32, 0x1, 0x4, 0x8, 0x0, 0x5, [{{0x9, 0x4, 0x8, 0x5, 0x0, 0x90, 0x2c, 0x71, 0x82, [@cdc_ncm={{0x8, 0x24, 0x6, 0x0, 0x1, "bf10e6"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x7ff, 0x5, 0x1}, {0x6, 0x24, 0x1a, 0x3, 0x1}}, @uac_as]}}]}}]}}, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0}) open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$TIOCGSOFTCAR(r1, 0x4b49, &(0x7f0000001080)) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file3\x00', 0xc1c0, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000300)={0x1fff, 0x3}, 0x10, 0x0) landlock_restrict_self(r2, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file3\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file0\x00', 0x2) syz_io_uring_setup(0x3392, &(0x7f0000000080)={0x0, 0xd806, 0x4, 0x2, 0xc4}, &(0x7f0000000100), &(0x7f0000000140)) 18.597321741s ago: executing program 2 (id=2386): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="44000000020600000000000000000000000000000500040000000000050001000700000011000300686173683a69702cf06f7274000000000c000780080012"], 0x44}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x4, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="090000001000000000f2ff3f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028008000f"], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}, 0x1, 0x0, 0x0, 0x40000080}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000180)=0xc) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000240)=0xc) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 18.333598617s ago: executing program 3 (id=2387): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000340)={&(0x7f0000000000)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x8000050}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000032c0), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000032c0), 0xffffffffffffffff) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000040)=@e={0xff, 0xa, 0x0, 0x0, @SEQ_NOTEON=@special}) r3 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYRES32=r1, @ANYRESHEX=r0, @ANYRESDEC=r1], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) (async) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000500), 0x0, 0x0}) (async) syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000500), 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000200)={0x0, 0x4}, 0xe) (async) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000200)={0x0, 0x4}, 0xe) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r4, 0x84, 0x23, &(0x7f0000001100)={r5}, 0x8) syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f00000033c0)={0x0, 0x0, &(0x7f0000003380)={&(0x7f0000000300)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000054000000280001"], 0x3c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='@\x00\x00\b', @ANYRES16=0x0, @ANYBLOB="000000000000000000003900000008000300", @ANYRES8=r0, @ANYBLOB="24005a802000018014000300000000000000000000000000000000000500040000000000"], 0x7e}}, 0x0) 18.176603733s ago: executing program 2 (id=2388): sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[], 0x58}}, 0x0) syz_io_uring_setup(0x2c0c, &(0x7f0000000400)={0x0, 0x0, 0x4002}, &(0x7f0000000480), &(0x7f00000004c0)) 15.197897093s ago: executing program 3 (id=2394): pipe2(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8}, {0xc, 0x2, 0x0, 0x1, {0x8, 0x1, r3}}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0xc}]}, 0x40}}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x10001, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4b4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r6, 0x4048ae9b, &(0x7f0000000300)={0xe0001}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x13, &(0x7f0000000300)=@bpf_lsm={0x3, 0x3, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x85}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="f20f1c0166b864912c870f23c80f21f866350c0080000f23f80f01fc0f20e06635000010000f22e066f30fa7c00f1c9700000f01c566b9a001000066b80400000066ba000000000f30c0dbb6660f3adf932700de", 0x54}], 0x1, 0x0, 0x0, 0x0) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) ioctl$KVM_RUN(r6, 0xae80, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',default_permissions'], 0x0, 0x0, 0x0) r7 = io_uring_setup(0x4efb, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x1a6}) r8 = socket$qrtr(0x2a, 0x2, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200000054000480500001800a000100696e6e65720000004000028008000240000000840800034000000002080004400000000f08000140000000001c000580090001006d657461000000000c000280080002402000000d0900010073797a30000000000900020073797a32"], 0xa8}}, 0x0) connect$qrtr(r8, &(0x7f0000000080), 0xc) read(r8, &(0x7f0000000180)=""/52, 0xfffffdef) getsockname(r8, 0x0, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000040c0)='./file0/file0\x00', 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 13.052619339s ago: executing program 3 (id=2397): sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[], 0x58}}, 0x0) syz_io_uring_setup(0x2c0c, &(0x7f0000000400)={0x0, 0x20, 0x4002}, &(0x7f0000000480), &(0x7f00000004c0)) 12.613360089s ago: executing program 1 (id=2398): r0 = socket$can_bcm(0x1d, 0x2, 0x2) syz_usb_connect(0x0, 0x46, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000ad6c86202f070022bf3f010203010902340001000000000904000003b4afd7000905000000000000000705e37e1b82e609050b02"], 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = landlock_create_ruleset(&(0x7f0000000000)={0x8000}, 0x10, 0x0) fsetxattr$system_posix_acl(r2, &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000280)={{}, {}, [{}]}, 0x50, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010163, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000001440)={{}, 0x0, 0x2, @inherit={0x50, &(0x7f00000013c0)={0x1, 0x1, 0x9170, 0x4, {0x0, 0x1ff, 0x4, 0x8, 0x4}, [0x0]}}, @devid}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_SET_NOTIFY(r3, 0x7cb, &(0x7f0000000080)={0x200000000000, 0xbce6, 0x3}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x2c, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_IE={0x4}]}, 0x2c}}, 0x0) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000180)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x1}}) pipe2$watch_queue(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000400)={0x20000000}) sendmsg$NFT_BATCH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f28000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x208}, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYRES16=r0, @ANYRES16=r9, @ANYRESOCT=r9, @ANYBLOB], 0x208}, 0x8040) recvmmsg(0xffffffffffffffff, &(0x7f0000003200)=[{{0x0, 0x0, &(0x7f0000001e00)=[{0x0}, {0x0}, {&(0x7f0000003480)=""/172, 0xac}], 0x3}}], 0x1, 0x0, 0x0) sendto$inet(r9, &(0x7f00000006c0)="b99192ae038c57f06c83182fa953de29597baccaa50217a6ab52e6ca7e0fcb89205ef728dbded1a74c03a25411c4e170cceb3efb390a5e82f997ae2d3fdce77b160c4301a4873179f2a17d5b5dbdd95f78515fa60ef206c7b3677c7a3465103c22856c44214ec9021a3ddd47829d4c5acb2ce71e452ba722eaf0902925c79e90f5ef11f741ccf11ca10bd33d7a81bb76af54fc71445a41cdc83a2a50c59b5674c38759e9612f95da8f305b2d16c800ac3a8f5bc6b6ec3f2e8dbd85285bdf87a201", 0xc1, 0x0, &(0x7f0000000540)={0x2, 0x4e22, @empty}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000002e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=""/108, 0x6c}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=""/99, 0x63}}, {{0x0, 0x0, &(0x7f0000001e40)=[{0x0}, {0x0}, {&(0x7f0000001d00)=""/172, 0xac}], 0x3, &(0x7f0000001e80)=""/4096, 0x1000}}], 0x3, 0x40002020, 0x0) recvmmsg(r9, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000340)=""/148, 0x94}, {&(0x7f0000000640)=""/125, 0x7d}, {&(0x7f0000000080)=""/45, 0x2d}, {&(0x7f0000000280)=""/114, 0x72}], 0x4}}], 0x1, 0x40000001, 0x0) recvmmsg(r10, &(0x7f0000001dc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/188, 0xbc, 0xdf0e}}], 0x1800, 0x2002, 0x0) 10.419542496s ago: executing program 3 (id=2399): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0x30500, 0x0) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f00000001c0)={0x17d, 0x10, 0x0, 0xc, 0x0, [@private2={0xfc, 0x2, '\x00', 0x1}, @local, @private2={0xfc, 0x2, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1]}, 0x88) write$USERIO_CMD_SEND_INTERRUPT(r1, &(0x7f0000000080)={0x2, 0x5}, 0x2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}], 0x10) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x200000) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x40014, &(0x7f000005ffe4)={0xa, 0x6e23, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0xffffffff}, 0x1c) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x2, &(0x7f0000000080)=0x2, 0x4) recvmmsg(r2, &(0x7f0000002640)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001fc0)=""/29, 0x1d}}], 0x1, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000240), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r3, 0x0) setsockopt$inet6_int(r2, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r4 = socket$packet(0x11, 0x3, 0x300) r5 = dup(r4) r6 = dup(0xffffffffffffffff) ioctl$VHOST_NET_SET_BACKEND(r6, 0x4008af30, &(0x7f0000000000)={0x1, r5}) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r7, 0x5609, 0x0) recvmmsg(r0, &(0x7f00000034c0)=[{{0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0xfffffffffffffd9b}, 0xffffffff}], 0x1, 0x12043, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r8, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) r10 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r10, 0x84, 0x71, &(0x7f0000000100)={r9, 0x8}, 0x8) 9.965694376s ago: executing program 1 (id=2401): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="000000000000002e24001280090001007866726d0000084214000280040003"], 0x44}}, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x200400, 0x0) ioctl$PPPIOCGIDLE64(r2, 0x8010743f, &(0x7f0000000140)) pipe(0x0) socket$nl_route(0x10, 0x3, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x8, 0x5, &(0x7f00000001c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3}]}, &(0x7f0000000140)='syzkaller\x00', 0x4, 0xa2, &(0x7f00000002c0)=""/162, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) msync(&(0x7f0000952000/0x1000)=nil, 0x1000, 0xa) syz_usb_connect(0x0, 0x3e, &(0x7f0000001100)=ANY=[@ANYBLOB="1201000020dafb2099041010f5050102030109022c00010000000009040000016f2bae000824020100000000092402020000000000090585da"], 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001980), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r4, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000a0000000400018008000400019b4fc3a6e67a991e4a8d5b00000000040006800aedc59118b22e8f7b0d502d9aaad651ff423a45944ba5b0d017fc1e5a3e6ffa42aa8176bf8dbcad1b3907ba14906e97215885cb598c871c6151c808b1d0b8c5a8c34a2d8dd0631a01f9be54f25ab7241efdaf4e7822e59acea178f4aa7d8e35f738b1886685d10c66dd"], 0x24}}, 0x0) close_range(0xffffffffffffffff, r2, 0x2) r6 = openat$full(0xffffff9c, &(0x7f0000000280), 0x200000, 0x0) sendfile(0xffffffffffffffff, r6, 0x0, 0x4) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000000)=0x2) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x48, 0x0, 0x0, 0x4}, {0x6, 0x0, 0x0, 0x1000001}]}) pipe2(&(0x7f0000000180), 0x80000) write$ppp(r1, &(0x7f0000000240)="1ec9323a1527", 0x6) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) 5.858081077s ago: executing program 1 (id=2405): r0 = syz_io_uring_setup(0x3b, &(0x7f0000000080)={0x0, 0x4, 0x10100}, &(0x7f00000001c0)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000380)=""/197, 0xc5}], 0x1}, 0x0, 0x80002101}) io_uring_enter(r0, 0xd81, 0x0, 0x0, 0x0, 0x0) write(r3, &(0x7f0000000200)='~', 0xf5) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r5, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, 0x0, 0x4, 0x70bd29, 0x25dfdbfd, {{}, {}, {0x14, 0x19, {0xffff, 0xe54d, 0x8, 0x57}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000010}, 0xbb3b9977c12e8d5c) socket$kcm(0x2, 0x200000000000001, 0x106) syz_usb_connect$uac1(0x0, 0x93, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000086b1d01014000010203010902810003010060000904000000010100000a240100000002010205240506000904010000010200000904010101010200000e240201000000009290d2199a5a09050109000000040007250180000000090402000001020000090402010101021b00082402010000000007240100000000090582090002"], 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bea100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1c, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x3, 0xa, 0x8, 0x6}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1, 0x0, 0x0, 0x700}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000000904"], 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0xdc3, 0x0) 4.635389324s ago: executing program 1 (id=2408): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@deltaction={0x1f4, 0x31, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x7c, 0x1, [{0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xd9e}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80000001}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x82}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x800}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}, @TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xa}}]}, @TCA_ACT_TAB={0x80, 0x1, [{0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x3e9e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6c91877}}, {0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x14, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8001}}]}, @TCA_ACT_TAB={0x50, 0x1, [{0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xc13}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x46e}}]}, @TCA_ACT_TAB={0x5c, 0x1, [{0xc, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x20d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xe9}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xf9e4}}]}]}, 0x1f4}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000540)={&(0x7f0000000ac0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042dbd7000ffdbdf250300000014000200697036677265300000000000000000000900010073797a32000000000900030073797a31000000001e72d70b2952c1fd65568115e3"], 0x40}, 0x1, 0x0, 0x0, 0xc0}, 0x10) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xb6c0, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f00000006c0)=""/89, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r2 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000380)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x33}, 0x0, @in=@loopback}}, 0xe8) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace00000000000000002100000002ff02000000000000000000000000000104004e200023b0"], 0x0) r3 = gettid() r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) setsockopt$inet6_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f0000000880)=@ccm_128={{0x304}, "ed24156a96ba6c9f", "c1c8594a92bee5721aba3f2432c2580f", "fb5549dc", "0be02623ed298928"}, 0x28) setsockopt$inet6_int(r4, 0x29, 0x3, &(0x7f0000000800)=0x80000000, 0x4) timer_create(0x4, &(0x7f0000000900)={0x0, 0x5, 0x4, @tid=r3}, &(0x7f0000000300)) r5 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) timer_settime(0x0, 0x3, &(0x7f000004a000)={{0x0, 0x1}, {0x7, 0xe4c}}, 0x0) readv(r5, &(0x7f0000000440)=[{0x0}, {&(0x7f0000000340)=""/141, 0x8d}], 0x2) syz_usb_control_io$hid(r1, &(0x7f00000008c0)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000000940)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000013c0)={0x18, &(0x7f0000000840)=ANY=[@ANYBLOB="c0eddc4d0000000004010000406e5906"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, &(0x7f0000000280)={0x2c, &(0x7f0000000080)={0x40, 0xc, 0x78, {0x78, 0xf, "29b7d1450d3a933c929d57c22ada623880ee57157686608617e8073a822185ca67f753841727d9005dcc06d14c58bf14c0e21c31d444c13750bea736207caa1b0d345fda91d290bc4399cf214ce4bbf79cafb9a1aa4013741adffefe871105637f21cd1921143fb626330419b2d6f1a47fb5a8b4b5b0"}}, &(0x7f0000000100)={0x0, 0x3, 0xa1, @string={0xa1, 0x3, "4336e79f60d70b56845d68ddd6c6f17e1c8628de085066a32708d6a7f5dbad1b411d1b29acab10bb9a4fff1badea43d36fae286df0300cace8a86d19393f9dbf68224d828adf7bc21995431c6ed51a0caf2307b213c8421560be94cd181c879ba3caa6d2687ad07b8774909f46292e879402e027ae2edac239df2f79f211f8802008c2cb601b9de9c36b4f26ed0af0a1d5cbada99c610f5750d696464f7ec3"}}, &(0x7f00000001c0)={0x0, 0xf, 0xf, {0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x80, 0x10, 0xfc00}]}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0xd, 0x97, 0x3, 0x5, "667c36d7", "5312be53"}}, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x1, 0x5, 0x5, 0xd, 0x1, 0x5571}}}, &(0x7f0000000740)={0x84, &(0x7f00000002c0)={0x40, 0x0, 0x95, "ad70a87aa52ca0a119bbb341095ce996480b7f187273ecc7fcc7d54073c4ebc820a08348dc918df31f70b7efb6b763211123bee113d12d2eed6ae91cedab573b2a6e94fea85c21a2a509491053f3260f04666e34c272af2de9493f96853572a501f397bebbd5992369ec684e841d97f0c4ab870afe6d2f6f0605e77a28b4459b441d532c48ee7626d726c996e39fa56933b8ba0dc2"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x10}, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x3, 0x1}}, &(0x7f0000000a00)=ANY=[@ANYBLOB="20003e4214301980f1f02676d16d680fee0300779d780f62aec3350e78bd7358cd3b03e5d133498452ed1010a1f32a0d605c4a130ea8190fbd89c380c1b56ede1774c33ddeae591bff6a9a9fd865241e78b2e5054283c06c459010f00293d29d189bb9c191b2bf21a700788f84457ffd4d1249f4f94883ee64d810ebfae02ffe2037"], &(0x7f0000000480)={0x40, 0x7, 0x2, 0xe}, &(0x7f00000004c0)={0x40, 0x9, 0x1}, &(0x7f0000000500)={0x40, 0xb, 0x2, "e301"}, &(0x7f0000000540)={0x40, 0xf, 0x2, 0x3}, &(0x7f0000000580)={0x40, 0x13, 0x6}, &(0x7f00000005c0)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000600)={0x40, 0x19, 0x2, "bcba"}, &(0x7f0000000640)={0x40, 0x1a, 0x2}, &(0x7f0000000680)={0x40, 0x1c, 0x1, 0x81}, &(0x7f00000006c0)={0x40, 0x1e, 0x1, 0x5}, &(0x7f0000000700)={0x40, 0x21, 0x1, 0x7}}) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f0000000040)="aa7afc38e82ade730000001000000000", 0x0}, 0x20) 4.203583418s ago: executing program 0 (id=2411): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa, 0xfff0, 0xffffff1f}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x7}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r0}, {}, {0x46, 0x0, 0x2, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 4.056635983s ago: executing program 0 (id=2412): syz_emit_ethernet(0x38, &(0x7f0000000200)=ANY=[@ANYRESOCT], 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000000000000000000000c9ff00", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 3.952053701s ago: executing program 0 (id=2413): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000a0000000000000000000000b7080000000003017baaf8ff00000000b5080200000000007b8af0ff00000000bf8100000000000007010000a8d5b100bfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000001000000b705000008000000850000000800000095"], &(0x7f0000000300)='GPL\x00', 0x3, 0xff7, &(0x7f0000001e00)=""/4087, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 3.855811559s ago: executing program 0 (id=2414): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000004c0)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000001800), r2) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, 0x0, 0x0) accept4(r4, 0x0, 0x0, 0x0) syz_emit_ethernet(0x86, &(0x7f00000002c0)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x1, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x1, 0x4, "d7cec55e3b240d024218c1fd7e3e0c812beb4129826ef66fbb3301b7820753cd", "3cfda56b4ab0d096fc0258b913c284ab", {"e2491eb47b6ce7bb7cb2ba69bbffc5c3", "1cdcd7844b79a62654b78561240ba196"}}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xc, 0x80, 0x0, 0x0, 0x0, 0xee01}}}, 0xb8}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="83fee1081e37680010fc", @ANYRES16=r3, @ANYBLOB="01002dbd7000ffdbdf25010000000000000009410000000300180000000675647000"/98], 0x68}, 0x1, 0x0, 0x0, 0x20}, 0x4000840) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, 0xffffffffffffffff, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000540)=@filter={'filter\x00', 0xe, 0x1, 0x1a8, [], 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="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"]}, 0x1b2) ioctl$BTRFS_IOC_ADD_DEV(r2, 0x5000940a, &(0x7f0000000700)={{r0}, "4da1a7debd51c52ba2ddff1afc3e056e05874d658dab2d41fd38b2daac1c5c0d5c37d85bdf140e6b82b021553a745a9e6fec4bff8f0d9cfa3d784a5b454d6956e28adfa48f66c8beaf74876621690bd4f91115d634979833868bb37d1a567ec67d87b0b066fe211efef26464ea6abdcd40ab79cd0164e413f130abf3211a33a47d931da1da80444a6567567dd321f3228357cd13a6dc1adc9b3bdec6afa7a5d15f4830f7233758a1ade28d2134966401c59e48115e88e459705323f2373b72cc8d55b76677be5791d7c2b1bb3bfa7e4643eae7b1811d3eb25aa7e4124b45e9f815ccaa56e392de31b1e5c15f55bccc35918123b0eb2bc09bd008be7fb3ec71ee7bfbc05537479ae3a82c1f16ab65573fc14eccdbdfb3a7dc477d3c74c0fa59276c3bea8e458b80d23acf09a66ee39d7a18a31d035768d11de5f76da269baf5e3215a2ee4b06004311db9e68117c71be58ad1e85a458f506db2f5bc61441f9188fbe92b3dbedc0210310b5b26d68f6debdfb252ac7fb4a4f57d85aa85e086945571a22f04e98e3cd44e85d4f9360b4f79c571e2b3ece1513724fbc6efffa66e98781262c41c10d1152985e7ddc85fab52368b3659791b3e2797b4be592400650f6d7991ea91a7b573c1a1fe1971c1d6a890fe79942ce716bce6d098ea0828a23e949b013273ec56fe9fbab99c7ef5a1701476121ee40c288079f131f40cb8e5940c302255c794ff35de3d053587bcfb3b675ab298a8ab1877e9b1f6aed0172c5092ab8d0b095f17950cfc0e776d87b87333c1f3102e321c3b5584fae299d0e6abb26d4fa9570944139b11999a29b56a94b508fa2a33a95f4f7ea83b3d99080f698632afa5ab0bbaf34ab110b8a04a8d970f484fb8e8eb1d0049e4e50842329dca22b80d31c08e1f26a69fdbe5f93a240442bda2bf118688794c98e019469f613103a515721ab4a001acab61e8580a7a67aa8de9975cb54357a0dc020133472628dae63c9d579b3a3c19fb18a9c4e1cda6bbe746924e76bba6a36c941f34a565533cae9f541471317b233c4d6c0bfc4a259662aea80f8dc9f23a7d81684323c601b8456d36563daed5620712658b70baaa32554281ddacee7089012f3d70f98989901fc12957ff3df0399b6d31a94e5d703a7a5d0f284711713cf00f5abc567fcd3fdd17d6a20d64cd2017e4509f6505782cd61e3bd517a4141c59904d869aa3e58f755e3171cd8d087c9dbfe7a2f148d0b7530d8f5852e702708726d1b3f972fad2fad7954469bd57d0528a53ecdfacb56e40bb659a92ac041d1342449fef1e455f71a1521f16b7a6333319f7e16285ec03ecff5b026b2253f6680da607ea937651d6cba7735fc57562fc02d990a13205da2c92bb51fb91b8c2c480f82f59373e48ebec2f208b4b092b7866ca2b831e2ac51f618b3665a95676ea2b4c127a95c337f927cbb9e0a2f278215b4ac7ee76fd8dee9fe7529465458921613766f0802824c340d329921faf11871aa1fe47a219880ab3ee116dbb23c0d185755a4b8df20b3bacd0fb7f46b02cf58c8d4f5ec6944352fcfce2ca8ddebe510bf00984fa12a94f2be5cfd54d8351228e170a82d50b40420e06dd8a4576b9724c8ffecf41db7c455f16ee70e8f3ff7ffe93586b6da5bbc60a05c860a413dcca352324d28a5f23bdea136edea64716b7ae6bf90983d44e5a9bd4fc7f66364f6e70b300f1cb0c1eb391aa66bc5e6d040721aef09481a2bea18eb392915f0f5a4804450b2e6c55bee85e534a702237579daa7a33535e7afbeaaafeb5a90598a10c92ad6a8db522d0da917c3fd6665501d7d284578de2405121918380fd3843cf7b228e91ee1650e3c98bf6838cd17f41a2ca261933963b106a568f4ae438c31ca6a74f46649bdec7275ec75f43e8df600d3d9172a5702455bae4bc5ec472802eae5ecfb1155f7edab188533a91a0efe6d1b79761c42f2c68ebd10892be45d785815fff10940c662b016b65051a7b7e1226a4f5de5c407c55d954885effe124e40ed9bbe9d838ad83d39cac122c2ec42ac01bd5882a4bb73541f9c02b13f3c2a0a60534069def134aac8b0da28988e3d30e5513a449c1835f2c42eafd4ebecff42bd8d5a7638e549d9636d21d50e82f62e49bf025b8e4da957a4df9e5f675404b99e1496a5299bdec9d3dca156d5038cbbb03730fef7ab80ecf3593e762295dbe0f7dd96fea0333161cc804e245739b3fd254b32fc3f3f17d7585ddf114449343c29bf97f5172df26fc9a771a95ee643b8270d3d2658f60fe29b3942c09995fc98c5a500c0768a81d7c859d9d00b6eaa189f826bd2712ec6d7999dbe79fd62a1148081d88e1ec53f0a8bffb9bb16e565fa0225e46b3ad9470deef7cd3c13e3b50989cfe406c4f4cb702aa5008a5b00e1a709b2819af6c7cff80cf7f769f0aec1636b12559823cf4076127c995799644e42fbd0fb7dca92f5558b26998e7004155209e54e3e6243ec8be43305be542bd4ef2be304015084a1aa79bfe33c164c4fa9707c0c3b01707987f8dbcd88b3d8cf8f904db53ee26e7178871394a7ba3a0a63c6e0464dafb986ba07a9c5045cf2e64e0bd6e6ef18dc2d5a5d05b964155cde344175fe19b18b2d9dcc9cf4e144b9c30ed3ccf4dddcb6ecad1fa4f211f2e9070cd2fda6088875f3b8fa5f36b935f9b369b11b2ddee47b9c9aeff059ad5448665c4188914d478f6b5f86f1c67b81e18ccdb6e22511f1cfdbe47380ae0d3748afd07ef69c2e19175bccfa64fc0bca19e498e2a0ea4b190a5079bbf08147a26debc79404c3e792d462e88d30a10178ff1bececd12ea89afa5e0d96ab987da501bc6442ecea4c442d530c1beb88313661268f9157db124627a181d47a2303c0a26cc27aea70979c28c1db754ae2b61868f85166d90ea0f684d49913fb8cfcb4ede32fd2e0b7943017094a39513c3d25e77aefc4f134d265e5bc5ae8b77ea0f15c3593db565d1fd452a580b78edac7e71b7b17f343d18c576ad2c27d5aec6c45496351237a721e79bb70b079b0fbd7157f94b73413fcada41962e71238d5595f01dabb475809ce1225ed692b3e14b0d708358b977474c08c5f66b3ad66130ac4c62da68d5ee73c4fe43f958be52a0ce37af0d6ddac2ce51428f9f6f64d358591b6a2ba3de36150d59ad218c395c09cb64c868b49ffd7451659ac0c763bba9e741a039c7ec56f3d7dca04ea0d4056bf531afbbe9a275815159b3b3203e9279c24fb6aa04f856e901701a7cc26d4f47e04b25976850c75775f6c20dec37ca4d354e9dc5363cc61326036fae705ad4316510330df00de6e7237257c9460c2efbc313b4974d5133f97264271a08dee65d2ccd63b6186df67ada4760d2f40aabaf10436c4fb93ff8ed2fcd0e2db9e3ae3a04504c903aed8b9548cfb23f7d41e58b6012fe35ba78a61ac573ad37a80d74d324c355fe6923e4712aa3f703a6ed4923a1db54c8701958e365ba9fd2350a24767b487c50173723cc3e33c814f4a8e071ce5ea77d3d483b4a56b07d1f4563cf66b7f452063c55bc245dc7225c2192d3324e51ca8c803eb4d2ed471b9330e3cb74c8000d7ca8e93e7510d49ae886aab5d8df802eb7ab52645713c716835a6ffe4e1a619844d4129d0779a677b53bcb82c96ebf089fd7b58e4085bc244be0f648e1dd270d6b9348264fc3cce449182ae1af8281d6773cbeb1aa2af8a31888fe904161d57baeacca02575cec7d4561aa0e236853998b64c077703d66641826a2350d369fc983bc4a2907557c169f6c71b27989e3824abe4567cf96b96355d59005b7ead7c0fb85cdc6cd7820385bc320f884e8e71d92b4cef4e2b754fc037b9399c895588dd3fcad311e5913e6c6a8e3d1e9ca127e8e88be590a67f63fd0af046551c9c7aa1bbf7d12168ceddeee43d2b86457d59f077cbdf29d47bb9db41002dee1a3d1aa8403c88bbc97e3b3556a921478c02bda7651965c027353cef3a7d84a83108f8e9c916d21b599a36686e72dc75869858c3c230b28aa6027c704ef97d54d2e3627bd3ed429dfa6207cecaf9ca02f237d60d458e93bfd2c641a841e1d95d6e1313dbf19b2400304deacc4571a785290178080a703b404c7766840b2b0f1ee6f8eea01db2c17ec66ff73514ff1f06b5cd365ffbf825d500bc52b86f941a3188abcf07357a42d8b42ee82a962038cc8cb9f6e0e4cb8c73832a03b4139aa7d24514c9e3600ab49ce291727f00d2742a90b02a74612f59b61eb6840a0aa561ed53917a2b87c1453a2da1936bc12958fc563c8fd65936697d88a392486fcb8a5dd28acd4082a602e1d413ebf43a259267fbcf7991a9d5cacf07737b5e8608f0890c13c7bf2ad74629b353c67c29b874a18e2b70dcbe5cdb7776517c3ace9b6947f4cbc8bc991df3085718383e897c3ca239ff8c3a7fbf3a61626c1b4add07a10692f30f908bd965e4bd1c74ca02fd3f6745710e9e8127e0954ca1a610633556893b3295c5592440a2daa3f2ca40b347960ad772dc1b7696d9ca98b4a544897d3cd92693ff848e6d2211cef0e43b1dbf1259a60332d31084f5783e5060aa8f345ed9e474d1bd94f0f2324afe59ceb48cee678ebd802f6771b87358e304d9242347949d48563913cfcf0dd0107ad115dd0a7b8bc6161fee4e3ea5b3d6f0c4d174c7a9d24c38232593310f9c395e8a6f43c8ec5463e88d71e42e6723d423ad73b21bcd749ca96c8cf7a06045dfe5ecc3178d3a33fcb04b1077fc992750d17c700d914e08dd3cc49f7e343644405077ea11beb54ecc30886847d77410f3893eb75a46df5497cc67086af3ef9d9171e3fe4f3d1950aa64b9f1998d29fa0baf37979570604e5ac7a563334a3f831a04834fbadd21940657f61baef6b5571431b3ce182a896d4346c96e04913bd2678f9f0e9c7f64bf23d98e284e3fe8537742c6146b2d257d8204ddf720b543530a95d252145d6051fc7f51e8d53d7998def974cdd363d7462edb32f0e638286a9e07f3e83ad914caed445e6ee8c07b6098701eeb5765a63a92fb8052b6f25d8dee7d210d9e018190b33103bfa9265b03404ce9224198eda637c3e3321ed6cfe992e4f621ae52dbe7f90dd8b6430656e45fda8b5ea06b2ea45f7471805aa59e3c8311fac56c53ddcddf26732e0d06e7d89cb01bf247e449729f5ed68b5a1bfb60052dbed12f561658f641a221c772676afc277ad4774b40e11fd54c001b5ce0f0663557bc4923abe11b192480daa9ababbdd89ffc87afa8ea50af65f914061efd95adbde060422a0597c305f3cf76fd571d348740153f72645fbfa2e41cfb5c5d2d7a30057bb09e340c132cbe8c6d66e9636ddb38db4f9ff6175593929bbfd16c531fbccc63de4b5a123a41d9cab0c0ed1fd291711503ffa8ca71c2cb810a9f7c44c39dddfdb10bb97d661c15582f30bdfe98fc556c67f5f66270c5f4a1db61595d1ef17600a917ab26673b54fa922fb2ee6c19197932e0244e3211988550e6676f20f058592bf6e4ca7f62bfbf0059753d57f37f9d062629f6025c166f1c931127272f6fbb2438ad6b1cd0cab9b13fdf83b2a160fcecdab30262dea9d227c84740e8ea9261a17f3d915ae5c40cb47441c1e2a5554d873c791defa892c510fdec0c25c2b1bb4cfe751ad907bdc088170286d46508374fa6b1d20edb70f7bf149ec90122d68d2e802cd909a14c7136f567fc5511c575ebfee90bb1765ff8cbe080fdf6bd8615fce3a64e0d6142994106f5ae16ddc4f6ed3b9ea0db98566af683386cbee13de079c323724"}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000000c0)={[0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x20000000000003, 0x0, 0x0, 0x7, 0x8, 0x2, 0x0, 0x7, 0x6, 0x8, 0x4], 0x0, 0x220412}) openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 3.58258421s ago: executing program 0 (id=2415): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x64}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc9, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x4, 0xfffffffc}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0xe34}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = syz_open_procfs(0x0, &(0x7f0000000480)='map_files\x00') r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x16, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_EXPIRATION={0xc}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xd8}}, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r1, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002303100007006000000002000020d3"]) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00', 0xb}, 0x1c) listen(r4, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000100)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x20, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc, 0x0, 0x5}]}}}}}}}}, 0x0) ioctl$USBDEVFS_CONTROL(r1, 0x80045515, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000280), &(0x7f0000000300)=0x4) fchdir(r0) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) syz_open_dev$vim2m(&(0x7f0000000340), 0x3, 0x2) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r6, 0x84, 0x79, &(0x7f00000001c0)={0x0, 0x2}, 0x8) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x0) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010100000000105801000100000000000109022400010000002009040000010300000009210000000122dc01090589"], 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003000012002505a8a4f0"], 0x0) syz_usb_control_io(r7, &(0x7f00000000c0)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 1.181307463s ago: executing program 1 (id=2416): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0x30500, 0x0) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f00000001c0)={0x17d, 0x10, 0x0, 0xc, 0x0, [@private2={0xfc, 0x2, '\x00', 0x1}, @local, @private2={0xfc, 0x2, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1]}, 0x88) write$USERIO_CMD_SEND_INTERRUPT(r1, &(0x7f0000000080)={0x2, 0x5}, 0x2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}], 0x10) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x200000) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x40014, &(0x7f000005ffe4)={0xa, 0x6e23, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0xffffffff}, 0x1c) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x2, &(0x7f0000000080)=0x2, 0x4) recvmmsg(r2, &(0x7f0000002640)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001fc0)=""/29, 0x1d}}], 0x1, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000240), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r3, 0x0) setsockopt$inet6_int(r2, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r4 = socket$packet(0x11, 0x3, 0x300) r5 = dup(r4) r6 = dup(0xffffffffffffffff) ioctl$VHOST_NET_SET_BACKEND(r6, 0x4008af30, &(0x7f0000000000)={0x1, r5}) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r7, 0x5609, 0x0) recvmmsg(r0, &(0x7f00000034c0)=[{{0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0xfffffffffffffd9b}, 0xffffffff}], 0x1, 0x12043, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r8, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) r10 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r10, 0x84, 0x71, &(0x7f0000000100)={r9, 0x8}, 0x8) 499.290852ms ago: executing program 0 (id=2417): r0 = socket$key(0xf, 0x3, 0x2) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0xa1e, 0x4) sendmsg$key(r0, &(0x7f00000020c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="02050223000100000000000000580000"], 0x10}}, 0x0) recvmmsg(r0, &(0x7f0000001e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(r1, 0x1, 0x43, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000580)=[{&(0x7f0000000640)=""/102396, 0x18ffc}], 0x1, 0x7, 0x3) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0xfffffffc, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_emit_ethernet(0x66, &(0x7f0000000240)={@local, @random="706ab144ffe0", @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @remote}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x1, 0x0, 0x4}}}}}}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) socket(0x40000000015, 0x5, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_CLOCK(r4, 0x4030ae7b, &(0x7f0000000000)={0x0, 0x4}) 204.104042ms ago: executing program 1 (id=2418): sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[], 0x58}}, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x9201, 0x0) socket(0x1d, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ptrace$ARCH_MAP_VDSO_64(0x1e, 0x0, 0x0, 0x2003) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x80010, r1, 0xcfc35000) getpeername$packet(r2, &(0x7f0000000000), 0x0) mremap(&(0x7f0000ff2000/0xb000)=nil, 0xb000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, 0x0, 0x0) r4 = openat$cgroup_freezer_state(r3, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r4, &(0x7f0000000040)='FROZEN\x00', 0x7) write$cgroup_freezer_state(r4, &(0x7f0000000200)='FREEZING\x00', 0x9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x10) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001800), 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') ioctl$TUNATTACHFILTER(r6, 0x400454d1, &(0x7f00000000c0)={0x0, 0x0}) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r5, 0xc0145401, &(0x7f0000000340)={0x3, 0x0, 0x0, 0x0, 0xffffffff}) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4030ae7b, &(0x7f0000000000)={0x3f94, 0xe, 0x8, 0x78c, 0x100000001}) syz_io_uring_setup(0x2c0c, &(0x7f0000000400)={0x0, 0x0, 0x4002}, &(0x7f0000000480), &(0x7f00000004c0)) 119.011196ms ago: executing program 4 (id=2376): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000a0000000000000000000001b7080000000000ff7baaf8ff00000000b5080200000000007b8af0ff00000000bf8100000000000007010000a8d5b100bfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000001000000b705000008000000850000000800000095"], &(0x7f0000000300)='GPL\x00', 0x3, 0xff7, &(0x7f0000001e00)=""/4087, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 0s ago: executing program 4 (id=2419): r0 = socket$nl_route(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x59032, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000962000/0x3000)=nil, &(0x7f0000582000/0x2000)=nil, 0x3000}) r2 = syz_open_dev$mouse(&(0x7f00000002c0), 0x0, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f00000010c0)=0xffff) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000140)) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) write$char_usb(r4, &(0x7f0000000040)="e2", 0x918) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r5, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=@gettfilter={0x6c, 0x2e, 0x4, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xe, 0x2}, {0x6, 0xffff}, {0xa, 0xd}}, [{0x8, 0xb, 0xfffffffa}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0xe}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0x1}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x50) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = syz_open_dev$vivid(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_TRY_EXT_CTRLS(r7, 0xc0205649, &(0x7f0000000200)={0xf000000, 0x64094489, 0x80000000, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x990a62, 0x8, '\x00', @p_u32=&(0x7f0000000180)=0xff}}) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x8}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x81}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}]}}}]}, 0x4c}}, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x1b, &(0x7f0000000240)=0x3, 0x4) r9 = fcntl$dupfd(r7, 0x0, r8) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r9, 0x80585414, &(0x7f0000000300)) getsockopt$inet6_int(r6, 0x29, 0x48, 0x0, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x8, 0xe, &(0x7f0000001880)=ANY=[@ANYRES16=r8], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, r9, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000280)={0x0, 0x0, 0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r10 = socket$rxrpc(0x21, 0x2, 0xa) recvfrom$rxrpc(r10, &(0x7f0000000000)=""/129, 0x81, 0x0, &(0x7f0000000100)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e23, @broadcast}}, 0x24) kernel console output (not intermixed with test programs): or=0bed, idProduct=1100, bcdDevice=ec.c3 [ 511.762546][ T5954] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.778262][ T5954] usb 2-1: config 0 descriptor?? [ 511.785902][ T5954] cp210x 2-1:0.0: cp210x converter detected [ 511.911814][ T5310] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 511.932236][ T5310] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 511.956035][ T5310] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 511.978562][ T5310] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 512.009514][ T5310] usb 4-1: SerialNumber: syz [ 512.206666][ T5954] cp210x 2-1:0.0: failed to get vendor val 0x000e size 678: -121 [ 512.235274][ T5954] cp210x 2-1:0.0: GPIO initialisation failed: -121 [ 512.264968][ T5954] usb 2-1: cp210x converter now attached to ttyUSB0 [ 512.371025][ T5307] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 512.418072][ T5954] usb 2-1: USB disconnect, device number 113 [ 512.441511][ T5954] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 512.470579][ T5954] cp210x 2-1:0.0: device disconnected [ 512.558611][ T5307] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 512.583960][ T5307] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 512.608896][ T5307] usb 5-1: New USB device found, idVendor=5c19, idProduct=ecf7, bcdDevice=65.f4 [ 512.628605][ T5307] usb 5-1: New USB device strings: Mfr=27, Product=250, SerialNumber=0 [ 512.648953][ T5307] usb 5-1: Product: syz [ 512.659045][ T5307] usb 5-1: Manufacturer: syz [ 512.690613][ T5307] usb 5-1: config 0 descriptor?? [ 512.919039][T15097] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 512.942418][T15097] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 513.000425][ T5954] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 513.119241][ T5307] usb 5-1: USB disconnect, device number 70 [ 513.150473][ T5954] usb 3-1: Using ep0 maxpacket: 16 [ 513.170903][ T5954] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 513.213809][ T5954] usb 3-1: config 0 interface 0 has no altsetting 0 [ 513.255327][ T5954] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 513.278511][ T5954] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.309590][T15133] netlink: 'syz.1.2170': attribute type 3 has an invalid length. [ 513.316529][ T5954] usb 3-1: Product: syz [ 513.327278][ T5954] usb 3-1: Manufacturer: syz [ 513.344514][ T5954] usb 3-1: SerialNumber: syz [ 513.349359][T15133] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.2170'. [ 513.377168][ T5954] usb 3-1: config 0 descriptor?? [ 513.398361][ T5954] hub 3-1:0.0: bad descriptor, ignoring hub [ 513.411095][ T5954] hub 3-1:0.0: probe with driver hub failed with error -5 [ 513.454407][ T5954] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 513.487280][ T6896] usb 3-1: Failed to submit usb control message: -71 [ 513.519758][ T6896] usb 3-1: unable to send the bmi data to the device: -71 [ 513.554613][ T6896] usb 3-1: unable to get target info from device [ 513.580201][ T6896] usb 3-1: could not get target info (-71) [ 513.592163][ T6896] usb 3-1: could not probe fw (-71) [ 513.732737][ T5929] usb 3-1: USB disconnect, device number 115 [ 514.087938][T15154] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2172'. [ 514.460682][ T5310] usb 4-1: 0:2 : does not exist [ 514.465641][ T5310] usb 4-1: unit 5: unexpected type 0x0b [ 514.501235][ T5310] usb 4-1: USB disconnect, device number 99 [ 514.550281][ T5954] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 514.553628][ T9112] udevd[9112]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 514.720367][ T5954] usb 3-1: Using ep0 maxpacket: 8 [ 514.735175][ T5954] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 514.786302][ T5954] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 514.820908][ T5954] usb 3-1: config 1 has no interface number 1 [ 514.830450][ T5954] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 514.886813][ T5954] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 514.921314][ T5954] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 514.935513][ T5954] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.960854][ T5954] usb 3-1: Product: syz [ 514.980380][ T5954] usb 3-1: Manufacturer: syz [ 514.985034][ T5954] usb 3-1: SerialNumber: syz [ 515.091055][ T5310] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 515.202408][T15188] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2179'. [ 515.225278][T15159] netlink: 'syz.2.2173': attribute type 27 has an invalid length. [ 515.260167][ T5310] usb 2-1: device descriptor read/64, error -71 [ 515.295610][T15192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 515.342358][T15192] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 515.350381][ T5929] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 515.479524][T15159] bridge0: port 2(bridge_slave_1) entered disabled state [ 515.487086][T15159] bridge0: port 1(bridge_slave_0) entered disabled state [ 515.510208][ T5929] usb 4-1: Using ep0 maxpacket: 16 [ 515.520226][ T5310] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 515.521273][ T5929] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 515.549990][ T5929] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 515.573843][ T5929] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 515.595719][ T5929] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 515.621836][ T5929] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 515.650170][ T5310] usb 2-1: device descriptor read/64, error -71 [ 515.671877][ T5929] usb 4-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b5.89 [ 515.689400][ T5929] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 515.704593][ T5929] usb 4-1: Product: syz [ 515.712654][ T5929] usb 4-1: Manufacturer: syz [ 515.721878][ T5929] usb 4-1: SerialNumber: syz [ 515.746453][ T5929] usb 4-1: config 0 descriptor?? [ 515.767733][ T5929] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622 [ 515.780864][ T5310] usb usb2-port1: attempt power cycle [ 515.944147][T15159] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 515.985235][T15159] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 516.126094][T15159] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.135251][ T5310] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 516.146923][T15159] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.158443][T15159] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.175971][ T5310] usb 2-1: device descriptor read/8, error -71 [ 516.184302][T15159] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.307726][T15159] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 3072 - 0 [ 516.317034][T15159] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 3072 - 0 [ 516.327280][T15159] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 3072 - 0 [ 516.337009][T15159] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 3072 - 0 [ 516.350398][T15159] vxlan0: left promiscuous mode [ 516.366559][ T5954] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor [ 516.378825][ T5954] usb 3-1: 2:1 : format type 0 is detected, processed as PCM [ 516.389343][ T5954] usb 3-1: 2:1 : unsupported sample bitwidth 0 in 0 bytes [ 516.413220][ T5954] usb 3-1: USB disconnect, device number 116 [ 516.424103][ T5310] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 516.454589][ T5310] usb 2-1: device descriptor read/8, error -71 [ 516.466970][ T9112] udevd[9112]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 516.560535][ T5280] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 516.582438][ T5310] usb usb2-port1: unable to enumerate USB device [ 516.592416][ T5929] input: gspca_pac7302 as /devices/platform/dummy_hcd.3/usb4/4-1/input/input47 [ 516.654612][T15214] openvswitch: netlink: Actions may not be safe on all matching packets [ 516.723708][ T5280] usb 1-1: device descriptor read/64, error -71 [ 516.944308][ T5310] usb 4-1: USB disconnect, device number 100 [ 516.990161][ T5280] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 517.150233][ T5280] usb 1-1: device descriptor read/64, error -71 [ 517.280727][ T5280] usb usb1-port1: attempt power cycle [ 517.560607][ T29] audit: type=1326 audit(1728776827.324:2534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15223 comm="syz.4.2188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6820b7dff9 code=0x7ffc0000 [ 517.620134][ T29] audit: type=1326 audit(1728776827.334:2535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15223 comm="syz.4.2188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f6820b7dff9 code=0x7ffc0000 [ 517.660258][ T5280] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 517.677764][T15228] fuse: Bad value for 'fd' [ 517.688372][ T29] audit: type=1326 audit(1728776827.334:2536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15223 comm="syz.4.2188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6820b7dff9 code=0x7ffc0000 [ 517.718641][ T5280] usb 1-1: device descriptor read/8, error -71 [ 517.750313][ T29] audit: type=1326 audit(1728776827.484:2537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15227 comm="syz.4.2190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6820b7dff9 code=0x7ffc0000 [ 517.818064][ T29] audit: type=1326 audit(1728776827.484:2538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15227 comm="syz.4.2190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f6820b7dff9 code=0x7ffc0000 [ 517.908086][T14361] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 517.911938][ T29] audit: type=1326 audit(1728776827.484:2539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15227 comm="syz.4.2190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6820b7dff9 code=0x7ffc0000 [ 517.941097][T14361] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 517.953067][T14361] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 517.964530][T14361] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 517.980274][T14361] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 517.989454][T14361] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 518.000252][ T5280] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 518.016396][ T35] bridge_slave_1: left allmulticast mode [ 518.031149][ T5954] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 518.035986][ T35] bridge_slave_1: left promiscuous mode [ 518.045191][ T5280] usb 1-1: device descriptor read/8, error -71 [ 518.054861][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 518.077133][ T29] audit: type=1326 audit(1728776827.484:2540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15227 comm="syz.4.2190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f6820b7dff9 code=0x7ffc0000 [ 518.106185][ T35] bridge_slave_0: left allmulticast mode [ 518.120116][ T35] bridge_slave_0: left promiscuous mode [ 518.131053][ T29] audit: type=1326 audit(1728776827.484:2541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15227 comm="syz.4.2190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6820b7dff9 code=0x7ffc0000 [ 518.146981][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 518.153774][ T29] audit: type=1326 audit(1728776827.484:2542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15227 comm="syz.4.2190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6820b7dff9 code=0x7ffc0000 [ 518.184645][ T5280] usb usb1-port1: unable to enumerate USB device [ 518.200634][ T29] audit: type=1326 audit(1728776827.654:2543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15227 comm="syz.4.2190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6820b7dff9 code=0x7ffc0000 [ 518.240418][ T5954] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 518.270686][ T5954] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.287974][ T5954] usb 5-1: config 0 descriptor?? [ 518.314995][ T5954] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 518.550476][ T5929] usb 2-1: new full-speed USB device number 118 using dummy_hcd [ 518.757906][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 518.772287][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 518.787048][ T35] bond0 (unregistering): Released all slaves [ 518.806223][ T5929] usb 2-1: unable to get BOS descriptor or descriptor too short [ 518.815526][ T5929] usb 2-1: no configurations [ 518.823750][ T5929] usb 2-1: can't read configurations, error -22 [ 518.929873][T15228] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 518.958453][T15228] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 518.999988][ T5954] usb 5-1: USB disconnect, device number 71 [ 519.238546][T15241] chnl_net:caif_netlink_parms(): no params data found [ 519.371366][ T35] hsr_slave_0: left promiscuous mode [ 519.379268][ T35] hsr_slave_1: left promiscuous mode [ 519.385521][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 519.418085][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 519.545441][T15283] dccp_invalid_packet: P.Data Offset(0) too small [ 519.770462][ T5280] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 519.972245][ T5280] usb 1-1: config 0 has an invalid descriptor of length 209, skipping remainder of the config [ 520.000403][ T5280] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 520.030179][ T5280] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 520.064413][ T5280] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.080430][ T5234] Bluetooth: hci2: command tx timeout [ 520.088802][ T5280] usb 1-1: config 0 descriptor?? [ 520.113281][ T5280] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 520.310189][ T5310] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 520.470176][ T5310] usb 5-1: Using ep0 maxpacket: 32 [ 520.478174][ T5310] usb 5-1: unable to get BOS descriptor or descriptor too short [ 520.502600][ T5310] usb 5-1: config 1 interface 0 altsetting 10 bulk endpoint 0x82 has invalid maxpacket 1023 [ 520.531150][ T5310] usb 5-1: config 1 interface 0 altsetting 10 bulk endpoint 0x3 has invalid maxpacket 8 [ 520.541850][ T5310] usb 5-1: config 1 interface 0 altsetting 10 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 520.572411][ T5310] usb 5-1: config 1 interface 0 has no altsetting 0 [ 520.629212][ T5310] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 520.650360][ T5310] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.658578][ T5310] usb 5-1: Product: syz [ 520.662976][ T5310] usb 5-1: Manufacturer: syz [ 520.667618][ T5310] usb 5-1: SerialNumber: syz [ 520.693489][T15298] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 520.701264][ T5954] usb 2-1: new full-speed USB device number 120 using dummy_hcd [ 520.725622][T15298] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 520.781817][ T35] team0 (unregistering): Port device team_slave_1 removed [ 520.874090][ T5954] usb 2-1: config index 0 descriptor too short (expected 22, got 18) [ 520.882737][ T5954] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 520.892189][ T5954] usb 2-1: config 0 has no interface number 0 [ 520.898509][ T5954] usb 2-1: New USB device found, idVendor=15ba, idProduct=0004, bcdDevice=27.55 [ 520.898551][ T35] team0 (unregistering): Port device team_slave_0 removed [ 520.908233][ T5954] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.933077][ T5954] usb 2-1: config 0 descriptor?? [ 520.943438][ T5954] ftdi_sio 2-1:0.1: FTDI USB Serial Device converter detected [ 520.968557][ T5954] ftdi_sio ttyUSB0: unknown device type: 0x2755 [ 521.912291][ T5280] usb 2-1: USB disconnect, device number 120 [ 521.937053][ T5280] ftdi_sio 2-1:0.1: device disconnected [ 522.054129][T15241] bridge0: port 1(bridge_slave_0) entered blocking state [ 522.073914][T15241] bridge0: port 1(bridge_slave_0) entered disabled state [ 522.102562][T15241] bridge_slave_0: entered allmulticast mode [ 522.109932][T15241] bridge_slave_0: entered promiscuous mode [ 522.120456][T15241] bridge0: port 2(bridge_slave_1) entered blocking state [ 522.127881][T15241] bridge0: port 2(bridge_slave_1) entered disabled state [ 522.136233][T15241] bridge_slave_1: entered allmulticast mode [ 522.144759][T15241] bridge_slave_1: entered promiscuous mode [ 522.166795][ T5234] Bluetooth: hci2: command tx timeout [ 522.304191][T15241] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 522.345622][T15241] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 522.442449][T15241] team0: Port device team_slave_0 added [ 522.474131][T15241] team0: Port device team_slave_1 added [ 522.521297][ T5954] usb 1-1: USB disconnect, device number 93 [ 522.623787][T15241] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 522.643610][T15241] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 522.678339][T15241] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 522.697167][T15241] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 522.717387][T15241] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 522.765078][T15241] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 522.843851][T15241] hsr_slave_0: entered promiscuous mode [ 522.858673][T15241] hsr_slave_1: entered promiscuous mode [ 522.950364][ T5929] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 522.976223][ T5310] usb 5-1: bad CDC descriptors [ 522.990209][ T5954] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 522.994435][ T5310] usb 5-1: USB disconnect, device number 72 [ 523.115264][ T5929] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 523.141377][ T5929] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 523.161288][ T5954] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 523.178118][ T5954] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 523.189241][ T5929] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 523.209306][ T5954] usb 1-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 523.218515][ T5929] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 523.236290][ T5954] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 523.245331][ T5929] usb 2-1: SerialNumber: syz [ 523.264730][ T5954] usb 1-1: config 0 descriptor?? [ 523.508350][ T5954] hid-led 0003:1D34:000A.0026: hidraw0: USB HID v0.00 Device [HID 1d34:000a] on usb-dummy_hcd.0-1/input0 [ 523.546042][ T5954] hid-led 0003:1D34:000A.0026: Dream Cheeky Webmail Notifier initialized [ 523.707173][T15361] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2215'. [ 523.722428][ T5954] usb 1-1: USB disconnect, device number 94 [ 524.086924][T15241] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 524.098152][T15241] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 524.108611][T15241] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 524.119229][T15241] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 524.190209][ T5280] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 524.240796][ T5234] Bluetooth: hci2: command tx timeout [ 524.303706][T15241] 8021q: adding VLAN 0 to HW filter on device bond0 [ 524.360236][ T5280] usb 4-1: Using ep0 maxpacket: 8 [ 524.375723][T15241] 8021q: adding VLAN 0 to HW filter on device team0 [ 524.380142][ T5280] usb 4-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 524.401165][ T5280] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.419504][ T5280] usb 4-1: Product: syz [ 524.429570][ T5280] usb 4-1: Manufacturer: syz [ 524.434420][ T1051] bridge0: port 1(bridge_slave_0) entered blocking state [ 524.434498][ T1051] bridge0: port 1(bridge_slave_0) entered forwarding state [ 524.436199][ T1051] bridge0: port 2(bridge_slave_1) entered blocking state [ 524.456085][ T1051] bridge0: port 2(bridge_slave_1) entered forwarding state [ 524.463776][ T5280] usb 4-1: SerialNumber: syz [ 524.487852][ T5280] usb 4-1: config 0 descriptor?? [ 524.515128][ T5280] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 524.616363][T15241] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 524.704814][T15241] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 524.715284][T15393] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 524.904231][T15241] veth0_vlan: entered promiscuous mode [ 524.920189][ T5280] gspca_sonixj: reg_r err -71 [ 524.949118][ T5280] sonixj 4-1:0.0: probe with driver sonixj failed with error -71 [ 524.971103][T15241] veth1_vlan: entered promiscuous mode [ 524.989835][ T5280] usb 4-1: USB disconnect, device number 102 [ 525.048366][T15241] veth0_macvtap: entered promiscuous mode [ 525.072428][T15241] veth1_macvtap: entered promiscuous mode [ 525.111782][T15241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 525.144469][T15241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 525.166611][T15241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 525.193985][T15241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 525.253137][T15241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 525.326618][T15241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 525.354004][T15241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 525.365291][T15241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 525.402331][T15241] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 525.542225][T15241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 525.589525][T15241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 525.665089][ T5929] usb 2-1: 0:2 : does not exist [ 525.670023][ T5929] usb 2-1: unit 5: unexpected type 0x0b [ 525.675467][T15241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 525.748611][ T5929] usb 2-1: USB disconnect, device number 121 [ 525.777045][T15241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 525.874635][T15241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 525.930666][T15241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.007353][T15241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 526.074686][T15241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.101507][T15241] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 526.163343][T15241] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.180874][T15241] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.210750][T15241] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.264807][T15241] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.343339][ T5234] Bluetooth: hci2: command tx timeout [ 526.713135][ T1059] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 526.724278][ T1059] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 526.803042][T15460] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2233'. [ 526.817716][T15460] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2233'. [ 526.874227][ T9155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 526.882710][ T9155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 526.890506][T15459] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2236'. [ 527.143798][ T29] kauditd_printk_skb: 47 callbacks suppressed [ 527.143812][ T29] audit: type=1326 audit(1728776836.914:2591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15456 comm="syz.3.2236" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9a0e97dff9 code=0x0 [ 528.040188][ T5929] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 528.122212][ T5310] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 528.200580][ T5929] usb 4-1: Using ep0 maxpacket: 8 [ 528.221477][ T5929] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 528.238880][ T5929] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 528.251693][ T5929] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 528.264540][ T5929] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 528.275987][ T5929] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 528.290315][ T5310] usb 2-1: Using ep0 maxpacket: 16 [ 528.302601][ T5929] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 528.307192][ T5310] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 528.324793][ T5307] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 528.330243][ T5929] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 528.348360][ T5310] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 528.350365][ T5929] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 528.376094][ T5310] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 528.385963][ T5310] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.389964][ T5929] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 528.406350][ T5310] usb 2-1: config 0 descriptor?? [ 528.411596][ T5929] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 528.424767][ T5929] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 528.432897][ T5929] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 528.444513][ T5929] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 528.456815][ T5929] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 528.469536][ T5929] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 528.485797][ T5929] usb 4-1: string descriptor 0 read error: -22 [ 528.492780][ T5929] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 528.502008][ T5929] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.522933][ T5929] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 528.541726][ T5307] usb 3-1: Using ep0 maxpacket: 32 [ 528.541947][ T8] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 528.561045][ T5307] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 528.573390][ T5307] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 528.596366][ T5307] usb 3-1: config 1 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 528.609772][ T5307] usb 3-1: config 1 interface 0 has no altsetting 0 [ 528.632427][ T5307] usb 3-1: New USB device found, idVendor=0e25, idProduct=a400, bcdDevice= 0.40 [ 528.642613][ T5307] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.655016][ T5307] usb 3-1: Product: syz [ 528.659401][ T5307] usb 3-1: Manufacturer: syz [ 528.664660][ T5307] usb 3-1: SerialNumber: syz [ 528.710286][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 528.744352][ T8] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 528.766307][ T8] usb 1-1: config 0 has no interface number 0 [ 528.789669][ T8] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 528.809617][ T5950] usb 4-1: USB disconnect, device number 103 [ 528.809635][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.844519][ T8] usb 1-1: Product: syz [ 528.848725][ T8] usb 1-1: Manufacturer: syz [ 528.854336][ T8] usb 1-1: SerialNumber: syz [ 528.868478][ T8] usb 1-1: config 0 descriptor?? [ 528.889481][ T8] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 529.127261][T15522] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2244'. [ 529.137279][T15522] openvswitch: netlink: Tunnel attr 8192 out of range max 16 [ 529.523057][ T8] gspca_spca1528: reg_w err -71 [ 529.540424][ T8] spca1528 1-1:0.1: probe with driver spca1528 failed with error -71 [ 529.550953][ T8] usb 1-1: USB disconnect, device number 95 [ 529.793041][T15529] netlink: 'syz.3.2248': attribute type 4 has an invalid length. [ 529.828703][T15531] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2249'. [ 529.841128][T15529] netlink: 'syz.3.2248': attribute type 4 has an invalid length. [ 529.981579][T15533] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2250'. [ 530.100508][ T5280] usb 4-1: new full-speed USB device number 104 using dummy_hcd [ 530.262270][ T5280] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 530.280503][ T5280] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 494, setting to 64 [ 530.292518][ T5280] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 530.307431][ T5280] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 530.319676][ T5280] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 530.338404][ T5280] usb 4-1: SerialNumber: syz [ 530.353116][T15529] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 530.379913][ T5307] cdc_mbim 3-1:1.0: probe with driver cdc_mbim failed with error -71 [ 530.415166][ T5307] usb 3-1: USB disconnect, device number 117 [ 530.509890][ T8] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 530.609259][T15541] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2253'. [ 530.627981][T15542] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 530.637931][T15542] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 530.706410][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 530.753738][ T5280] cdc_acm 4-1:1.0: ttyACM0: USB ACM device [ 530.757701][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 530.767710][ T5280] usb 4-1: USB disconnect, device number 104 [ 530.787807][ T8] usb 1-1: New USB device found, idVendor=056a, idProduct=00bc, bcdDevice= 0.00 [ 530.798118][ T1051] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.815321][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.853417][ T8] usb 1-1: config 0 descriptor?? [ 530.918904][ T1051] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.980192][ T5307] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 531.037775][ T1051] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.144368][ T1051] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.163349][ T5307] usb 3-1: Using ep0 maxpacket: 32 [ 531.175377][ T5307] usb 3-1: unable to get BOS descriptor or descriptor too short [ 531.193138][ T5307] usb 3-1: New USB device found, idVendor=05ac, idProduct=0254, bcdDevice=ca.76 [ 531.211156][ T5307] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 531.236528][T14361] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 531.250234][T14361] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 531.258605][T14361] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 531.270514][T14361] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 531.278885][T14361] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 531.286663][T14361] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 531.295487][ T5307] usb 3-1: Product: syz [ 531.303485][ T5307] usb 3-1: Manufacturer: syz [ 531.317505][ T5307] usb 3-1: SerialNumber: syz [ 531.326427][ T5307] usb 3-1: config 0 descriptor?? [ 531.340471][ T5307] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input48 [ 531.345737][ T8] wacom 0003:056A:00BC.0027: item fetching failed at offset 5/7 [ 531.452653][ T1051] bridge_slave_1: left allmulticast mode [ 531.463867][ T8] wacom 0003:056A:00BC.0027: parse failed [ 531.483290][ T1051] bridge_slave_1: left promiscuous mode [ 531.493758][ T8] wacom 0003:056A:00BC.0027: probe with driver wacom failed with error -22 [ 531.500883][ T1051] bridge0: port 2(bridge_slave_1) entered disabled state [ 531.517420][ T1051] bridge_slave_0: left allmulticast mode [ 531.530303][ T1051] bridge_slave_0: left promiscuous mode [ 531.551973][ T1051] bridge0: port 1(bridge_slave_0) entered disabled state [ 531.591061][ T4669] bcm5974 3-1:0.0: could not read from device [ 531.591448][ T5280] usb 3-1: USB disconnect, device number 118 [ 531.619067][T11924] bcm5974 3-1:0.0: could not read from device [ 531.660879][T11924] udevd[11924]: Error opening device "/dev/input/event4": No such file or directory [ 531.688534][T11924] udevd[11924]: Unable to EVIOCGABS device "/dev/input/event4" [ 531.699248][T11924] udevd[11924]: Unable to EVIOCGABS device "/dev/input/event4" [ 531.716270][ T5954] usb 2-1: USB disconnect, device number 122 [ 531.728106][T11924] udevd[11924]: Unable to EVIOCGABS device "/dev/input/event4" [ 531.750395][T11924] udevd[11924]: Unable to EVIOCGABS device "/dev/input/event4" [ 531.882521][T15554] x_tables: eb_tables: quota.0 match: invalid size 24 (kernel) != (user) 0 [ 532.284747][ T1051] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 532.308085][ T1051] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 532.319995][ T1051] bond0 (unregistering): Released all slaves [ 532.720936][ T29] audit: type=1326 audit(1728776842.494:2592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15571 comm="syz.1.2263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f243957dff9 code=0x7ffc0000 [ 532.763682][ T29] audit: type=1326 audit(1728776842.494:2593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15571 comm="syz.1.2263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f243957dff9 code=0x7ffc0000 [ 532.787581][ T29] audit: type=1326 audit(1728776842.514:2594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15571 comm="syz.1.2263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f243957dff9 code=0x7ffc0000 [ 532.793388][ T5280] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 532.833628][T15545] chnl_net:caif_netlink_parms(): no params data found [ 532.833699][ T29] audit: type=1326 audit(1728776842.514:2595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15571 comm="syz.1.2263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f243957dff9 code=0x7ffc0000 [ 532.934671][ T29] audit: type=1326 audit(1728776842.514:2596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15571 comm="syz.1.2263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f243957dff9 code=0x7ffc0000 [ 532.989333][ T1051] hsr_slave_0: left promiscuous mode [ 533.003959][ T5280] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 533.028203][ T1051] hsr_slave_1: left promiscuous mode [ 533.038450][ T1051] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 533.050777][ T5280] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 533.077479][ T1051] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 533.088199][ T5954] usb 1-1: USB disconnect, device number 96 [ 533.093906][ T5280] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 533.124554][ T1051] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 533.132431][ T5280] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 533.161058][ T1051] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 533.174709][ T5280] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 533.195472][ T5280] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 533.221293][ T5280] usb 3-1: Product: syz [ 533.232023][ T5280] usb 3-1: Manufacturer: syz [ 533.243841][ T1051] veth1_macvtap: left promiscuous mode [ 533.251009][ T1051] veth0_macvtap: left promiscuous mode [ 533.260703][ T5280] cdc_wdm 3-1:1.0: skipping garbage [ 533.266306][ T5280] cdc_wdm 3-1:1.0: skipping garbage [ 533.272275][ T1051] veth1_vlan: left promiscuous mode [ 533.278322][ T1051] veth0_vlan: left promiscuous mode [ 533.286602][ T5280] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 533.293051][ T5280] cdc_wdm 3-1:1.0: Unknown control protocol [ 533.370646][T14361] Bluetooth: hci3: command tx timeout [ 533.478591][ T8] usb 3-1: USB disconnect, device number 119 [ 533.550280][ T5954] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 533.710642][ T5954] usb 1-1: Using ep0 maxpacket: 16 [ 533.721792][ T5954] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 533.739165][ T5954] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 533.755286][ T5954] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 533.765276][ T5954] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 533.773758][ T5954] usb 1-1: Manufacturer: syz [ 533.781726][ T5954] usb 1-1: config 0 descriptor?? [ 534.036291][ T5954] usb 1-1: USB disconnect, device number 97 [ 534.184763][ T1051] team0 (unregistering): Port device team_slave_1 removed [ 534.299072][ T1051] team0 (unregistering): Port device team_slave_0 removed [ 534.379313][T15618] IPv6: addrconf: prefix option has invalid lifetime [ 534.500530][ T5954] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 534.660263][ T5954] usb 1-1: Using ep0 maxpacket: 32 [ 534.668448][ T5954] usb 1-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 534.685148][ T5954] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 534.698592][ T5954] usb 1-1: config 0 descriptor?? [ 534.721071][ T5954] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 534.939327][T15590] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2265'. [ 534.948455][T15590] netlink: 'syz.1.2265': attribute type 15 has an invalid length. [ 534.959707][T15590] netlink: 'syz.1.2265': attribute type 18 has an invalid length. [ 534.975777][T15590] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 3072 - 0 [ 534.984606][T15590] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 3072 - 0 [ 534.993474][T15590] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 3072 - 0 [ 535.002465][T15590] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 3072 - 0 [ 535.023032][T15590] vxlan0: entered promiscuous mode [ 535.084307][T15545] bridge0: port 1(bridge_slave_0) entered blocking state [ 535.092809][T15545] bridge0: port 1(bridge_slave_0) entered disabled state [ 535.100955][T15545] bridge_slave_0: entered allmulticast mode [ 535.108161][T15545] bridge_slave_0: entered promiscuous mode [ 535.192679][T15545] bridge0: port 2(bridge_slave_1) entered blocking state [ 535.219492][T15545] bridge0: port 2(bridge_slave_1) entered disabled state [ 535.236832][T15545] bridge_slave_1: entered allmulticast mode [ 535.278293][T15545] bridge_slave_1: entered promiscuous mode [ 535.368440][T15545] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 535.383587][T15630] usb usb9: usbfs: process 15630 (syz.2.2273) did not claim interface 0 before use [ 535.413346][T15545] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 535.440838][T14361] Bluetooth: hci3: command tx timeout [ 535.490439][ T5932] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 535.585539][T15545] team0: Port device team_slave_0 added [ 535.604465][T15545] team0: Port device team_slave_1 added [ 535.629272][T15637] netlink: 'syz.1.2275': attribute type 3 has an invalid length. [ 535.644571][T15637] netlink: 'syz.1.2275': attribute type 1 has an invalid length. [ 535.651563][ T5932] usb 4-1: Using ep0 maxpacket: 32 [ 535.666848][ T5932] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 535.695891][T15545] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 535.704762][ T5932] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 535.715008][T15545] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 535.762147][ T5932] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 535.777339][ T5932] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 535.786733][ T5954] gspca_vc032x: reg_w err -71 [ 535.800719][ T5954] gspca_vc032x: I2c Bus Busy Wait 00 [ 535.806071][ T5954] gspca_vc032x: I2c Bus Busy Wait 00 [ 535.820939][ T5932] usb 4-1: Product: syz [ 535.825279][ T5932] usb 4-1: Manufacturer: syz [ 535.826582][T15545] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 535.835696][ T5954] gspca_vc032x: I2c Bus Busy Wait 00 [ 535.858489][ T5932] hub 4-1:4.0: USB hub found [ 535.867407][T15545] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 535.867640][ T5954] gspca_vc032x: I2c Bus Busy Wait 00 [ 535.874867][T15545] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 535.884036][ T5954] gspca_vc032x: I2c Bus Busy Wait 00 [ 535.906634][T15545] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 535.940507][ T5954] gspca_vc032x: I2c Bus Busy Wait 00 [ 535.955081][ T5954] gspca_vc032x: I2c Bus Busy Wait 00 [ 535.968271][ T5954] gspca_vc032x: I2c Bus Busy Wait 00 [ 535.974384][ T5954] gspca_vc032x: I2c Bus Busy Wait 00 [ 535.980022][ T5954] gspca_vc032x: I2c Bus Busy Wait 00 [ 535.985712][ T5954] gspca_vc032x: I2c Bus Busy Wait 00 [ 535.995363][ T5954] gspca_vc032x: I2c Bus Busy Wait 00 [ 536.003381][T15545] hsr_slave_0: entered promiscuous mode [ 536.004417][ T5954] gspca_vc032x: I2c Bus Busy Wait 00 [ 536.016600][T15545] hsr_slave_1: entered promiscuous mode [ 536.027238][ T5954] gspca_vc032x: I2c Bus Busy Wait 00 [ 536.033090][T15545] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 536.040211][ T5954] gspca_vc032x: I2c Bus Busy Wait 00 [ 536.048701][T15545] Cannot create hsr debugfs directory [ 536.070698][ T5932] hub 4-1:4.0: 2 ports detected [ 536.075733][ T5954] gspca_vc032x: I2c Bus Busy Wait 00 [ 536.081900][ T5954] gspca_vc032x: I2c Bus Busy Wait 00 [ 536.087359][ T5954] gspca_vc032x: I2c Bus Busy Wait 00 [ 536.093090][ T5954] gspca_vc032x: Unknown sensor... [ 536.098231][ T5954] vc032x 1-1:0.0: probe with driver vc032x failed with error -22 [ 536.147951][ T5954] usb 1-1: USB disconnect, device number 98 [ 536.651197][ T5954] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 536.834883][ T5954] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 536.874040][ T5954] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 536.899859][ T5954] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 536.961342][ T5954] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 537.031498][ T5954] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 537.077771][ T5954] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 537.099962][ T5954] usb 1-1: Product: syz [ 537.150400][ T5954] usb 1-1: Manufacturer: syz [ 537.223920][ T5954] cdc_wdm 1-1:1.0: skipping garbage [ 537.241908][ T5954] cdc_wdm 1-1:1.0: skipping garbage [ 537.345187][ T5954] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 537.386753][ T5954] cdc_wdm 1-1:1.0: Unknown control protocol [ 537.439009][ T5954] usb 1-1: USB disconnect, device number 99 [ 537.520686][T14361] Bluetooth: hci3: command tx timeout [ 537.637524][ T5932] hub 4-1:4.0: hub_ext_port_status failed (err = -32) [ 537.841604][ T9155] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.936034][T15545] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 538.131239][ T5234] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 538.131871][ T9155] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.158529][ T5234] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 538.168140][ T5234] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 538.187011][ T5234] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 538.200797][ T5234] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 538.221828][ T5234] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 538.249552][T15545] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 538.283530][T15690] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2286'. [ 538.364739][ T5307] usb 4-1: USB disconnect, device number 105 [ 538.432407][T15545] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 538.506276][ T9155] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.722262][T15545] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 538.817308][T15696] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2287'. [ 538.856593][ T9155] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.020256][ T5932] usb 1-1: new low-speed USB device number 100 using dummy_hcd [ 539.264584][ T5932] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 539.290428][ T5932] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 539.325357][ T5932] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 539.378910][ T5932] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 539.427501][ T5932] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 539.463400][ T5932] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 539.489175][ T5932] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 539.523868][T15545] 8021q: adding VLAN 0 to HW filter on device bond0 [ 539.550663][ T5932] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 539.600641][T14361] Bluetooth: hci3: command tx timeout [ 539.618764][ T5932] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 539.632848][ T5932] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 539.645971][T15545] 8021q: adding VLAN 0 to HW filter on device team0 [ 539.653568][ T5932] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 539.671751][ T5932] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 539.689869][ T5932] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 539.726541][ T9155] bridge_slave_1: left allmulticast mode [ 539.739101][ T9155] bridge_slave_1: left promiscuous mode [ 539.745683][ T5932] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 539.767424][ T9155] bridge0: port 2(bridge_slave_1) entered disabled state [ 539.782220][ T5932] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 539.805144][ T9155] bridge_slave_0: left allmulticast mode [ 539.816077][ T5932] usb 1-1: string descriptor 0 read error: -22 [ 539.827181][ T5932] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 539.839697][ T9155] bridge_slave_0: left promiscuous mode [ 539.855764][ T9155] bridge0: port 1(bridge_slave_0) entered disabled state [ 539.864777][ T5932] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.910744][ T5932] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 540.321814][T14361] Bluetooth: hci2: command tx timeout [ 540.856288][ T5307] usb 1-1: USB disconnect, device number 100 [ 541.274095][ T9155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 541.293460][ T9155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 541.305393][ T9155] bond0 (unregistering): Released all slaves [ 541.322758][T15724] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2291'. [ 541.333766][T15724] netlink: 'syz.1.2291': attribute type 15 has an invalid length. [ 541.342248][T15724] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2291'. [ 541.365641][T15724] netdevsim netdevsim1 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0 [ 541.375283][T15724] netdevsim netdevsim1 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0 [ 541.384592][T15724] netdevsim netdevsim1 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 541.393394][T15724] netdevsim netdevsim1 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0 [ 541.408207][T15724] vxlan1: entered promiscuous mode [ 541.541618][T15692] chnl_net:caif_netlink_parms(): no params data found [ 541.684958][ T6896] bridge0: port 1(bridge_slave_0) entered blocking state [ 541.692159][ T6896] bridge0: port 1(bridge_slave_0) entered forwarding state [ 541.722920][ T6896] bridge0: port 2(bridge_slave_1) entered blocking state [ 541.730129][ T6896] bridge0: port 2(bridge_slave_1) entered forwarding state [ 541.933925][ T9155] hsr_slave_0: left promiscuous mode [ 541.944324][ T9155] hsr_slave_1: left promiscuous mode [ 541.954715][ T9155] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 541.967911][ T9155] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 541.984451][ T9155] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 541.995417][ T9155] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 542.003104][ T5307] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 542.044021][ T9155] veth1_macvtap: left promiscuous mode [ 542.049638][ T9155] veth0_macvtap: left promiscuous mode [ 542.062550][ T9155] veth1_vlan: left promiscuous mode [ 542.067911][ T9155] veth0_vlan: left promiscuous mode [ 542.081235][ T5932] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 542.141128][ T5307] usb 2-1: device descriptor read/64, error -71 [ 542.252168][ T5932] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 542.269698][ T5932] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 542.294948][ T5932] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 542.306387][ T5932] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 542.321277][ T5932] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 542.330848][ T5932] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 542.338989][ T5932] usb 1-1: Product: syz [ 542.344154][ T5932] usb 1-1: Manufacturer: syz [ 542.360011][ T5932] cdc_wdm 1-1:1.0: skipping garbage [ 542.378105][ T5932] cdc_wdm 1-1:1.0: skipping garbage [ 542.390191][ T5307] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 542.394597][ T5932] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 542.404973][T14361] Bluetooth: hci2: command tx timeout [ 542.418587][ T5932] cdc_wdm 1-1:1.0: Unknown control protocol [ 542.560162][ T5307] usb 2-1: device descriptor read/64, error -71 [ 542.578832][ T5932] usb 1-1: USB disconnect, device number 101 [ 542.670805][ T5307] usb usb2-port1: attempt power cycle [ 543.060586][ T5307] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 543.101572][ T5307] usb 2-1: device descriptor read/8, error -71 [ 543.138712][ T9155] team0 (unregistering): Port device team_slave_1 removed [ 543.277055][ T9155] team0 (unregistering): Port device team_slave_0 removed [ 543.344571][ T5307] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 543.382581][ T5307] usb 2-1: device descriptor read/8, error -71 [ 543.500402][ T5307] usb usb2-port1: unable to enumerate USB device [ 543.810278][ T5932] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 544.017032][ T5932] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 544.027629][ T5932] usb 1-1: config 7 has 1 interface, different from the descriptor's value: 2 [ 544.044539][ T5932] usb 1-1: New USB device found, idVendor=19d2, idProduct=1275, bcdDevice= 0.84 [ 544.054424][ T5932] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 544.065664][ T5932] usb 1-1: Product: syz [ 544.069921][ T5932] usb 1-1: SerialNumber: syz [ 544.098785][ T5932] option 1-1:7.0: GSM modem (1-port) converter detected [ 544.312918][T15692] bridge0: port 1(bridge_slave_0) entered blocking state [ 544.347084][T15692] bridge0: port 1(bridge_slave_0) entered disabled state [ 544.356426][T15692] bridge_slave_0: entered allmulticast mode [ 544.364216][T15692] bridge_slave_0: entered promiscuous mode [ 544.374317][T15692] bridge0: port 2(bridge_slave_1) entered blocking state [ 544.390136][T15692] bridge0: port 2(bridge_slave_1) entered disabled state [ 544.397683][T15692] bridge_slave_1: entered allmulticast mode [ 544.410894][T15692] bridge_slave_1: entered promiscuous mode [ 544.480417][T14361] Bluetooth: hci2: command tx timeout [ 544.499065][T15692] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 544.538898][T15692] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 544.762496][T15692] team0: Port device team_slave_0 added [ 544.814966][T15692] team0: Port device team_slave_1 added [ 544.895429][T15545] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 544.937627][T15692] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 544.954653][T15692] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 545.017637][T15692] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 545.060024][T15692] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 545.079148][T15692] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 545.113899][T15692] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 545.418695][ T1051] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.637176][ T1051] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.650011][ T5234] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 545.661997][ T5234] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 545.680583][ T5234] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 545.693620][ T5234] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 545.704926][ T5234] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 545.714555][ T5234] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 545.788207][ T1051] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.820852][T15692] hsr_slave_0: entered promiscuous mode [ 545.832790][T15692] hsr_slave_1: entered promiscuous mode [ 545.887781][ T1051] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.932047][T15545] veth0_vlan: entered promiscuous mode [ 546.123387][T15545] veth1_vlan: entered promiscuous mode [ 546.449678][ T5307] usb 1-1: USB disconnect, device number 102 [ 546.458680][ T5307] option 1-1:7.0: device disconnected [ 546.540394][ T5280] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 546.560309][T14361] Bluetooth: hci2: command tx timeout [ 546.657213][T15848] xt_CT: You must specify a L4 protocol and not use inversions on it [ 546.672686][T15545] veth0_macvtap: entered promiscuous mode [ 546.718808][ T5280] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 546.728478][ T5280] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 546.739515][ T5280] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 546.748646][ T5280] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 546.766305][ T5280] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 546.782105][ T5280] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 546.791286][ T5280] usb 2-1: Product: syz [ 546.795536][ T5280] usb 2-1: Manufacturer: syz [ 546.822844][ T5280] cdc_wdm 2-1:1.0: skipping garbage [ 546.828111][ T5280] cdc_wdm 2-1:1.0: skipping garbage [ 546.829275][T15545] veth1_macvtap: entered promiscuous mode [ 546.839803][ T5280] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 546.846575][ T5280] cdc_wdm 2-1:1.0: Unknown control protocol [ 546.891728][ T1051] bridge_slave_1: left allmulticast mode [ 546.911431][ T1051] bridge_slave_1: left promiscuous mode [ 546.917208][ T1051] bridge0: port 2(bridge_slave_1) entered disabled state [ 546.959179][ T1051] bridge_slave_0: left allmulticast mode [ 546.970308][ T1051] bridge_slave_0: left promiscuous mode [ 546.990483][ T1051] bridge0: port 1(bridge_slave_0) entered disabled state [ 547.038672][ T5280] usb 2-1: USB disconnect, device number 127 [ 547.440333][ T8] usb 1-1: new full-speed USB device number 103 using dummy_hcd [ 547.631557][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 547.660146][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 547.669953][ T8] usb 1-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00 [ 547.729567][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 547.766998][T14361] Bluetooth: hci1: command tx timeout [ 547.783857][ T8] usb 1-1: config 0 descriptor?? [ 548.209914][ T8] microsoft 0003:045E:009D.0028: item fetching failed at offset 0/3 [ 548.241601][ T8] microsoft 0003:045E:009D.0028: parse failed [ 548.257584][ T8] microsoft 0003:045E:009D.0028: probe with driver microsoft failed with error -22 [ 548.257650][ T1051] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 548.317777][ T1051] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 548.341052][ T1051] bond0 (unregistering): Released all slaves [ 548.634455][T15824] chnl_net:caif_netlink_parms(): no params data found [ 548.696570][T15545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 548.709477][T15545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.720252][T15545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 548.731080][T15545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.741108][T15545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 548.752150][T15545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.769427][T15545] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 548.886273][T15545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 548.909247][T15545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.919496][T15545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 548.930307][T15545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.940585][T15545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 548.951351][T15545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.967200][T15545] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 549.008353][T15545] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.019466][T15545] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.028467][T15545] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.039092][T15545] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.128644][ T1051] hsr_slave_0: left promiscuous mode [ 549.137707][ T1051] hsr_slave_1: left promiscuous mode [ 549.149552][ T1051] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 549.168487][ T1051] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 549.187051][ T1051] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 549.212044][ T1051] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 549.250974][ T1051] veth1_macvtap: left promiscuous mode [ 549.260861][ T1051] veth0_macvtap: left promiscuous mode [ 549.811325][ T1051] team0 (unregistering): Port device team_slave_1 removed [ 549.819803][ T8] usb 1-1: USB disconnect, device number 103 [ 549.842610][T14361] Bluetooth: hci1: command tx timeout [ 549.933423][ T1051] team0 (unregistering): Port device team_slave_0 removed [ 550.517693][T15824] bridge0: port 1(bridge_slave_0) entered blocking state [ 550.527177][T15824] bridge0: port 1(bridge_slave_0) entered disabled state [ 550.540464][T15824] bridge_slave_0: entered allmulticast mode [ 550.549955][T15824] bridge_slave_0: entered promiscuous mode [ 550.567348][T15876] netlink: 'syz.1.2310': attribute type 3 has an invalid length. [ 550.580109][T15876] netlink: 'syz.1.2310': attribute type 1 has an invalid length. [ 550.638421][T15824] bridge0: port 2(bridge_slave_1) entered blocking state [ 550.680944][T15824] bridge0: port 2(bridge_slave_1) entered disabled state [ 550.713525][T15824] bridge_slave_1: entered allmulticast mode [ 550.728364][T15824] bridge_slave_1: entered promiscuous mode [ 550.769594][ T29] audit: type=1326 audit(1728776860.534:2597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15886 comm="syz.1.2312" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f243957dff9 code=0x0 [ 550.826873][T15692] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 550.898431][T15824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 550.946641][T15692] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 550.958380][T15692] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 551.021139][T15824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 551.165950][T15692] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 551.202305][T15906] netlink: 'syz.1.2314': attribute type 32 has an invalid length. [ 551.204920][T15824] team0: Port device team_slave_0 added [ 551.215305][T15906] fuse: Bad value for 'user_id' [ 551.223093][T15906] fuse: Bad value for 'user_id' [ 551.267896][T15824] team0: Port device team_slave_1 added [ 551.287832][ T9155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 551.321423][ T9155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 551.422050][T15824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 551.434996][T15824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 551.467977][T15824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 551.521956][T15824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 551.528943][T15824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 551.563221][T15824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 551.598932][ T9155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 551.630312][ T9155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 551.645720][T15824] hsr_slave_0: entered promiscuous mode [ 551.652816][T15824] hsr_slave_1: entered promiscuous mode [ 551.659856][T15824] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 551.668696][T15824] Cannot create hsr debugfs directory [ 551.765238][T15692] 8021q: adding VLAN 0 to HW filter on device bond0 [ 551.814880][T15916] loop2: detected capacity change from 0 to 7 [ 551.823994][T15692] 8021q: adding VLAN 0 to HW filter on device team0 [ 551.837009][T15916] Dev loop2: unable to read RDB block 7 [ 551.849740][T15916] loop2: unable to read partition table [ 551.856834][T15916] loop2: partition table beyond EOD, truncated [ 551.867917][T15916] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 551.900443][ T46] usb 1-1: new low-speed USB device number 104 using dummy_hcd [ 551.920453][T14361] Bluetooth: hci1: command tx timeout [ 551.946554][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 551.953772][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 551.977566][ T5280] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 552.005112][ T81] bridge0: port 2(bridge_slave_1) entered blocking state [ 552.012319][ T81] bridge0: port 2(bridge_slave_1) entered forwarding state [ 552.032068][T15922] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2317'. [ 552.103021][ T46] usb 1-1: config index 0 descriptor too short (expected 1307, got 27) [ 552.127283][ T46] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 552.158301][ T46] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 552.169891][ T46] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 552.191546][ T5280] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 552.208479][ T46] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 552.220181][ T5280] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 552.235452][ T46] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 552.245478][ T5280] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 552.256460][ T46] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 552.272431][ T5280] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 552.293096][T15922] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 552.296203][ T46] usb 1-1: string descriptor 0 read error: -22 [ 552.300442][T15922] IPv6: NLM_F_CREATE should be set when creating new route [ 552.308377][ T5280] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 552.324814][T15930] netlink: 'syz.4.2317': attribute type 27 has an invalid length. [ 552.325012][ T46] usb 1-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 552.356193][ T5280] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 552.364344][ T46] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.372579][ T5280] usb 2-1: Product: syz [ 552.377630][ T5280] usb 2-1: Manufacturer: syz [ 552.393555][ T46] usb 1-1: config 0 descriptor?? [ 552.404504][ T46] hub 1-1:0.0: bad descriptor, ignoring hub [ 552.411788][ T46] hub 1-1:0.0: probe with driver hub failed with error -5 [ 552.440239][ T46] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input49 [ 552.454910][ T5280] cdc_wdm 2-1:1.0: skipping garbage [ 552.461490][ T5280] cdc_wdm 2-1:1.0: skipping garbage [ 552.463736][T15930] bridge0: port 2(bridge_slave_1) entered disabled state [ 552.474361][T15930] bridge0: port 1(bridge_slave_0) entered disabled state [ 552.484081][ T5280] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 552.508895][ T5280] cdc_wdm 2-1:1.0: Unknown control protocol [ 552.622268][T15930] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 552.642159][ T5280] usb 1-1: USB disconnect, device number 104 [ 552.657921][T15930] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 552.677623][ T46] usb 2-1: USB disconnect, device number 2 [ 552.765546][T15930] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 552.774946][T15930] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 552.784501][T15930] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 552.793923][T15930] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.047089][T15692] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 553.155265][T15692] veth0_vlan: entered promiscuous mode [ 553.201505][T15692] veth1_vlan: entered promiscuous mode [ 553.249376][T15947] netlink: 'syz.4.2319': attribute type 3 has an invalid length. [ 553.300682][T15947] netlink: 'syz.4.2319': attribute type 1 has an invalid length. [ 553.378547][T15692] veth0_macvtap: entered promiscuous mode [ 553.405320][T15692] veth1_macvtap: entered promiscuous mode [ 553.565613][T15692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 553.597738][T15692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 553.637363][T15692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 553.651940][T15692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 553.676645][T15692] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 553.724603][T15692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 553.739397][T15692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 553.758223][T15692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 553.769849][T15692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 553.798913][T15692] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 553.814635][T15824] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 553.830906][T15824] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 553.852538][T15976] netlink: 'syz.0.2324': attribute type 32 has an invalid length. [ 553.869029][T15692] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.876849][T15976] fuse: Bad value for 'user_id' [ 553.884575][T15692] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.888265][T15976] fuse: Bad value for 'user_id' [ 553.904730][T15692] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.923884][T15692] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.948799][T15824] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 553.993697][T15824] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 554.001477][T14361] Bluetooth: hci1: command tx timeout [ 554.266223][ T1051] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 554.339768][ T1051] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 554.519191][T15824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 554.545395][ T81] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 554.577553][ T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 554.611646][T15824] 8021q: adding VLAN 0 to HW filter on device team0 [ 554.670807][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 554.677954][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 554.686351][ T8] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 554.713356][ T6896] bridge0: port 2(bridge_slave_1) entered blocking state [ 554.720564][ T6896] bridge0: port 2(bridge_slave_1) entered forwarding state [ 554.840186][ T8] usb 1-1: Using ep0 maxpacket: 32 [ 554.847369][ T8] usb 1-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 554.857001][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.894769][ T8] usb 1-1: config 0 descriptor?? [ 554.923997][ T8] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 554.955988][T15824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 555.038024][T15824] veth0_vlan: entered promiscuous mode [ 555.050828][ T5932] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 555.093097][T15824] veth1_vlan: entered promiscuous mode [ 555.146860][T15824] veth0_macvtap: entered promiscuous mode [ 555.153478][ T5954] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 555.169384][T15824] veth1_macvtap: entered promiscuous mode [ 555.195682][T15824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 555.208912][T15824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.220522][T15824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 555.234435][ T5932] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 555.246046][T15824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.257720][ T5932] usb 5-1: New USB device found, idVendor=0c70, idProduct=f001, bcdDevice= 0.00 [ 555.275720][T15824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 555.277825][ T5932] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 555.286313][T15824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.287723][T15824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 555.313915][ T5950] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 555.320349][ T5954] usb 3-1: Using ep0 maxpacket: 8 [ 555.329267][T15998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 555.340948][ T5932] usb 5-1: config 0 descriptor?? [ 555.349328][ T5954] usb 3-1: config 0 has an invalid interface descriptor of length 6, skipping [ 555.361906][ T5954] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 555.376248][T15824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 555.386916][ T5954] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 555.400935][ T5954] usb 3-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 555.401959][T15824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.417208][ T5954] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 555.431694][ T5954] usb 3-1: config 0 descriptor?? [ 555.439910][T15824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 555.451185][T15824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.461983][T15824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 555.473319][T15824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.483955][T15998] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 555.490585][ T5950] usb 2-1: Using ep0 maxpacket: 16 [ 555.502279][T15824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 555.505146][ T5950] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 555.533652][ T5950] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 555.554109][ T8] gspca_vc032x: reg_w err -71 [ 555.568089][T15824] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.573703][ T5950] usb 2-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 555.578127][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 555.599914][T15824] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.608898][ T5950] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 555.621131][ T5950] usb 2-1: config 0 descriptor?? [ 555.628441][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 555.634452][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 555.648453][ T5954] usb 3-1: USB disconnect, device number 120 [ 555.663644][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 555.669312][T15824] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.678869][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 555.690581][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 555.696484][T15824] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.713474][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 555.725903][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 555.742548][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 555.747956][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 555.813051][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 555.818483][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 555.835201][T16012] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2331'. [ 555.865286][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 555.883683][T16041] netlink: 'syz.0.2333': attribute type 32 has an invalid length. [ 555.885392][T16019] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 555.910593][ T5932] aquacomputer_d5next 0003:0C70:F001.0029: hidraw0: USB HID v0.00 Device [HID 0c70:f001] on usb-dummy_hcd.4-1/input0 [ 555.924717][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 555.941530][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 555.957229][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 555.969463][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 555.975435][T16019] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 555.985095][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 555.991814][ T6896] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 555.992205][ T81] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 555.999665][ T6896] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 556.030613][ T8] gspca_vc032x: Unknown sensor... [ 556.035817][ T8] vc032x 1-1:0.0: probe with driver vc032x failed with error -22 [ 556.075726][ T8] usb 1-1: USB disconnect, device number 105 [ 556.080838][ T5950] usbhid 2-1:0.0: can't add hid device: -71 [ 556.082703][ T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 556.087811][ T5950] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 556.133648][T16041] fuse: Bad value for 'user_id' [ 556.174441][T16041] fuse: Bad value for 'user_id' [ 556.199357][ T5950] usb 2-1: USB disconnect, device number 3 [ 556.229810][ T5307] usb 5-1: USB disconnect, device number 73 [ 556.347523][T16054] tipc: Started in network mode [ 556.360412][T16054] tipc: Node identity 00000000000000000000000000002d01, cluster identity 4711 [ 556.390443][T16054] tipc: Enabling of bearer rejected, failed to enable media [ 556.530860][T16056] binder: 16055:16056 ioctl c0306201 20000240 returned -22 [ 556.665434][T16056] syzkaller1: entered promiscuous mode [ 556.686916][T16056] syzkaller1: entered allmulticast mode [ 556.810415][ T8] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 556.962435][ T8] usb 2-1: config 36 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 192, changing to 11 [ 556.982156][ T8] usb 2-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 556.998063][ T8] usb 2-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 557.016769][ T8] usb 2-1: Manufacturer: syz [ 557.027362][ T8] usb 2-1: SerialNumber: syz [ 557.072047][T16096] loop2: detected capacity change from 0 to 7 [ 557.093606][T16096] Dev loop2: unable to read RDB block 7 [ 557.099649][T16096] loop2: unable to read partition table [ 557.113752][T16096] loop2: partition table beyond EOD, truncated [ 557.137771][T16096] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 557.148189][ T5310] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 557.253701][ T8] usbhid 2-1:36.0: couldn't find an input interrupt endpoint [ 557.282687][ T8] usb 2-1: USB disconnect, device number 4 [ 557.321708][ T5310] usb 4-1: Using ep0 maxpacket: 32 [ 557.328069][T16109] netlink: 'syz.2.2346': attribute type 32 has an invalid length. [ 557.329832][ T5310] usb 4-1: config 0 has an invalid interface number: 74 but max is 1 [ 557.344262][T16109] fuse: Bad value for 'user_id' [ 557.344284][T16109] fuse: Bad value for 'user_id' [ 557.361680][ T5310] usb 4-1: config 0 has an invalid interface number: 253 but max is 1 [ 557.369973][ T5310] usb 4-1: config 0 has no interface number 0 [ 557.376321][ T5310] usb 4-1: config 0 has no interface number 1 [ 557.386001][ T5310] usb 4-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=8e.fa [ 557.398811][ T5310] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 557.409892][ T5310] usb 4-1: Product: syz [ 557.442569][ T5310] usb 4-1: Manufacturer: syz [ 557.452276][ T5310] usb 4-1: SerialNumber: syz [ 557.462443][ T5310] usb 4-1: config 0 descriptor?? [ 558.370404][ T5310] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 558.501718][T16145] kvm: pic: non byte write [ 558.541060][ T5310] usb 5-1: Using ep0 maxpacket: 32 [ 558.582072][ T5310] usb 5-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice=82.d5 [ 558.653558][ T5310] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.786622][ T5310] usb 5-1: Product: syz [ 558.804637][ T5310] usb 5-1: Manufacturer: syz [ 558.824665][ T5310] usb 5-1: SerialNumber: syz [ 558.839211][ T5310] usb 5-1: config 0 descriptor?? [ 558.896888][ T5310] hub 5-1:0.0: bad descriptor, ignoring hub [ 558.918230][ T5310] hub 5-1:0.0: probe with driver hub failed with error -5 [ 558.965052][ T5310] gspca_main: vc032x-2.14.0 probing 0ac8:c301 [ 559.137708][T16162] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2356'. [ 559.520443][T16172] kvm: Disabled LAPIC found during irq injection [ 559.674321][ T5310] gspca_vc032x: reg_w err -110 [ 559.707720][ T5310] gspca_vc032x: I2c Bus Busy Wait 00 [ 559.778532][ T5310] gspca_vc032x: I2c Bus Busy Wait 00 [ 559.790233][ T5932] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 559.813487][ T5310] gspca_vc032x: I2c Bus Busy Wait 00 [ 559.824222][ T5310] gspca_vc032x: I2c Bus Busy Wait 00 [ 559.843761][ T5310] gspca_vc032x: I2c Bus Busy Wait 00 [ 559.861150][ T5310] gspca_vc032x: I2c Bus Busy Wait 00 [ 559.873352][ T5310] gspca_vc032x: I2c Bus Busy Wait 00 [ 559.886600][ T5310] gspca_vc032x: I2c Bus Busy Wait 00 [ 559.903762][ T5310] gspca_vc032x: I2c Bus Busy Wait 00 [ 559.918947][ T5310] gspca_vc032x: I2c Bus Busy Wait 00 [ 559.932269][ T5310] gspca_vc032x: I2c Bus Busy Wait 00 [ 559.939909][ T5310] gspca_vc032x: I2c Bus Busy Wait 00 [ 559.947606][ T5310] gspca_vc032x: I2c Bus Busy Wait 00 [ 559.960371][ T5310] gspca_vc032x: I2c Bus Busy Wait 00 [ 559.976240][ T5310] gspca_vc032x: I2c Bus Busy Wait 00 [ 559.981607][ T5932] usb 2-1: Using ep0 maxpacket: 8 [ 560.003040][ T5310] gspca_vc032x: I2c Bus Busy Wait 00 [ 560.024777][ T5310] gspca_vc032x: I2c Bus Busy Wait 00 [ 560.031512][ T5310] gspca_vc032x: I2c Bus Busy Wait 00 [ 560.066011][ T5310] gspca_vc032x: I2c Bus Busy Wait 00 [ 560.084118][ T5945] usb 4-1: USB disconnect, device number 106 [ 560.095204][ T5932] usb 2-1: config 0 has an invalid interface number: 124 but max is 0 [ 560.100113][ T5310] gspca_vc032x: Unknown sensor... [ 560.103685][ T5932] usb 2-1: config 0 has no interface number 0 [ 560.134508][ T5310] vc032x 5-1:0.0: probe with driver vc032x failed with error -22 [ 560.215691][ T5310] usb 5-1: USB disconnect, device number 74 [ 560.246044][ T5932] usb 2-1: New USB device found, idVendor=0a5c, idProduct=2033, bcdDevice=72.01 [ 560.255840][ T5932] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.267610][ T5932] usb 2-1: Product: syz [ 560.273654][ T5932] usb 2-1: Manufacturer: syz [ 560.278303][ T5932] usb 2-1: SerialNumber: syz [ 560.303832][ T6896] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.377625][ T5932] usb 2-1: config 0 descriptor?? [ 560.395621][T16186] netlink: 'syz.3.2361': attribute type 15 has an invalid length. [ 560.538068][ T6896] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.651006][ T6896] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.734866][ T5234] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 560.749318][ T5234] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 560.776618][ T5234] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 560.794015][ T5234] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 560.796514][ T6896] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.819718][ T5234] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 560.831115][ T5234] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 561.121200][T16204] delete_channel: no stack [ 561.130409][ T6896] bridge_slave_1: left allmulticast mode [ 561.140221][ T6896] bridge_slave_1: left promiscuous mode [ 561.150687][T16204] delete_channel: no stack [ 561.160266][ T6896] bridge0: port 2(bridge_slave_1) entered disabled state [ 561.177023][ T6896] bridge_slave_0: left allmulticast mode [ 561.184528][ T6896] bridge_slave_0: left promiscuous mode [ 561.195125][ T6896] bridge0: port 1(bridge_slave_0) entered disabled state [ 561.722346][ T5955] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 561.802854][ T46] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 561.868006][ T6896] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 561.882084][ T6896] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 561.892555][ T5955] usb 3-1: Using ep0 maxpacket: 32 [ 561.899765][ T5955] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 561.913030][ T6896] bond0 (unregistering): Released all slaves [ 561.924966][ T5955] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 561.969188][ T46] usb 4-1: config 1 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 89, changing to 10 [ 561.970471][ T5955] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1c.48 [ 562.010563][ T5955] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 562.018746][ T5955] usb 3-1: Product: syz [ 562.019647][ T46] usb 4-1: config 1 interface 0 has no altsetting 0 [ 562.035038][ T5955] usb 3-1: Manufacturer: syz [ 562.037913][ T46] usb 4-1: language id specifier not provided by device, defaulting to English [ 562.045351][ T5955] usb 3-1: SerialNumber: syz [ 562.051970][ T46] usb 4-1: New USB device found, idVendor=6253, idProduct=0100, bcdDevice= 0.40 [ 562.078362][ T5955] usb 3-1: config 0 descriptor?? [ 562.119177][ T46] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 562.142328][ T46] usb 4-1: Product: ｓ喤ᒶ쪐澐椅鄍ﯖ駴購鳺ﺫ [ 562.180286][ T46] usb 4-1: Manufacturer: 㴅嗟熹蕾殘ﶄ㈞啪Უ཭៚ [ 562.187582][ T46] usb 4-1: SerialNumber: ᮒῧ矞웱輣䎄ꁬછꝑ橗䙙୨䇮㥕ꏳ⁘也֤鵉芑鈷䉘說᭼叛늟ꍅ俘⼌Ẍ̉叔衉쇉擿텓⮯랕⋱㟢ଞ橇具ⅅ᜚짡⟲扆录羷슱ट惂욋諏幵즕⦧䛖풣苈懵Ↄٔ刣骶듌ඏⴆᮬ《䅷벍綎ﰸ柌璾엦犁娆᠍돰㺅㶍苏㈥뿏氥ퟮ㝠쏍偯벼᳝嘾诏ꖉ綍䀬맱垞瀖Ｅ杚㡶ﳡ蒗伲✚飝뫙 [ 562.285599][T16201] chnl_net:caif_netlink_parms(): no params data found [ 562.550648][T16217] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 562.592344][T16217] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 562.644646][ T5310] usb 2-1: USB disconnect, device number 5 [ 562.672631][T16225] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 562.704925][ T5955] ath6kl: Failed to submit usb control message: -71 [ 562.757014][ T5955] ath6kl: unable to send the bmi data to the device: -71 [ 562.782697][T16225] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 562.806093][ T5955] ath6kl: Unable to send get target info: -71 [ 562.830626][ T5955] ath6kl: Failed to init ath6kl core: -71 [ 562.846783][ T5955] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 562.852244][ T46] usbhid 4-1:1.0: can't add hid device: -71 [ 562.865161][ T5955] usb 3-1: USB disconnect, device number 121 [ 562.880494][ T5234] Bluetooth: hci0: command tx timeout [ 562.912744][ T46] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 562.928687][ T6896] hsr_slave_0: left promiscuous mode [ 562.945626][ T6896] hsr_slave_1: left promiscuous mode [ 562.975398][ T46] usb 4-1: USB disconnect, device number 107 [ 562.997305][ T6896] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 563.017386][ T6896] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 563.048244][ T6896] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 563.070286][ T6896] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 563.136835][T14361] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 563.146645][ T6896] veth1_macvtap: left promiscuous mode [ 563.152746][ T6896] veth0_macvtap: left promiscuous mode [ 563.152765][T14361] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 563.158450][ T6896] veth1_vlan: left promiscuous mode [ 563.170943][T14361] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 563.170990][ T6896] veth0_vlan: left promiscuous mode [ 563.184468][T14361] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 563.202409][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.208749][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.215601][T14361] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 563.223073][T14361] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 564.227472][ T6896] team0 (unregistering): Port device team_slave_1 removed [ 564.286777][ T6896] team0 (unregistering): Port device team_slave_0 removed [ 564.877001][T16201] bridge0: port 1(bridge_slave_0) entered blocking state [ 564.897197][T16201] bridge0: port 1(bridge_slave_0) entered disabled state [ 564.939403][T16201] bridge_slave_0: entered allmulticast mode [ 564.960440][T16201] bridge_slave_0: entered promiscuous mode [ 564.960439][ T5234] Bluetooth: hci0: command tx timeout [ 564.994587][T16201] bridge0: port 2(bridge_slave_1) entered blocking state [ 565.032619][T16201] bridge0: port 2(bridge_slave_1) entered disabled state [ 565.052012][T16201] bridge_slave_1: entered allmulticast mode [ 565.064436][T16201] bridge_slave_1: entered promiscuous mode [ 565.110005][T16201] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 565.124119][T16201] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 565.234233][T16201] team0: Port device team_slave_0 added [ 565.271840][T16201] team0: Port device team_slave_1 added [ 565.280562][ T5234] Bluetooth: hci3: command tx timeout [ 565.396212][T16201] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 565.423292][T16201] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 565.495176][T16201] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 565.518544][ T6896] IPVS: stop unused estimator thread 0... [ 565.632070][T16201] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 565.640773][T16201] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 565.672719][T16201] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 565.719980][T16201] hsr_slave_0: entered promiscuous mode [ 565.729686][T16201] hsr_slave_1: entered promiscuous mode [ 565.736794][T16201] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 565.750243][T16201] Cannot create hsr debugfs directory [ 565.870996][T16262] chnl_net:caif_netlink_parms(): no params data found [ 565.950806][ T5950] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 566.086637][ T5950] usb 4-1: device descriptor read/64, error -71 [ 566.197943][T16262] bridge0: port 1(bridge_slave_0) entered blocking state [ 566.205432][T16262] bridge0: port 1(bridge_slave_0) entered disabled state [ 566.213533][T16262] bridge_slave_0: entered allmulticast mode [ 566.231193][T16262] bridge_slave_0: entered promiscuous mode [ 566.311333][T16262] bridge0: port 2(bridge_slave_1) entered blocking state [ 566.326612][T16262] bridge0: port 2(bridge_slave_1) entered disabled state [ 566.335069][T16262] bridge_slave_1: entered allmulticast mode [ 566.340199][ T5950] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 566.350555][T16262] bridge_slave_1: entered promiscuous mode [ 566.381556][T14361] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 566.401673][ T5932] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 566.409110][T14361] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 566.418125][T14361] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 566.427029][T14361] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 566.435015][T14361] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 566.442455][T14361] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 566.478370][ T6896] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.491949][ T5950] usb 4-1: device descriptor read/64, error -71 [ 566.553875][ T5932] usb 2-1: Using ep0 maxpacket: 32 [ 566.565017][ T5932] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 566.576205][T16262] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 566.600761][ T5950] usb usb4-port1: attempt power cycle [ 566.607306][ T5932] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 566.639529][ T5932] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 566.646101][ T6896] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.655853][ T5932] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 566.676109][T16262] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 566.680255][ T5932] usb 2-1: Product: syz [ 566.689497][ T5932] usb 2-1: Manufacturer: syz [ 566.703527][ T5932] usb 2-1: SerialNumber: syz [ 566.728711][ T5932] usb 2-1: config 0 descriptor?? [ 566.747941][T16262] team0: Port device team_slave_0 added [ 566.772792][ T6896] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.829282][T16262] team0: Port device team_slave_1 added [ 566.865587][ T6896] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.889732][T16262] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 566.897372][T16262] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 566.925712][T16262] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 566.940217][ T5950] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 566.972898][ T5950] usb 4-1: device descriptor read/8, error -71 [ 566.990762][T16262] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 566.997982][T16262] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 567.024381][T16262] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 567.041633][T14361] Bluetooth: hci0: command tx timeout [ 567.101691][T16262] hsr_slave_0: entered promiscuous mode [ 567.107903][T16262] hsr_slave_1: entered promiscuous mode [ 567.123124][T16262] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 567.131183][T16262] Cannot create hsr debugfs directory [ 567.221339][ T5950] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 567.260793][ T5950] usb 4-1: device descriptor read/8, error -71 [ 567.360563][T14361] Bluetooth: hci3: command tx timeout [ 567.376430][T16201] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 567.377108][ T5950] usb usb4-port1: unable to enumerate USB device [ 567.409606][T16310] chnl_net:caif_netlink_parms(): no params data found [ 567.427988][T16201] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 567.479362][T16201] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 567.545696][T16201] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 567.629064][T16310] bridge0: port 1(bridge_slave_0) entered blocking state [ 567.637627][T16310] bridge0: port 1(bridge_slave_0) entered disabled state [ 567.646585][T16310] bridge_slave_0: entered allmulticast mode [ 567.653893][T16310] bridge_slave_0: entered promiscuous mode [ 567.669504][T16310] bridge0: port 2(bridge_slave_1) entered blocking state [ 567.677100][T16310] bridge0: port 2(bridge_slave_1) entered disabled state [ 567.686446][T16310] bridge_slave_1: entered allmulticast mode [ 567.693691][T16310] bridge_slave_1: entered promiscuous mode [ 567.725539][T16310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 567.738147][T16310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 567.785915][T16310] team0: Port device team_slave_0 added [ 567.797127][T16310] team0: Port device team_slave_1 added [ 567.868932][T16310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 567.877509][T16310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 567.905612][T16310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 567.918454][T16310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 567.926004][T16310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 567.952775][T16310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 568.016037][ T6896] bridge_slave_1: left allmulticast mode [ 568.023175][ T6896] bridge_slave_1: left promiscuous mode [ 568.028963][ T6896] bridge0: port 2(bridge_slave_1) entered disabled state [ 568.043155][ T6896] bridge_slave_0: left allmulticast mode [ 568.048827][ T6896] bridge_slave_0: left promiscuous mode [ 568.055323][ T6896] bridge0: port 1(bridge_slave_0) entered disabled state [ 568.065471][ T6896] bridge_slave_1: left allmulticast mode [ 568.071504][ T6896] bridge_slave_1: left promiscuous mode [ 568.077241][ T6896] bridge0: port 2(bridge_slave_1) entered disabled state [ 568.088836][ T6896] bridge_slave_0: left allmulticast mode [ 568.096054][ T6896] bridge_slave_0: left promiscuous mode [ 568.102771][ T6896] bridge0: port 1(bridge_slave_0) entered disabled state [ 568.483043][T14361] Bluetooth: hci2: command tx timeout [ 568.898313][ T6896] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 568.911587][ T6896] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 568.922721][ T6896] bond0 (unregistering): Released all slaves [ 569.096113][ T6896] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 569.106226][ T6896] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 569.125785][ T5310] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 569.130150][T14361] Bluetooth: hci0: command tx timeout [ 569.139774][ T6896] bond0 (unregistering): Released all slaves [ 569.301701][ T5310] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 569.318890][ T5310] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 569.337284][ T5310] usb 4-1: New USB device found, idVendor=04b4, idProduct=0001, bcdDevice= 0.00 [ 569.364883][ T5310] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 569.385351][T16310] hsr_slave_0: entered promiscuous mode [ 569.440256][T14361] Bluetooth: hci3: command tx timeout [ 569.449609][ T5310] usb 4-1: config 0 descriptor?? [ 569.489417][T16310] hsr_slave_1: entered promiscuous mode [ 569.570328][T16310] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 569.577997][T16310] Cannot create hsr debugfs directory [ 569.928113][T16201] 8021q: adding VLAN 0 to HW filter on device bond0 [ 569.965670][ T5310] usbhid 4-1:0.0: can't add hid device: -71 [ 569.980530][ T5310] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 569.999106][ T5310] usb 4-1: USB disconnect, device number 112 [ 570.196991][T16201] 8021q: adding VLAN 0 to HW filter on device team0 [ 570.294491][ T1051] bridge0: port 1(bridge_slave_0) entered blocking state [ 570.301668][ T1051] bridge0: port 1(bridge_slave_0) entered forwarding state [ 570.409487][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 570.416656][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 570.560310][T14361] Bluetooth: hci2: command tx timeout [ 570.665412][ T6896] hsr_slave_0: left promiscuous mode [ 570.679115][ T6896] hsr_slave_1: left promiscuous mode [ 570.686490][ T6896] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 570.700534][ T6896] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 570.715849][ T6896] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 570.731329][ T6896] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 570.744817][ T6896] hsr_slave_0: left promiscuous mode [ 570.752695][ T6896] hsr_slave_1: left promiscuous mode [ 570.759283][ T6896] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 570.776623][ T6896] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 570.827916][ T6896] veth1_macvtap: left promiscuous mode [ 570.838257][ T6896] veth0_macvtap: left promiscuous mode [ 570.847803][ T6896] veth1_vlan: left promiscuous mode [ 570.854336][ T6896] veth0_vlan: left promiscuous mode [ 571.421867][T16386] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 571.450749][T16386] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 571.526396][T14361] Bluetooth: hci3: command tx timeout [ 571.602380][ T6896] team0 (unregistering): Port device team_slave_1 removed [ 571.660514][T16389] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2398'. [ 571.673147][ T6896] team0 (unregistering): Port device team_slave_0 removed [ 572.650503][T14361] Bluetooth: hci2: command tx timeout [ 572.716256][ T6896] team0 (unregistering): Port device team_slave_1 removed [ 572.782836][ T6896] team0 (unregistering): Port device team_slave_0 removed [ 573.362475][T16262] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 573.372473][T16262] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 573.454697][T16262] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 573.464244][T16262] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 573.694859][T16201] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 573.961531][T16201] veth0_vlan: entered promiscuous mode [ 573.996487][T16262] 8021q: adding VLAN 0 to HW filter on device bond0 [ 574.057042][T16201] veth1_vlan: entered promiscuous mode [ 574.103470][T16262] 8021q: adding VLAN 0 to HW filter on device team0 [ 574.165285][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 574.172572][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 574.304191][T16405] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2401'. [ 574.329645][T16408] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 574.423703][T16408] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 574.439787][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 574.447038][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 574.508114][T16201] veth0_macvtap: entered promiscuous mode [ 574.548914][T16201] veth1_macvtap: entered promiscuous mode [ 574.653804][T16310] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 574.677072][ T5234] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 574.689602][ T5234] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 574.698345][ T5234] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 574.719557][ T5234] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 574.727576][ T5234] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 574.730772][ T54] Bluetooth: hci2: command tx timeout [ 574.743704][ T5234] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 574.788665][T16310] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 574.819437][T16262] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 574.863231][T16310] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 574.895048][T16310] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 574.925397][T16201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 574.937772][T16201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 574.948794][T16201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 574.965104][T16201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 574.976785][T16201] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 575.035901][T16201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 575.053901][T16201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 575.072186][T16201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 575.089666][T16201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 575.102669][T16201] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 575.117191][T16201] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.128265][T16201] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.139554][T16201] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.150257][T16201] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.184537][T16262] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 575.293912][ T6896] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 575.399172][ T6896] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 575.501257][ T6896] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 575.616260][ T6896] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 575.707096][T16410] chnl_net:caif_netlink_parms(): no params data found [ 575.736139][ T9155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 575.767137][ T9155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 575.922201][T16262] veth0_vlan: entered promiscuous mode [ 575.928296][ T1059] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 575.938632][ T1059] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 576.003826][T16310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 576.225230][T16410] bridge0: port 1(bridge_slave_0) entered blocking state [ 576.236392][T16410] bridge0: port 1(bridge_slave_0) entered disabled state [ 576.247916][T16410] bridge_slave_0: entered allmulticast mode [ 576.273496][T16410] bridge_slave_0: entered promiscuous mode [ 576.289074][ T6896] bridge_slave_1: left allmulticast mode [ 576.308998][ T6896] bridge_slave_1: left promiscuous mode [ 576.320504][ T6896] bridge0: port 2(bridge_slave_1) entered disabled state [ 576.329089][ T6896] bridge_slave_0: left allmulticast mode [ 576.338611][ T6896] bridge_slave_0: left promiscuous mode [ 576.345046][ T6896] bridge0: port 1(bridge_slave_0) entered disabled state [ 576.362364][ T6896] bridge_slave_1: left allmulticast mode [ 576.370578][ T6896] bridge_slave_1: left promiscuous mode [ 576.381070][ T6896] bridge0: port 2(bridge_slave_1) entered disabled state [ 576.396935][ T6896] bridge_slave_0: left allmulticast mode [ 576.413431][ T6896] bridge_slave_0: left promiscuous mode [ 576.420768][ T6896] bridge0: port 1(bridge_slave_0) entered disabled state [ 576.510184][ T5932] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 576.692393][ T5932] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 576.729933][ T5932] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 576.760392][ T5932] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 576.769435][ T5932] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 576.800694][ T5234] Bluetooth: hci1: command tx timeout [ 576.809468][ T5932] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 576.825866][ T5932] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 576.874172][ T5932] usb 1-1: Product: syz [ 576.878484][ T5932] usb 1-1: Manufacturer: syz [ 576.941069][ T5932] cdc_wdm 1-1:1.0: skipping garbage [ 576.946395][ T5932] cdc_wdm 1-1:1.0: invalid descriptor buffer length [ 576.959768][ T5932] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 577.155679][ T5310] usb 1-1: USB disconnect, device number 106 [ 577.393097][ T6896] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 577.404308][ T6896] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 577.415736][ T6896] bond0 (unregistering): Released all slaves [ 577.613684][ T6896] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 577.626526][ T6896] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 577.637716][ T6896] bond0 (unregistering): Released all slaves [ 577.648046][ T6896] bond1 (unregistering): Released all slaves [ 577.658674][ T6896] bond2 (unregistering): Released all slaves [ 577.671916][ T6896] bond3 (unregistering): Released all slaves [ 577.687330][ T6896] bond4 (unregistering): Released all slaves [ 577.726687][ T6896] bond5 (unregistering): Released all slaves [ 577.758224][ T6896] bond6 (unregistering): Released all slaves [ 577.783333][ T6896] bond7 (unregistering): Released all slaves [ 577.808857][ T6896] bond8 (unregistering): Released all slaves [ 577.819958][T16435] loop2: detected capacity change from 0 to 7 [ 577.832108][ T6896] bond9 (unregistering): Released all slaves [ 577.843677][T16435] Dev loop2: unable to read RDB block 7 [ 577.849290][T16435] loop2: unable to read partition table [ 577.858511][ T6896] bond10 (unregistering): Released all slaves [ 577.869730][ T6896] bond11 (unregistering): Released all slaves [ 577.876270][T16435] loop2: partition table beyond EOD, truncated [ 577.885748][T16435] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 577.892533][ T6896] bond12 (unregistering): Released all slaves [ 577.921768][T16262] veth1_vlan: entered promiscuous mode [ 577.941955][T16410] bridge0: port 2(bridge_slave_1) entered blocking state [ 577.949076][T16410] bridge0: port 2(bridge_slave_1) entered disabled state [ 577.958486][T16410] bridge_slave_1: entered allmulticast mode [ 577.973119][T16410] bridge_slave_1: entered promiscuous mode [ 578.095435][T16310] 8021q: adding VLAN 0 to HW filter on device team0 [ 578.121794][ T6896] tipc: Left network mode [ 578.196411][T16410] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 578.262729][T16441] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 578.281719][ T81] bridge0: port 1(bridge_slave_0) entered blocking state [ 578.288954][ T81] bridge0: port 1(bridge_slave_0) entered forwarding state [ 578.304207][T16441] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 578.397329][T16446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 578.447130][T16446] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 578.531149][T16410] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 578.587862][T16441] netlink: 'syz.1.2405': attribute type 27 has an invalid length. [ 578.605797][T16441] vlan2: left promiscuous mode [ 578.625797][T16441] vlan2: left allmulticast mode [ 578.663580][T16441] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 3072 - 0 [ 578.672959][T16441] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 3072 - 0 [ 578.682030][T16441] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 3072 - 0 [ 578.691004][T16441] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 3072 - 0 [ 578.706474][T16441] vxlan0: left promiscuous mode [ 578.723130][T16441] netdevsim netdevsim1 netdevsim0: unset [0, 1] type 1 family 0 port 8472 - 0 [ 578.732614][T16441] netdevsim netdevsim1 netdevsim1: unset [0, 1] type 1 family 0 port 8472 - 0 [ 578.741883][T16441] netdevsim netdevsim1 netdevsim2: unset [0, 1] type 1 family 0 port 8472 - 0 [ 578.751331][T16441] netdevsim netdevsim1 netdevsim3: unset [0, 1] type 1 family 0 port 8472 - 0 [ 578.772137][T16441] vxlan1: left promiscuous mode [ 578.866934][T16410] team0: Port device team_slave_0 added [ 578.880321][ T5234] Bluetooth: hci1: command tx timeout [ 578.888237][T16410] team0: Port device team_slave_1 added [ 578.912973][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 578.920128][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 578.932793][T16262] veth0_macvtap: entered promiscuous mode [ 578.973629][T16410] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 578.983918][T16410] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 579.014971][T16410] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 579.028164][T16410] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 579.035712][T16410] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 579.063663][T16410] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 579.095805][T16262] veth1_macvtap: entered promiscuous mode [ 579.273547][T16410] hsr_slave_0: entered promiscuous mode [ 579.283437][T16410] hsr_slave_1: entered promiscuous mode [ 579.337148][ T6896] hsr_slave_0: left promiscuous mode [ 579.358263][ T6896] hsr_slave_1: left promiscuous mode [ 579.369472][ T6896] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 579.377811][ T6896] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 579.387302][ T6896] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 579.395795][ T6896] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 579.439043][ T6896] hsr_slave_0: left promiscuous mode [ 579.446425][ T6896] hsr_slave_1: left promiscuous mode [ 579.462669][ T6896] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 579.481196][ T6896] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 579.492150][ T6896] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 579.499942][ T6896] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 579.506056][T16476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 579.545246][T16476] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 579.595662][ T6896] veth1_macvtap: left promiscuous mode [ 579.610255][ T6896] veth0_macvtap: left promiscuous mode [ 579.616132][ T6896] veth1_vlan: left promiscuous mode [ 579.630822][ T6896] veth0_vlan: left promiscuous mode [ 579.644151][ T6896] veth1_macvtap: left promiscuous mode [ 579.649737][ T6896] veth0_macvtap: left promiscuous mode [ 579.657613][ T6896] veth1_vlan: left promiscuous mode [ 579.663494][ T6896] veth0_vlan: left promiscuous mode [ 579.954355][T16488] loop2: detected capacity change from 0 to 7 [ 579.975504][T16488] Dev loop2: unable to read RDB block 7 [ 579.983816][T16488] loop2: unable to read partition table [ 579.989658][T16488] loop2: partition table beyond EOD, truncated [ 579.997599][T16488] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 580.420646][T16496] netlink: 6 bytes leftover after parsing attributes in process `syz.0.2415'. [ 580.438114][T16496] netlink: 6 bytes leftover after parsing attributes in process `syz.0.2415'. [ 580.451255][T16496] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 580.639056][ T6896] team0 (unregistering): Port device team_slave_1 removed [ 580.698022][ T6896] team0 (unregistering): Port device team_slave_0 removed [ 580.880393][ T5945] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 580.963621][ T5234] Bluetooth: hci1: command tx timeout [ 581.031725][ T5945] usb 1-1: Using ep0 maxpacket: 16 [ 581.041869][ T5945] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 581.053821][ T5945] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 581.063303][ T5945] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 581.073738][ T5945] usb 1-1: config 0 descriptor?? [ 581.491791][T16496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 581.530445][T16496] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 581.554346][ T5945] hid (null): nested delimiters [ 581.559332][ T5945] hid (null): nested delimiters [ 581.571475][ T5945] hid (null): nested delimiters [ 581.576419][ T5945] hid (null): report_id 24797 is invalid [ 581.582868][ T5945] hid (null): bogus close delimiter [ 581.588124][ T5945] hid (null): unknown global tag 0x83 [ 581.600420][ T5945] hid (null): unknown global tag 0xc [ 581.620242][ T5945] hid-generic 0003:0158:0100.002A: unknown main item tag 0x1 [ 581.627731][ T5945] hid-generic 0003:0158:0100.002A: unexpected long global item [ 581.640606][ T5945] hid-generic 0003:0158:0100.002A: probe with driver hid-generic failed with error -22 [ 581.976554][ T6896] team0 (unregistering): Port device team_slave_1 removed [ 582.035803][ T6896] team0 (unregistering): Port device team_slave_0 removed [ 582.696483][T16262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 582.708728][T16262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 582.719958][T16262] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 582.733643][T16262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 582.744853][T16262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 582.759538][T16262] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 582.800870][T16497] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 45618 - 0 [ 582.809851][T16497] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 45618 - 0 [ 582.826432][T16497] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 45618 - 0 [ 582.835461][T16497] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 45618 - 0 [ 582.850515][T16497] netdevsim netdevsim0 netdevsim0: set [1, 2] type 2 family 0 port 37424 - 0 [ 582.859419][T16497] netdevsim netdevsim0 netdevsim1: set [1, 2] type 2 family 0 port 37424 - 0 [ 582.868822][T16497] netdevsim netdevsim0 netdevsim2: set [1, 2] type 2 family 0 port 37424 - 0 [ 582.877814][T16497] netdevsim netdevsim0 netdevsim3: set [1, 2] type 2 family 0 port 37424 - 0 [ 582.886831][T16497] geneve2: entered promiscuous mode [ 582.892871][T16497] geneve2: entered allmulticast mode [ 582.916363][ T5945] usb 1-1: USB disconnect, device number 107 [ 582.973786][T16262] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.984831][T16262] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.995175][T16262] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 583.003977][T16262] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 583.043122][ T5234] Bluetooth: hci1: command tx timeout [ 583.167086][T16310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 583.411569][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 583.425725][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 583.663467][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 583.695932][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 583.831767][T16310] veth0_vlan: entered promiscuous mode [ 583.857229][T16310] veth1_vlan: entered promiscuous mode [ 583.943390][T16524] can: request_module (can-proto-0) failed. [ 584.112126][T16310] veth0_macvtap: entered promiscuous mode [ 584.123791][T16531] [ 584.126187][T16531] ===================================================== [ 584.133231][T16531] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 584.140812][T16531] 6.12.0-rc2-syzkaller-00291-g09f6b0c8904b #0 Not tainted [ 584.147808][T16310] veth1_macvtap: entered promiscuous mode [ 584.147924][T16531] ----------------------------------------------------- [ 584.160773][T16531] syz.4.2419/16531 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 584.168517][T16531] ffff88807c52a210 (&new->fa_lock){....}-{2:2}, at: kill_fasync+0x199/0x4f0 [ 584.177267][T16531] [ 584.177267][T16531] and this task is already holding: [ 584.184654][T16531] ffff888028f7f230 (&dev->event_lock#2){..-.}-{2:2}, at: input_inject_event+0xc5/0x340 [ 584.188594][T16410] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 584.194438][T16531] which would create a new lock dependency: [ 584.194450][T16531] (&dev->event_lock#2){..-.}-{2:2} -> (&new->fa_lock){....}-{2:2} [ 584.194504][T16531] [ 584.194504][T16531] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 584.194514][T16531] (&dev->event_lock#2){..-.}-{2:2} [ 584.224419][T16531] [ 584.224419][T16531] ... which became SOFTIRQ-irq-safe at: [ 584.237448][T16531] lock_acquire+0x1ed/0x550 [ 584.242056][T16531] _raw_spin_lock_irqsave+0xd5/0x120 [ 584.247801][T16531] input_inject_event+0xc5/0x340 [ 584.252872][T16531] led_trigger_event+0x138/0x210 [ 584.257899][T16531] kbd_bh+0x1b5/0x290 [ 584.261974][T16531] tasklet_action_common+0x321/0x4d0 [ 584.267340][T16531] handle_softirqs+0x2c5/0x980 [ 584.272183][T16531] run_ksoftirqd+0xca/0x130 [ 584.276768][T16531] smpboot_thread_fn+0x544/0xa30 [ 584.281791][T16531] kthread+0x2f0/0x390 [ 584.285954][T16531] ret_from_fork+0x4b/0x80 [ 584.290452][T16531] ret_from_fork_asm+0x1a/0x30 [ 584.295299][T16531] [ 584.295299][T16531] to a SOFTIRQ-irq-unsafe lock: [ 584.302302][T16531] (tasklist_lock){.+.+}-{2:2} [ 584.302332][T16531] [ 584.302332][T16531] ... which became SOFTIRQ-irq-unsafe at: [ 584.314946][T16531] ... [ 584.314954][T16531] lock_acquire+0x1ed/0x550 [ 584.322106][T16531] _raw_read_lock+0x36/0x50 [ 584.326692][T16531] __do_wait+0x12d/0x850 [ 584.331011][T16531] do_wait+0x1e9/0x560 [ 584.335157][T16531] kernel_wait+0xe9/0x240 [ 584.339561][T16531] call_usermodehelper_exec_work+0xbd/0x230 [ 584.345535][T16531] process_scheduled_works+0xa63/0x1850 [ 584.351159][T16531] worker_thread+0x870/0xd30 [ 584.355828][T16531] kthread+0x2f0/0x390 [ 584.359970][T16531] ret_from_fork+0x4b/0x80 [ 584.364471][T16531] ret_from_fork_asm+0x1a/0x30 [ 584.369322][T16531] [ 584.369322][T16531] other info that might help us debug this: [ 584.369322][T16531] [ 584.379541][T16531] Chain exists of: [ 584.379541][T16531] &dev->event_lock#2 --> &new->fa_lock --> tasklist_lock [ 584.379541][T16531] [ 584.392505][T16531] Possible interrupt unsafe locking scenario: [ 584.392505][T16531] [ 584.400818][T16531] CPU0 CPU1 [ 584.406516][T16531] ---- ---- [ 584.411868][T16531] lock(tasklist_lock); [ 584.416106][T16531] local_irq_disable(); [ 584.422858][T16531] lock(&dev->event_lock#2); [ 584.430061][T16531] lock(&new->fa_lock); [ 584.436823][T16531] [ 584.440263][T16531] lock(&dev->event_lock#2); [ 584.445208][T16531] [ 584.445208][T16531] *** DEADLOCK *** [ 584.445208][T16531] [ 584.453339][T16531] 6 locks held by syz.4.2419/16531: [ 584.458524][T16531] #0: ffff888029bfa110 (&evdev->mutex){+.+.}-{3:3}, at: evdev_write+0x25e/0x790 [ 584.467686][T16531] #1: ffff888028f7f230 (&dev->event_lock#2){..-.}-{2:2}, at: input_inject_event+0xc5/0x340 [ 584.477790][T16531] #2: ffffffff8e937de0 (rcu_read_lock){....}-{1:2}, at: input_inject_event+0xd6/0x340 [ 584.487460][T16531] #3: ffffffff8e937de0 (rcu_read_lock){....}-{1:2}, at: input_pass_values+0x8f/0x860 [ 584.497045][T16531] #4: ffffffff8e937de0 (rcu_read_lock){....}-{1:2}, at: mousedev_notify_readers+0x2a/0xc80 [ 584.507149][T16531] #5: ffffffff8e937de0 (rcu_read_lock){....}-{1:2}, at: kill_fasync+0x54/0x4f0 [ 584.516200][T16531] [ 584.516200][T16531] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 584.526609][T16531] -> (&dev->event_lock#2){..-.}-{2:2} { [ 584.532173][T16531] IN-SOFTIRQ-W at: [ 584.536143][T16531] lock_acquire+0x1ed/0x550 [ 584.542294][T16531] _raw_spin_lock_irqsave+0xd5/0x120 [ 584.549250][T16531] input_inject_event+0xc5/0x340 [ 584.555834][T16531] led_trigger_event+0x138/0x210 [ 584.562417][T16531] kbd_bh+0x1b5/0x290 [ 584.568048][T16531] tasklet_action_common+0x321/0x4d0 [ 584.574981][T16531] handle_softirqs+0x2c5/0x980 [ 584.581388][T16531] run_ksoftirqd+0xca/0x130 [ 584.587973][T16531] smpboot_thread_fn+0x544/0xa30 [ 584.594556][T16531] kthread+0x2f0/0x390 [ 584.600270][T16531] ret_from_fork+0x4b/0x80 [ 584.606334][T16531] ret_from_fork_asm+0x1a/0x30 [ 584.612743][T16531] INITIAL USE at: [ 584.616633][T16531] lock_acquire+0x1ed/0x550 [ 584.622698][T16531] _raw_spin_lock_irqsave+0xd5/0x120 [ 584.629540][T16531] input_inject_event+0xc5/0x340 [ 584.636037][T16531] kbd_led_trigger_activate+0xb8/0x100 [ 584.643053][T16531] led_trigger_set+0x582/0x9c0 [ 584.649369][T16531] led_trigger_set_default+0x229/0x260 [ 584.656380][T16531] led_classdev_register_ext+0x6e6/0x8a0 [ 584.663572][T16531] input_leds_connect+0x489/0x630 [ 584.670152][T16531] input_register_device+0xd3b/0x1110 [ 584.677084][T16531] atkbd_connect+0x752/0xa00 [ 584.683236][T16531] serio_driver_probe+0x7f/0xa0 [ 584.689650][T16531] really_probe+0x2b8/0xad0 [ 584.695710][T16531] __driver_probe_device+0x1a2/0x390 [ 584.702549][T16531] driver_probe_device+0x50/0x430 [ 584.709150][T16531] __driver_attach+0x45f/0x710 [ 584.715492][T16531] bus_for_each_dev+0x239/0x2b0 [ 584.721921][T16531] serio_handle_event+0x1c7/0x920 [ 584.728511][T16531] process_scheduled_works+0xa63/0x1850 [ 584.735624][T16531] worker_thread+0x870/0xd30 [ 584.741774][T16531] kthread+0x2f0/0x390 [ 584.747396][T16531] ret_from_fork+0x4b/0x80 [ 584.753380][T16531] ret_from_fork_asm+0x1a/0x30 [ 584.759704][T16531] } [ 584.762193][T16531] ... key at: [] input_allocate_device.__key.5+0x0/0x20 [ 584.771213][T16531] [ 584.771213][T16531] the dependencies between the lock to be acquired [ 584.771223][T16531] and SOFTIRQ-irq-unsafe lock: [ 584.784715][T16531] -> (tasklist_lock){.+.+}-{2:2} { [ 584.790025][T16531] HARDIRQ-ON-R at: [ 584.794187][T16531] lock_acquire+0x1ed/0x550 [ 584.800713][T16531] _raw_read_lock+0x36/0x50 [ 584.807217][T16531] __do_wait+0x12d/0x850 [ 584.813453][T16531] do_wait+0x1e9/0x560 [ 584.819510][T16531] kernel_wait+0xe9/0x240 [ 584.825828][T16531] call_usermodehelper_exec_work+0xbd/0x230 [ 584.833724][T16531] process_scheduled_works+0xa63/0x1850 [ 584.841276][T16531] worker_thread+0x870/0xd30 [ 584.847860][T16531] kthread+0x2f0/0x390 [ 584.853924][T16531] ret_from_fork+0x4b/0x80 [ 584.860334][T16531] ret_from_fork_asm+0x1a/0x30 [ 584.867526][T16531] SOFTIRQ-ON-R at: [ 584.871673][T16531] lock_acquire+0x1ed/0x550 [ 584.878611][T16531] _raw_read_lock+0x36/0x50 [ 584.885108][T16531] __do_wait+0x12d/0x850 [ 584.891342][T16531] do_wait+0x1e9/0x560 [ 584.897404][T16531] kernel_wait+0xe9/0x240 [ 584.903723][T16531] call_usermodehelper_exec_work+0xbd/0x230 [ 584.911614][T16531] process_scheduled_works+0xa63/0x1850 [ 584.919150][T16531] worker_thread+0x870/0xd30 [ 584.925758][T16531] kthread+0x2f0/0x390 [ 584.931823][T16531] ret_from_fork+0x4b/0x80 [ 584.938236][T16531] ret_from_fork_asm+0x1a/0x30 [ 584.944993][T16531] INITIAL USE at: [ 584.949052][T16531] lock_acquire+0x1ed/0x550 [ 584.955460][T16531] _raw_write_lock_irq+0xd3/0x120 [ 584.962398][T16531] copy_process+0x2267/0x3d50 [ 584.968995][T16531] kernel_clone+0x226/0x8f0 [ 584.975403][T16531] user_mode_thread+0x132/0x1a0 [ 584.982162][T16531] rest_init+0x23/0x300 [ 584.988218][T16531] start_kernel+0x47f/0x500 [ 584.994644][T16531] x86_64_start_reservations+0x2a/0x30 [ 585.002025][T16531] x86_64_start_kernel+0x9f/0xa0 [ 585.008871][T16531] common_startup_64+0x13e/0x147 [ 585.015732][T16531] INITIAL READ USE at: [ 585.020228][T16531] lock_acquire+0x1ed/0x550 [ 585.027076][T16531] _raw_read_lock+0x36/0x50 [ 585.033923][T16531] __do_wait+0x12d/0x850 [ 585.040509][T16531] do_wait+0x1e9/0x560 [ 585.046917][T16531] kernel_wait+0xe9/0x240 [ 585.053584][T16531] call_usermodehelper_exec_work+0xbd/0x230 [ 585.061827][T16531] process_scheduled_works+0xa63/0x1850 [ 585.069907][T16531] worker_thread+0x870/0xd30 [ 585.076866][T16531] kthread+0x2f0/0x390 [ 585.083281][T16531] ret_from_fork+0x4b/0x80 [ 585.090068][T16531] ret_from_fork_asm+0x1a/0x30 [ 585.097203][T16531] } [ 585.099871][T16531] ... key at: [] tasklist_lock+0x18/0x40 [ 585.107764][T16531] ... acquired at: [ 585.111731][T16531] lock_acquire+0x1ed/0x550 [ 585.116405][T16531] _raw_read_lock+0x36/0x50 [ 585.121085][T16531] send_sigio+0x108/0x390 [ 585.125583][T16531] kill_fasync+0x256/0x4f0 [ 585.130164][T16531] lease_break_callback+0x26/0x30 [ 585.135370][T16531] __break_lease+0x6d5/0x1820 [ 585.140212][T16531] do_dentry_open+0x8d4/0x1460 [ 585.145142][T16531] vfs_open+0x3e/0x330 [ 585.149377][T16531] path_openat+0x2c84/0x3590 [ 585.154139][T16531] do_filp_open+0x235/0x490 [ 585.158812][T16531] do_sys_openat2+0x13e/0x1d0 [ 585.163668][T16531] __x64_sys_openat+0x247/0x2a0 [ 585.168694][T16531] do_syscall_64+0xf3/0x230 [ 585.173375][T16531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.179437][T16531] [ 585.181752][T16531] -> (&f_owner->lock){....}-{2:2} { [ 585.187049][T16531] INITIAL USE at: [ 585.191018][T16531] lock_acquire+0x1ed/0x550 [ 585.197259][T16531] _raw_write_lock_irq+0xd3/0x120 [ 585.204020][T16531] __f_setown+0x6b/0x380 [ 585.210018][T16531] fcntl_dirnotify+0x4cf/0x790 [ 585.216539][T16531] do_fcntl+0x7e2/0x1a60 [ 585.222525][T16531] __se_sys_fcntl+0xd2/0x1e0 [ 585.228853][T16531] do_syscall_64+0xf3/0x230 [ 585.235085][T16531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.242799][T16531] INITIAL READ USE at: [ 585.247214][T16531] lock_acquire+0x1ed/0x550 [ 585.254084][T16531] _raw_read_lock_irqsave+0xdd/0x130 [ 585.261537][T16531] send_sigio+0x37/0x390 [ 585.267943][T16531] dnotify_handle_event+0x157/0x460 [ 585.275307][T16531] fsnotify+0x1946/0x1f60 [ 585.281824][T16531] vfs_readv+0x921/0xa80 [ 585.288242][T16531] do_readv+0x1b1/0x350 [ 585.294558][T16531] do_syscall_64+0xf3/0x230 [ 585.301227][T16531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.309290][T16531] } [ 585.311867][T16531] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 585.320796][T16531] ... acquired at: [ 585.324672][T16531] lock_acquire+0x1ed/0x550 [ 585.329343][T16531] _raw_read_lock_irqsave+0xdd/0x130 [ 585.334806][T16531] send_sigio+0x37/0x390 [ 585.339229][T16531] kill_fasync+0x256/0x4f0 [ 585.343811][T16531] lease_break_callback+0x26/0x30 [ 585.349002][T16531] __break_lease+0x6d5/0x1820 [ 585.353844][T16531] do_dentry_open+0x8d4/0x1460 [ 585.358775][T16531] vfs_open+0x3e/0x330 [ 585.363007][T16531] path_openat+0x2c84/0x3590 [ 585.367768][T16531] do_filp_open+0x235/0x490 [ 585.372615][T16531] do_sys_openat2+0x13e/0x1d0 [ 585.377463][T16531] __se_sys_openat2+0x23c/0x2d0 [ 585.382506][T16531] do_syscall_64+0xf3/0x230 [ 585.387174][T16531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.393235][T16531] [ 585.395545][T16531] -> (&new->fa_lock){....}-{2:2} { [ 585.400684][T16531] INITIAL USE at: [ 585.404599][T16531] lock_acquire+0x1ed/0x550 [ 585.410693][T16531] _raw_write_lock_irq+0xd3/0x120 [ 585.417304][T16531] fasync_remove_entry+0xff/0x1d0 [ 585.423893][T16531] sock_fasync+0x87/0x100 [ 585.429787][T16531] __fput+0x71b/0x880 [ 585.435414][T16531] task_work_run+0x24f/0x310 [ 585.441572][T16531] do_exit+0xa2f/0x28e0 [ 585.447300][T16531] do_group_exit+0x207/0x2c0 [ 585.453457][T16531] get_signal+0x16a3/0x1740 [ 585.459963][T16531] arch_do_signal_or_restart+0x96/0x860 [ 585.467072][T16531] syscall_exit_to_user_mode+0xc9/0x370 [ 585.474178][T16531] do_syscall_64+0x100/0x230 [ 585.480320][T16531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.487772][T16531] INITIAL READ USE at: [ 585.492096][T16531] lock_acquire+0x1ed/0x550 [ 585.498607][T16531] _raw_read_lock_irqsave+0xdd/0x130 [ 585.505980][T16531] kill_fasync+0x199/0x4f0 [ 585.512392][T16531] sock_wake_async+0x147/0x170 [ 585.519145][T16531] sk_wake_async+0x18a/0x290 [ 585.525725][T16531] tcp_rcv_state_process+0x1dda/0x4570 [ 585.533174][T16531] tcp_v4_do_rcv+0x77d/0xc70 [ 585.539755][T16531] __release_sock+0x214/0x350 [ 585.546438][T16531] release_sock+0x61/0x1f0 [ 585.552845][T16531] __inet_stream_connect+0x8bd/0xf30 [ 585.560117][T16531] inet_stream_connect+0x65/0xa0 [ 585.567057][T16531] __sys_connect+0x2d1/0x300 [ 585.573630][T16531] __x64_sys_connect+0x7a/0x90 [ 585.580381][T16531] do_syscall_64+0xf3/0x230 [ 585.586878][T16531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.594771][T16531] } [ 585.597256][T16531] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 585.605928][T16531] ... acquired at: [ 585.609723][T16531] lock_acquire+0x1ed/0x550 [ 585.614401][T16531] _raw_read_lock_irqsave+0xdd/0x130 [ 585.620033][T16531] kill_fasync+0x199/0x4f0 [ 585.624624][T16531] mousedev_notify_readers+0x719/0xc80 [ 585.630267][T16531] mousedev_event+0x5ca/0x1390 [ 585.635197][T16531] input_handler_events_default+0x107/0x1c0 [ 585.641257][T16531] input_pass_values+0x286/0x860 [ 585.646360][T16531] input_event_dispose+0x30f/0x600 [ 585.651635][T16531] input_handle_event+0xa71/0xbe0 [ 585.656831][T16531] input_inject_event+0x22f/0x340 [ 585.662053][T16531] evdev_write+0x5fd/0x790 [ 585.666666][T16531] vfs_write+0x29c/0xc90 [ 585.671083][T16531] ksys_write+0x183/0x2b0 [ 585.675589][T16531] do_syscall_64+0xf3/0x230 [ 585.680267][T16531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.686334][T16531] [ 585.688644][T16531] [ 585.688644][T16531] stack backtrace: [ 585.694527][T16531] CPU: 0 UID: 0 PID: 16531 Comm: syz.4.2419 Not tainted 6.12.0-rc2-syzkaller-00291-g09f6b0c8904b #0 [ 585.705274][T16531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 585.715326][T16531] Call Trace: [ 585.718606][T16531] [ 585.721531][T16531] dump_stack_lvl+0x241/0x360 [ 585.726207][T16531] ? __pfx_dump_stack_lvl+0x10/0x10 [ 585.731421][T16531] ? __pfx__printk+0x10/0x10 [ 585.736010][T16531] ? print_shortest_lock_dependencies+0xf2/0x160 [ 585.742420][T16531] validate_chain+0x4ebd/0x5920 [ 585.747282][T16531] ? __pfx_validate_chain+0x10/0x10 [ 585.752476][T16531] ? __pfx_validate_chain+0x10/0x10 [ 585.757754][T16531] ? register_lock_class+0x102/0x980 [ 585.763040][T16531] ? __pfx_register_lock_class+0x10/0x10 [ 585.768684][T16531] ? mark_lock+0x9a/0x360 [ 585.773013][T16531] __lock_acquire+0x1384/0x2050 [ 585.777952][T16531] lock_acquire+0x1ed/0x550 [ 585.782527][T16531] ? kill_fasync+0x199/0x4f0 [ 585.787121][T16531] ? __pfx_lock_acquire+0x10/0x10 [ 585.792149][T16531] ? __pfx_lock_acquire+0x10/0x10 [ 585.797173][T16531] _raw_read_lock_irqsave+0xdd/0x130 [ 585.802454][T16531] ? kill_fasync+0x199/0x4f0 [ 585.807039][T16531] ? __pfx__raw_read_lock_irqsave+0x10/0x10 [ 585.812932][T16531] kill_fasync+0x199/0x4f0 [ 585.817348][T16531] ? kill_fasync+0x54/0x4f0 [ 585.821850][T16531] mousedev_notify_readers+0x719/0xc80 [ 585.827306][T16531] ? mousedev_notify_readers+0x2a/0xc80 [ 585.832850][T16531] mousedev_event+0x5ca/0x1390 [ 585.837607][T16531] ? __pfx_mousedev_event+0x10/0x10 [ 585.842801][T16531] input_handler_events_default+0x107/0x1c0 [ 585.848698][T16531] input_pass_values+0x286/0x860 [ 585.853632][T16531] ? input_pass_values+0x8f/0x860 [ 585.858665][T16531] input_event_dispose+0x30f/0x600 [ 585.863869][T16531] input_handle_event+0xa71/0xbe0 [ 585.868893][T16531] ? _raw_spin_lock_irqsave+0xe1/0x120 [ 585.874437][T16531] ? __pfx_input_handle_event+0x10/0x10 [ 585.879986][T16531] input_inject_event+0x22f/0x340 [ 585.885004][T16531] ? input_inject_event+0xd6/0x340 [ 585.890111][T16531] evdev_write+0x5fd/0x790 [ 585.894520][T16531] ? __pfx_evdev_write+0x10/0x10 [ 585.899540][T16531] ? bpf_lsm_file_permission+0x9/0x10 [ 585.904908][T16531] ? security_file_permission+0x74/0x280 [ 585.910540][T16531] ? rw_verify_area+0x1c3/0x6f0 [ 585.915387][T16531] ? __pfx_evdev_write+0x10/0x10 [ 585.920324][T16531] vfs_write+0x29c/0xc90 [ 585.924579][T16531] ? kmem_cache_free+0x1a2/0x420 [ 585.929687][T16531] ? __pfx_vfs_write+0x10/0x10 [ 585.934443][T16531] ? __fget_files+0x29/0x470 [ 585.939029][T16531] ? __fget_files+0x3f3/0x470 [ 585.943698][T16531] ? __fget_files+0x29/0x470 [ 585.948369][T16531] ? fdget_pos+0x19a/0x320 [ 585.952780][T16531] ksys_write+0x183/0x2b0 [ 585.957103][T16531] ? __pfx_ksys_write+0x10/0x10 [ 585.961946][T16531] ? do_syscall_64+0x100/0x230 [ 585.966700][T16531] ? do_syscall_64+0xb6/0x230 [ 585.971369][T16531] do_syscall_64+0xf3/0x230 [ 585.975864][T16531] ? clear_bhb_loop+0x35/0x90 [ 585.980537][T16531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.986431][T16531] RIP: 0033:0x7f6495b7dff9 [ 585.990843][T16531] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 586.010530][T16531] RSP: 002b:00007f6496a07038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 586.018941][T16531] RAX: ffffffffffffffda RBX: 00007f6495d35f80 RCX: 00007f6495b7dff9 [ 586.026916][T16531] RDX: 0000000000000918 RSI: 0000000020000040 RDI: 0000000000000007 [ 586.034882][T16531] RBP: 00007f6495bf0296 R08: 0000000000000000 R09: 0000000000000000 [ 586.042857][T16531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 586.050826][T16531] R13: 0000000000000000 R14: 00007f6495d35f80 R15: 00007f6495e5fa28 [ 586.058806][T16531] [ 586.113816][T16410] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 586.127993][T16310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 586.138880][T16310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 586.148989][T16310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 586.195141][T16310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 586.261133][T16310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 586.279351][T16410] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 586.288123][T16410] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 586.308051][T16310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 586.323068][T16310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 586.334710][T16310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 586.345503][T16310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 586.387057][T16310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 586.420757][T16310] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.429967][T16310] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.445686][T16310] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.455139][T16310] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.504317][T16310] ieee80211 phy107: Selected rate control algorithm 'minstrel_ht' [ 586.529328][ T81] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 586.543602][T16310] ieee80211 phy108: Selected rate control algorithm 'minstrel_ht' [ 586.555106][ T81] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 586.586838][T16410] 8021q: adding VLAN 0 to HW filter on device bond0 [ 586.601222][ T1059] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 586.610358][ T1059] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 586.619753][T16410] 8021q: adding VLAN 0 to HW filter on device team0 [ 586.645427][ T81] bridge0: port 1(bridge_slave_0) entered blocking state [ 586.652679][ T81] bridge0: port 1(bridge_slave_0) entered forwarding state [ 586.678109][ T81] bridge0: port 2(bridge_slave_1) entered blocking state [ 586.685269][ T81] bridge0: port 2(bridge_slave_1) entered forwarding state [ 586.716880][T16410] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 586.748642][T16410] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 586.779712][T16410] veth0_vlan: entered promiscuous mode [ 586.792725][T16410] veth1_vlan: entered promiscuous mode [ 586.816118][T16410] veth0_macvtap: entered promiscuous mode [ 586.825170][T16410] veth1_macvtap: entered promiscuous mode [ 586.841679][T16410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 586.856293][T16410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 586.866201][T16410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 586.877209][T16410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 586.887638][T16410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 586.899186][T16410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 586.911278][T16410] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 586.922662][T16410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 586.933563][T16410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 586.946716][T16410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 586.959776][T16410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 586.980122][T16410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 586.992064][T16410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 587.003375][T16410] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 587.018225][T16410] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.027339][T16410] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.038464][T16410] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.049419][T16410] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.082900][T16410] ieee80211 phy109: Selected rate control algorithm 'minstrel_ht' [ 587.101012][ T1059] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 587.102264][T16410] ieee80211 phy110: Selected rate control algorithm 'minstrel_ht' [ 587.114354][ T1059] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 587.135424][ T1059] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 587.145454][ T1059] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50