last executing test programs: 10.945861431s ago: executing program 1 (id=1084): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x2, 0x0) write(r1, &(0x7f0000000000)="240000001e005f80004000000000000002000000000000000000080008000100000000ff", 0x24) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000900)={0x2c, &(0x7f00000007c0)={0x20, 0xf, 0xf0, {0xf0, 0x22, "14769d5dadf823f8fee524865655f44323803864797504ba247fb18c0bbcdccdc936824aff6304a1c4843f29161d921cd07e04847758ad831087ac8411c45d0ef47f4bc7c70ff3b12b8a3bf8872c27d1cae6302c879f1fb9c937a0ba71920b62c8106021272d070b840f64363c99e1c53a2968a98b8933a8c10fee091b638e2adeb2a72c20594bb55126b37d65ba2e0bd5ece1529fb79dcb20817ec8628428481442d00b850bb320c71aa8eaaf2cc30c9044df76fcf69cbd48256a72dc80c6989def1339cc31839b93e9f06fec697d06b6dfe655f32f85d1eae7cc3409ba1760b06b82a5020c343b41a0fa946226"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="3000000004070300", @ANYRESDEC=r2, @ANYRES32=0x0, @ANYRES32=r1], 0x30}, 0x1, 0x0, 0x0, 0x20048041}, 0x20004000) 8.63973986s ago: executing program 1 (id=1092): syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) r0 = syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x78) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_usb_disconnect(r0) syz_open_dev$evdev(0x0, 0x0, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000040)="e2", 0x2778) syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 7.014620902s ago: executing program 2 (id=1100): syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000001300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ptrace(0x10, r0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="02c800040000000100c77b2876d2bfb2d26dba4006cd91156834dfbd3029d09475b55be7425aa8ca43baba352119969c406d256e3a8ee9aadf61c639cb00054c2781fed5eeac96dcd328ffc27cb006595324fe16dc5ff2a95813f3127d3259fe5aa696b2176e2dd19d3e1aadc3604a10cd0749105fb783f7ab07522fc8e5adfa434d73abf667991e125ff4"], 0x9) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x5, 0x5b, 0x43, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x36) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = add_key$keyring(0x0, &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000080)) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f00000000c0)=0x40) poll(&(0x7f0000000140)=[{r2}], 0x1, 0xfffffffe) add_key$user(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000580)="4319e2aabc1e4a13e696a7f0d7557242d86bf77f9c16bad3035548f5cdb5bc12d17a90b4063934ce295fa65c2323953d5e52a3ff4c543f094d35b793ab9f722d816203247e4fb54ca97d0053f1606f9fe21d35d3b25e2c3a713579039c1ea1f53aaeabd7b902297b5fd3dccd0b11db742f0e5a832b3adef3a6eae7952cbf3874ef323373b5d03e736994b6eef1e78e566d8c", 0x92, r1) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x4000152, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0xfffffe47, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="280000001300f5d1020000000002000000000000", @ANYRES32, @ANYBLOB="000000000000000008000d0003"], 0x28}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="020000000400000009000000dc0c000000000000", @ANYRES32, @ANYBLOB="000000000000002d8a433dcfd597010000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r5, &(0x7f0000000000), &(0x7f00000000c0), 0x275f3b0249a66392}, 0x20) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) 6.250890865s ago: executing program 3 (id=1105): r0 = socket(0x2, 0x80805, 0x0) listen(r0, 0xfffffffe) sendmmsg(r0, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[{0x10, 0x84, 0x10000}], 0x10}}], 0x1, 0x0) 6.210782082s ago: executing program 3 (id=1106): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002300)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000700)={'#! ', './file1'}, 0xb) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x22aa000) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0xe3, 0xdd, 0xef, 0x20, 0x1d50, 0x60a1, 0xa14f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x9d, 0x14, 0x4e}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000140), 0x0, 0x0}) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f00000009c0)={0x44, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000840)={0x44, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)={0x40, 0x31}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r1, 0x0, &(0x7f00000008c0)={0x34, &(0x7f0000000680)={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040e24e1560c"], 0x27) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x1}, 0xc) setsockopt$MRT6_ADD_MFC_PROXY(r2, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast1}, 0x0, {[0x691]}}, 0x5c) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x5f) syz_open_dev$dri(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) vmsplice(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x4) r4 = socket$isdn(0x22, 0x2, 0x26) bind$isdn(r4, &(0x7f0000000080), 0x6) 6.145388129s ago: executing program 1 (id=1107): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0xe, 0x2) r1 = syz_open_dev$video(&(0x7f0000000040), 0x7, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/cgroup', 0x0, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = dup2(r2, r3) getdents(r2, &(0x7f0000000180)=""/161, 0xa1) getdents64(r4, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000300)={'team0\x00', &(0x7f0000001640)=@ethtool_cmd={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0xd3, [0x1]}}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f0000005640)=0x2, 0x4) setsockopt$packet_tx_ring(r5, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x4000006, 0x8000, 0x4000006}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r6, 0x5452, &(0x7f0000000300)=0x208) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) setsockopt$sock_int(r6, 0x1, 0x7, &(0x7f0000000180), 0x4) ioctl$sock_inet_SIOCSIFPFLAGS(r6, 0x8934, &(0x7f0000000240)={'erspan0\x00', 0x4}) sendto$inet6(r6, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) recvfrom$inet6(r6, 0x0, 0x0, 0x10020, &(0x7f0000001340)={0xa, 0x4e20, 0x1936e1a0, @empty, 0x3}, 0x1c) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f0000000340)) sendto$inet6(r6, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) shutdown(r6, 0x1) recvmmsg(r6, &(0x7f00000014c0)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)=""/57, 0x39}, {&(0x7f0000000ac0)=""/220, 0xdc}, {&(0x7f0000000bc0)=""/98, 0x62}, {&(0x7f0000000c40)=""/89, 0x59}, {&(0x7f0000000cc0)=""/98, 0x62}, {&(0x7f0000000d40)}, {&(0x7f0000000d80)=""/227, 0xe3}], 0x7, &(0x7f0000000f00)=""/208, 0xd0}, 0x1}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000025c0)=""/4096, 0x1000}, {&(0x7f0000001580)=""/168, 0xa8}], 0x2}, 0x7f}, {{&(0x7f00000010c0)=@nfc, 0x80, &(0x7f0000000600)=[{&(0x7f0000001140)=""/133, 0x85}, {&(0x7f0000001380)=""/209, 0xd1}, {&(0x7f0000001280)=""/46, 0x2e}, {&(0x7f0000001680)=""/237, 0xed}], 0x4, &(0x7f0000001480)=""/37, 0x25}}], 0x3, 0x40010163, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001980)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_GET_DEV_STATS(r6, 0xc4089434, &(0x7f0000000640)={r7, 0x9, 0x0, [0x2], [0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0xe2, 0x4, 0x0, 0x0, 0x8, 0x5, 0x0, 0x0, 0xa0, 0x1000000000, 0x14, 0x5, 0x0, 0x1, 0x100000000, 0x1, 0x0, 0x0, 0x0, 0x1efc, 0xfffffffffffffffa, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x8000000000000001, 0x0, 0x0, 0x0, 0x0, 0xe97a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x8, 0x3, 0x7, 0x0, 0x5, 0x3, 0x800, 0x0, 0xfffffffffffffffd]}) ioctl$BTRFS_IOC_DEV_INFO(r5, 0xd000941e, &(0x7f0000001e80)={r7, "6afbaeb308877313225ff8c934a34a5e"}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000880)={0xb, 0x5e3844bd5ef35053, {0x5, @struct={0x2, 0x3}, r7, 0x7, 0x0, 0xffff, 0x8000, 0x5, 0xa8, @struct={0x20, 0x32}, 0x6, 0x5, [0x4, 0x80000000000007, 0x0, 0x5, 0x4, 0x5]}, {0x0, @usage=0x5, 0x0, 0xffffffffffffffff, 0x100000001, 0x2, 0x134, 0x80000000000000, 0x80, @usage=0xffffffff, 0x0, 0xff, [0x80000000, 0x6, 0x5, 0x9, 0x3, 0x1]}, {0x3, @usage=0x1ff, 0x0, 0x400, 0x20, 0xdf0, 0x7f, 0x6, 0x20, @struct={0x1}, 0x1a0d, 0x4939afa6, [0xfffffffffffffffd, 0x0, 0x4, 0x1]}, {0x0, 0x9}}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f00000001c0)={r7, 0x4, 0x0, [0x7, 0xfffffffffffff919, 0x3, 0x8001], [0x7d3, 0x3, 0x7ff, 0xffffffffffffff42, 0x7ff, 0x9, 0x4, 0xffff, 0x8000000000000000, 0x3, 0x3, 0x8000000000000001, 0x11c0, 0xff, 0x1, 0x8, 0xf52, 0x1485, 0x6, 0x200, 0xffffffffc1d67abe, 0x10001, 0x4, 0x3ff80, 0x2, 0x2c, 0x100000000, 0x20000000, 0x0, 0x100000001, 0x7, 0x63, 0x1, 0x7c4a, 0x8, 0xb3, 0xfffffffffffffff8, 0x9, 0x9, 0x4, 0x9, 0x1, 0x0, 0x5, 0x5, 0x800000000000007f, 0xc36, 0xfffffffffffffffb, 0x5a2f, 0x3ffffffffffd, 0x40, 0x9, 0x5d46, 0x9, 0x9, 0x1, 0x100000001, 0x5, 0x9, 0x0, 0x7, 0x1, 0xffff, 0x6, 0x9, 0x3f, 0x100000000, 0x1, 0x8, 0x7, 0x0, 0x6, 0x2, 0xfffffffffffffff8, 0xfffffffffffffffd, 0x80, 0x6, 0xb7, 0xfffffffffffffffe, 0x0, 0x7, 0x3, 0x6, 0x2, 0x1, 0xfffffffc, 0x48b9, 0x1, 0xfff, 0x7, 0x3f, 0x1b4, 0x4ef, 0x683e, 0x8, 0xa31, 0xa952, 0x5, 0xf29, 0x2, 0x8, 0x1, 0x3296, 0x3, 0x1ff, 0x9fb1, 0xc9cc, 0x400, 0x8, 0x7, 0x6c9, 0x9, 0x7fff, 0x1, 0x3, 0x50, 0x0, 0x3, 0x5, 0x6, 0x2f]}) ioctl$BTRFS_IOC_GET_DEV_STATS(r3, 0xc4089434, &(0x7f0000000240)={r7, 0x100, 0x0, [0x7ff, 0x6, 0x7, 0x1], [0x800, 0x3ff, 0x100000001, 0xff, 0x4, 0x0, 0x2, 0x4, 0x101, 0xb, 0x400, 0x10, 0xffffffffffff88ce, 0xfff, 0xf, 0x6, 0x9, 0x4, 0x0, 0x1, 0xf2bd, 0x2, 0x9, 0x7, 0x2, 0xfff, 0x8, 0x1, 0x5, 0x3, 0x7, 0x0, 0x2, 0x8, 0xffff, 0x9, 0xc8a, 0x9, 0x7, 0x2, 0x5, 0x1, 0x2, 0x2c41, 0xd9c, 0x3, 0x6, 0x80, 0x80, 0xa719, 0x5, 0x8, 0xff, 0x1, 0x3, 0x800, 0x32, 0x400, 0x5, 0x200, 0x8, 0x8, 0x8000, 0x9, 0x32b, 0x9, 0x2, 0xf, 0x1e0180, 0x8, 0x8001, 0x3, 0x0, 0xff, 0x29, 0x2, 0x0, 0xa, 0x81, 0xbb8, 0xff, 0xfffffffffffffffc, 0x101, 0x6, 0x6f5a, 0x2, 0x55, 0x6, 0x8, 0x8, 0x7, 0x0, 0x81, 0x6, 0x30000000000000, 0x3, 0xffff, 0xffffffff, 0x4, 0x9, 0x5, 0xfffffffffffffc01, 0x8, 0x0, 0x6, 0xffffffffffffffff, 0x100, 0x638, 0x7fffffff, 0x3, 0x3, 0x8000000000000001, 0x3, 0x1, 0xffffffff, 0x7, 0xfffffffffffffffd, 0x0, 0x2, 0x3, 0x2]}) ioctl$VIDIOC_ENUMINPUT(r1, 0xc050561a, &(0x7f0000000080)={0x1, "94a246be445c947bccfb632ec629e361f43a16d680ec57dcceaa2e5ad4b41542", 0x0, 0x0, 0x4, 0x80008, 0x4060000, 0x2}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000000c0)={0x4, 0x1, 0x1, "653258dcd471889cef26efd66a15db7795d5ac7ac4ba4b0be3b243a94a3d96a6", 0x3147504d}) 6.069587213s ago: executing program 4 (id=1108): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000005c0)={r0, 0xffffffffffffffff, 0x31, 0x0, @val=@iter={0x0}}, 0x43) 6.057628017s ago: executing program 2 (id=1109): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1008, 0xc}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_LACP_RATE={0x5}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x1000000000000000) 5.887607055s ago: executing program 1 (id=1110): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x55, 0x20000040, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x0, 0x0) syz_open_dev$media(&(0x7f0000000100), 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$ARPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x63, &(0x7f0000000180)={'IDLETIMER\x00'}, &(0x7f0000000280)=0x1e) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) getrandom(&(0x7f0000000600)=""/274, 0xffffff4f, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x200000, 0x1000}, 0x20) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) rt_sigprocmask(0x2, &(0x7f00000002c0)={[0x3]}, &(0x7f0000000340), 0x8) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000300)='veno\x00', 0x5) mkdir(&(0x7f0000000100)='./file0\x00', 0x24a37189c6b1afd9) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r4, &(0x7f00000077c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000004200)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x207645a}}, 0x50) syz_fuse_handle_req(r4, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r6, &(0x7f0000000380)=""/186, 0xba) syz_fuse_handle_req(r4, &(0x7f0000002140)="3631f6d86aade8310e71e0e236c470ade3e9b07a8faa2aeef1e4e19a5329657abcd5ef2d09756199ae635e0fca96f996be7076cd2a3995103d5a9eb88fbf21b823c854f068ec813b9136bbaf3575ecfc2507aa63b15161b1fe564fcb63f35beb25a1ac1b885decd8d97b9749fa95190fa18501d6897a912e53c669b305312615ad93b2e424dc155c164fd766c139554b6a7a7876180f869963f1de26a8e93f3557624d19228177c32368186313d76d30218a5222c2be11017b8dbb230cc3a9355d930a45d925c91a69eb4a7e313983f778b2029ee1c64fec7f5e280907a443a39e93db6193822e3ebcdba1143d236d6ed0ef8589bd238ef4a7c5c1327a8f1d29be16f5b4b3ec54653619930c4747953a9ffb95de257fbcb44573edc6bf6d65004697a96ebd618d4ef26b312b58663ae91d964ae942769430ce5687e800d1982f6d9add3584562041d45eddefb96d996adda9143ac5cf2b6a5c86cbaa00dff5820e2ddf2f96014c3654b8e0834d0523d3ee5443e949910d78ebfe4ff4e8ebb5563ee9f2011cf3a1793578479cefc227ee3ae320b387a7249de223aa8cffc4800ea707a9810bf5a72c28e30824afd27663ec49be0a28ce420f175dff67a59b017f39c328f1fa6bb91f3596ae0bffb8237acc6083c1a3bef656c50673b0845f7c70d8ed515ebf0f41f1a23e8a2166624be59a7b7cc358a6a1db3838cf130b86b19c24845c36da41d05189dd9499e97966f33d83e4fec8c5b3d47e497c4283dc81e601ecc616271d54d6714d9edbde9416249924aa6499ada5576469ab462b2e34f3f3bf1db3c12774b37f2976018e2cd2be3b6e473745a78dca47cbdd44f604a1cf9bd4827ee7ad003adb3c68026e718cd86cbea86fdac1f03e1b355234adb37fe0a8de824c5faa2bbcdb4a0d198be28273c7b4b61c3bb203ded3d431d75b107a4ab78fd4889f08e3b5d39dd2e002ecc1a616516a5bd26ca7a68377ae6b170bbd9c059864476714a61b8aaea6fafcbfaaa2053a9ab26c8b9a0de59f4ab43d26ced00d7f44a79db81a0da59d6d35e9d9abe7eb51636a6e46a9a5e28164330aa598a247e8959f45d069c443509ce2eb79b6d22676a71ef4eb434cdf4501a15c93aec48747c9be2392df1cbfc8c8ad7b07d3f999038aa7dc770ad3359956a57f2138b5b774863ee6c7ec6133057ee86a989c05e37949dad64f1b1c78415cf190ac5591d43022fa23990dc3e3dad7258b8b3f40cb31b2a8fda36246aec8022770d471d270152d65d16710e3a94c61aa9be79c9d76f3c7c4c3f3dbfa1263320deb2312ef0ea4ea3b725bf4d83db0c3ea44f57b58f4cbc99958cb723f3b9f47d3bff76ecfd3f581015d1fa3fc5e63fbfc703bdeabf04882add9758d9219d9a38fe5b116e98cf83bb6a50d04cf862c3b3a76641409b42d32cc4fc156fd30502a6dfa6ae852ef95d26f601572d188eaa51405810984ec06f2bd6d87df812242b7417decf8ef964f68a28aae0b79e38e50005a7f0d7b240a096c7c1ae8a52333784c0df877abe6eb6249b71d68ac11c0bbbd08cb06d2303338dfe488a3249a0318896e1b35c18a40af231ca7a1a5fa0dda466af7a09215b82febbfd66d8b0c601c5a010c72402c9147dac5517ad3934ca4e0bc86f80bf71a79c61276bf744d54938cd8cfdb905d93a788eb38a75b238964c139bde24d5e55db2fe3ff253ba31bf5b9efe6c4172c764ab04659054e7ba3a1b6444bd0db8e7b655cc34e5dbe31b098a8aff01b878a7295e158043168dc27f32e726725dd9e43147669a9ecd8a4b703974af1aecb9888b6d1d53276299a02302c59bb10fea459f1a5db08bbf5493755bd20c31d0e1d504e5ad214a36a30c93cb301288ffe2a3001d42d25bbf0182d428e2628501afa69b1a62496278e4390686226b8e063fd4a55d08f60c24b2d76f4c662a06e4ebac5d37eaf4e4de67436e5040224ed5c38315fa30f5ff381eafbaf36d918bb27dade76527d9ff32d53d40d9862d5060b44b6392351d025af6de9f22402f43baf807e58608efed8f279cb3cfd2575d5bf09a66e7dd80754209c807bf56d8f4eb67e8150ffc8f0c209157a4080452f279048df1e4753a99fb3177ecb118ab61e40f0bce136c3d331060b935b33904b8e927b513759d534fe44cb0f35de5285573382887e87d15d822a8967a2488cc549a29761210f9d4871b2c8e2d5ef24c88be4f4265b4ec47f0419594434c6f8ff6f0e569ffe27cf5fa6bc44d359226517111cf665e7a6e232f4411d5367b9f23b3204482c3501687a9458de6dfd63cc0f0bcff8cfb9b5e602324b35d38bf9486c245a55ad8341068fcf6f292c7863f1fb1484aca0d3ea511ad9d70f3bfb09b6e793df31e44af36d66451660cc211b90da81ecf6a700f041ba7c376f28a6faef08c66ce3b95e3de9322372f59255aa185b375fffb8c98a247aac4f2d77c6e5ed0d22646fad6c10d6367ccf6a32d5428db770542190bae499cd7c3200bb5f879883c1165b6a83f4ac82477e5a9e2034036bdceb2522da22917c8f22ce30d06e9b34d2b5895eb76187f79825457e21922f51dd7619e1116868a296ed556a991a3bf4a31a5f59821e9c213d36caf2ede3b71487f981ec81572c01c883e33702cb8a8af5af5f0bdc5150cf0b99f921eab2aaa107ca8dfffe0b33dfa42e5b0e9a561fdc0eb029e97495bea1f87b838b90abbc657b42aaa3075655a9f9003866e07a8c80fa3eb4ad75010f0d0bf10552c9223206028e48e38b6f8a95f488a7c92e48d3713d7e374b788f510405aaad63ef099a5e578131b7370d8b361998a9db9658cf06b870905f5bd8ea18fb974addaea0fea834fd42e600eaafc963cfa478ca371793c2b40b5bb30cb4be7de91cf2e0617cd4334294b3cb12f38575c14a979b46a9d82ae59194a0b32ae69c2ca349263efeeaeb5037d95d80524a01aea085ff66c156e12556382965110756ad6b217b24d0593494d7418f46f1cd2848ca25267d2f45a6024ab845568b2a46949218165450e1be7738de92aeaed2f994009b6a7778f4439e2baf0e9b53a5916d1130febe1fabc002d684383914c2bb51c0b75289ab2c74d2e1a9cbd6b6fc653ed4918945919e9df0a49c545734044e29456c0bbb5d640b4bba7ee4f3ea1eedd3f6a42cfa57df40364ef0015e9183503b7e395d3776bfb8ac2eb4f83e9d5ba543c4213f8754e48a6411644aadf3c3f00bd246e66487928866e18cd96d51f5e0c49cc5935b119880b85c0b4cf5c631f5ed12c3eccf6a434016fbf2f0b44416f86b539f41b3a2e1372a9d5b1ec52dd735caa4692f134c204e5afea4e933b7ce196ce075c78d1d31ab03b5101cc2338e3a5769caa813a792708ffe5a353cc9384c83e6ea5929e90b31cc2525dbd6d21b4d14c46387b288239747d5ef4019a647f73e12222e9ac8556a5d803d18773eea92e7d7ab4b39b2c2c5205b59a2d55b52f98544ae9b0a9d3225f5be6200f7d87e7f4975d65d13d0874efcfb80eda4263f9d484b301fb65c642e994ab98917d38e4c48e290fb4cd6658f6920c386bf0089ffd3c70ee51a9df1016350350b4de7975bdea9a49bcc084e223f12866659bafeb5f55d9b68186a8920d1496cfb6302467d878dca0e67cc4f16b704d59a9df9ccdca35102cd872dc1c471ce33007cea5daea146eaf811ba5a52c88af93309de296e80a752092dbb811d9141fe8e99fd1b9ebde4aaacde20e0e6b65e691cd181b1775749492c25e7dad40443c96c28c23ef9971a8230030214f1c360c5d805bd6f48f05eeaa2869c7374cf2133709264a7f597c31188eff1a97bc095a9a3297e9498fe0853cf1b93e7569c61eb9f93a2839bc3ab6a2bcb50443470ae03b88c221e1212628b2badf58efe86db8e2e9c761fd49ee4b5a798aaa0035a485954ddbc65fc5e79e04e1af7976866ee59fc9b82bbdbbf8b1a98904612c3e20c1c0cc14a4dd5306f32ea2d6aa63fc6dc66de9b5d0927fb626857c57d76d5db4f2d60e681f019742cbac566460c8565a805342c204a075addae3a4446e66ef326c6719ed790a073c286724cf544bf632dd4a726ccce3440c68eb691c043e7fe1d1b6ce08fdedf3a837705be77a19843c1aa5fe302779e8a1b3619966828f1d0f7347db13fbaa94d375c36d2e53a3f8e1e7f8b05dcf239ec5a8dfdefa6ebce72730b6728607d13d50d8b9ea6219cac30d1b26cd6b7b9eb01c8b16776ae037755f7972868ccef0682ad049315d781105a9589da8ba86f33d775ea3db3d18dd5d4761ba8d4e36e5de7c0124f70ed14fe839860d093c74f4cd409c41a01dcbcb7c3bf902e57ed7b411f6d272436c26c0881450d13e53fc9974b06cd45bab4b8a23a47c90b04dbfb52722c811fb42aac0f1f95d9453375ce38fb0428069cccd676a6282fc534b6201ecf69c2c9d8354849bf2932145835336e4a175e527b9b1884d2ea932d622582c391dc2ea7211be114316b197e6f260d666c0492ded20d8e599d185c4859afdf1bef8ce8be47582c9abf03f8b1680fed5bf0382f6ef02d3702c9885288692e4b72e13e64bbb970c47d107002a46543ff3bf880ba6abf8608520b9aee83ee872f10354bf5d64e508208bb1e64bfeaa7c6862104de089529c84471206d8f97faf16092c11870da27455cf708e7ad0c7cd90621f84902401a69d5942d3b8a4f27604d5527d8e0aee9335919af5f24d0db883eec8a99f3747af7dcb685fe9a360452dcf9d7317b3b48b33f7ec875668124af9a3628d419c9552d065879e9b70298712db1dc5342fe33343d64ff25ca47f092dfaae901520feaf92b56db36f35ea50b64de7d028bbc21dadf6038c82f8b6b4c7e25fa33f42497f0bc645ecbff005f40819327caf825de93f302a34c8968a3b739f89ec72c042dc720c086749689f8b0611e77aa7c6335ed9b309e2f785538638b396ff5f57bfd58c29a2bdde233432239bf6f8578e1611e4b14b5f9d1866626ba2b6c658b3e76415200f09c15fea45014be7e3ab0edd0685763f0ab736c8934ddba20bf0717c6f6b7cf026f0f0e8990af13ac97ef24ddc69aa7469a114208136216078e4f8eb2618850b0d7c7f1c0e20becf11daecbf68b5171405f8942a6382952e415e54cc81e88b69970494af082965b48774407de53b19eb94a7d7f51e5453776f7551fbbebf8fcf52d7cb8c332b24dd10d38147cf27a7064ef1b33283d566babc3bc4075c415262a43cd0a87bdbfaaa719e81fd0a710513ea4fe74cf983c86bb2e66c5fc55391c3168814088c186a2ba679f624d768649f39acdccbd67fa797cc925177bbabf85c4cc919ed8fbf467681616115d11892eb4aa4c0940aa8f3e524e57866fbabc6471fd528165811547142aace46b100156f8a10524ecff414cedec2bde24d232dfb57915a2b7fc151c1edb7878db430628d1a7d5520dc5882fcd1657752c2fd23495ca8999721849ad0bdedd9f10ba1ca7b470c16eb747030fcaf9b3d8933bfd71dfd0f6843306caeb6a55ef0d912415919d477dc623f7a38fa44ab85e70b3e8dfd94499a4df9e3b6d1056a53e531404a85b19fe5841021f3ce6c582b30c58a9006efe251f8504372d9d26fe04f3b542de9b91c5f1b921f4e77ec1e23d4dd7ff8a3bf5a697e6fd4a18d9fd2c99f939ba3941fcb072d2686b6fa40d77895b78cd617fe6f973d72146787b078647f25b1af74ef358fdeb5621ef9b5c3bae021976e8f9b4abac49c23db6084a74361962bc5fb1fb66f5389f7ab30e412fd9ab8cd187cb8f2afed54d1eb8f66a5061cbbf02d00f2ecf4d0542358511145775d09ede3105b3db18744685f7b546f8b8947844872e6750efbf2c44b512971d54e163bb0c44ca6e65bfcb05824a7be78341eb9eed1d523c80b811c1eaaa716cb60348f31701ad550756d20b5027936f95250a5b2e7aeb86a1b841b443fc5fe4579fdb65b57f230abf3a4cee105a9590793e5dc9e95ff841cb57af561b438372c6237c6bdb4fe5dbb673507c3c5fc3c9c191ff76b9d4b874f77d2c34c0102f1de884f236af66beb473a484b53d7ddc22f37cd6e831509b1a22b02e8cf13b3747fc0c0781453b1bfddfbbaa00c908837c0b55126bb48cf8287a448548f8e56e0f708c537feec8323befb7be42351aada37c5032d6c521985ce765d0c69a811c81cc1b8a45c79da1cca749faaa9d9b2725b4875acc92db52bc1cc30485d7460dcc677350ddb68580e9b671d57458dfbe7b8865e2b9b4ae49ef5b650118f36f76590c5674cb536732f5f47cce2de0c623ea48fa0a71c5bed6ff63ccde01d9677e089bc5f73ff1f80385f9ba02efc021dafef412bc831a254092c2063e5cb90a0d6d24b43bcfa8b9567c75d1219ac171329004eb380d0922ccacfead17df21871821397579de50fd6d5d5496b99a4416b66d70fc899a92c96416f576c3c09c0300902e4b25d6572f76ba9f26e75c29183a3c3bb14ee61dd6000db701af927f8aebc1c9e3559ca7aa33900f788f9e22f6120809aa478cc0ea78a40d58232ee6429237fff41d9355ab1b0b3308ab4841a108647427368293baf59eb7fe6be945fad7d527cefe43c54686ff06de00ba8d22ba44e6ca30af8eb1ec762255eb8882990e982715376a8443d847c4a883b90f5dbfd725cc5944da81367ffa37b2533ef41e99bae6d83c777899ef74aa52d6b71f5f379d140a7f6d5949f34526ffb701573e2fe058cdc9c7e593a6528e0cc0a635f291af0f5229ecfbf6d63586930c4533dde9944ddf500eb678d302d1b96707b4f6ae4644d0a8583c840f16954bfc96a3fa0d0d4c623e19b5d423504264d41a329379ce8c150e364f7041124f7d039fac8b015fb81d2a3503b1b780077eecf24253ac53c8590e71601f2b0d3bac4fae5114fa8cfce0f6f37e9eec49920e60abc36485b3d6dd4fe4f1c53dbc62959d8378e904707ca97cbdaeb7d45a62ff34f2c977e22b3a3ab3cfbd6f01448b27f9a0fc322bd039491e77c1eddc2de09820a3303d8be959ebfc8c1d9fc0ad946f1d3b2bdf8cf3b01120e27c4edec9f4e150ef661ad32115b26b18c935b5b2782f291dc4ecc6abeef1c005ee4200641a9a5797c0d3c794c311817711d4ee0c53a6002f1c8ffee823daa6911ff0ea5303b473d2691d25e39fbea40ee5b6dba0e1d292cf86bd92733e84c1a05cc27dca18850b1d71a2ef20c9cf7d645a48962a8e9e1edf28a0b72d0a5bbdc88ccce61333ea3f74d23d8fec97c6264d01afb06498e79f740b648d21cda7aa0cdebe73c1c7d5f16664bf84f7169672c0579594620d52ab63ab5392d1d8ac347e5aab6564a4bebfb5beb425b5be62c652bebb6ed60af57ebfde8a40c680d7e25d034d7e79d32949efb2043bd518c60a08f065fa34500f7e6336683c7f07ed41a8a729d3c959dcb0bf439053b32932a5dad71a05dc34de274bc63c42a11f5878b29fc83b94b233bd4cd709d291db9d8072f164645650a31df1a659fadccc2d96c550589997900cb55deff4b4cb4268b528c79feb210657f367f102d80cbcdb351ca8d42a85f2b88ab22ebd5aa77ebdf21bea4f07a3c9d086635ca08248ee929762f8019a24374f4453d1ba4fc7803448b9be62016ca640307252bcd2dccbe7d5dcc6d5b1811e00ee546ab9abd2f275ffe690eed5090dc36c946172ccd05955b028947be5d7c7e16dddf725221ee6e7e383ef9cbdb5e2a75e6c40bf14ded2e997c904753c7555f6e7c1138ade08208f48437c2e5bb92623d79b03ac9137b50eb989a7ddaf8c43b1ba42c7bb1b125c56d1326de5e5365ef66029a94700cf5da5f05492ac7567db69d0f1c2a9677cdcd3283621a00dc6bbabd3b97e03d90cdbf915415fcd9245ee71474e2e314253c7c9b9b36510062d06ad48e13d7ce764dc624a3176a668df0356475981c424edbf28f3ff525e86a2b51cd54f9ef56848993fc2e05deab4223d2167473623354559700aa837e70dedca377e61e2d0a373a227c568a9a9b6052119139990789f719a6ff6ba93a1759354b0cf7411fd2de957b4165ca80db8ed8e19e1dd36519296a0d7b90b702aa67475e6c0967eaf532d7aa4af6f50d5aff19f211c31a9d0abaca4f9379978b5dad45df46af325a1acabafca9b2701f0ef228f17893b5a88a3a7ce27cf111e3c3fbcdfee1566965a8cf4bf90d42cded34989f51dac1edecffdbf3223f8ae0f01827f5c5928ae7c0270e754be302b84a01ae0f0049b85bdb9d8f1d3e50106a65a02e3546dd47db66bb14a40097161dc39d95f0ab76d8b7191301096823d214c7c829dbe2ba20d95c465444637da92c78ef239d67268ac58718743e619b1b444c24004c65b120da131000173f0355a01d07e9dfa80956e55979be5db574f8d0795cbbc5c1480049c68845c4cd08c9f8ebd27684bde62fe326ca5aca749cf00abb0b182bd157c3d7db9998029383ab10c0a4fddc3ba399250cd76d361c35d6dd251425532d0946fed7bad77947ad6fd6e2a36f8d54b48d5acd0749f20afb12c16d6f9fde6fbacebad2759fdfd7f4f638d0413079d4dcc0c8bb97872dba314c4c89b882b31538aeddef3aecfa8c9ecfd244c77d776441b3c395a0b90769d01ad59df5a4103c79f9f324ef18e008c6ea9e356e745940faf9c39d27e0da0123bdf46c26f38556be117d271618db686d6d0cdc1e45d068e1c65b7fc4142176e6efc33d555ade5a92be6b0317d623dfc5a1182d7072e760ea9413fe484c7ca2ca39b6a07fd854b4261d2ea3dfb78482588c5337075ce13a36e02c8c15643843fcfdffd1560dc84202d01f49bb53eeb69292ceb5fd2efa3255db360b2fef3f033e071981af81a15421b1c62f34018fb272b07168956636e456a24e78ced48e78a34699fe4bd8ba9a4bf5ad3dab9cb53370c5a3acfc48816c7d8e23c40befad4b78ac08d347889ed5ee34abcdee6f3178a12659a788d284d4e8433bd8a9f53c9e06365b2ff21d4cce03740dde605bb5b12c5039d4902e9588d03fa27d5f6c0b5cf9e8ce52312c633a97646f6c6c63e9e753f19b3904c64560189c0e7cf3193b0af35e6d1504141b72f3d986827e49501489af29c4db545b2812fe8a0882350473f03016b85ba5c9b4b8b5fadf02ec5d13c8e80d44466083db9cdd3631a4d92fa8647d542b60d33fab6b104c72e059c7b5ed2976def4e364eedcd85727bdf9c579c1e6eef2b64994ab633fee460b371e3268de14117b8f39aaab171b3fed91c704ab4329ce145b378ef49068c6ce939187329c326c64d08690ca3f1c7788660142237b70aeb51819d9304559cd5c1e7320e6997cbdd113b4327f1331833b247b674f8e5b6dccdbff8e1be71af6a0133cd9fddd290e9f8f61f15b6e4115185266b0c3edbd99746e8e50478b12181d2f43f05332c90f92ab013ffb601ff6f38a1e1b33908b53cbb7eb8e0ef68b3959fda5d9dac59324828b785d26b77f373b85b3303f5f3d2f78eb90c52206137921624ddb5e8e65752ca4e6b4be7c5312bfeced80d1bd442437dbc731fd1a044c4a70419d0561596261414c2161b690108701d0be95a056cc29d34e079d47db7efdd1c98b1ada045f75adba7f4f872e369287e9e87c1f8e93f9d0335fc7c9baeaf762141f910e8a311b05956e6f211c8e2b06d79e75226d887a2d129970d978c7cb671ca3e4f2317dddaf5a7fa4664089bc9b21a127f02b1c3f7277e5f435427594cad6fe17c0f6e0d403c056205a6fe9cb2e8bd01087cb74e74a19bdf6f89beca1dd85e776778aa9d1f5dafbde7b4f2df7ba6abcac6c1600982180ff64a73e0e5624f2cf418d380436409cc3d14acf252e868bac0035f59541cf498bd13495df92f136ef806933dd4e0e746104c48372e53ccf47b42ce096919fef8e191de8bf86a9c431826cf658ea8d3befddfb870755758b34fb62765d867cb4300af8390e59e7165a5dbf75222074fb510627405db40245b9cb31925ff53f6263353a563112ff9bb2d08953d5047dabd03cfdfb6fc4270a789ce529eb045aa0f08eab940cd7f2bcc4b7fc01627bdf1bff61d7f136b180d0ee8ac3e4e7c7625abdaf92bc4bc0cacd9a8f4c1196ab792d12fd1f7520075bcf8231419f1b4c0b82b4e699112e8d5cb5ce7c52f420456dead3fd13701442b32fb962f7164fc1fbcf0b313838ab3c7adb51461919e7244c53f002a62a6932d18c424d9cfb04d035dea8bafc317f385b50897939348514b3c094ea1249be3209b20acd4e02a84bdc5ebbfc16ec9092293d227a7d3c7341a2cfeafe3904dc49a4b507c20dc0b210c60b4ad65924e104fb5f55fa9e9708d8fec9eae77a2f74941d1745b99aeeee1db14a2d6729a071c001dda44820a6bf04ebf420ef885d161df0706d7014bd9ba0dbaf98ea414a45e015c41fe9e6578b2c507c12a71ebc2b0eb8b152650eb82b45b9e6b9373d56ff088b1bfbc89f235a9581e19a34cdc94ed3bab349aa1de00b76eec8e4dcb80a7c822b7b6080bb72aa10e179f1e603174c3554fb2af0e9db6e5d68075bad65eb3b7b6f6704ab9474e3ff1c6b737181b1e5365e2bf351613559599c325835452bbf3419cf9413448dcf08a08c0ef31ae5fc9dc43b710144ae1bcf2e61b79d760efb8bb7e1387257f7e4ae16d83d374b34d44b0ce5d98e808dc4a4c29234822c476af14c63f6950a0206f2ad99dc85a57e536790a75f8be023d8d8227aab2f8d59c265dafca7befd682cfc82224ee1ea9c85ae8f5991d128c7484ef46a1d4ec847e3bfe231f2da667d9818eccb7d947158afbb6b4abf826033de07e080771ae02d160225130f11ea30e8a0311afce0879b0af15e34d72d5aff289a07e516d48afedc3e7f6d83d30de2e48912bf05d2d817cea39c940845baa686f4c1d1f89d8a0fff4ef219a326f24c574d79576933ae9caccc5c4df1d8908c4c5649ca1b062ddd72b003e8ab4f6307e0c276af2f67ba75230b03ac00d5a25fd9ca9b6562a8143963595382b7c40564e389aa026edb0d9a51bebb71443f9897c9d06d2219657fe6714f265e2bf2a877a21108c2a4eabc958a3c7d8eb193801ee23cd14644c8b714b6bec81a1098b075388c98b764cd793b8bcc27e5c9f5b195b4095b4e2e65ce8b3ebeebb1d41f0dac18eb1edf68565394818864ea0400ab188e6e142791d6c9526dab1ac1454e19691cccd1db77e13a54c123296acc99f0d84e99ea5e721681096b1cdf027d07d409f4048e28d4af31911cdcbedcdda8809993c038bba9471d1e07e467ac8dee9d45d2d770e4891759a50eb7f0448ea1ef1d921124229ea68a9da527e85806910bfb11ce47e40ee8df7ca12d735d92c92f7e7ecf9b6b7bd76236f75e76642cbc484c60bb348d4b75bf606eb8448e7391af63c24b8105bfd4b64915b125b01cd8b48c86d64be0a39b27552cdf6b29bf9d37f1d13e435107fa066bc9a40c0191f6115f2792b8d0395faeb3b27aea492b5536dc3456fe5054dacc64b743ad505811fd9643dad1888569aaa2d63b94b530649cc240db8d536194adbe95cdec6b8f1e12a21b2c07f0ad47451cc9fe426a4d3561f2413f477cfaf54afcba9c1fd129ba022dc4d0cc39406cb316a7ea6660d3a5cf1", 0x2000, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="a8010000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffff7f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000010000000000000002e272c788ee621b50100a0b419a8021c060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000100000000000000000000000000ffff00000000000000000000000000800000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000054000000000000007b640784a130fbf0b4bf7ffd63167d8d7b6d8b3b93b37e4b412861655950f59bd09ff3923c3e0528c145302fd7f5be67301eb470d53ba1df9a8ad72490345e2827622111e16a92dd4ef407b0e264ad00e9c6d3cc00000000"], 0x0, 0x0}) 5.830823647s ago: executing program 4 (id=1111): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000140200000008000300", @ANYRES32=r2, @ANYBLOB="0c00990000000000000000000800a102ffff0000080026008d03000008009f"], 0x40}}, 0x0) 5.453870173s ago: executing program 4 (id=1113): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12012000f1048108cd060202d492e4ff000109021b19f1000000d40904150001da40df000905", @ANYRES32], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r1}) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f00000001c0), 0x12) 5.294808129s ago: executing program 0 (id=1114): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[], 0x4c}}, 0x0) ioctl$BTRFS_IOC_INO_PATHS(r0, 0xc0389423, &(0x7f00000000c0)={0x6, 0x48, [0x5, 0x1, 0x9, 0x80000001], &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 5.0185433s ago: executing program 2 (id=1115): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000000080)={&(0x7f00000000c0)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000}, 0x0) 5.006259386s ago: executing program 0 (id=1116): syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) r0 = syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0xfea7) socket$inet_tcp(0x2, 0x1, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x1, 0x36, 0x0, 0x0) 4.642859047s ago: executing program 2 (id=1117): syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) r0 = syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x78) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_usb_disconnect(r0) syz_open_dev$evdev(0x0, 0x0, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000040)="e2", 0x2778) syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 3.942270518s ago: executing program 0 (id=1118): r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}]}]}], {0x14}}, 0xc4}}, 0x4000040) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @source_quench={0x3, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @broadcast, @dev}}}}}}, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, 0x0, 0x40000000}) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, 0x0, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000001dc0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x25b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x9f, 0xb0, 0x7, [{{0x9, 0x4, 0x0, 0xe, 0x9, 0x3, 0x1, 0x2, 0x86, {0x9, 0x21, 0xfff, 0x0, 0x1, {0x22, 0xbc2}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x28, 0x7, 0x2}}}}}]}}]}}, &(0x7f0000002340)={0x0, 0x0, 0x0, 0x0}) open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0/file1/../file0/file0\x00', 0x80101) syz_emit_vhci(&(0x7f0000000980)=ANY=[], 0xf8) r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x9, 0x0) ioctl$MON_IOCT_RING_SIZE(r2, 0x9204, 0x10755) 3.832709792s ago: executing program 3 (id=1119): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x5, 0x8040) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000040)=""/218) open_by_handle_at(r0, &(0x7f0000000140)=@FILEID_UDF_WITHOUT_PARENT={0xc, 0x51, {0xfffffff7, 0x8, 0x8, 0x10001}}, 0x10300) r1 = openat$fuse(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f00000001c0)={0x2b, 0x4, 0x0, {0x0, 0x9, 0x3, 0x0, [0x0, 0x0, 0x0]}}, 0x2b) read$FUSE(r1, &(0x7f0000000200)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) fcntl$lock(r1, 0x25, &(0x7f0000002240)={0x1, 0x3, 0xffff, 0x1, r2}) r3 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) setsockopt$inet_dccp_int(r3, 0x21, 0x3a, &(0x7f0000002280)=0x7fff, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000002300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WOWLAN(r3, &(0x7f00000023c0)={&(0x7f00000022c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002380)={&(0x7f0000002340)={0x1c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r4}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0x4c101) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000a, 0x810, r3, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xc, 0x12, r3, 0x10000000) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000002400)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x64, 0x0, r3, 0x0, r1, 0x2, 0x0, 0x1, {0x0, r7}}) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000002440)={0x5, 0x1a, 0xfff9, 0x5, "d76cca6f9086c41f8170a0b24ad5f46ebba3224ae29cbca8a137f254fb69563e"}) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000002480)='/dev/fuse\x00', &(0x7f00000024c0)='%(^\x00', 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000002500)={0x0, 0x51, 0x0, 0x9}, &(0x7f0000002540)=0x10) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r3, 0x84, 0x1a, &(0x7f0000002580)={r8, 0xd4, "71b5eef689f3559eee45b223660b231dea1ec09d3a85fba8677c1dd6a360d9ba96799ccb1041d043187998b699843b26352a7b43cd35a390957ca7c738a7a4c0be052dcbd1150521bacc4fe526b4e4e60ff04dc1f284f811ab86df5ecfabbe56f38a7436ad4fce2f97986f8ef9c10a07fd52a7805863bf116b6f683e39d1823b3b377031605a99f8fe7639c6ef933a1aad00a30fcef12887d559ec1b4f8bb03260a4ef584370637b8ae57756d34620cb961b4fa0865314e950986e5d1fdc0d66ddde14df45e44df0c65852950909c32e40f1a71d"}, &(0x7f0000002680)=0xdc) ioctl$DRM_IOCTL_ADD_MAP(r3, 0xc0286415, &(0x7f00000026c0)={&(0x7f0000ffc000/0x4000)=nil, 0x2bf5c17a, 0x1}) read$FUSE(r1, &(0x7f0000002700)={0x2020}, 0x2020) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f0000004740), &(0x7f0000004780)=0x4) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f00000047c0)={0x0, 0x5, 0xa, 0x8, 0x4, [{0x2, 0xe, 0xc, '\x00', 0x9}, {0x7, 0x1, 0x1, '\x00', 0x400}, {0x100, 0x4, 0x5, '\x00', 0x183}, {0x8001, 0x4}]}) openat$rdma_cm(0xffffff9c, &(0x7f00000048c0), 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, &(0x7f0000004900)={0x4, 0x559, 0x0, 0x0, 0xd}) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, &(0x7f0000004a00)={&(0x7f0000005000)={[{&(0x7f0000004980)="12745532ce7ac32c6eed4478a184cd0535c0b3d334c44714ed9e11dfc2056a51455ac62cdae8808dc95b6cf73e2581d4f5139374f37369c64535327b7286a445280c93fbd95f92269eeea065350b320cdb1cf0aaa447d3a5de1e0caecb01a9bd34ab41989879a8dd6c11321db2245552de105309309d", 0x76}]}, 0x1, 0x3}, 0x1) r9 = add_key$user(&(0x7f0000004a40), &(0x7f0000004a80)={'syz', 0x3}, &(0x7f0000004ac0)="d1bf310873d3cf0987f443edd98f2c41e4be5cc1376df34bacf7e8ad36a87ab591b149fea488a9a3c8cf855b6e97bda8d791ebbe1e9bac3bd1b08c9b3e1a2f29cc407341f213ea7296db8780b9ed7c8dbe8a22663683e442678c6cf39094cbb714ed67322aa242156911cefc253af38f0167d8cda8c7d783865aafdfeb969603329a8da84fe3e97d673b608c4c9d14f34ad87f16c709447f72eb7e9d175409a49a668106603529afd9ca95bc74778c84cad44497c6fbf182d61be1a884b1262ea1c238515472da9fae8dfcaabd9ccce6659a99abe663c598ea57dfd5451bb3e07a458a89837081e56a6ef1d570d5", 0xee, 0xfffffffffffffffd) r10 = add_key(&(0x7f0000004bc0)='user\x00', &(0x7f0000004c00)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$dh_compute(0x17, &(0x7f0000004c40)={r9, r10}, &(0x7f0000004c80)=""/190, 0xbe, &(0x7f0000004dc0)={&(0x7f0000004d40)={'vmac(des3_ede)\x00'}, &(0x7f0000004d80)="2f8ea7cd823a72d304", 0x9}) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000006180)={0x24, &(0x7f0000006040)={0x40, 0x8, 0x44, {0x44, 0x3f, "0912d36bf0e3c1d35334d3e3801790a1f65a1d17dbcf3c154795b1ddf16eb8dbc74efd5763fd9ce174b86b58ad0dc26be64c479dffae928f55e0327aac55529f6e18"}}, &(0x7f00000060c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1801}}, &(0x7f0000006100)={0x0, 0x22, 0x32, {[@local=@item_4={0x3, 0x2, 0x0, "76b61b97"}, @local=@item_4={0x3, 0x2, 0x5, "cc66764e"}, @local=@item_4={0x3, 0x2, 0x3, "72a4411c"}, @global=@item_4={0x3, 0x1, 0x3, "53c65680"}, @main=@item_4={0x3, 0x0, 0xa, "47aaedb1"}, @main=@item_4={0x3, 0x0, 0x9, "1a3e55f4"}, @local=@item_4={0x3, 0x2, 0x4, "767deba3"}, @global=@item_4={0x3, 0x1, 0x7, "30760f8f"}, @main=@item_4={0x3, 0x0, 0xb, "17dd4a82"}, @main=@item_4={0x3, 0x0, 0xa, "47cbe593"}]}}, &(0x7f0000006140)={0x0, 0x21, 0x9, {0x9, 0x21, 0x5, 0x2, 0x1, {0x22, 0x1fe}}}}, &(0x7f00000063c0)={0x2c, &(0x7f00000061c0)={0x0, 0xe, 0x4f, "3ca714dc45a635a760906445807117860c0f49e59971b83189ce86e37855286dff3b469e2d293b8e6937e2a01d558690c2588cbc44319b159a0f018d8cd15934a008718ceadeafaab8ae3ad7367140"}, &(0x7f0000006240)={0x0, 0xa, 0x1, 0xa}, &(0x7f0000006280)={0x0, 0x8, 0x1, 0xe3}, &(0x7f00000062c0)={0x20, 0x1, 0xa2, "6635a6aff20e54e903e9f36f766c6590f306917e2063ceadcacb1623a12f56bd32bec227f70e7da6186f6826f0c4df4a2852ee4e5d8809f0da6066de265a7388e827eed35e882982bf61b69feedb21e13c417f8fdfa175df83ce959524eb4657c0dc80b53c6d5b3b962efee9a28f2c782ad552395846d9dd6ee03276abcf9c35830635debd62f73434e1317eb6c11b472976578601a83f75e893fd276fcdbbbd7817"}, &(0x7f0000006380)={0x20, 0x3, 0x1, 0x8}}) 2.869140083s ago: executing program 1 (id=1120): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0x19, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r1, 0x0, &(0x7f0000ff7000/0x2000)=nil, 0x2000}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x30172, 0xffffffffffffffff, 0x8000000) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x4, r1, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000140)={0x48, 0x7, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12f9c5, 0x20000000000000}) 2.843618182s ago: executing program 2 (id=1121): setgid(0x0) r0 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000440)=@secondary) keyctl$get_persistent(0x16, 0x0, r0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r1 = socket$inet6(0xa, 0x80000, 0xfd) r2 = dup2(r1, r1) sendmmsg$unix(r2, &(0x7f00000028c0)=[{{&(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x800}}], 0x1, 0x4c884) read$FUSE(0xffffffffffffffff, &(0x7f00000005c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) pipe2$watch_queue(&(0x7f0000002900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="050000000204000046000000a400000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000040000000000d8d3506442c142f700"/28], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r7, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%-5lx \x00'}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x18, &(0x7f0000001bc0)={0x0, 0x0, 0x0, 0x0, 0x3, r8}, 0x38) r9 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000280)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_WATCH_KEY(0x20, r9, r5, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002f80)=ANY=[@ANYBLOB="380000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="40c0000000000022180012800a00010003f70200000000000000000000000000d2cc559a85af8fd7179f5437946ef509c53b64dc260c7a71f01a091e542f6cd7940f233b2141f52d3b6d2c050c6ccb46bae7574b5759bed07d8639387eafc57375c5370b69e53ca35c1ccc4570545e9498a7216e5fafbc3c60bc2beee0743d996e2c734ff4390331672443022af13f605e655f54131e0e08f00000ab35901696669289257eb14fd1b878365e8cb422ea39"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x24000080) keyctl$KEYCTL_WATCH_KEY(0x20, r9, r6, 0x2) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x2) keyctl$get_persistent(0x16, 0x0, 0x0) statx(r6, &(0x7f0000002980)='./file0\x00', 0x0, 0x8, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000003200)="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", 0x2000, &(0x7f0000002f00)={&(0x7f0000000380)={0x50, 0x0, 0x7, {0x7, 0x28, 0xfffeffff, 0x10000, 0x8, 0x2, 0x1, 0xc}}, &(0x7f0000000400)={0x18, 0xfffffffffffffff5, 0x40, {0x6fa}}, &(0x7f0000000480)={0x18, 0x0, 0x7ff, {0xd4a}}, &(0x7f00000004c0)={0x18, 0x0, 0x5, {0xffffffff}}, &(0x7f0000000500)={0x18, 0x0, 0x9, {0x1}}, &(0x7f0000002600)={0x28, 0xfffffffffffffffe, 0x1, {{0x100000000, 0x65, 0x1}}}, &(0x7f0000002640)={0x60, 0x0, 0x87a, {{0x81, 0x8000, 0x8, 0x4000000000000009, 0x44, 0xf93, 0x782, 0x5}}}, &(0x7f00000026c0)={0x18, 0x0, 0x6, {0x6}}, &(0x7f0000002700)=ANY=[@ANYBLOB="1a0000000000000000000000000000002f64656a066675736500"], &(0x7f0000002740)={0x20, 0x0, 0x7fffffffffffffff, {0x0, 0x16}}, &(0x7f0000002780)={0x78, 0x0, 0x101, {0x2, 0x1000, 0x0, {0x4, 0x40, 0x0, 0x7b01, 0x7, 0xfff, 0xb, 0x5, 0x2, 0x6000, 0x3ff, 0x0, r4, 0x200}}}, &(0x7f0000002b00)={0x90, 0x0, 0x8001, {0x1, 0x3, 0x7, 0x1, 0x7ff, 0x2f7, {0x7ff, 0x8, 0xfff, 0xffffffffffff42a8, 0x2, 0x8, 0xdf, 0x4, 0x1, 0xc000, 0x72df97de, r3, r4, 0x9, 0x379}}}, &(0x7f0000002800)=ANY=[@ANYRESOCT=r5], &(0x7f0000005200)=ANY=[@ANYBLOB="2803000000000000040000000000000006000000000000000100000000000000442b3c420000000005000000000000002c000000100000000500000000000000040000000000000080000000000000000e00000000000000000000800000f5ff30ffffffffffffff010100000e0000000300000000a00000050000008f0d2865658d539b2ad71686385fb12d05", @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="ff03000006000000000000000500000000000000030000000000000004000000008000002d242b7d000000000100000000000000030000000000000000020000000000000000000000000080f8ffffff040000000900000000000000affa00000000000004000000000000000080000000000000f2ae00000000000004000000000000000700000056890000050000000040000007000000", @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="0900000002000000000000000200000000000000020000000000000008000000920000006b657972696e67000200000000000000010000000000000084000000000000004000000000000000fffeffff080000000100000000000000db000000000000000500000000000000030000000000000006000000000000000200000000000000000000800200000002000000002000007f000000", @ANYRES32=r3, @ANYRES32=0x0, @ANYBLOB="f305000005000000000000000300000000000000080000000000000009000000060000002f6465762f736723000000000000000002000000000000000000000000000000ff02000000000000010000000000000005000000080000000200000000000000060000000000000006000000000000000700000000000000060000000000000002000000000000000104000007000000040000000080000003000000", @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="0100000009000000000000000100000000000000f7ffffffffffffff0000000003000000010000000000000003000000000000000900000000000000d9a5000000000000000200000200000006000000000000000180000000000000040000000000000004000000000000000400000000000000090000000000000007000000010000000c0000000060000002000000", @ANYRES32=r11, @ANYRES32=r4, @ANYBLOB="03000000030000000000000001000000000000005a060000000000000000000000000080"], &(0x7f0000002e00)={0xa0, 0xfffffffffffffff5, 0x1, {{0x6, 0x1, 0x1, 0xfffffffffffffffa, 0xf71, 0x6, {0x3, 0xfffffffffffffffa, 0x4, 0x8, 0x8000000000000000, 0x10001, 0x2, 0xfffffffc, 0x8, 0x4000, 0x5, r3, r4, 0x1, 0x3}}, {0x0, 0x18}}}, &(0x7f0000002ec0)={0x20, 0xfffffffffffffffe, 0x4, {0x3, 0x0, 0x4, 0xb8d}}}) keyctl$get_persistent(0x16, r3, r9) getgroups(0x1, &(0x7f0000000000)=[0xffffffffffffffff]) add_key$keyring(&(0x7f0000000040), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff8) r12 = add_key$fscrypt_provisioning(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x1}, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000000000001020304090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f202122232425262728292a2b2c4f2e2f303132333435363738393a3b3c3d3e3f40"], 0x48, r0) keyctl$chown(0x4, r12, r3, r4) ioctl$FIGETBSZ(r5, 0x2, 0xfffffffffffffffe) r13 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) readv(r13, &(0x7f0000000580)=[{&(0x7f0000000100)=""/67, 0x43}], 0x1) 2.543640048s ago: executing program 1 (id=1122): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d3750820c80a2103be6f000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000240)={0x10, &(0x7f0000000040)=ANY=[], 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x84, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000200)={0x1c, &(0x7f00000000c0)={0x0, 0xd, 0xb, "05f242e933fb83e20969eb"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x4}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0xf7}}) 2.249453611s ago: executing program 0 (id=1124): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) 2.2456746s ago: executing program 3 (id=1125): r0 = userfaultfd(0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)) r2 = fsopen(&(0x7f0000000000)='tmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x3) quotactl_fd$Q_GETNEXTQUOTA(r3, 0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f00000004c0)=ANY=[@ANYRESDEC=r4, @ANYRESOCT=r1, @ANYBLOB="83739d465dabd5245a45bf583cf27bf7188538efc0894ca8149cc792f49a3119314c5cb6f22fe5b2e33d98b9c3fc1f066f57b19a1a0eb46bfa13e7f233984f674eb939dd9acaafec81ca4969cc423a187483b4c63c5838b661f1e9cbcb4692a3746331e30b68ac2cda0a3b3c04755009aeb048feccdb73a5ed56e484fe8c6848bb0a70a92cb4b5a235d3ed46d08855d3f3cf8f9591e1e1795d837a5eb589891670ba9b67f669207926847b487b7779d22986e2072d3c50e4c9029d23f7950fd1b0f876c8e0ad3dd052b6ad9375a3aa5551165c9dadae5d506f1d74c87c4554c2310ccd7e366b3c974fde3d12e60c371b5e8901a66fb5986ae1", @ANYRES16=r4, @ANYRESOCT=r0, @ANYBLOB="891e05f98ad04712f894ffbd3128156cbfbbb898c55636f0f12405a8810d5b2fc813d51ea28321e61167728aaa0d148decc1eb32932b19224189e9ee8ed6fa7de1b4566eface2c8fb905793b61e4d4b582cfeff2c459fbdc54389c392478763f62", @ANYRES8=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) r5 = socket$caif_stream(0x25, 0x1, 0x1) preadv(r5, &(0x7f0000000100)=[{&(0x7f0000000000)=""/109, 0x6d}, {&(0x7f00000002c0)=""/143, 0x8f}], 0x2, 0x3, 0x1ff) r6 = fcntl$dupfd(r0, 0x0, r0) ioctl$UFFDIO_CONTINUE(r6, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f0000800000/0x800000)=nil, 0x800000}}) 2.243900344s ago: executing program 4 (id=1126): write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000640)=@broute={'broute\x00', 0x20, 0x1, 0x170, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200006c0], 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"/300]}, 0x1a3) write$binfmt_script(r0, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000640)=@broute={'broute\x00', 0x20, 0x1, 0x170, [0x0, 0x0, 0x0, 0x0, 0x3f000000], 0x0, 0x0, 0x0}, 0x1e8) 2.026669752s ago: executing program 0 (id=1127): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000640)={0x40, 0xf, 0x1, 'R'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000600)={0x34, &(0x7f00000003c0)={0x40, 0x12}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) syz_usb_control_io$hid(r0, &(0x7f0000000480)={0x24, &(0x7f00000002c0)={0x40, 0x24, 0xd6, {0xd6, 0x32, "80059265ba901b50111e4a2cfd2d6ac54aa5362ec92646eb7222501c57504384adf844bb284d70ce19cfa19f05e2c6d495f2f932adf18b747122ef25c966b4ee7e08d24730ac438d232977b0d3b86bbeb1a60cefe21eabb298ec9803fe87d92a973761ec817d2ac9faca4aebb384e0d42fc0e1355a76a70833ec3fade6e5fe45b183b698647029472262f5e75e5b075948af17c8a19e92152640321be8bbd69759f08549585dc15dd11e00c9feeee0ed4b01ae0678537979d70708ca7fedebea600685a25f444309791df9ba56b3587e751a7385"}}, &(0x7f00000000c0)={0x0, 0x3, 0xa9, @string={0xa9, 0x3, "f86a93b3e59703decb59c4fd887b74f0469c867118fab7587d2403fc971830c2a42c879a4ee40e129093ea51e7bf68eac3e8dc48989f43380496af5c50b676091d1f010c9553405d9a476d4fdc771dfa9b8d2107c101c978cc5d7deb344e1298869e24c40fce8b9938186c12b55bd47859535eb335a674e00456c301dc0cfaa6967767e1f48e6873a8a083d81ff50a2049e72055c9df4555549410d5057d21c5a52538b052ecfe"}}, &(0x7f0000000200)={0x0, 0x22, 0xc, {[@global=@item_4={0x3, 0x1, 0x2, "999b2c2a"}, @local=@item_4={0x3, 0x2, 0x4, "5040ed86"}, @main=@item_012={0x0, 0x0, 0xc}, @local=@item_012={0x0, 0x2, 0x5}]}}, &(0x7f0000000440)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1, 0xd0, 0x1, {0x22, 0x997}}}}, &(0x7f00000007c0)={0x2c, &(0x7f0000000540)={0x0, 0x0, 0x6b, "f0aee0bfb9763ce282b68a9841f2d770b5bdb0129c8adb100cc8bd3332e87a3ae485a472329295dae8ce7986adebb6339c83c1b7f6eecae10cfc0ad62698820e458e6e8d5fc92a353d025f048bfa36b08abe7b822ebf762cd7b1f38d45bd9dcb18fd7150ec8d93eec414aa"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x7e}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0xdd}, &(0x7f0000000680)={0x20, 0x1, 0xc0, "2c04e12edfb494c738a2e4e9870d986811fdd2267a736a10541d2c1e18f1c374954cbad80da9d76aa91e0b682d70653f70994e8d3d9910bd5d46d497f167452b1b762682f0570b28d306633479d58d2900501aa8cf6b8f1eb7dad4e188c8f1c03e764589f413714e4624066c8f30d779bd6886fa1babf23d269073ad50ff6030caf459e6bdc4078ebee870c859c4ccc4adeff39143700fa052abfeadfb37d936cbbd17f8c1b4537caf9fdee373650463f6bb1cfe63b8dcee37a92c4aa4aeb5b4"}, &(0x7f0000000780)={0x20, 0x3, 0x1, 0xf}}) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000005f0005"], 0x20}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000400)={0x20, 0x7}, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000280)={0x1c, &(0x7f0000000180)=ANY=[], 0x0, 0x0}) 1.829717456s ago: executing program 3 (id=1128): syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) r0 = syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0xfea7) socket$inet_tcp(0x2, 0x1, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x1, 0x36, 0x0, 0x0) 1.818871198s ago: executing program 2 (id=1129): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x15, 0x17, 0xee, 0x40, 0xaf0, 0x7a05, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x5, 0x49}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x64, &(0x7f0000000080)={0x0, 0x0, 0x11, "0300fe96fcb7012ebf3d74c975b4032d99"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000640)=0x8000) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x0) r2 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x3a, 0x0, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r4, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r3, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x0, 'queue0\x00'}) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x3) syz_emit_ethernet(0x72, &(0x7f00000007c0)={@link_local, @dev, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x38, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @mcast2, [@srh={0x3c, 0x0, 0x4, 0x0, 0x3, 0x10, 0x761}]}}}}}}}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r5 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @random="08c82553c54d", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x7, 0x837, &(0x7f0000001340)={{0x12, 0x1, 0x0, 0x55, 0xfc, 0x11, 0x40, 0xeb0, 0x9071, 0xc506, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x825, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xe3, 0xb, 0x9, 0xff, 0xff, 0xff, 0x7, [@hid_hid={0x9, 0x21, 0x7, 0x5, 0x1, {0x22, 0xcca}}], [{{0x9, 0x5, 0x1, 0x4, 0x200, 0x40, 0x6, 0xaa}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x96, 0x9, 0x5, [@generic={0x30, 0x23, "c983201c1c697699c24bf4853e3ba9bf33877ab3a2ed2d5a91db686abc6cd8f46d5d09e68e60846e4bfe541938e9"}, @generic={0xbb, 0x22, "51a9726a57bde8a55877a590e32c57caf33dda8e0e4e8958280a058ee7d632cb828f7c15585f061141fe20474ec034529c0ac0783652eae7df1bc171773f11e70f0ee89dae6323cfed29ec4cf94f887396dd4bed32fecb53adf1d68fd33b7f2df62b38f41020c7b99526d10cdf7079de4978180b4cf7a3c7608a1bd28805b61139c7d7695d051d9b2da535b6b919e62904555f5aba52cc66701d5b7b580ab4a456d13f5155ed23c843ff81a1ebd3d59cbfaa919098efc9f3c9"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x20, 0x5, 0x2, 0xf7, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0x4}]}}, {{0x9, 0x5, 0xc, 0x4, 0x200, 0x9, 0x76, 0xf4, [@generic={0x46, 0x3, "325998ead6d73d3a86ae7ddc65258d3b4fcf16131bd5c736b10b73d3776c96f3ac29bdbe8f6c06784418f19d00503f6ef55831fe2af32aa339c70ac89e373b7fbd241468"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x200, 0x5, 0x0, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0xb, 0xf}]}}, {{0x9, 0x5, 0x7, 0x0, 0x400, 0x7f, 0xc1, 0x7}}, {{0x9, 0x5, 0x2, 0x10, 0x200, 0x6, 0x0, 0x27, [@generic={0xbe, 0x10, "57d1f2071d5ab915dbcf0797af0f6c61645f382fc4bfcf5bd145976bea3b463ed6d628637610d301a249a0a0bbdd81f0551beb534282707ca040505d780aff00883f518fcf3103624af9a73a6df4e673322accc36757c171abc9e8c632fc31fd9e79412f55b0501cc0210335b987add21420822edaa416b42c5085f49cfa97df846d38b8e182feb257db11f8282798239c685a63d8954bc2fb1932b5c973940d414f1d6a78b76740732b140d2be0a50466d3c723be6faefbc9f7f5b5"}, @generic={0x18, 0x22, "2e448402be19ad12237bb65fb17ebdc1a990faf1ca92"}]}}, {{0x9, 0x5, 0x0, 0x4, 0x40, 0x6, 0x10, 0x3, [@generic={0x1b, 0xd, "c35d686122fd04172d569aaa5cab24eb8abb0256341cdf3a1b"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0x100}]}}, {{0x9, 0x5, 0x4, 0x0, 0x10, 0x10, 0x7d, 0x19}}]}}, {{0x9, 0x4, 0x53, 0x9, 0xe, 0x26, 0x23, 0x1a, 0x5, [], [{{0x9, 0x5, 0x1, 0xb, 0x10, 0x5, 0x73, 0x2, [@generic={0xff, 0x1be29489793a38b, "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"}, @generic={0x2b, 0xd, "5ae14d7f5e43a7996d0060f9cd49ea3a8eb0b76b6eac88ffc7cd33b7f77f67d02afae320b04a08f38d"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x0, 0x0, 0x7, 0xfb, [@generic={0x64, 0x21, "b9a3795c2b4adf26013dee512c3b6319f3de6d22acabd750efe7ead014f974dca1cf8391de2e28b17b47fe0bca555355c9429d8a7ecdd45c6e502d55d727c8247752114e3fbf753adff97aa34a77ef4bc487414ec868f3b0ef9de1fed554ba66d9e9"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x1, 0xe0}]}}, {{0x9, 0x5, 0xe, 0x10, 0x10, 0xf3, 0x0, 0xd6, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x7, 0x6}, @generic={0xe2, 0x5, "195cef9736a849f3f94a0369c8f7f9745bd89d012245393da171733fa864214545b7225e63a1b13f5d202860f538b1f11cdf22ae41ad2bb25adc00b5ee6d9313c556e7823810382cacd56b6f194f0389467edd3a634aaaf8e28d65a33af0edeab3866a42774cf7bd1fb14559843341542d21c137b7db4235099b5e82dfa1443729b7086c6054bc58f2e590450860f1e44d91a2d495e35b0778b8965fa9bb294b155f2e15c2c2863306cd9d17bfd6c2dc7118a8d2a0b47f23b1844a994ba34762bc4ab615be56ba4e4da1c6382bca6d9b661b5f5837878ec2c72df58d8eb8dbc3"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x200, 0xd, 0xc8, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x50, 0xd}]}}, {{0x9, 0x5, 0xb, 0x0, 0x200, 0x6, 0x3, 0x3, [@generic={0x67, 0x22, "975a6f810b394c9b542adea995782e2be504d9300dc4e7e18a5bea147f388c6186856dd61cb3060d32082161d8b9b71eab6c30ecbb0ecde894d2da31ab33240509dee7db99c6767fc7c9a3356ea3812483680d628a3e6f6440bb4a59e5e8b83c1eb27ee5f4"}, @generic={0x61, 0x22, "9bb00dd72bce89d53a8035735b5b312658e541e8997c765342802ad538f1ba71289bd4110c909b8964debc0db3ebf2598ad2e8061d8ae765827c6b337bc36674b81b1c09c1b6352c2111142613b835dc51c3192cd7109429a9975794845db1"}]}}, {{0x9, 0x5, 0x2, 0x2, 0x3ff, 0x1, 0xc, 0x3c, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x63, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0xa}]}}, {{0x9, 0x5, 0x3, 0x0, 0x400, 0x2, 0xf, 0xd}}, {{0x9, 0x5, 0x6, 0x2, 0x3ff, 0x9, 0x0, 0x6, [@generic={0x60, 0x4, "e3c10e321211eae4975f58ca4eaf050ae79597e3e53893463bb35bb7ea2a10704c37876478749a2818fdf0e7a74ce18ea52ef39d204b4313536ce71d0ab5baac53c44d613e213272c660d548474658679079af15ab755a2e14b2c25e2b21"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x400, 0x3, 0x2, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x0, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x6, 0x200}]}}, {{0x9, 0x5, 0x9, 0x10, 0x20, 0xbb, 0xfd, 0x4, [@generic={0xf5, 0x11, "0a4fb36db65e9bad1765c1659e3f52329d992332ccd69a37adc14fa04f305c1b6b52854d2bbe694ba885e1726fdde0d00d2c5fb8fe3517c649ed042221f8f3d79e7f1b65e7964a9a89fb44b8c7419458207da585d957618d12f6598310281ccd67ab7f54ede574c697a5f2279c1f4ab018092b6225b8261d76ff3ccea090021aef52aadbb7a238bf8c974d6aa5e6b7def99dfdd430f6960237eda6b9b73908c1ed28bebb36671480764586059f25b7e993c407225f74cd833bd99d6f9847cebf97c28cb58082b618d433db6a3bb2583837102b8f5feaec50656a9760c3527df702c0586c0a9af2e0c653d3812d6079c506e922"}]}}, {{0x9, 0x5, 0x9, 0x10, 0x400, 0x2, 0x7, 0x82}}, {{0x9, 0x5, 0x3, 0x10, 0x10, 0x8, 0x7f, 0x3}}, {{0x9, 0x5, 0xa, 0x0, 0x8, 0x67, 0x3, 0x7f, [@generic={0x36, 0x0, "747f0af46d81324d80fb13b737009497bc89fc42071bc780cbb15491f552a8e88e47234fc92fc1108954623b3d144242c53a636c"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x400, 0x2, 0xfc, 0x1}}]}}]}}]}}, 0x0) syz_usb_connect(0x3, 0x24, 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) 1.678777598s ago: executing program 4 (id=1130): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000010c0)={0x42, 0x40003}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x5}}, 0x10) sendmsg$tipc(r0, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x3, 0x4}}, 0x10, 0x0}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') read$FUSE(r2, &(0x7f0000000100)={0x2020}, 0x2020) sendmmsg$alg(r2, &(0x7f0000000280)=[{0x0, 0x0, &(0x7f00000000c0), 0x10000000000001b1, 0x0, 0x0, 0x880}, {0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="04ffb5415f5cc55c7cb722a5512e94c52b1eb1a92e502ad51899889da16e5ef73986d2d990a255e17c516a195d111989959394c01fb4822cf359d8a62b31d0043a836cfa1d7a77636d5f008b3a5b939f00a5c12903620c95daef27733c0c23971a2e98593818410b0c2ffdee9161ad78d67e496ccfaee4bda90ac2", 0x7b}], 0x1, &(0x7f0000000240)}], 0x2, 0x10) 1.564391092s ago: executing program 4 (id=1131): syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) r0 = syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000640)=@broute={'broute\x00', 0x20, 0x1, 0x170, [], 0x0, 0x0, 0x0}, 0x78) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_usb_disconnect(r0) syz_open_dev$evdev(0x0, 0x0, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000040)="e2", 0x2778) syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 703.352953ms ago: executing program 0 (id=1132): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) poll(0x0, 0x0, 0xffffffff) unshare(0x24020400) r2 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000240)={0x40002009}) syz_usb_disconnect(r2) r5 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r5, 0x8922, &(0x7f0000000040)={'bond0\x00', 0xff}) pwrite64(r1, 0x0, 0x0, 0x6) 0s ago: executing program 3 (id=1133): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000001c0)) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280), 0x1, 0x100000000000000, &(0x7f00000006c0)='U'}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000580)=[@acquire, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r5, 0xc0189374, 0x0) dup3(r4, r5, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x6, 0x0, 0x1, 0x200, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x4, 0x0, @void, @value, @void, @value}, 0x48) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="4400000010000507000000000000000000000006", @ANYRES32=0x0, @ANYBLOB="0000000000001a00240012800b00010062726964676500001400028005002b0003000000080004"], 0x44}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x1b0}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x4) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r9, 0x107, 0x9, &(0x7f00000000c0)=0x48b, 0x4) write(r8, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) eventfd2(0x0, 0x0) io_setup(0x7, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1f, 0x7, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r10, 0x8946, &(0x7f0000000900)={'veth0_vlan\x00', @random='\x00\x00\x00 \x00'}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x0, 0x0) 0s ago: executing program 4 (id=1141): r0 = epoll_create(0xe27) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = dup(r0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0x50002000}) r3 = add_key(&(0x7f00000005c0)='logon\x00', &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$read(0xb, r3, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x3, [@func_proto, @volatile={0xc, 0x0, 0x0, 0x9, 0x3}]}, {0x0, [0x2e]}}, 0x0, 0x33, 0x0, 0x1, 0x3, 0x0, @void, @value}, 0x20) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000050900010073797a30000000002c000000030a01130000000000000000010000000900030073797a32000000000900010073797a300000000058000000060a010400000000000000000100000008000b40000000000900010073797a3000000000300004802c0001800b000100736f636b657400001c00028008000240000000000800014000000003"], 0xcc}}, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/slabinfo\x00', 0x0, 0x0) r6 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000280)=0x11) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r5, 0x0) r7 = openat$kvm(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) openat$cgroup_procs(r5, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, 0x0) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100000000000000730000400008000007"]) syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="020100001ac35b08392602003c27000000010902120001000000000904000004d424eb00e62bbc56a620cf04ee6a9b9b7572df2a6407799ce3e48065e1b1461bb4eff19dab23ba7d5b3f277dde12295bc3084add00d4f3ff17280cfb24fcae79f1ff149dabfce54cfc5ba46fb65a921f89249cb15821d99d992712e52bf2426eaad28d8bb009bd1114ba2de0454239f5db0c9b37a77ceb2d6d82c1b030b5a4350d4f0a7e2341d7d6553b1010793b3dc5473073ec31359da541699d50c39ac8765370d1ea016ef6eb5f692b6b6d2cf83bfd17"], 0x0) recvfrom(r4, &(0x7f00000004c0)=""/213, 0xd6, 0x122, &(0x7f0000000280)=@caif=@rfm={0x25, 0x1ff, "56ec50f24646e8e95048c09d57d9cb8e"}, 0xffffffffffffff30) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r2, &(0x7f0000000040)) r10 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000405f14120200000000000109022400010029dc821e04000001030000000921000063060000000000000300000000fc"], 0x0) syz_usb_control_io$hid(r10, 0x0, 0x0) r11 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r11, 0xc004743e, &(0x7f0000000000)) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000600)={0x0, &(0x7f0000000080)}) write$ppp(r11, &(0x7f00000010c0)="1e00", 0x2) syz_usb_control_io(r10, &(0x7f00000000c0)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="000007000000060e3408808100f5ffc871d8a11efa131c890cac41fa78ae4addadc0fac36531843b0a0be56c25082c6bb9e0087168a6234a1b6e52ccddb80abd4a0ebb3d8342d78c4dc18256c19c60f439dc156580b668d4d8c54207193365546922bfd2a5d267a28c533e98c5d4fd70a47afc8ba5e8c23eabe740fe6b254274dbbac64da9d1adf2abdb5d956802f20b3110311d6b707e200843d93066d433d2acaeb6d8e1e9cbd6bad95eca5799ca5e369351234fa0aaa2d3504dda47370271"], 0x0, 0x0, 0x0, 0x0}, 0x0) kernel console output (not intermixed with test programs): ainted 6.11.0-syzkaller-11993-g3efc57369a0c #0 [ 371.545504][ T9600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 371.548508][ T5749] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.555851][ T9600] Call Trace: [ 371.555912][ T9600] [ 371.555932][ T9600] dump_stack_lvl+0x241/0x360 [ 371.575227][ T9600] ? __pfx_dump_stack_lvl+0x10/0x10 [ 371.580576][ T9600] ? __pfx__printk+0x10/0x10 [ 371.585249][ T9600] ? kmem_cache_alloc_noprof+0x44/0x2a0 [ 371.590869][ T9600] ? __pfx___might_resched+0x10/0x10 [ 371.596234][ T9600] should_fail_ex+0x3b0/0x4e0 [ 371.601242][ T9600] ? __kernfs_new_node+0xd8/0x870 [ 371.606525][ T9600] should_failslab+0xac/0x100 [ 371.611306][ T9600] ? __kernfs_new_node+0xd8/0x870 [ 371.616486][ T9600] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 371.622819][ T9600] __kernfs_new_node+0xd8/0x870 [ 371.629088][ T9600] ? __pfx___kernfs_new_node+0x10/0x10 [ 371.636817][ T9600] ? __pfx_lock_acquire+0x10/0x10 [ 371.642651][ T9600] ? sysfs_do_create_link_sd+0x77/0x110 [ 371.649174][ T9600] ? __pfx_lock_release+0x10/0x10 [ 371.655320][ T9600] ? do_raw_spin_lock+0x14f/0x370 [ 371.662947][ T9600] ? sysfs_add_file_mode_ns+0x26b/0x310 [ 371.669300][ T9600] kernfs_new_node+0x137/0x240 [ 371.674640][ T9600] kernfs_create_link+0xa5/0x1f0 [ 371.680127][ T9600] sysfs_do_create_link_sd+0x85/0x110 [ 371.686879][ T9600] device_add_class_symlinks+0xc2/0x250 [ 371.692911][ T9600] device_add+0x553/0xbf0 [ 371.697360][ T9600] cdev_device_add+0x1ec/0x3a0 [ 371.703463][ T9600] evdev_connect+0x349/0x3f0 [ 371.709777][ T9600] input_register_device+0xd3b/0x1110 [ 371.716719][ T9600] uinput_create_device+0x40e/0x630 [ 371.723321][ T9600] uinput_ioctl_handler+0x488/0x1770 [ 371.729469][ T9600] ? __pfx_uinput_ioctl_handler+0x10/0x10 [ 371.735412][ T9600] ? __fget_files+0x3f3/0x470 [ 371.740373][ T9600] ? __pfx_uinput_ioctl+0x10/0x10 [ 371.745636][ T9600] __se_sys_ioctl+0xf9/0x170 [ 371.750270][ T9600] do_syscall_64+0xf3/0x230 [ 371.755189][ T9600] ? clear_bhb_loop+0x35/0x90 [ 371.760104][ T9600] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.766372][ T9600] RIP: 0033:0x7f271417dff9 [ 371.770863][ T9600] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 371.792349][ T9600] RSP: 002b:00007f2714fa7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 371.801114][ T9600] RAX: ffffffffffffffda RBX: 00007f2714335f80 RCX: 00007f271417dff9 [ 371.809299][ T9600] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 371.818344][ T9600] RBP: 00007f2714fa7090 R08: 0000000000000000 R09: 0000000000000000 [ 371.827344][ T9600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 371.835932][ T9600] R13: 0000000000000000 R14: 00007f2714335f80 R15: 00007f271445fa28 [ 371.845210][ T9600] [ 371.939129][ T5749] usb 3-1: config 0 descriptor?? [ 371.971428][ T9600] input: failed to attach handler evdev to device input41, error: -12 [ 371.984150][ T5749] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 372.183258][ T5749] gspca_vc032x: reg_r err -32 [ 372.231780][ T5749] gspca_vc032x: I2c Bus Busy Wait 00 [ 372.256505][ T5749] gspca_vc032x: I2c Bus Busy Wait 00 [ 372.281672][ T5749] gspca_vc032x: I2c Bus Busy Wait 00 [ 372.298378][ T5749] gspca_vc032x: I2c Bus Busy Wait 00 [ 372.304106][ T5749] gspca_vc032x: I2c Bus Busy Wait 00 [ 372.319993][ T5749] gspca_vc032x: I2c Bus Busy Wait 00 [ 372.358565][ T5749] gspca_vc032x: I2c Bus Busy Wait 00 [ 372.392514][ T5749] gspca_vc032x: I2c Bus Busy Wait 00 [ 372.426512][ T5749] gspca_vc032x: I2c Bus Busy Wait 00 [ 372.436413][ T5749] gspca_vc032x: I2c Bus Busy Wait 00 [ 372.438140][ T9616] netlink: 76 bytes leftover after parsing attributes in process `syz.3.913'. [ 372.441748][ T5749] gspca_vc032x: I2c Bus Busy Wait 00 [ 372.441769][ T5749] gspca_vc032x: I2c Bus Busy Wait 00 [ 372.441782][ T5749] gspca_vc032x: I2c Bus Busy Wait 00 [ 372.441795][ T5749] gspca_vc032x: I2c Bus Busy Wait 00 [ 372.441808][ T5749] gspca_vc032x: I2c Bus Busy Wait 00 [ 372.441821][ T5749] gspca_vc032x: I2c Bus Busy Wait 00 [ 372.441833][ T5749] gspca_vc032x: I2c Bus Busy Wait 00 [ 372.441846][ T5749] gspca_vc032x: I2c Bus Busy Wait 00 [ 372.509881][ T5749] gspca_vc032x: Unknown sensor... [ 372.514428][ T9622] FAULT_INJECTION: forcing a failure. [ 372.514428][ T9622] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 372.515215][ T5749] vc032x 3-1:0.0: probe with driver vc032x failed with error -22 [ 372.546769][ T9622] CPU: 1 UID: 0 PID: 9622 Comm: syz.1.915 Not tainted 6.11.0-syzkaller-11993-g3efc57369a0c #0 [ 372.557286][ T9622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 372.567660][ T9622] Call Trace: [ 372.571096][ T9622] [ 372.574069][ T9622] dump_stack_lvl+0x241/0x360 [ 372.578861][ T9622] ? __pfx_dump_stack_lvl+0x10/0x10 [ 372.584401][ T9622] ? __pfx__printk+0x10/0x10 [ 372.589170][ T9622] ? snprintf+0xda/0x120 [ 372.593961][ T9622] should_fail_ex+0x3b0/0x4e0 [ 372.598715][ T9622] _copy_to_user+0x2f/0xb0 [ 372.603213][ T9622] simple_read_from_buffer+0xca/0x150 [ 372.608663][ T9622] proc_fail_nth_read+0x1e9/0x250 [ 372.613774][ T9622] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 372.619487][ T9622] ? rw_verify_area+0x55e/0x6f0 [ 372.624445][ T9622] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 372.630067][ T9622] vfs_read+0x201/0xbc0 [ 372.634298][ T9622] ? __pfx_lock_release+0x10/0x10 [ 372.639405][ T9622] ? __pfx_vfs_read+0x10/0x10 [ 372.644241][ T9622] ? __fget_files+0x3f3/0x470 [ 372.648989][ T9622] ? fdget_pos+0x24e/0x320 [ 372.653465][ T9622] ksys_read+0x183/0x2b0 [ 372.657951][ T9622] ? __pfx_ksys_read+0x10/0x10 [ 372.662769][ T9622] ? do_syscall_64+0x100/0x230 [ 372.667604][ T9622] ? do_syscall_64+0xb6/0x230 [ 372.672374][ T9622] do_syscall_64+0xf3/0x230 [ 372.676964][ T9622] ? clear_bhb_loop+0x35/0x90 [ 372.681702][ T9622] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.687762][ T9622] RIP: 0033:0x7f48adb7ca3c [ 372.692257][ T9622] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 372.712008][ T9622] RSP: 002b:00007f48ae9b4030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 372.720572][ T9622] RAX: ffffffffffffffda RBX: 00007f48add36130 RCX: 00007f48adb7ca3c [ 372.728693][ T9622] RDX: 000000000000000f RSI: 00007f48ae9b40a0 RDI: 0000000000000004 [ 372.736719][ T9622] RBP: 00007f48ae9b4090 R08: 0000000000000000 R09: 0000000000000000 [ 372.744835][ T9622] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000001 [ 372.752869][ T9622] R13: 0000000000000001 R14: 00007f48add36130 R15: 00007f48ade5fa28 [ 372.760979][ T9622] [ 372.764140][ C1] vkms_vblank_simulate: vblank timer overrun [ 373.021825][ T9631] binder: 9630:9631 ioctl c0306201 20000080 returned -14 [ 373.573088][ T5265] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 373.588817][ T25] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 373.651147][ T5296] usb 3-1: USB disconnect, device number 64 [ 373.767095][ T5265] usb 4-1: Using ep0 maxpacket: 8 [ 373.798886][ T25] usb 2-1: Using ep0 maxpacket: 8 [ 373.815915][ T25] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 373.818250][ T5265] usb 4-1: unable to get BOS descriptor or descriptor too short [ 373.849859][ T25] usb 2-1: config 179 has no interface number 0 [ 373.865453][ T25] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 373.896816][ T25] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 373.946370][ T5265] usb 4-1: config 8 has an invalid interface number: 24 but max is 1 [ 373.952378][ T25] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 373.984395][ T5265] usb 4-1: config 8 has an invalid interface number: 242 but max is 1 [ 374.033884][ T5265] usb 4-1: config 8 has no interface number 0 [ 374.036331][ T25] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 374.044067][ T5265] usb 4-1: config 8 has no interface number 1 [ 374.113033][ T5265] usb 4-1: config 8 interface 24 altsetting 2 endpoint 0xE has invalid maxpacket 1535, setting to 1024 [ 374.124545][ T25] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 374.143031][ T5265] usb 4-1: config 8 interface 24 altsetting 2 endpoint 0x85 has an invalid bInterval 255, changing to 11 [ 374.189494][ T25] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 374.198480][ T5265] usb 4-1: config 8 interface 24 has no altsetting 0 [ 374.211408][ T5265] usb 4-1: config 8 interface 242 has no altsetting 0 [ 374.245754][ T5265] usb 4-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=75.af [ 374.266876][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.271863][ T5265] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.304041][ T5265] usb 4-1: Product: syz [ 374.312379][ T9636] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 374.340382][ T5265] usb 4-1: Manufacturer: syz [ 374.388020][ T5265] usb 4-1: SerialNumber: syz [ 374.420890][ T9658] netlink: 'syz.2.921': attribute type 10 has an invalid length. [ 374.439206][ T9637] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 374.552746][ T9658] bridge0: port 3(team0) entered disabled state [ 374.612166][ T5749] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input42 [ 374.701660][ T9658] team0: left allmulticast mode [ 374.708989][ T9658] team_slave_0: left allmulticast mode [ 374.726247][ T9658] team_slave_1: left allmulticast mode [ 374.733770][ T9658] team0: left promiscuous mode [ 374.734056][ T5236] Bluetooth: hci1: SCO packet for unknown connection handle 1481 [ 374.739802][ T9658] team_slave_0: left promiscuous mode [ 374.777087][ T9658] team_slave_1: left promiscuous mode [ 374.783149][ T9658] bridge0: port 3(team0) entered disabled state [ 374.870103][ T9636] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(11) [ 374.876796][ T9636] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 374.941905][ T9658] batman_adv: batadv0: Adding interface: team0 [ 374.986890][ T9636] vhci_hcd vhci_hcd.0: Device attached [ 375.008583][ T9658] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 375.045413][ T9658] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 375.056561][ T5265] comedi comedi0: driver 'vmk80xx' has successfully auto-configured 'K8055 (VM110)'. [ 375.153626][ T5265] vmk80xx 4-1:8.242: driver 'vmk80xx' failed to auto-configure device. [ 375.258467][ T5749] usb 11-1: new low-speed USB device number 6 using vhci_hcd [ 375.316814][ T5265] usb 4-1: USB disconnect, device number 62 [ 375.383562][ T9659] netlink: 'syz.2.921': attribute type 10 has an invalid length. [ 375.445232][ T9672] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 375.461440][ T9664] vhci_hcd: connection reset by peer [ 375.484147][ T8] usb 2-1: USB disconnect, device number 71 [ 375.484238][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 375.484287][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 375.507189][ T8] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 375.522379][ T9672] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 375.541388][ T61] vhci_hcd: stop threads [ 375.545719][ T61] vhci_hcd: release socket [ 375.550562][ T61] vhci_hcd: disconnect device [ 375.609469][ T9659] netlink: 2 bytes leftover after parsing attributes in process `syz.2.921'. [ 375.629329][ T9659] team0: entered promiscuous mode [ 375.645380][ T9659] team_slave_0: entered promiscuous mode [ 375.665458][ T9659] team_slave_1: entered promiscuous mode [ 375.807777][ T29] kauditd_printk_skb: 30 callbacks suppressed [ 375.807797][ T29] audit: type=1326 audit(1727559390.167:3506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9674 comm="syz.4.924" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f184d77dff9 code=0x0 [ 375.855515][ T9659] 8021q: adding VLAN 0 to HW filter on device team0 [ 375.865573][ T9659] batman_adv: batadv0: Interface activated: team0 [ 375.880240][ T9659] batman_adv: batadv0: Interface deactivated: team0 [ 375.888828][ T9659] batman_adv: batadv0: Removing interface: team0 [ 375.907829][ T9659] bridge0: port 3(team0) entered blocking state [ 375.914878][ T9659] bridge0: port 3(team0) entered disabled state [ 375.921978][ T9659] team0: entered allmulticast mode [ 375.927713][ T9659] team_slave_0: entered allmulticast mode [ 375.934107][ T9659] team_slave_1: entered allmulticast mode [ 375.950837][ T9659] bridge0: port 3(team0) entered blocking state [ 375.957413][ T9659] bridge0: port 3(team0) entered forwarding state [ 375.993832][ T9675] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 376.639534][ T9700] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 376.668057][ T9700] gretap1: entered promiscuous mode [ 376.673560][ T9700] gretap1: entered allmulticast mode [ 376.856718][ T25] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 376.935921][ T29] audit: type=1326 audit(1727559391.287:3507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9708 comm="syz.3.926" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f271417dff9 code=0x0 [ 376.945570][ T5236] Bluetooth: hci4: unexpected cc 0x100c length: 11 > 3 [ 376.968656][ T5296] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 376.975345][ T9705] netlink: 'syz.0.936': attribute type 4 has an invalid length. [ 376.986534][ T9705] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.936'. [ 377.059885][ T25] usb 2-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 377.069807][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.090658][ T25] usb 2-1: config 0 descriptor?? [ 377.146843][ T5296] usb 5-1: Using ep0 maxpacket: 8 [ 377.159210][ T5296] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 377.186809][ T5296] usb 5-1: config 179 has no interface number 0 [ 377.197501][ T5296] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 377.239077][ T5296] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 377.261234][ T5296] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 377.283277][ T5296] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 377.353424][ T5296] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 377.383084][ T9716] netlink: 'syz.0.938': attribute type 10 has an invalid length. [ 377.396103][ T5296] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 377.413809][ T9716] team0: left promiscuous mode [ 377.422973][ T5296] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.437628][ T9716] team_slave_0: left promiscuous mode [ 377.443801][ T9716] team_slave_1: left promiscuous mode [ 377.507362][ T9703] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 377.577998][ T9716] batman_adv: batadv0: Adding interface: team0 [ 377.584418][ T9716] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 377.611428][ T9716] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 377.662964][ T5236] Bluetooth: hci6: SCO packet for unknown connection handle 1481 [ 377.667548][ T9719] netlink: 'syz.0.938': attribute type 10 has an invalid length. [ 377.686657][ T25] gs_usb 2-1:0.0: Configuring for 1 interfaces [ 377.727424][ T9719] netlink: 2 bytes leftover after parsing attributes in process `syz.0.938'. [ 377.738006][ T9719] team0: entered promiscuous mode [ 377.761908][ T9719] team_slave_0: entered promiscuous mode [ 377.768949][ T9719] team_slave_1: entered promiscuous mode [ 377.778025][ T9719] 8021q: adding VLAN 0 to HW filter on device team0 [ 377.787774][ T9719] batman_adv: batadv0: Interface activated: team0 [ 377.797145][ T9719] batman_adv: batadv0: Interface deactivated: team0 [ 377.804074][ T9719] batman_adv: batadv0: Removing interface: team0 [ 377.914993][ T5296] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input43 [ 378.121269][ T9703] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(11) [ 378.128056][ T9703] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 378.142966][ T25] gs_usb 2-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 378.181134][ T25] gs_usb 2-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO) [ 378.221812][ T9727] netlink: 'syz.3.941': attribute type 4 has an invalid length. [ 378.238933][ T9703] vhci_hcd vhci_hcd.0: Device attached [ 378.250071][ T25] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -71 [ 378.346692][ T25] usb 2-1: USB disconnect, device number 72 [ 378.389682][ T9730] netlink: 'syz.3.941': attribute type 4 has an invalid length. [ 378.486625][ T8] usb 17-1: new low-speed USB device number 6 using vhci_hcd [ 378.511355][ T9723] vhci_hcd: connection reset by peer [ 378.519926][ T5289] usb 5-1: USB disconnect, device number 79 [ 378.520015][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 378.534529][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 378.553172][ T5289] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 378.560130][ T9734] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 378.574405][ T1303] vhci_hcd: stop threads [ 378.583100][ T1303] vhci_hcd: release socket [ 378.597834][ T1303] vhci_hcd: disconnect device [ 378.628613][ T9734] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 378.835392][ T9743] pimreg: entered allmulticast mode [ 378.853840][ T9743] pimreg: left allmulticast mode [ 378.929433][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.939235][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.082644][ T9747] netlink: 'syz.1.947': attribute type 1 has an invalid length. [ 379.104243][ T9747] netlink: 40 bytes leftover after parsing attributes in process `syz.1.947'. [ 379.146504][ T5289] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 379.285746][ T9755] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 379.286548][ T5289] usb 3-1: device descriptor read/64, error -71 [ 379.376848][ T5306] usb 2-1: new full-speed USB device number 73 using dummy_hcd [ 379.466108][ T29] audit: type=1326 audit(1727559393.817:3508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9756 comm="syz.0.950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f984c97dff9 code=0x7ffc0000 [ 379.516913][ T29] audit: type=1326 audit(1727559393.817:3509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9756 comm="syz.0.950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f984c97dff9 code=0x7ffc0000 [ 379.552038][ T29] audit: type=1326 audit(1727559393.867:3510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9756 comm="syz.0.950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f984c97dff9 code=0x7ffc0000 [ 379.590020][ T5289] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 379.613505][ T5306] usb 2-1: unable to get BOS descriptor or descriptor too short [ 379.651093][ T5306] usb 2-1: not running at top speed; connect to a high speed hub [ 379.684811][ T5306] usb 2-1: config 219 has 1 interface, different from the descriptor's value: 2 [ 379.724586][ T5306] usb 2-1: config 219 interface 0 has no altsetting 0 [ 379.745175][ T29] audit: type=1326 audit(1727559393.867:3511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9756 comm="syz.0.950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f984c97dff9 code=0x7ffc0000 [ 379.767510][ T5306] usb 2-1: config 219 interface 0 has no altsetting 1 [ 379.800551][ T5306] usb 2-1: New USB device found, idVendor=2b73, idProduct=0017, bcdDevice=a2.0e [ 379.820062][ T5306] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.838220][ T5306] usb 2-1: Product: syz [ 379.852469][ T5306] usb 2-1: Manufacturer: syz [ 379.863801][ T29] audit: type=1326 audit(1727559393.867:3512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9756 comm="syz.0.950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f984c97dff9 code=0x7ffc0000 [ 379.889870][ T5306] usb 2-1: SerialNumber: syz [ 379.896477][ T5289] usb 3-1: device descriptor read/64, error -71 [ 379.937204][ T29] audit: type=1326 audit(1727559393.867:3513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9756 comm="syz.0.950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f984c97dff9 code=0x7ffc0000 [ 380.005476][ T29] audit: type=1326 audit(1727559393.877:3514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9756 comm="syz.0.950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f984c97dff9 code=0x7ffc0000 [ 380.048305][ T5289] usb usb3-port1: attempt power cycle [ 380.080475][ T29] audit: type=1326 audit(1727559393.877:3515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9756 comm="syz.0.950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f984c97dff9 code=0x7ffc0000 [ 380.139450][ T5306] usb 2-1: selecting invalid altsetting 0 [ 380.240604][ T5306] snd-usb-audio 2-1:219.0: probe with driver snd-usb-audio failed with error -22 [ 380.292712][ T5306] usb 2-1: USB disconnect, device number 73 [ 380.384080][ T9768] netlink: 8 bytes leftover after parsing attributes in process `syz.4.952'. [ 380.416752][ T9768] netlink: 3 bytes leftover after parsing attributes in process `syz.4.952'. [ 380.461652][ T5246] udevd[5246]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:219.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 380.496418][ T5749] vhci_hcd: vhci_device speed not set [ 380.577247][ T5289] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 380.635011][ T5289] usb 3-1: device descriptor read/8, error -71 [ 380.834073][ T9779] blktrace: Concurrent blktraces are not allowed on loop0 [ 380.886831][ T5289] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 380.920077][ T5289] usb 3-1: device descriptor read/8, error -71 [ 381.026466][ T5236] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 381.037476][ T5236] Bluetooth: hci4: Injecting HCI hardware error event [ 381.048725][ T5236] Bluetooth: hci4: hardware error 0x00 [ 381.122707][ T5289] usb usb3-port1: unable to enumerate USB device [ 381.268635][ T9787] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 381.322484][ T9787] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 381.336484][ T5285] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 381.501374][ T5285] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 381.514903][ T5285] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 381.536818][ T5285] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 381.567565][ T5285] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.603252][ T9782] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 381.606908][ T9792] xt_l2tp: v2 doesn't support IP mode [ 381.618902][ T5285] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 381.884244][ T5285] usb 5-1: USB disconnect, device number 80 [ 381.896791][ T5749] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 382.087388][ T5749] usb 2-1: Using ep0 maxpacket: 16 [ 382.137897][ T5749] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 382.167783][ T5749] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 382.181833][ T5749] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 382.201079][ T5749] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 382.214598][ T5749] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.264065][ T5749] usb 2-1: config 0 descriptor?? [ 382.577180][ T9801] syz.0.964 (9801): drop_caches: 2 [ 382.602489][ T9801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 382.692751][ T9801] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 383.266571][ T5236] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 383.317191][ T5749] usbhid 2-1:0.0: can't add hid device: -71 [ 383.324683][ T5749] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 383.370873][ T5749] usb 2-1: USB disconnect, device number 74 [ 383.591798][ T9809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 383.654263][ T9809] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 383.667171][ T8] vhci_hcd: vhci_device speed not set [ 383.847830][ T9811] binder_alloc: 9810: binder_install_single_page failed to insert page at offset 1000 with -14 [ 384.520604][ T9825] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap4 [ 384.531669][ T9825] gretap4: default qdisc (pfifo_fast) fail, fallback to noqueue [ 384.542054][ T9825] gretap4: entered promiscuous mode [ 384.554921][ T9825] gretap4: entered allmulticast mode [ 384.667106][ T5749] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 384.676559][ T5288] usb 4-1: new full-speed USB device number 63 using dummy_hcd [ 384.829239][ T5288] usb 4-1: config 1 has an invalid descriptor of length 100, skipping remainder of the config [ 384.847095][ T5749] usb 2-1: device descriptor read/64, error -71 [ 384.860929][ T5288] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 384.884440][ T5288] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 384.892211][ T9834] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 384.910654][ T5288] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 384.920778][ T9834] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 384.932262][ T5288] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.937627][ T9834] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 384.951877][ T9834] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 384.968481][ T5288] hub 4-1:1.0: bad descriptor, ignoring hub [ 384.994739][ T5288] hub 4-1:1.0: probe with driver hub failed with error -5 [ 385.008529][ T5288] cdc_wdm 4-1:1.0: skipping garbage [ 385.014125][ T5288] cdc_wdm 4-1:1.0: skipping garbage [ 385.020891][ T5288] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 385.091974][ T9839] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 385.101158][ T9839] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 385.128183][ T5749] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 385.267569][ T5749] usb 2-1: device descriptor read/64, error -71 [ 385.278617][ T5233] usb 4-1: USB disconnect, device number 63 [ 385.379852][ T5749] usb usb2-port1: attempt power cycle [ 385.746593][ T5233] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 385.754406][ T5749] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 385.787090][ T5749] usb 2-1: device descriptor read/8, error -71 [ 385.804968][ T9848] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 385.820391][ T9848] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 385.844879][ T9848] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 385.858372][ T9848] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 385.914433][ T5233] usb 3-1: config index 0 descriptor too short (expected 36144, got 27) [ 385.934714][ T5233] usb 3-1: config 66 has too many interfaces: 173, using maximum allowed: 32 [ 385.962317][ T5233] usb 3-1: config 66 has an invalid descriptor of length 120, skipping remainder of the config [ 385.981298][ T5233] usb 3-1: config 66 has 0 interfaces, different from the descriptor's value: 173 [ 386.003300][ T5233] usb 3-1: New USB device found, idVendor=8086, idProduct=0630, bcdDevice=83.b4 [ 386.023706][ T5233] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.035984][ T5233] usb 3-1: Product: syz [ 386.040664][ T5749] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 386.059972][ T5233] usb 3-1: Manufacturer: syz [ 386.071242][ T5233] usb 3-1: SerialNumber: syz [ 386.090112][ T5749] usb 2-1: device descriptor read/8, error -71 [ 386.206853][ T5749] usb usb2-port1: unable to enumerate USB device [ 386.313502][ T5233] usb 3-1: USB disconnect, device number 69 [ 386.477107][ T5749] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 386.600832][ T9864] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 386.625668][ T9864] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 386.664898][ T5749] usb 4-1: Using ep0 maxpacket: 8 [ 386.682515][ T5749] usb 4-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=3a.11 [ 386.704826][ T5749] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.717551][ T5749] usb 4-1: Product: syz [ 386.721853][ T5749] usb 4-1: Manufacturer: syz [ 386.742211][ T5749] usb 4-1: SerialNumber: syz [ 386.769068][ T5749] usb 4-1: config 0 descriptor?? [ 386.789096][ T5749] gspca_main: vc032x-2.14.0 probing 046d:0896 [ 386.808194][ T9868] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 386.824551][ T9869] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 386.847070][ T9868] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 386.861861][ T9869] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 387.195075][ T5749] gspca_vc032x: reg_r err -32 [ 387.201881][ T5749] vc032x 4-1:0.0: probe with driver vc032x failed with error -32 [ 387.788765][ T9887] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 387.801932][ T9887] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 387.815702][ T9887] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 387.840286][ T9887] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 387.859427][ T9887] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 387.877036][ T9887] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 387.933201][ T5749] usb 3-1: new full-speed USB device number 70 using dummy_hcd [ 387.962517][ T5306] usb 4-1: USB disconnect, device number 64 [ 388.109833][ T5749] usb 3-1: config 1 has an invalid descriptor of length 100, skipping remainder of the config [ 388.136521][ T5749] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 388.137234][ T5749] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 388.137305][ T5749] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 388.137338][ T5749] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.156189][ T5749] hub 3-1:1.0: bad descriptor, ignoring hub [ 388.156228][ T5749] hub 3-1:1.0: probe with driver hub failed with error -5 [ 388.157483][ T5749] cdc_wdm 3-1:1.0: skipping garbage [ 388.157510][ T5749] cdc_wdm 3-1:1.0: skipping garbage [ 388.157541][ T5749] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 388.466980][ T5749] usb 3-1: USB disconnect, device number 70 [ 388.556839][ T9904] netlink: 1180 bytes leftover after parsing attributes in process `syz.1.1000'. [ 388.852414][ T52] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.060508][ T52] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.088505][ T9911] netlink: 'syz.1.1005': attribute type 12 has an invalid length. [ 389.121785][ T9910] netlink: 'syz.0.1004': attribute type 4 has an invalid length. [ 389.141162][ T9911] netlink: 'syz.1.1005': attribute type 11 has an invalid length. [ 389.169589][ T5245] Bluetooth: hci3: command 0x0406 tx timeout [ 389.206591][ T9911] netlink: 190580 bytes leftover after parsing attributes in process `syz.1.1005'. [ 389.329183][ T52] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.589626][ T52] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.621390][ T5245] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 389.632947][ T5245] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 389.650238][ T5245] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 389.659975][ T5245] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 389.668142][ T5245] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 389.677394][ T5245] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 390.372063][ T52] team0: left allmulticast mode [ 390.387170][ T52] team_slave_0: left allmulticast mode [ 390.392969][ T52] team_slave_1: left allmulticast mode [ 390.416725][ T52] bridge0: port 3(team0) entered disabled state [ 390.534678][ T52] bridge_slave_1: left allmulticast mode [ 390.557593][ T52] bridge_slave_1: left promiscuous mode [ 390.563618][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.622355][ T52] bridge_slave_0: left allmulticast mode [ 390.628549][ T52] bridge_slave_0: left promiscuous mode [ 390.634427][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.995110][ T5245] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 391.028568][ T5245] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 391.038198][ T5245] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 391.138070][ T5245] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 391.149278][ T5245] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 391.157547][ T5245] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 391.161789][ T9937] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 391.187164][ T9937] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 391.729053][ T5236] Bluetooth: hci4: command tx timeout [ 391.808693][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 391.842111][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 391.856187][ T52] bond0 (unregistering): Released all slaves [ 392.168740][ T9943] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 392.214317][ T9943] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 392.259644][ T9943] gretap1: entered promiscuous mode [ 392.264935][ T9943] gretap1: entered allmulticast mode [ 392.716761][ T9922] chnl_net:caif_netlink_parms(): no params data found [ 393.241172][ T52] hsr_slave_0: left promiscuous mode [ 393.305837][ T52] hsr_slave_1: left promiscuous mode [ 393.314610][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 393.326373][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 393.326846][ T5236] Bluetooth: hci3: command tx timeout [ 393.364506][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 393.405161][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 393.406123][ T5245] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 393.437018][ T5245] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 393.448926][ T5245] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 393.465807][ T5245] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 393.475583][ T5245] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 393.483227][ T5245] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 393.576798][ T52] veth1_macvtap: left promiscuous mode [ 393.596419][ T52] veth0_macvtap: left promiscuous mode [ 393.602202][ T52] veth1_vlan: left promiscuous mode [ 393.616515][ T52] veth0_vlan: left promiscuous mode [ 393.806993][ T5233] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 393.815263][ T5245] Bluetooth: hci4: command tx timeout [ 393.943782][ T9982] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 393.971919][ T9982] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 394.004294][ T5233] usb 2-1: Using ep0 maxpacket: 16 [ 394.025103][ T9982] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(11) [ 394.031882][ T9982] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 394.046085][ T9982] vhci_hcd vhci_hcd.0: Device attached [ 394.064908][ T5233] usb 2-1: New USB device found, idVendor=0572, idProduct=0041, bcdDevice=d5.24 [ 394.082631][ T5233] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.093691][ T5233] usb 2-1: Product: syz [ 394.099665][ T5233] usb 2-1: Manufacturer: syz [ 394.104745][ T5233] usb 2-1: SerialNumber: syz [ 394.116558][ T9983] vhci_hcd: connection closed [ 394.117019][ T148] vhci_hcd: stop threads [ 394.126105][ T148] vhci_hcd: release socket [ 394.133959][ T148] vhci_hcd: disconnect device [ 394.150266][ T5233] usb 2-1: config 0 descriptor?? [ 394.183488][ T5233] gspca_main: conex-2.14.0 probing 0572:0041 [ 394.451987][ T9979] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 394.464111][ T9979] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 394.866655][ T52] team_slave_1 (unregistering): left promiscuous mode [ 394.905048][ T52] team0 (unregistering): Port device team_slave_1 removed [ 395.025170][ T52] team_slave_0 (unregistering): left promiscuous mode [ 395.058995][ T52] team0 (unregistering): Port device team_slave_0 removed [ 395.406779][ T5245] Bluetooth: hci3: command tx timeout [ 395.570158][ T5245] Bluetooth: hci1: command tx timeout [ 395.892947][ T5245] Bluetooth: hci4: command tx timeout [ 396.182432][ T9922] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.182507][ T9922] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.182693][ T9922] bridge_slave_0: entered allmulticast mode [ 396.183896][ T9922] bridge_slave_0: entered promiscuous mode [ 396.199957][ T9922] bridge0: port 2(bridge_slave_1) entered blocking state [ 396.200037][ T9922] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.200240][ T9922] bridge_slave_1: entered allmulticast mode [ 396.201297][ T9922] bridge_slave_1: entered promiscuous mode [ 396.336624][ T9922] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 396.371880][ T9922] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 396.467960][ T5233] usb 2-1: USB disconnect, device number 79 [ 396.670874][T10003] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 396.702727][ T9939] chnl_net:caif_netlink_parms(): no params data found [ 396.710278][T10003] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 396.763547][ T9922] team0: Port device team_slave_0 added [ 396.779120][ T9922] team0: Port device team_slave_1 added [ 397.018662][ T9922] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 397.025796][ T9922] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 397.052340][ C0] vkms_vblank_simulate: vblank timer overrun [ 397.060498][ T9922] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 397.075517][ T9922] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 397.083282][ T9922] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 397.110225][ T9922] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 397.279155][ T9939] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.286728][ T9939] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.294172][ T9939] bridge_slave_0: entered allmulticast mode [ 397.303052][ T9939] bridge_slave_0: entered promiscuous mode [ 397.373215][ T9922] hsr_slave_0: entered promiscuous mode [ 397.384285][ T9922] hsr_slave_1: entered promiscuous mode [ 397.428488][ T9939] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.447218][ T9939] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.460081][ T9939] bridge_slave_1: entered allmulticast mode [ 397.467683][ T9939] bridge_slave_1: entered promiscuous mode [ 397.487562][ T5245] Bluetooth: hci3: command tx timeout [ 397.496780][ T5749] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 397.512984][ T9980] chnl_net:caif_netlink_parms(): no params data found [ 397.610143][ T9939] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 397.646559][ T5245] Bluetooth: hci1: command tx timeout [ 397.664416][ T5749] usb 2-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 397.678453][ T5749] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.696516][ T5749] usb 2-1: Product: syz [ 397.701004][ T5749] usb 2-1: Manufacturer: syz [ 397.705857][ T5749] usb 2-1: SerialNumber: syz [ 397.768078][ T5749] usb 2-1: config 0 descriptor?? [ 397.791194][ T29] kauditd_printk_skb: 53 callbacks suppressed [ 397.791216][ T29] audit: type=1326 audit(1727559412.147:3569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10024 comm="syz.0.1033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f984c974fa7 code=0x7ffc0000 [ 397.916848][ T29] audit: type=1326 audit(1727559412.187:3570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10024 comm="syz.0.1033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f984c919959 code=0x7ffc0000 [ 397.967567][ T5245] Bluetooth: hci4: command tx timeout [ 398.016728][ T29] audit: type=1326 audit(1727559412.187:3571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10024 comm="syz.0.1033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f984c974fa7 code=0x7ffc0000 [ 398.070422][ T29] audit: type=1326 audit(1727559412.187:3572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10024 comm="syz.0.1033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f984c919959 code=0x7ffc0000 [ 398.157104][ T29] audit: type=1326 audit(1727559412.187:3573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10024 comm="syz.0.1033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f984c97dff9 code=0x7ffc0000 [ 398.180605][ T29] audit: type=1326 audit(1727559412.187:3574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10024 comm="syz.0.1033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f984c97dff9 code=0x7ffc0000 [ 398.203564][ C0] vkms_vblank_simulate: vblank timer overrun [ 398.211290][ T29] audit: type=1326 audit(1727559412.187:3575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10024 comm="syz.0.1033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f984c974fa7 code=0x7ffc0000 [ 398.233841][ C0] vkms_vblank_simulate: vblank timer overrun [ 398.244611][ T9939] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 398.254749][ T29] audit: type=1326 audit(1727559412.187:3576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10024 comm="syz.0.1033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f984c919959 code=0x7ffc0000 [ 398.287021][ T29] audit: type=1326 audit(1727559412.187:3577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10024 comm="syz.0.1033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f984c97dff9 code=0x7ffc0000 [ 398.301946][ T5749] mos7840 2-1:0.0: required endpoints missing [ 398.323715][ T29] audit: type=1326 audit(1727559412.197:3578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10024 comm="syz.0.1033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f984c974fa7 code=0x7ffc0000 [ 398.411635][ T5749] usb 2-1: USB disconnect, device number 80 [ 398.531499][ T52] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.707641][T10045] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 398.765550][T10045] program syz.1.1034 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 399.241018][ T52] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.404664][ T9939] team0: Port device team_slave_0 added [ 399.484401][ T9939] team0: Port device team_slave_1 added [ 399.566818][ T5245] Bluetooth: hci3: command tx timeout [ 399.660425][ T52] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.727113][ T5245] Bluetooth: hci1: command tx timeout [ 399.752143][ T9980] bridge0: port 1(bridge_slave_0) entered blocking state [ 399.761026][ T9980] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.787021][ T9980] bridge_slave_0: entered allmulticast mode [ 399.795793][ T9980] bridge_slave_0: entered promiscuous mode [ 399.832482][ T9980] bridge0: port 2(bridge_slave_1) entered blocking state [ 399.843559][ T9980] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.851831][ T9980] bridge_slave_1: entered allmulticast mode [ 399.860570][ T9980] bridge_slave_1: entered promiscuous mode [ 399.876538][ T5285] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 399.989268][ T52] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.056494][ T5285] usb 2-1: Using ep0 maxpacket: 32 [ 400.075705][ T9980] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 400.084338][ T5285] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 400.087976][ T9939] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 400.102021][ T9939] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 400.107674][ T5285] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 400.132741][ T9939] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 400.152905][ T9939] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 400.181638][ T5285] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 400.197866][ T9939] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 400.199097][ T5285] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 400.251373][ T9939] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 400.282233][ T5285] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 400.296012][ T5285] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 400.383320][ T5285] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 400.423670][ T5285] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.470746][ T5285] usb 2-1: config 0 descriptor?? [ 400.517460][ T9980] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 400.539360][T10062] netlink: 'syz.0.1038': attribute type 4 has an invalid length. [ 400.731431][ T5285] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 81 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 400.801866][ T9980] team0: Port device team_slave_0 added [ 400.821078][ T5285] usb 2-1: USB disconnect, device number 81 [ 400.833895][T10071] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 400.845580][ T5285] usblp0: removed [ 400.847676][ T9980] team0: Port device team_slave_1 added [ 400.862873][T10071] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 400.928696][T10071] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 400.935402][T10071] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 400.950659][T10071] vhci_hcd vhci_hcd.0: Device attached [ 400.972452][T10071] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(6) [ 400.979545][T10071] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 401.016503][T10071] vhci_hcd vhci_hcd.0: Device attached [ 401.047990][T10073] vhci_hcd: connection closed [ 401.052791][T10075] vhci_hcd: connection closed [ 401.059654][ T11] vhci_hcd: stop threads [ 401.099037][ T11] vhci_hcd: release socket [ 401.116892][ T11] vhci_hcd: disconnect device [ 401.126776][ T5288] vhci_hcd: vhci_device speed not set [ 401.147216][ T11] vhci_hcd: stop threads [ 401.164024][ T11] vhci_hcd: release socket [ 401.180779][ T11] vhci_hcd: disconnect device [ 401.224666][ T9939] hsr_slave_0: entered promiscuous mode [ 401.256838][ T9939] hsr_slave_1: entered promiscuous mode [ 401.274049][ T9939] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 401.283569][ T9939] Cannot create hsr debugfs directory [ 401.446523][ T5285] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 401.626569][ T5285] usb 2-1: Using ep0 maxpacket: 32 [ 401.637759][ T9980] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 401.645471][ T9980] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 401.661096][ T5285] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 401.689744][ T5285] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 401.701141][ T5285] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 401.712646][ T5285] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 401.715961][ T9980] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 401.733479][ T5285] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 401.785570][ T5285] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 401.801946][ T5285] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 401.813554][ T5285] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.821585][ T5245] Bluetooth: hci1: command tx timeout [ 401.835920][ T5285] usb 2-1: config 0 descriptor?? [ 401.898093][ T52] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.017644][ T9980] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 402.024663][ T9980] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 402.060723][ T9980] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 402.074099][T10087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 402.075496][ T5285] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 82 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 402.095649][T10087] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 402.171806][ T52] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.283349][ T52] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.309301][ T9980] hsr_slave_0: entered promiscuous mode [ 402.316202][ T9980] hsr_slave_1: entered promiscuous mode [ 402.323057][ T9980] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 402.353013][ T5749] usb 2-1: USB disconnect, device number 82 [ 402.363204][ T5749] usblp0: removed [ 402.379701][ T9980] Cannot create hsr debugfs directory [ 402.522483][ T52] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.726056][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 402.805579][ T9922] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 402.864223][ T9922] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 403.000725][ T9922] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 403.024041][ T9922] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 403.060826][T10101] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 403.302474][T10110] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 403.468325][T10100] program syz.0.1043 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 403.751728][ T52] team0: left allmulticast mode [ 403.766410][ T52] team_slave_0: left allmulticast mode [ 403.806740][ T52] team_slave_1: left allmulticast mode [ 403.840141][ T52] bridge0: port 3(team0) entered disabled state [ 403.877441][ T52] bridge_slave_1: left allmulticast mode [ 403.883184][ T52] bridge_slave_1: left promiscuous mode [ 403.898436][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.926886][T10120] netlink: 1180 bytes leftover after parsing attributes in process `syz.0.1046'. [ 403.942991][ T52] bridge_slave_0: left allmulticast mode [ 403.949027][ T52] bridge_slave_0: left promiscuous mode [ 403.956179][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.990466][ T52] bridge_slave_1: left allmulticast mode [ 403.996405][ T52] bridge_slave_1: left promiscuous mode [ 404.002189][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 404.038559][ T52] bridge_slave_0: left allmulticast mode [ 404.044903][ T52] bridge_slave_0: left promiscuous mode [ 404.076667][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 404.168909][ T5749] usb 2-1: new full-speed USB device number 83 using dummy_hcd [ 404.356847][ T5749] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 404.368497][T10126] loop0: detected capacity change from 0 to 7 [ 404.371031][ T5749] usb 2-1: too many endpoints for config 0 interface 0 altsetting 255: 255, using maximum allowed: 30 [ 404.394636][T10126] Dev loop0: unable to read RDB block 7 [ 404.405888][ T5749] usb 2-1: config 0 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 404.411422][T10126] loop0: unable to read partition table [ 404.444620][T10126] loop0: partition table beyond EOD, truncated [ 404.452941][ T5749] usb 2-1: config 0 interface 0 has no altsetting 0 [ 404.466910][T10126] loop_reread_partitions: partition scan of loop0 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 404.466910][T10126] ) failed (rc=-5) [ 404.468873][ T5749] usb 2-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 404.543498][ T5749] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.564299][ T5749] usb 2-1: Product: syz [ 404.571544][ T5749] usb 2-1: Manufacturer: syz [ 404.576235][ T5749] usb 2-1: SerialNumber: syz [ 404.585831][ T5749] usb 2-1: config 0 descriptor?? [ 404.607438][ T5749] streamzap 2-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 404.868305][T10119] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 404.874943][T10119] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 404.885010][T10119] vhci_hcd vhci_hcd.0: Device attached [ 404.906780][T10119] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(6) [ 404.913382][T10119] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 404.922820][T10119] vhci_hcd vhci_hcd.0: Device attached [ 404.944259][T10130] vhci_hcd: connection closed [ 404.950023][ T12] vhci_hcd: stop threads [ 404.952157][T10128] vhci_hcd: connection closed [ 404.959389][ T12] vhci_hcd: release socket [ 404.959419][ T12] vhci_hcd: disconnect device [ 404.989691][ T12] vhci_hcd: stop threads [ 404.994029][ T12] vhci_hcd: release socket [ 405.008874][ T12] vhci_hcd: disconnect device [ 405.012608][ T8] usb 2-1: USB disconnect, device number 83 [ 405.056935][ T5288] vhci_hcd: vhci_device speed not set [ 405.666106][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 405.683111][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 405.695351][ T52] bond0 (unregistering): Released all slaves [ 405.945553][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 405.961402][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 405.974016][ T52] bond0 (unregistering): Released all slaves [ 406.016743][ T5749] usb 2-1: new full-speed USB device number 84 using dummy_hcd [ 406.205547][ T5749] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 406.231105][ T5749] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C [ 406.243702][ T5749] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 10 [ 406.286427][ T5749] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 212, setting to 64 [ 406.327660][ T5749] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 406.374090][ T5749] usb 2-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 406.394298][ T5749] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.417118][ T5749] usb 2-1: Product: syz [ 406.422128][ T5749] usb 2-1: Manufacturer: syz [ 406.441489][ T5749] usb 2-1: SerialNumber: syz [ 406.458380][ T5749] usb 2-1: config 0 descriptor?? [ 406.487797][T10134] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 406.631057][ T5749] rc_core: IR keymap rc-xbox-dvd not found [ 406.651933][ T5749] Registered IR keymap rc-empty [ 406.678486][ T5749] rc rc0: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 406.714319][ T5749] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input44 [ 406.801417][ T5749] usb 2-1: USB disconnect, device number 84 [ 406.807522][ C1] xbox_remote 2-1:0.0: xbox_remote_irq_in: usb_submit_urb()=-19 [ 407.047723][ T9922] 8021q: adding VLAN 0 to HW filter on device bond0 [ 407.249307][ T52] hsr_slave_0: left promiscuous mode [ 407.269638][ T5236] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 407.300329][ T5236] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 407.311664][ T5236] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 407.319927][ T52] hsr_slave_1: left promiscuous mode [ 407.331954][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 407.340378][ T5236] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 407.351193][ T5236] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 407.356810][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 407.367614][ T5236] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 407.376112][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 407.439705][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 407.528583][ T52] hsr_slave_0: left promiscuous mode [ 407.529680][T10145] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 407.540729][T10145] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 407.561076][ T52] hsr_slave_1: left promiscuous mode [ 407.563370][T10145] vhci_hcd vhci_hcd.0: Device attached [ 407.590139][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 407.613772][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 407.623165][T10145] x_tables: unsorted underflow at hook 1 [ 407.637353][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 407.644877][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 407.658918][T10146] vhci_hcd: connection closed [ 407.661985][ T35] vhci_hcd: stop threads [ 407.681097][ T35] vhci_hcd: release socket [ 407.699490][ T35] vhci_hcd: disconnect device [ 407.732193][ T52] veth1_macvtap: left promiscuous mode [ 407.745172][ T52] veth0_macvtap: left promiscuous mode [ 407.751568][ T52] veth1_vlan: left promiscuous mode [ 407.756582][ T5296] vhci_hcd: vhci_device speed not set [ 407.757475][ T52] veth0_vlan: left promiscuous mode [ 407.789900][ T52] veth1_macvtap: left promiscuous mode [ 407.806743][ T52] veth0_macvtap: left promiscuous mode [ 407.812703][ T52] veth1_vlan: left promiscuous mode [ 407.833885][ T52] veth0_vlan: left promiscuous mode [ 409.325561][T10188] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 409.368027][T10188] program syz.1.1059 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 409.488862][ T5236] Bluetooth: hci6: command tx timeout [ 409.692767][ T52] team_slave_1 (unregistering): left promiscuous mode [ 409.729048][ T52] team0 (unregistering): Port device team_slave_1 removed [ 409.873701][ T52] team_slave_0 (unregistering): left promiscuous mode [ 409.885128][ T52] team0 (unregistering): Port device team_slave_0 removed [ 411.497704][ T52] team0 (unregistering): Port device team_slave_1 removed [ 411.566708][ T5236] Bluetooth: hci6: command tx timeout [ 411.591503][ T52] team0 (unregistering): Port device team_slave_0 removed [ 412.410670][ T9939] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 412.505606][ T9939] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 412.561879][ T9922] 8021q: adding VLAN 0 to HW filter on device team0 [ 412.646900][ T9939] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 412.670864][ T9939] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 412.701898][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.709163][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 412.816195][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 412.823471][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 413.239118][ T9922] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 413.423688][ T9922] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 413.646668][ T5236] Bluetooth: hci6: command tx timeout [ 413.926518][ T9980] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 413.961400][ T9980] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 414.005594][ T9922] veth0_vlan: entered promiscuous mode [ 414.041772][ T9980] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 414.049105][ T5233] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 414.071420][ T9980] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 414.144310][ T9922] veth1_vlan: entered promiscuous mode [ 414.189735][T10141] chnl_net:caif_netlink_parms(): no params data found [ 414.222406][ T9939] 8021q: adding VLAN 0 to HW filter on device bond0 [ 414.256394][ T5233] usb 2-1: Using ep0 maxpacket: 8 [ 414.267906][ T5233] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 414.287680][ T5233] usb 2-1: config 179 has no interface number 0 [ 414.294046][ T5233] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 414.341478][ T5233] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 414.386194][ T5233] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 414.401488][ T9922] veth0_macvtap: entered promiscuous mode [ 414.419023][ T5233] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 414.457000][ T5233] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 414.467316][ T9939] 8021q: adding VLAN 0 to HW filter on device team0 [ 414.477882][ T5233] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 414.505130][ T5233] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.549553][T10209] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 414.663864][ T9922] veth1_macvtap: entered promiscuous mode [ 414.675969][T10141] bridge0: port 1(bridge_slave_0) entered blocking state [ 414.684837][T10141] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.692808][T10141] bridge_slave_0: entered allmulticast mode [ 414.702524][T10141] bridge_slave_0: entered promiscuous mode [ 414.762528][T10141] bridge0: port 2(bridge_slave_1) entered blocking state [ 414.793600][T10141] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.817168][T10141] bridge_slave_1: entered allmulticast mode [ 414.824005][ T5296] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input45 [ 414.833818][T10141] bridge_slave_1: entered promiscuous mode [ 414.893179][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 414.900461][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 414.977472][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 414.984674][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 415.060651][ T5233] usb 2-1: USB disconnect, device number 85 [ 415.060718][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 415.075215][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 415.112672][ T5233] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 415.113348][ T9922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 415.135524][ T9922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 415.145815][ T9922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 415.170164][ T9922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 415.196590][ T9922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 415.216460][ T9922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 415.236383][ T9922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 415.260297][ T9922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 415.284223][ T9922] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 415.365818][ T9922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 415.389014][ T9922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 415.406338][ T9922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 415.426570][ T9922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 415.446739][ T9922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 415.458322][ T9922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 415.471395][ T9922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 415.483125][ T9922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 415.495221][ T9922] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 415.506053][ T9922] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.515058][ T9922] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.523963][ T9922] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.533077][ T9922] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.570129][T10141] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 415.591009][T10141] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 415.727637][ T5236] Bluetooth: hci6: command tx timeout [ 415.761750][T10141] team0: Port device team_slave_0 added [ 415.809101][T10141] team0: Port device team_slave_1 added [ 415.824782][T10239] binder: 10238:10239 ioctl c0306201 20000080 returned -14 [ 415.860288][T10239] binder: 10238:10239 unknown command 1078485782 [ 415.897209][T10239] binder: 10238:10239 ioctl c0306201 20000380 returned -22 [ 415.967200][T10141] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 415.991074][T10141] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 416.031027][T10141] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 416.124540][T10141] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 416.145750][T10141] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 416.184074][T10141] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 416.313005][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 416.326598][ T5306] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 416.346658][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 416.378056][ T9939] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 416.412119][T10141] hsr_slave_0: entered promiscuous mode [ 416.421325][T10141] hsr_slave_1: entered promiscuous mode [ 416.432405][T10141] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 416.440922][T10141] Cannot create hsr debugfs directory [ 416.496740][ T5306] usb 2-1: Using ep0 maxpacket: 16 [ 416.511068][ T5306] usb 2-1: config 0 has an invalid interface number: 34 but max is 0 [ 416.536417][ T5306] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 416.555170][ T9980] 8021q: adding VLAN 0 to HW filter on device bond0 [ 416.586434][ T5306] usb 2-1: config 0 has no interface number 0 [ 416.592623][ T5306] usb 2-1: config 0 interface 34 has no altsetting 0 [ 416.615066][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 416.639162][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 416.639160][ T5306] usb 2-1: New USB device found, idVendor=28bd, idProduct=0934, bcdDevice= 0.00 [ 416.639198][ T5306] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.727407][ T5306] usb 2-1: config 0 descriptor?? [ 416.750084][ T9980] 8021q: adding VLAN 0 to HW filter on device team0 [ 416.858686][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.865864][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 416.997150][T10246] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 417.014551][T10246] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 417.119664][ T148] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.126941][ T148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 417.152895][T10266] binder: BC_ATTEMPT_ACQUIRE not supported [ 417.176890][T10266] binder: 10245:10266 ioctl c0306201 20000380 returned -22 [ 417.192546][ T9939] veth0_vlan: entered promiscuous mode [ 417.253980][ T5306] usb 2-1: string descriptor 0 read error: -71 [ 417.271622][ T5306] hub 2-1:0.34: bad descriptor, ignoring hub [ 417.283277][ T5306] hub 2-1:0.34: probe with driver hub failed with error -5 [ 417.289061][ T5289] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 417.331463][ T5306] usb 2-1: USB disconnect, device number 86 [ 417.480614][T10141] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 417.509874][T10141] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.511814][ T5289] usb 4-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 417.544014][ T9939] veth1_vlan: entered promiscuous mode [ 417.549389][ T5289] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.575377][ T5289] usb 4-1: config 0 descriptor?? [ 417.669723][T10141] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 417.690553][T10141] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.799540][T10141] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 417.846457][T10141] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.964195][ T9939] veth0_macvtap: entered promiscuous mode [ 418.092940][T10141] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 418.116552][T10141] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.121940][ T5289] gs_usb 4-1:0.0: Couldn't get device config: (err=-71) [ 418.167408][ T5289] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -71 [ 418.229590][ T9939] veth1_macvtap: entered promiscuous mode [ 418.250020][ T5289] usb 4-1: USB disconnect, device number 65 [ 418.330145][ T9980] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 418.384475][ T9939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 418.446519][ T9939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.468297][ T9939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 418.486894][ T9939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.505475][ T9939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 418.527009][ T9939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.539096][ T9939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 418.550756][ T9939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.561182][ T9939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 418.572152][ T9939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.584253][ T9939] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 418.644135][ T9939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 418.667503][ T9939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.687307][ T9939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 418.699297][ T9939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.721037][ T9939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 418.747314][ T9939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.776332][ T9939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 418.791912][ T9939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.802388][ T9939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 418.814225][ T9939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.827612][ T9939] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 418.884180][ T9939] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.894300][ T9939] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.904163][ T9939] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.922249][ T9939] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.967321][T10296] netlink: 'syz.3.1066': attribute type 10 has an invalid length. [ 419.035445][T10296] batman_adv: batadv0: Adding interface: team0 [ 419.044366][T10296] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 419.076772][T10296] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 419.137988][ T5236] Bluetooth: hci4: SCO packet for unknown connection handle 1481 [ 419.183344][T10299] netlink: 'syz.3.1066': attribute type 10 has an invalid length. [ 419.203563][T10299] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1066'. [ 419.235481][T10299] team0: entered promiscuous mode [ 419.243967][T10299] team_slave_0: entered promiscuous mode [ 419.266710][T10299] team_slave_1: entered promiscuous mode [ 419.317576][T10299] 8021q: adding VLAN 0 to HW filter on device team0 [ 419.337316][T10299] batman_adv: batadv0: Interface activated: team0 [ 419.359552][T10299] batman_adv: batadv0: Interface deactivated: team0 [ 419.374130][T10299] batman_adv: batadv0: Removing interface: team0 [ 419.409129][T10299] bridge0: port 3(team0) entered blocking state [ 419.448610][T10299] bridge0: port 3(team0) entered disabled state [ 419.560905][T10299] team0: entered allmulticast mode [ 419.575237][T10299] team_slave_0: entered allmulticast mode [ 419.581992][T10299] team_slave_1: entered allmulticast mode [ 419.601146][T10299] bridge0: port 3(team0) entered blocking state [ 419.607602][T10299] bridge0: port 3(team0) entered forwarding state [ 419.716226][T10141] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 419.780563][ T9980] veth0_vlan: entered promiscuous mode [ 419.812005][T10141] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 419.826563][ T5265] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 419.864463][ T9980] veth1_vlan: entered promiscuous mode [ 419.891140][T10141] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 419.934740][T10320] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1071'. [ 419.956508][ T5265] usb 2-1: device descriptor read/64, error -71 [ 419.974767][T10141] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 420.207213][ T5265] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 420.256539][ T1303] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 420.264631][ T1303] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 420.347256][ T9980] veth0_macvtap: entered promiscuous mode [ 420.357607][ T5265] usb 2-1: device descriptor read/64, error -71 [ 420.424251][ T9980] veth1_macvtap: entered promiscuous mode [ 420.477183][ T5265] usb usb2-port1: attempt power cycle [ 420.505757][ T1303] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 420.548787][ T1303] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 420.630765][ T9980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 420.720896][ T9980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.772119][ T9980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 420.814262][ T9980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.845103][ T9980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 420.866402][ T5265] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 420.886438][ T9980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.916575][ T9980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 420.928296][ T5265] usb 2-1: device descriptor read/8, error -71 [ 420.945186][ T9980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.976460][ T9980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 420.996528][ T9980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.021234][ T9980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 421.040025][ T9980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.069365][ T9980] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 421.110638][ T9980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 421.146453][ T9980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.176616][ T5265] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 421.216187][ T9980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 421.237504][ T9980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.247660][ T5265] usb 2-1: device descriptor read/8, error -71 [ 421.263831][ T9980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 421.277538][ T29] kauditd_printk_skb: 137 callbacks suppressed [ 421.277561][ T29] audit: type=1326 audit(1727559435.637:3716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10343 comm="syz.4.1011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7a9b7dff9 code=0x7ffc0000 [ 421.337582][ T9980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.356870][ T5265] usb usb2-port1: unable to enumerate USB device [ 421.357988][ T29] audit: type=1326 audit(1727559435.637:3717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10343 comm="syz.4.1011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7a9b7dff9 code=0x7ffc0000 [ 421.373844][ T9980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 421.426424][ T29] audit: type=1326 audit(1727559435.677:3718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10343 comm="syz.4.1011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fa7a9b7dff9 code=0x7ffc0000 [ 421.452551][ T9980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.481503][ T9980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 421.485259][ T29] audit: type=1326 audit(1727559435.677:3719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10343 comm="syz.4.1011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7a9b7dff9 code=0x7ffc0000 [ 421.496475][ T9980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.526876][ T29] audit: type=1326 audit(1727559435.677:3720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10343 comm="syz.4.1011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7a9b7dff9 code=0x7ffc0000 [ 421.553889][ T29] audit: type=1326 audit(1727559435.677:3721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10343 comm="syz.4.1011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa7a9b7c990 code=0x7ffc0000 [ 421.582256][ T9980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 421.594082][ T29] audit: type=1326 audit(1727559435.677:3722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10343 comm="syz.4.1011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7a9b7dff9 code=0x7ffc0000 [ 421.621728][ T9980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.647501][ T9980] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 421.657629][ T5749] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 421.697397][ T29] audit: type=1326 audit(1727559435.677:3723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10343 comm="syz.4.1011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7a9b7dff9 code=0x7ffc0000 [ 421.757157][ T9980] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.782477][ T9980] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.792152][ T29] audit: type=1326 audit(1727559435.677:3724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10343 comm="syz.4.1011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa7a9b7c990 code=0x7ffc0000 [ 421.829366][ T9980] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.851839][ T9980] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.861897][ T29] audit: type=1326 audit(1727559435.687:3725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10343 comm="syz.4.1011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7a9b7dff9 code=0x7ffc0000 [ 421.863013][ T5749] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 421.948748][ T5749] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.005907][T10141] 8021q: adding VLAN 0 to HW filter on device bond0 [ 422.029647][ T5749] usb 5-1: config 0 descriptor?? [ 422.058756][ T5749] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 422.183111][T10141] 8021q: adding VLAN 0 to HW filter on device team0 [ 422.224137][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 422.263902][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 422.266355][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 422.272886][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 422.369281][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.376627][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 422.422365][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 422.433025][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 422.497859][ T5749] gspca_stv06xx: I2C: Read error writing address: -71 [ 422.524648][ T5749] usb 5-1: USB disconnect, device number 81 [ 422.536714][ T5306] usb 4-1: new full-speed USB device number 66 using dummy_hcd [ 422.575470][T10141] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 422.711262][ T5306] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x99, changing to 0x89 [ 422.731672][T10141] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 422.754455][ T5306] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 10 [ 422.799783][ T5306] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 255, setting to 64 [ 422.863558][ T5306] usb 4-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 422.886696][ T5306] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.912446][ T5306] usb 4-1: Product: syz [ 422.931748][ T5306] usb 4-1: Manufacturer: syz [ 422.966482][ T5306] usb 4-1: SerialNumber: syz [ 422.974543][T10141] veth0_vlan: entered promiscuous mode [ 422.980116][ T5306] usb 4-1: config 0 descriptor?? [ 423.006715][T10351] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 423.048048][T10141] veth1_vlan: entered promiscuous mode [ 423.076074][T10141] veth0_macvtap: entered promiscuous mode [ 423.149725][T10141] veth1_macvtap: entered promiscuous mode [ 423.171524][T10141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 423.183871][T10141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.201410][T10141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 423.219711][T10141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.249637][T10141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 423.271061][ T5306] rc_core: IR keymap rc-streamzap not found [ 423.287299][ T5306] Registered IR keymap rc-empty [ 423.296701][T10141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.313028][ T5306] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 423.313048][T10351] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 423.313075][T10351] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 423.348778][T10141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 423.370247][ T5306] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input46 [ 423.370691][T10351] vhci_hcd vhci_hcd.0: Device attached [ 423.395132][T10141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.437902][T10141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 423.504909][T10141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.546559][ T5265] vhci_hcd: vhci_device speed not set [ 423.546637][T10141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 423.575087][ T5285] usb 4-1: USB disconnect, device number 66 [ 423.575682][T10366] vhci_hcd: connection closed [ 423.586471][ T52] vhci_hcd: stop threads [ 423.595518][ T52] vhci_hcd: release socket [ 423.606458][ T5265] usb 15-1: new low-speed USB device number 6 using vhci_hcd [ 423.607295][ T52] vhci_hcd: disconnect device [ 423.619479][T10141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.638344][T10141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 423.656374][T10141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.682804][T10141] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 423.779156][T10141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 423.841690][T10141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.886747][T10141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 423.936434][T10141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.989579][T10141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 424.017221][T10141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.050515][T10382] syz.2.1079 (10382): drop_caches: 2 [ 424.056462][T10141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 424.083747][T10141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.105579][T10141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 424.127008][T10141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.146455][T10141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 424.175690][T10141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.195456][T10141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 424.219087][T10141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.254484][T10141] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 424.330300][T10383] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1080'. [ 424.337467][ T5289] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 424.431853][T10141] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.456413][T10141] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.496411][T10141] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.525978][T10141] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.546491][ T5289] usb 3-1: Using ep0 maxpacket: 32 [ 424.569652][ T5289] usb 3-1: unable to get BOS descriptor or descriptor too short [ 424.602732][ T5289] usb 3-1: config 1 interface 0 altsetting 14 endpoint 0x81 has an invalid bInterval 40, changing to 9 [ 424.641649][ T5289] usb 3-1: config 1 interface 0 altsetting 14 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 424.684067][ T5289] usb 3-1: config 1 interface 0 has no altsetting 0 [ 424.724408][ T5289] usb 3-1: New USB device found, idVendor=05ac, idProduct=025b, bcdDevice= 0.40 [ 424.777889][ T5289] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.788691][ T5289] usb 3-1: Product: syz [ 424.794061][ T5289] usb 3-1: Manufacturer: syz [ 424.816947][ T5289] usb 3-1: SerialNumber: syz [ 424.906431][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 424.942088][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 425.009111][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 425.031644][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 425.056570][ T5290] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 425.113671][ T5289] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input47 [ 425.177068][ T4669] bcm5974 3-1:1.0: could not read from device [ 425.225780][ T4669] bcm5974 3-1:1.0: could not read from device [ 425.232700][ T5306] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 425.233082][ T5289] usb 3-1: USB disconnect, device number 71 [ 425.248865][ T5290] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 425.261818][ T5290] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 425.279008][ T5290] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 425.289337][T10408] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 425.298177][T10408] gretap1: entered promiscuous mode [ 425.306526][ T4669] bcm5974 3-1:1.0: could not read from device [ 425.313895][T10408] gretap1: entered allmulticast mode [ 425.345227][ T5290] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 425.418167][ T5306] usb 5-1: Using ep0 maxpacket: 8 [ 425.425456][ T5306] usb 5-1: config index 0 descriptor too short (expected 6427, got 27) [ 425.438888][ T5290] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 425.460017][ T5306] usb 5-1: config 0 has too many interfaces: 241, using maximum allowed: 32 [ 425.493699][ T5290] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 425.506952][ T5306] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 241 [ 425.548992][ T5290] usb 2-1: Manufacturer: syz [ 425.563421][ T5306] usb 5-1: config 0 has no interface number 0 [ 425.577479][ T5290] usb 2-1: config 0 descriptor?? [ 425.592201][ T5306] usb 5-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 425.624126][ T5306] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 425.643810][T10410] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1086'. [ 425.664359][ T5306] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 425.678197][T10410] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.679534][ T5306] usb 5-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 425.686204][T10410] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.701294][ T5306] usb 5-1: New USB device strings: Mfr=228, Product=255, SerialNumber=0 [ 425.704668][T10410] bridge0: entered allmulticast mode [ 425.720364][ T5306] usb 5-1: Product: syz [ 425.724808][ T5306] usb 5-1: Manufacturer: syz [ 425.733298][T10411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 425.754706][ T5306] usb 5-1: config 0 descriptor?? [ 425.765508][T10404] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 425.767250][T10411] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 426.062145][ T5290] appleir 0003:05AC:8243.000B: item fetching failed at offset 0/1 [ 426.073627][ T5290] appleir 0003:05AC:8243.000B: parse failed [ 426.080491][ T5290] appleir 0003:05AC:8243.000B: probe with driver appleir failed with error -22 [ 426.186610][ T9] usb 3-1: new full-speed USB device number 72 using dummy_hcd [ 426.282228][T10401] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1084'. [ 426.300467][ T5285] usb 2-1: USB disconnect, device number 91 [ 426.363572][ T9] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x99, changing to 0x89 [ 426.397645][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 10 [ 426.399149][ T5306] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.21/input/input48 [ 426.428756][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 255, setting to 64 [ 426.490498][ T9] usb 3-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 426.526985][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.556453][ T9] usb 3-1: Product: syz [ 426.560869][ T9] usb 3-1: Manufacturer: syz [ 426.565601][ T9] usb 3-1: SerialNumber: syz [ 426.732269][ T9] usb 3-1: config 0 descriptor?? [ 426.747675][T10413] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 426.773923][ T5306] usb 5-1: USB disconnect, device number 82 [ 426.774001][ C1] keyspan_remote 5-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19 [ 426.902788][T10422] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 426.947981][ T5285] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 426.964481][T10422] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 426.987036][ T9] rc_core: IR keymap rc-streamzap not found [ 426.993150][ T9] Registered IR keymap rc-empty [ 427.000416][ T9] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 427.012911][T10413] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 427.019492][T10413] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 427.031014][ T9] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input49 [ 427.049639][T10413] vhci_hcd vhci_hcd.0: Device attached [ 427.060584][T10425] vhci_hcd: connection closed [ 427.061050][ T11] vhci_hcd: stop threads [ 427.075046][ T11] vhci_hcd: release socket [ 427.084323][ T11] vhci_hcd: disconnect device [ 427.111123][ T9] usb 3-1: USB disconnect, device number 72 [ 427.129303][ T5285] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 427.141656][ T5285] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 427.161585][ T5285] usb 4-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 427.174350][ T5285] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.190284][ T5285] usb 4-1: config 0 descriptor?? [ 427.246591][ T5233] usb 2-1: new full-speed USB device number 92 using dummy_hcd [ 427.408396][ T5233] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 427.434005][ T5233] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 427.449855][ T5233] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 427.468132][ T5233] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 427.477752][ T5233] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.497453][T10427] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 427.514761][ T5233] hub 2-1:1.0: bad descriptor, ignoring hub [ 427.524059][ T5233] hub 2-1:1.0: probe with driver hub failed with error -5 [ 427.532909][ T5233] cdc_wdm 2-1:1.0: skipping garbage [ 427.543422][ T5233] cdc_wdm 2-1:1.0: skipping garbage [ 427.550338][ T5233] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 427.581404][ T5233] cdc_wdm 2-1:1.0: Unknown control protocol [ 427.649661][ T5285] hid-multitouch 0003:1FD2:6007.000C: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.3-1/input0 [ 427.675911][ T9] usb 5-1: new full-speed USB device number 83 using dummy_hcd [ 427.767790][T10434] FAULT_INJECTION: forcing a failure. [ 427.767790][T10434] name failslab, interval 1, probability 0, space 0, times 0 [ 427.803022][T10434] CPU: 1 UID: 0 PID: 10434 Comm: syz.2.1095 Not tainted 6.11.0-syzkaller-11993-g3efc57369a0c #0 [ 427.813531][T10434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 427.823639][T10434] Call Trace: [ 427.827051][T10434] [ 427.830016][T10434] dump_stack_lvl+0x241/0x360 [ 427.834735][T10434] ? __pfx_dump_stack_lvl+0x10/0x10 [ 427.839981][T10434] ? __pfx__printk+0x10/0x10 [ 427.844614][T10434] ? kmem_cache_alloc_noprof+0x44/0x2a0 [ 427.850285][T10434] ? __pfx___might_resched+0x10/0x10 [ 427.855711][T10434] should_fail_ex+0x3b0/0x4e0 [ 427.860472][T10434] ? alloc_empty_file+0x9e/0x1d0 [ 427.865448][T10434] should_failslab+0xac/0x100 [ 427.870165][T10434] ? alloc_empty_file+0x9e/0x1d0 [ 427.875161][T10434] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 427.880589][T10434] alloc_empty_file+0x9e/0x1d0 [ 427.885417][T10434] path_openat+0x107/0x3590 [ 427.890231][T10434] ? stack_trace_save+0x118/0x1d0 [ 427.895351][T10434] ? __pfx_stack_trace_save+0x10/0x10 [ 427.901339][T10434] ? mark_lock+0x9a/0x360 [ 427.905753][T10434] ? __lock_acquire+0x1384/0x2050 [ 427.910820][T10434] ? __pfx_path_openat+0x10/0x10 [ 427.915813][T10434] do_filp_open+0x235/0x490 [ 427.920355][T10434] ? __pfx_do_filp_open+0x10/0x10 [ 427.925605][T10434] ? _raw_spin_unlock+0x28/0x50 [ 427.930511][T10434] ? alloc_fd+0x5a1/0x640 [ 427.934885][T10434] do_sys_openat2+0x13e/0x1d0 [ 427.939722][T10434] ? __pfx_do_sys_openat2+0x10/0x10 [ 427.945007][T10434] __x64_sys_openat+0x247/0x2a0 [ 427.951621][T10434] ? __pfx___x64_sys_openat+0x10/0x10 [ 427.958155][T10434] ? do_syscall_64+0x100/0x230 [ 427.962974][T10434] ? do_syscall_64+0xb6/0x230 [ 427.967693][T10434] do_syscall_64+0xf3/0x230 [ 427.972334][T10434] ? clear_bhb_loop+0x35/0x90 [ 427.977161][T10434] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.983118][T10434] RIP: 0033:0x7faa5037dff9 [ 427.987754][T10434] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 428.007401][T10434] RSP: 002b:00007faa510fc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 428.015872][T10434] RAX: ffffffffffffffda RBX: 00007faa50535f80 RCX: 00007faa5037dff9 [ 428.023869][T10434] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: ffffffffffffff9c [ 428.031866][T10434] RBP: 00007faa510fc090 R08: 0000000000000000 R09: 0000000000000000 [ 428.039865][T10434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 428.047865][T10434] R13: 0000000000000000 R14: 00007faa50535f80 R15: 00007faa5065fa28 [ 428.055988][T10434] [ 428.085500][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 428.107478][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 428.146672][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 428.160955][T10419] binder: 10418:10419 ioctl c0306201 0 returned -14 [ 428.187427][ T9] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 428.216381][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.255037][T10430] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 428.268387][ T9] hub 5-1:1.0: bad descriptor, ignoring hub [ 428.281915][ T9] hub 5-1:1.0: probe with driver hub failed with error -5 [ 428.294827][T10439] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 428.307463][ T9] cdc_wdm 5-1:1.0: skipping garbage [ 428.312874][ T9] cdc_wdm 5-1:1.0: skipping garbage [ 428.331473][T10439] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 428.348427][ T5288] usb 4-1: USB disconnect, device number 67 [ 428.756784][ T5265] vhci_hcd: vhci_device speed not set [ 428.815735][T10427] cdc_wdm 2-1:1.0: Error autopm - -16 [ 428.816097][ T5749] usb 2-1: USB disconnect, device number 92 [ 428.829827][T10435] cdc_wdm 2-1:1.0: Error autopm - -16 [ 428.838439][T10437] cdc_wdm 2-1:1.0: Error autopm - -16 [ 428.872138][T10430] cdc_wdm 2-1:1.0: Error autopm - -16 [ 428.878776][T10456] cdc_wdm 2-1:1.0: Error autopm - -16 [ 428.884958][T10446] cdc_wdm 2-1:1.0: Error autopm - -16 [ 428.885419][ T9] cdc_wdm 5-1:1.0: cdc-wdm1: USB WDM device [ 428.913196][ T9] cdc_wdm 5-1:1.0: Unknown control protocol [ 428.950714][ T9] usb 5-1: USB disconnect, device number 83 [ 429.232373][T10463] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 429.246070][T10463] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 429.636516][ T5749] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 429.730684][T10475] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1109'. [ 429.809292][T10475] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 429.819747][T10475] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 429.830055][T10475] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 429.839056][T10475] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 429.855426][ T5749] usb 4-1: Using ep0 maxpacket: 32 [ 429.883966][ T5749] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 429.896594][T10475] vxlan0: entered promiscuous mode [ 429.915146][ T5749] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.923372][ T5749] usb 4-1: Product: syz [ 429.927788][ T5749] usb 4-1: Manufacturer: syz [ 429.929256][T10479] unknown channel width for channel at 909000KHz? [ 429.932606][ T5749] usb 4-1: SerialNumber: syz [ 429.962546][ T5749] usb 4-1: config 0 descriptor?? [ 430.587816][T10490] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 430.670713][ T5749] airspy 4-1:0.0: Board ID: 00 [ 430.675673][ T5749] airspy 4-1:0.0: Firmware version: [ 430.698694][T10490] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 430.881379][ T5236] Bluetooth: hci4: unexpected cc 0x0c56 length: 33 > 1 [ 430.881426][ T5233] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 430.916196][T10467] pim6reg: entered allmulticast mode [ 431.057996][T10466] delete_channel: no stack [ 431.146457][ T5233] usb 5-1: Using ep0 maxpacket: 8 [ 431.154397][ T5233] usb 5-1: config index 0 descriptor too short (expected 6427, got 27) [ 431.185661][ T5233] usb 5-1: config 0 has too many interfaces: 241, using maximum allowed: 32 [ 431.215287][ T5233] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 241 [ 431.225342][ T5233] usb 5-1: config 0 has no interface number 0 [ 431.232338][ T5306] usb 3-1: new full-speed USB device number 73 using dummy_hcd [ 431.284410][ T5233] usb 5-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 431.350070][ T5233] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 431.361524][ T5233] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 431.378374][ T5233] usb 5-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 431.392062][ T5233] usb 5-1: New USB device strings: Mfr=228, Product=255, SerialNumber=0 [ 431.410360][ T5233] usb 5-1: Product: syz [ 431.425798][ T5233] usb 5-1: Manufacturer: syz [ 431.434041][ T5306] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 431.446116][ T5306] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 431.479846][ T5233] usb 5-1: config 0 descriptor?? [ 431.492209][T10486] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 431.521318][ T5306] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 431.576371][ T5749] airspy 4-1:0.0: usb_control_msg() failed -71 request 11 [ 431.586505][ T5749] airspy 4-1:0.0: Registered as swradio16 [ 431.592349][ T5749] airspy 4-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 431.605254][ T5306] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 431.616461][ T5306] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.628791][ T5749] usb 4-1: USB disconnect, device number 68 [ 431.650634][T10496] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 431.702733][ T5306] hub 3-1:1.0: bad descriptor, ignoring hub [ 431.776385][ T5306] hub 3-1:1.0: probe with driver hub failed with error -5 [ 431.821230][ T5306] cdc_wdm 3-1:1.0: skipping garbage [ 431.846728][ T5306] cdc_wdm 3-1:1.0: skipping garbage [ 431.910874][ T5306] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 431.963850][ T5306] cdc_wdm 3-1:1.0: Unknown control protocol [ 432.018557][ T5306] usb 3-1: USB disconnect, device number 73 [ 432.050013][T10500] syz.0.1118 (10500): drop_caches: 2 [ 432.143030][ T5233] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.21/input/input50 [ 432.258497][T10500] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 432.331077][T10500] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 432.544932][ T5306] usb 5-1: USB disconnect, device number 84 [ 432.551059][ C1] keyspan_remote 5-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19 [ 432.666546][T10502] could not allocate digest TFM handle vmac(des3_ede) [ 432.867906][T10513] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1121'. [ 433.219266][ T5555] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.577476][ T5245] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 433.591989][ T5245] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 433.604196][ T5245] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 433.626728][ T5245] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 433.651916][ T5245] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 433.663559][ T5245] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 433.745687][T10526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 433.918199][T10526] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 433.955933][ T29] kauditd_printk_skb: 50 callbacks suppressed [ 433.955957][ T29] audit: type=1326 audit(1727559448.307:3776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10530 comm="syz.2.1129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa5037dff9 code=0x7ffc0000 [ 434.045413][ T5555] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.082957][ T29] audit: type=1326 audit(1727559448.307:3777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10530 comm="syz.2.1129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa5037dff9 code=0x7ffc0000 [ 434.106938][ C0] vkms_vblank_simulate: vblank timer overrun [ 434.115486][ T29] audit: type=1326 audit(1727559448.377:3778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10530 comm="syz.2.1129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7faa5037dff9 code=0x7ffc0000 [ 434.139162][ C0] vkms_vblank_simulate: vblank timer overrun [ 434.148718][ T5233] usb 4-1: new full-speed USB device number 69 using dummy_hcd [ 434.149143][ T29] audit: type=1326 audit(1727559448.377:3779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10530 comm="syz.2.1129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa5037dff9 code=0x7ffc0000 [ 434.183634][ T29] audit: type=1326 audit(1727559448.377:3780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10530 comm="syz.2.1129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa5037dff9 code=0x7ffc0000 [ 434.212365][ C0] vkms_vblank_simulate: vblank timer overrun [ 434.225791][ T29] audit: type=1326 audit(1727559448.387:3781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10530 comm="syz.2.1129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7faa5037dbfb code=0x7ffc0000 [ 434.249630][ T29] audit: type=1326 audit(1727559448.387:3782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10530 comm="syz.2.1129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa5037dff9 code=0x7ffc0000 [ 434.273751][ C0] vkms_vblank_simulate: vblank timer overrun [ 434.282418][ T5265] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 434.299140][ T29] audit: type=1326 audit(1727559448.387:3783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10530 comm="syz.2.1129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa5037dff9 code=0x7ffc0000 [ 434.326395][ C0] vkms_vblank_simulate: vblank timer overrun [ 434.337428][ T29] audit: type=1326 audit(1727559448.387:3784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10530 comm="syz.2.1129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7faa5037c990 code=0x7ffc0000 [ 434.352443][ T5555] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.363947][ T9] usb 5-1: new full-speed USB device number 85 using dummy_hcd [ 434.377144][ T5233] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 434.397227][ T5233] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 434.416356][ T5233] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 434.443359][ T29] audit: type=1326 audit(1727559448.387:3785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10530 comm="syz.2.1129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7faa5037dbfb code=0x7ffc0000 [ 434.446344][ T5233] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 434.471504][ C0] vkms_vblank_simulate: vblank timer overrun [ 434.490723][ T5233] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.517959][ T5265] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 434.537717][ T5265] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.548058][T10529] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 434.551599][ T5265] usb 3-1: Product: syz [ 434.564503][ T5265] usb 3-1: Manufacturer: syz [ 434.568857][ T5233] hub 4-1:1.0: bad descriptor, ignoring hub [ 434.570088][ T5265] usb 3-1: SerialNumber: syz [ 434.580504][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 434.583068][ T5555] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.595386][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 434.617243][ T5265] usb 3-1: config 0 descriptor?? [ 434.632859][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 434.635900][ T5233] hub 4-1:1.0: probe with driver hub failed with error -5 [ 434.647642][ T9] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 434.669733][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.683655][ T5233] cdc_wdm 4-1:1.0: skipping garbage [ 434.692818][T10535] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22 [ 434.712088][ T9] hub 5-1:1.0: bad descriptor, ignoring hub [ 434.723613][ T5233] cdc_wdm 4-1:1.0: skipping garbage [ 434.739843][ T9] hub 5-1:1.0: probe with driver hub failed with error -5 [ 434.748678][ T9] cdc_wdm 5-1:1.0: skipping garbage [ 434.754612][ T9] cdc_wdm 5-1:1.0: skipping garbage [ 434.762655][ T9] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 434.775613][ T9] cdc_wdm 5-1:1.0: Unknown control protocol [ 434.814834][ T5233] cdc_wdm 4-1:1.0: cdc-wdm1: USB WDM device [ 434.839576][ T5265] hso 3-1:0.0: Failed to find BULK IN ep [ 434.852796][ T5233] cdc_wdm 4-1:1.0: Unknown control protocol [ 434.909050][ T5233] usb 4-1: USB disconnect, device number 69 [ 434.919297][ T5265] usb-storage 3-1:0.0: USB Mass Storage device detected [ 435.103314][T10545] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 435.121950][T10545] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 435.224162][T10527] chnl_net:caif_netlink_parms(): no params data found [ 435.236114][ T5265] usb 3-1: USB disconnect, device number 74 [ 435.313938][ T5555] bridge_slave_1: left allmulticast mode [ 435.325314][ T5555] bridge_slave_1: left promiscuous mode [ 435.332369][ T5555] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.347441][ T5555] bridge_slave_0: left allmulticast mode [ 435.353567][ T5555] bridge_slave_0: left promiscuous mode [ 435.361312][ T5555] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.704818][T10550] binder: 10549:10550 ioctl c0306201 20000380 returned -14 [ 435.806892][ T5236] Bluetooth: hci2: command tx timeout [ 435.818257][T10535] cdc_wdm 5-1:1.0: Error autopm - -16 [ 435.824641][ T5749] usb 5-1: USB disconnect, device number 85 [ 435.849963][T10545] cdc_wdm 5-1:1.0: Error autopm - -16 [ 435.874843][T10553] program syz.2.1134 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 435.894438][T10544] cdc_wdm 5-1:1.0: Error autopm - -16 [ 435.916470][T10547] cdc_wdm 5-1:1.0: Error autopm - -16 [ 436.318364][ T5265] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 436.520606][ T5265] usb 3-1: Using ep0 maxpacket: 8 [ 436.532627][ T5265] usb 3-1: config index 0 descriptor too short (expected 6427, got 27) [ 436.542091][ T5265] usb 3-1: config 0 has too many interfaces: 241, using maximum allowed: 32 [ 436.563829][ T5265] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 241 [ 436.588747][ T5265] usb 3-1: config 0 has no interface number 0 [ 436.608370][ T5265] usb 3-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 436.639160][ T5265] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 436.686399][ T5265] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 436.719721][ T5555] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 436.723413][ T5265] usb 3-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 436.747932][ T5265] usb 3-1: New USB device strings: Mfr=228, Product=255, SerialNumber=0 [ 436.758232][ T5265] usb 3-1: Product: syz [ 436.763016][ T5265] usb 3-1: Manufacturer: syz [ 436.765363][ T5555] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 436.780233][ T5265] usb 3-1: config 0 descriptor?? [ 436.787111][T10557] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 436.851724][ T5555] bond0 (unregistering): Released all slaves [ 436.894929][T10564] loop2: detected capacity change from 0 to 7 [ 436.914218][T10564] Dev loop2: unable to read RDB block 7 [ 436.956478][T10564] loop2: unable to read partition table [ 436.963093][T10564] loop2: partition table beyond EOD, truncated [ 436.996831][T10564] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 437.317573][T10576] netlink: 195772 bytes leftover after parsing attributes in process `syz.3.1140'. [ 437.349139][T10527] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.369309][T10527] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.400828][T10527] bridge_slave_0: entered allmulticast mode [ 437.428879][T10527] bridge_slave_0: entered promiscuous mode [ 437.450714][ T5265] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.21/input/input51 [ 437.598350][T10527] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.611671][T10580] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1141'. [ 437.628487][T10527] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.638063][T10527] bridge_slave_1: entered allmulticast mode [ 437.655137][T10527] bridge_slave_1: entered promiscuous mode [ 437.811324][ T5749] usb 3-1: USB disconnect, device number 75 [ 437.811676][ C0] keyspan_remote 3-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19 [ 437.886666][ T5236] Bluetooth: hci2: command tx timeout [ 438.093648][T10527] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 438.108965][ T5233] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 438.192547][ T5555] hsr_slave_0: left promiscuous mode [ 438.217485][ T5555] hsr_slave_1: left promiscuous mode [ 438.239656][ T5555] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 438.256454][ T5555] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 438.266025][ T5555] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 438.275608][ T5555] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 438.307270][ T5288] usb 4-1: new full-speed USB device number 70 using dummy_hcd [ 438.315191][ T5555] veth1_macvtap: left promiscuous mode [ 438.315275][ T5555] veth0_macvtap: left promiscuous mode [ 438.315411][ T5555] veth1_vlan: left promiscuous mode [ 438.315515][ T5555] veth0_vlan: left promiscuous mode [ 438.338833][ T5233] usb 5-1: Using ep0 maxpacket: 8 [ 438.363535][ T5233] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 438.396614][ T5233] usb 5-1: New USB device found, idVendor=2639, idProduct=0002, bcdDevice=27.3c [ 438.451051][ T5233] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.489107][ T5288] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 438.501340][ T5233] usb 5-1: config 0 descriptor?? [ 438.523379][ T5288] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 438.533146][ T5288] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 438.564454][ T5288] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 438.589776][ T5288] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.625466][T10589] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 438.642374][ T5288] hub 4-1:1.0: bad descriptor, ignoring hub [ 438.656062][ T5288] hub 4-1:1.0: probe with driver hub failed with error -5 [ 438.664894][ T5288] cdc_wdm 4-1:1.0: skipping garbage [ 438.692579][ T5288] cdc_wdm 4-1:1.0: skipping garbage [ 438.709373][ T5288] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 438.715585][ T5288] cdc_wdm 4-1:1.0: Unknown control protocol [ 438.800865][T10585] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 438.813180][T10585] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 439.578793][ T5555] team0 (unregistering): Port device team_slave_1 removed [ 439.666935][ T5555] team0 (unregistering): Port device team_slave_0 removed [ 439.757464][T10589] cdc_wdm 4-1:1.0: Error autopm - -16 [ 439.764852][ T5288] usb 4-1: USB disconnect, device number 70 [ 439.966503][ T5236] Bluetooth: hci2: command tx timeout [ 440.372559][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.380033][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.715788][T10527] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 440.845702][T10527] team0: Port device team_slave_0 added [ 440.907274][T10527] team0: Port device team_slave_1 added [ 440.982765][T10585] [ 440.985153][T10585] ===================================================== [ 440.992168][T10585] WARNING: SOFTIRQ-READ-safe -> SOFTIRQ-READ-unsafe lock order detected [ 441.000737][T10585] 6.11.0-syzkaller-11993-g3efc57369a0c #0 Not tainted [ 441.007797][T10585] ----------------------------------------------------- [ 441.014949][T10585] syz.4.1141/10585 [HC0[0]:SC0[4]:HE1:SE0] is trying to acquire: [ 441.022899][T10585] ffff88806bf24e10 (&ppp->rlock){+...}-{2:2}, at: ppp_ccp_closed+0x42/0x2b0 [ 441.032149][T10585] [ 441.032149][T10585] and this task is already holding: [ 441.039537][T10585] ffff88806bf24e50 (&ppp->wlock){+...}-{2:2}, at: ppp_ccp_closed+0x31/0x2b0 [ 441.048473][T10585] which would create a new lock dependency: [ 441.054378][T10585] (&ppp->wlock){+...}-{2:2} -> (&ppp->rlock){+...}-{2:2} [ 441.062276][T10585] [ 441.062276][T10585] but this new dependency connects a SOFTIRQ-READ-irq-safe lock: [ 441.072290][T10585] (&pch->upl){++.-}-{2:2} [ 441.072332][T10585] [ 441.072332][T10585] ... which became SOFTIRQ-READ-irq-safe at: [ 441.085106][T10585] lock_acquire+0x1ed/0x550 [ 441.089767][T10585] _raw_read_lock_bh+0x3d/0x50 [ 441.094653][T10585] ppp_input+0x3dc/0xa10 [ 441.098999][T10585] ppp_sync_process+0x71/0x160 [ 441.103924][T10585] tasklet_action_common+0x321/0x4d0 [ 441.110052][T10585] handle_softirqs+0x2c5/0x980 [ 441.115713][T10585] __irq_exit_rcu+0xf4/0x1c0 [ 441.120434][T10585] irq_exit_rcu+0x9/0x30 [ 441.124806][T10585] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 441.131524][T10585] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 441.138596][T10585] __tasklet_schedule_common+0x1fd/0x270 [ 441.145794][T10585] ppp_sync_receive+0x3fc/0x8f0 [ 441.150882][T10585] tty_ldisc_receive_buf+0x11f/0x170 [ 441.156553][T10585] tty_port_default_receive_buf+0x6d/0xa0 [ 441.163015][T10585] flush_to_ldisc+0x328/0x860 [ 441.167842][T10585] process_scheduled_works+0xa63/0x1850 [ 441.173507][T10585] worker_thread+0x870/0xd30 [ 441.178217][T10585] kthread+0x2f0/0x390 [ 441.182843][T10585] ret_from_fork+0x4b/0x80 [ 441.187921][T10585] ret_from_fork_asm+0x1a/0x30 [ 441.193421][T10585] [ 441.193421][T10585] to a SOFTIRQ-READ-irq-unsafe lock: [ 441.201443][T10585] (&pch->downl){+.+.}-{2:2} [ 441.201498][T10585] [ 441.201498][T10585] ... which became SOFTIRQ-READ-irq-unsafe at: [ 441.216350][T10585] ... [ 441.216367][T10585] lock_acquire+0x1ed/0x550 [ 441.224510][T10585] _raw_spin_lock+0x2e/0x40 [ 441.229177][T10585] ppp_input+0x18b/0xa10 [ 441.233562][T10585] pppoe_rcv_core+0x117/0x310 [ 441.238379][T10585] __release_sock+0x243/0x350 [ 441.243245][T10585] release_sock+0x61/0x1f0 [ 441.247784][T10585] pppoe_sendmsg+0xd5/0x750 [ 441.252436][T10585] __sock_sendmsg+0x221/0x270 [ 441.257443][T10585] ____sys_sendmsg+0x52a/0x7e0 [ 441.262321][T10585] __sys_sendmmsg+0x3ab/0x730 [ 441.267112][T10585] __x64_sys_sendmmsg+0xa0/0xb0 [ 441.272078][T10585] do_syscall_64+0xf3/0x230 [ 441.276778][T10585] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.282810][T10585] [ 441.282810][T10585] other info that might help us debug this: [ 441.282810][T10585] [ 441.293058][T10585] Chain exists of: [ 441.293058][T10585] &pch->upl --> &ppp->wlock --> &pch->downl [ 441.293058][T10585] [ 441.305223][T10585] Possible interrupt unsafe locking scenario: [ 441.305223][T10585] [ 441.313564][T10585] CPU0 CPU1 [ 441.318940][T10585] ---- ---- [ 441.324408][T10585] lock(&pch->downl); [ 441.328496][T10585] local_irq_disable(); [ 441.335259][T10585] lock(&pch->upl); [ 441.341698][T10585] lock(&ppp->wlock); [ 441.348309][T10585] [ 441.351891][T10585] lock(&pch->upl); [ 441.355990][T10585] [ 441.355990][T10585] *** DEADLOCK *** [ 441.355990][T10585] [ 441.364598][T10585] 1 lock held by syz.4.1141/10585: [ 441.369733][T10585] #0: ffff88806bf24e50 (&ppp->wlock){+...}-{2:2}, at: ppp_ccp_closed+0x31/0x2b0 [ 441.379563][T10585] [ 441.379563][T10585] the dependencies between SOFTIRQ-READ-irq-safe lock and the holding lock: [ 441.392979][T10585] -> (&pch->upl){++.-}-{2:2} { [ 441.398068][T10585] HARDIRQ-ON-W at: [ 441.403404][T10585] lock_acquire+0x1ed/0x550 [ 441.412470][T10585] _raw_write_lock_bh+0x35/0x50 [ 441.420864][T10585] ppp_disconnect_channel+0x2f/0x2d0 [ 441.428483][T10585] ppp_unregister_channel+0xb9/0x300 [ 441.438105][T10585] ppp_asynctty_close+0xf8/0x190 [ 441.447361][T10585] tty_ldisc_kill+0xa3/0x1a0 [ 441.456449][T10585] tty_ldisc_release+0x1a1/0x200 [ 441.464651][T10585] tty_release_struct+0x2b/0xe0 [ 441.472059][T10585] tty_release+0xd06/0x12c0 [ 441.479209][T10585] __fput+0x23f/0x880 [ 441.485111][T10585] task_work_run+0x24f/0x310 [ 441.491733][T10585] syscall_exit_to_user_mode+0x168/0x370 [ 441.500572][T10585] do_syscall_64+0x100/0x230 [ 441.507133][T10585] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.515125][T10585] HARDIRQ-ON-R at: [ 441.519566][T10585] lock_acquire+0x1ed/0x550 [ 441.526194][T10585] _raw_read_lock_bh+0x3d/0x50 [ 441.532813][T10585] ppp_channel_push+0x2c/0x220 [ 441.539518][T10585] ppp_write+0x2b0/0x3e0 [ 441.545884][T10585] vfs_write+0x29c/0xc90 [ 441.552004][T10585] ksys_write+0x183/0x2b0 [ 441.558358][T10585] do_syscall_64+0xf3/0x230 [ 441.564907][T10585] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.572764][T10585] IN-SOFTIRQ-R at: [ 441.576851][T10585] lock_acquire+0x1ed/0x550 [ 441.583447][T10585] _raw_read_lock_bh+0x3d/0x50 [ 441.590192][T10585] ppp_input+0x3dc/0xa10 [ 441.596804][T10585] ppp_sync_process+0x71/0x160 [ 441.603415][T10585] tasklet_action_common+0x321/0x4d0 [ 441.610634][T10585] handle_softirqs+0x2c5/0x980 [ 441.618825][T10585] __irq_exit_rcu+0xf4/0x1c0 [ 441.625915][T10585] irq_exit_rcu+0x9/0x30 [ 441.635694][T10585] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 441.644734][T10585] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 441.654241][T10585] __tasklet_schedule_common+0x1fd/0x270 [ 441.663003][T10585] ppp_sync_receive+0x3fc/0x8f0 [ 441.671393][T10585] tty_ldisc_receive_buf+0x11f/0x170 [ 441.679906][T10585] tty_port_default_receive_buf+0x6d/0xa0 [ 441.689532][T10585] flush_to_ldisc+0x328/0x860 [ 441.696876][T10585] process_scheduled_works+0xa63/0x1850 [ 441.705013][T10585] worker_thread+0x870/0xd30 [ 441.712553][T10585] kthread+0x2f0/0x390 [ 441.718749][T10585] ret_from_fork+0x4b/0x80 [ 441.725061][T10585] ret_from_fork_asm+0x1a/0x30 [ 441.731826][T10585] INITIAL USE at: [ 441.736398][T10585] lock_acquire+0x1ed/0x550 [ 441.742679][T10585] _raw_write_lock_bh+0x35/0x50 [ 441.749389][T10585] ppp_disconnect_channel+0x2f/0x2d0 [ 441.756623][T10585] ppp_unregister_channel+0xb9/0x300 [ 441.763881][T10585] ppp_asynctty_close+0xf8/0x190 [ 441.771129][T10585] tty_ldisc_kill+0xa3/0x1a0 [ 441.777747][T10585] tty_ldisc_release+0x1a1/0x200 [ 441.784848][T10585] tty_release_struct+0x2b/0xe0 [ 441.792042][T10585] tty_release+0xd06/0x12c0 [ 441.798472][T10585] __fput+0x23f/0x880 [ 441.804597][T10585] task_work_run+0x24f/0x310 [ 441.810984][T10585] syscall_exit_to_user_mode+0x168/0x370 [ 441.818931][T10585] do_syscall_64+0x100/0x230 [ 441.825480][T10585] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.833526][T10585] INITIAL READ USE at: [ 441.837959][T10585] lock_acquire+0x1ed/0x550 [ 441.844683][T10585] _raw_read_lock_bh+0x3d/0x50 [ 441.851975][T10585] ppp_channel_push+0x2c/0x220 [ 441.859080][T10585] ppp_write+0x2b0/0x3e0 [ 441.866116][T10585] vfs_write+0x29c/0xc90 [ 441.872665][T10585] ksys_write+0x183/0x2b0 [ 441.879996][T10585] do_syscall_64+0xf3/0x230 [ 441.888495][T10585] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.897941][T10585] } [ 441.900834][T10585] ... key at: [] ppp_register_net_channel.__key.3+0x0/0x20 [ 441.912013][T10585] -> (&ppp->wlock){+...}-{2:2} { [ 441.917022][T10585] HARDIRQ-ON-W at: [ 441.922214][T10585] lock_acquire+0x1ed/0x550 [ 441.928678][T10585] _raw_spin_lock_bh+0x35/0x50 [ 441.935246][T10585] ppp_get_stats64+0xc3/0x290 [ 441.942428][T10585] dev_get_stats+0xad/0xa00 [ 441.950645][T10585] rtnl_fill_stats+0x47/0x880 [ 441.957740][T10585] rtnl_fill_ifinfo+0x18da/0x2270 [ 441.964938][T10585] rtmsg_ifinfo_build_skb+0x18a/0x260 [ 441.972205][T10585] rtmsg_ifinfo+0x91/0x1b0 [ 441.978495][T10585] register_netdevice+0x1774/0x1b00 [ 441.985725][T10585] ppp_dev_configure+0x883/0xb10 [ 441.992383][T10585] ppp_ioctl+0x797/0x1cd0 [ 441.998633][T10585] __se_sys_ioctl+0xf9/0x170 [ 442.004938][T10585] do_syscall_64+0xf3/0x230 [ 442.011161][T10585] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.020078][T10585] INITIAL USE at: [ 442.024081][T10585] lock_acquire+0x1ed/0x550 [ 442.030199][T10585] _raw_spin_lock_bh+0x35/0x50 [ 442.037091][T10585] ppp_get_stats64+0xc3/0x290 [ 442.043486][T10585] dev_get_stats+0xad/0xa00 [ 442.049596][T10585] rtnl_fill_stats+0x47/0x880 [ 442.056080][T10585] rtnl_fill_ifinfo+0x18da/0x2270 [ 442.062701][T10585] rtmsg_ifinfo_build_skb+0x18a/0x260 [ 442.069668][T10585] rtmsg_ifinfo+0x91/0x1b0 [ 442.075684][T10585] register_netdevice+0x1774/0x1b00 [ 442.082728][T10585] ppp_dev_configure+0x883/0xb10 [ 442.089261][T10585] ppp_ioctl+0x797/0x1cd0 [ 442.095173][T10585] __se_sys_ioctl+0xf9/0x170 [ 442.101368][T10585] do_syscall_64+0xf3/0x230 [ 442.107474][T10585] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.115341][T10585] } [ 442.118742][T10585] ... key at: [] ppp_dev_configure.__key.67+0x0/0x20 [ 442.128778][T10585] ... acquired at: [ 442.133374][T10585] lock_acquire+0x1ed/0x550 [ 442.139329][T10585] _raw_spin_lock_bh+0x35/0x50 [ 442.146434][T10585] ppp_connect_channel+0x174/0x650 [ 442.152830][T10585] ppp_ioctl+0xdd4/0x1cd0 [ 442.157396][T10585] __se_sys_ioctl+0xf9/0x170 [ 442.162227][T10585] do_syscall_64+0xf3/0x230 [ 442.167031][T10585] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.173740][T10585] [ 442.176358][T10585] [ 442.176358][T10585] the dependencies between the lock to be acquired [ 442.176372][T10585] and SOFTIRQ-READ-irq-unsafe lock: [ 442.194191][T10585] -> (&pch->downl){+.+.}-{2:2} { [ 442.200266][T10585] HARDIRQ-ON-W at: [ 442.205018][T10585] lock_acquire+0x1ed/0x550 [ 442.212839][T10585] _raw_spin_lock_bh+0x35/0x50 [ 442.220045][T10585] ppp_unregister_channel+0x7c/0x300 [ 442.227304][T10585] ppp_asynctty_close+0xf8/0x190 [ 442.234394][T10585] tty_ldisc_kill+0xa3/0x1a0 [ 442.240857][T10585] tty_ldisc_release+0x1a1/0x200 [ 442.247830][T10585] tty_release_struct+0x2b/0xe0 [ 442.254986][T10585] tty_release+0xd06/0x12c0 [ 442.261474][T10585] __fput+0x23f/0x880 [ 442.268127][T10585] task_work_run+0x24f/0x310 [ 442.274579][T10585] syscall_exit_to_user_mode+0x168/0x370 [ 442.282358][T10585] do_syscall_64+0x100/0x230 [ 442.290185][T10585] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.298512][T10585] SOFTIRQ-ON-W at: [ 442.303579][T10585] lock_acquire+0x1ed/0x550 [ 442.310558][T10585] _raw_spin_lock+0x2e/0x40 [ 442.318979][T10585] ppp_input+0x18b/0xa10 [ 442.325190][T10585] pppoe_rcv_core+0x117/0x310 [ 442.331732][T10585] __release_sock+0x243/0x350 [ 442.338261][T10585] release_sock+0x61/0x1f0 [ 442.345100][T10585] pppoe_sendmsg+0xd5/0x750 [ 442.351937][T10585] __sock_sendmsg+0x221/0x270 [ 442.358577][T10585] ____sys_sendmsg+0x52a/0x7e0 [ 442.365469][T10585] __sys_sendmmsg+0x3ab/0x730 [ 442.372471][T10585] __x64_sys_sendmmsg+0xa0/0xb0 [ 442.379361][T10585] do_syscall_64+0xf3/0x230 [ 442.386145][T10585] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.393908][T10585] INITIAL USE at: [ 442.397941][T10585] lock_acquire+0x1ed/0x550 [ 442.404671][T10585] _raw_spin_lock_bh+0x35/0x50 [ 442.411302][T10585] ppp_unregister_channel+0x7c/0x300 [ 442.418825][T10585] ppp_asynctty_close+0xf8/0x190 [ 442.425932][T10585] tty_ldisc_kill+0xa3/0x1a0 [ 442.432520][T10585] tty_ldisc_release+0x1a1/0x200 [ 442.440816][T10585] tty_release_struct+0x2b/0xe0 [ 442.448696][T10585] tty_release+0xd06/0x12c0 [ 442.456241][T10585] __fput+0x23f/0x880 [ 442.463528][T10585] task_work_run+0x24f/0x310 [ 442.470426][T10585] syscall_exit_to_user_mode+0x168/0x370 [ 442.478119][T10585] do_syscall_64+0x100/0x230 [ 442.484566][T10585] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.492518][T10585] } [ 442.495384][T10585] ... key at: [] ppp_register_net_channel.__key.1+0x0/0x20 [ 442.505141][T10585] ... acquired at: [ 442.509061][T10585] lock_acquire+0x1ed/0x550 [ 442.513769][T10585] _raw_spin_lock_bh+0x35/0x50 [ 442.518730][T10585] ppp_connect_channel+0x194/0x650 [ 442.524168][T10585] ppp_ioctl+0xdd4/0x1cd0 [ 442.528713][T10585] __se_sys_ioctl+0xf9/0x170 [ 442.533533][T10585] do_syscall_64+0xf3/0x230 [ 442.538238][T10585] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.544369][T10585] [ 442.546702][T10585] -> (&ppp->rlock){+...}-{2:2} { [ 442.551714][T10585] HARDIRQ-ON-W at: [ 442.555715][T10585] lock_acquire+0x1ed/0x550 [ 442.562096][T10585] _raw_spin_lock_bh+0x35/0x50 [ 442.568715][T10585] ppp_get_stats64+0x33/0x290 [ 442.575078][T10585] dev_get_stats+0xad/0xa00 [ 442.581253][T10585] rtnl_fill_stats+0x47/0x880 [ 442.587905][T10585] rtnl_fill_ifinfo+0x18da/0x2270 [ 442.594720][T10585] rtmsg_ifinfo_build_skb+0x18a/0x260 [ 442.601834][T10585] rtmsg_ifinfo+0x91/0x1b0 [ 442.608496][T10585] register_netdevice+0x1774/0x1b00 [ 442.615365][T10585] ppp_dev_configure+0x883/0xb10 [ 442.621982][T10585] ppp_ioctl+0x797/0x1cd0 [ 442.628018][T10585] __se_sys_ioctl+0xf9/0x170 [ 442.635166][T10585] do_syscall_64+0xf3/0x230 [ 442.641766][T10585] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.651475][T10585] INITIAL USE at: [ 442.656452][T10585] lock_acquire+0x1ed/0x550 [ 442.662582][T10585] _raw_spin_lock_bh+0x35/0x50 [ 442.669484][T10585] ppp_get_stats64+0x33/0x290 [ 442.675849][T10585] dev_get_stats+0xad/0xa00 [ 442.682556][T10585] rtnl_fill_stats+0x47/0x880 [ 442.690624][T10585] rtnl_fill_ifinfo+0x18da/0x2270 [ 442.698128][T10585] rtmsg_ifinfo_build_skb+0x18a/0x260 [ 442.705363][T10585] rtmsg_ifinfo+0x91/0x1b0 [ 442.711385][T10585] register_netdevice+0x1774/0x1b00 [ 442.719495][T10585] ppp_dev_configure+0x883/0xb10 [ 442.726074][T10585] ppp_ioctl+0x797/0x1cd0 [ 442.732188][T10585] __se_sys_ioctl+0xf9/0x170 [ 442.738495][T10585] do_syscall_64+0xf3/0x230 [ 442.744582][T10585] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.752433][T10585] } [ 442.755072][T10585] ... key at: [] ppp_dev_configure.__key+0x0/0x20 [ 442.763905][T10585] ... acquired at: [ 442.768772][T10585] lock_acquire+0x1ed/0x550 [ 442.773964][T10585] _raw_spin_lock_bh+0x35/0x50 [ 442.779290][T10585] ppp_ccp_closed+0x42/0x2b0 [ 442.784174][T10585] ppp_destroy_interface+0x9f/0x310 [ 442.789866][T10585] ppp_release+0x183/0x1f0 [ 442.794493][T10585] __fput+0x23f/0x880 [ 442.798795][T10585] task_work_run+0x24f/0x310 [ 442.803598][T10585] do_exit+0xa2f/0x28e0 [ 442.807944][T10585] do_group_exit+0x207/0x2c0 [ 442.812737][T10585] get_signal+0x16a3/0x1740 [ 442.817585][T10585] arch_do_signal_or_restart+0x96/0x860 [ 442.823346][T10585] syscall_exit_to_user_mode+0xc9/0x370 [ 442.829105][T10585] do_syscall_64+0x100/0x230 [ 442.833902][T10585] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.840300][T10585] [ 442.842845][T10585] [ 442.842845][T10585] stack backtrace: [ 442.849201][T10585] CPU: 1 UID: 0 PID: 10585 Comm: syz.4.1141 Not tainted 6.11.0-syzkaller-11993-g3efc57369a0c #0 [ 442.859946][T10585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 442.870058][T10585] Call Trace: [ 442.873415][T10585] [ 442.876679][T10585] dump_stack_lvl+0x241/0x360 [ 442.881434][T10585] ? __pfx_dump_stack_lvl+0x10/0x10 [ 442.887821][T10585] ? __pfx__printk+0x10/0x10 [ 442.894735][T10585] ? print_shortest_lock_dependencies+0xf2/0x160 [ 442.902190][T10585] validate_chain+0x4ebd/0x5920 [ 442.908450][T10585] ? __pfx_validate_chain+0x10/0x10 [ 442.915845][T10585] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 442.923373][T10585] ? lockdep_hardirqs_on+0x99/0x150 [ 442.928658][T10585] ? mark_lock+0x9a/0x360 [ 442.933585][T10585] __lock_acquire+0x1384/0x2050 [ 442.939893][T10585] lock_acquire+0x1ed/0x550 [ 442.945588][T10585] ? ppp_ccp_closed+0x42/0x2b0 [ 442.950755][T10585] ? __pfx_lockdep_softirqs_off+0x10/0x10 [ 442.957241][T10585] ? __pfx_lock_acquire+0x10/0x10 [ 442.963039][T10585] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 442.970379][T10585] ? kobject_put+0x446/0x480 [ 442.976493][T10585] ? ppp_ccp_closed+0x42/0x2b0 [ 442.981298][T10585] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 442.987134][T10585] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 442.993070][T10585] ? netdev_run_todo+0xf96/0x1000 [ 442.998158][T10585] ? ppp_ccp_closed+0x42/0x2b0 [ 443.003218][T10585] _raw_spin_lock_bh+0x35/0x50 [ 443.008118][T10585] ? ppp_ccp_closed+0x42/0x2b0 [ 443.012913][T10585] ppp_ccp_closed+0x42/0x2b0 [ 443.018174][T10585] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 443.024537][T10585] ppp_destroy_interface+0x9f/0x310 [ 443.029768][T10585] ppp_release+0x183/0x1f0 [ 443.034306][T10585] ? __pfx_ppp_release+0x10/0x10 [ 443.039377][T10585] __fput+0x23f/0x880 [ 443.043488][T10585] task_work_run+0x24f/0x310 [ 443.048126][T10585] ? __pfx_task_work_run+0x10/0x10 [ 443.053277][T10585] ? switch_task_namespaces+0xe4/0x110 [ 443.059065][T10585] do_exit+0xa2f/0x28e0 [ 443.063245][T10585] ? __pfx_do_exit+0x10/0x10 [ 443.067938][T10585] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 443.073437][T10585] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 443.079529][T10585] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 443.085918][T10585] ? _raw_spin_lock_irq+0xdf/0x120 [ 443.091105][T10585] do_group_exit+0x207/0x2c0 [ 443.095795][T10585] ? _raw_spin_unlock_irq+0x23/0x50 [ 443.101015][T10585] ? lockdep_hardirqs_on+0x99/0x150 [ 443.106345][T10585] get_signal+0x16a3/0x1740 [ 443.110922][T10585] ? __pfx_get_signal+0x10/0x10 [ 443.115976][T10585] ? __might_fault+0xc6/0x120 [ 443.120852][T10585] arch_do_signal_or_restart+0x96/0x860 [ 443.126699][T10585] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 443.133247][T10585] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 443.140979][T10585] ? syscall_exit_to_user_mode+0xa3/0x370 [ 443.146854][T10585] syscall_exit_to_user_mode+0xc9/0x370 [ 443.153001][T10585] do_syscall_64+0x100/0x230 [ 443.157641][T10585] ? clear_bhb_loop+0x35/0x90 [ 443.163319][T10585] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.169544][T10585] RIP: 0033:0x7fa7a9b7dff9 [ 443.174437][T10585] Code: Unable to access opcode bytes at 0x7fa7a9b7dfcf. [ 443.181484][T10585] RSP: 002b:00007fa7aa94a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 443.191854][T10585] RAX: 0000000000000000 RBX: 00007fa7a9d36058 RCX: 00007fa7a9b7dff9 [ 443.200757][T10585] RDX: 0000000020000000 RSI: 00000000c004743e RDI: 000000000000000e [ 443.211386][T10585] RBP: 00007fa7a9bf0296 R08: 0000000000000000 R09: 0000000000000000 [ 443.220184][T10585] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 443.229755][T10585] R13: 0000000000000000 R14: 00007fa7a9d36058 R15: 00007fa7a9e5fa28 [ 443.238511][T10585] [ 443.268363][ T5236] Bluetooth: hci2: command tx timeout [ 443.288878][T10527] batman_adv: batadv0: Adding interface: batadv_slave_0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 443.295996][T10527] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 443.336740][ T5288] usb 5-1: USB disconnect, device number 86 [ 443.432395][T10527] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 444.354268][ T5555] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.411605][ T5555] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.463611][ T5555] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.512747][ T5555] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.663680][ T5555] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.722721][ T5555] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.781921][ T5555] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.856125][ T5555] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.972590][ T5555] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.019706][ T5555] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.054204][ T5555] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.146053][ T5555] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.287162][ T5555] bridge_slave_1: left allmulticast mode [ 445.300714][ T5555] bridge_slave_1: left promiscuous mode [ 445.310275][ T5555] bridge0: port 2(bridge_slave_1) entered disabled state [ 445.337235][ T5555] bridge_slave_0: left allmulticast mode [ 445.343345][ T5555] bridge_slave_0: left promiscuous mode [ 445.350646][ T5555] bridge0: port 1(bridge_slave_0) entered disabled state [ 445.365109][ T5555] bridge_slave_1: left allmulticast mode [ 445.371739][ T5555] bridge_slave_1: left promiscuous mode [ 445.378556][ T5555] bridge0: port 2(bridge_slave_1) entered disabled state [ 445.394040][ T5555] bridge_slave_0: left allmulticast mode [ 445.401463][ T5555] bridge_slave_0: left promiscuous mode [ 445.409185][ T5555] bridge0: port 1(bridge_slave_0) entered disabled state [ 445.420265][ T5555] team0: left allmulticast mode [ 445.425734][ T5555] team_slave_0: left allmulticast mode [ 445.431587][ T5555] team_slave_1: left allmulticast mode [ 445.441929][ T5555] bridge0: port 3(team0) entered disabled state [ 445.453523][ T5555] bridge_slave_1: left allmulticast mode [ 445.478500][ T5555] bridge_slave_1: left promiscuous mode [ 445.484911][ T5555] bridge0: port 2(bridge_slave_1) entered disabled state [ 445.500715][ T5555] bridge_slave_0: left allmulticast mode [ 445.506686][ T5555] bridge_slave_0: left promiscuous mode [ 445.512692][ T5555] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.026385][ T5555] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 446.041288][ T5555] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 446.052789][ T5555] bond0 (unregistering): Released all slaves [ 446.070000][ T5555] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 446.081100][ T5555] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 446.096064][ T5555] bond0 (unregistering): Released all slaves [ 446.111462][ T5555] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 446.122438][ T5555] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 446.139815][ T5555] bond0 (unregistering): Released all slaves [ 446.714089][ T5555] hsr_slave_0: left promiscuous mode [ 446.726762][ T5555] hsr_slave_1: left promiscuous mode [ 446.732877][ T5555] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 446.744816][ T5555] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 446.754606][ T5555] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 446.765867][ T5555] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 446.786047][ T5555] hsr_slave_0: left promiscuous mode [ 446.796803][ T5555] hsr_slave_1: left promiscuous mode [ 446.804433][ T5555] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 446.813837][ T5555] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 446.825750][ T5555] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 446.840492][ T5555] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 446.856828][ T5555] hsr_slave_0: left promiscuous mode [ 446.876331][ T5555] hsr_slave_1: left promiscuous mode [ 446.888559][ T5555] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 446.896190][ T5555] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 446.911723][ T5555] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 446.919869][ T5555] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 446.939203][ T5555] veth1_macvtap: left promiscuous mode [ 446.946212][ T5555] veth0_macvtap: left promiscuous mode [ 446.955610][ T5555] veth1_vlan: left promiscuous mode [ 446.962315][ T5555] veth0_vlan: left promiscuous mode [ 446.974062][ T5555] veth1_macvtap: left promiscuous mode [ 446.980205][ T5555] veth0_macvtap: left promiscuous mode [ 446.986072][ T5555] veth1_vlan: left promiscuous mode [ 446.991833][ T5555] veth0_vlan: left promiscuous mode [ 447.001366][ T5555] veth1_macvtap: left promiscuous mode [ 447.007609][ T5555] veth0_macvtap: left promiscuous mode [ 447.013984][ T5555] veth1_vlan: left promiscuous mode [ 447.019666][ T5555] veth0_vlan: left promiscuous mode [ 447.410634][ T5555] team0 (unregistering): Port device team_slave_1 removed [ 447.457188][ T5555] team0 (unregistering): Port device team_slave_0 removed [ 447.813472][ T5555] team0 (unregistering): Port device team_slave_1 removed [ 447.834762][ T5555] team0 (unregistering): Port device team_slave_0 removed [ 447.995630][ T5555] pim6reg (unregistering): left allmulticast mode [ 448.200615][ T5555] team_slave_1 (unregistering): left promiscuous mode [ 448.214417][ T5555] team0 (unregistering): Port device team_slave_1 removed [ 448.254181][ T5555] team_slave_0 (unregistering): left promiscuous mode [ 448.262694][ T5555] team0 (unregistering): Port device team_slave_0 removed [ 449.465049][ T5555] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 449.480474][ T5555] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.542765][ T5555] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 449.553475][ T5555] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.633964][ T5555] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 449.651452][ T5555] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.749842][ T5555] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 449.761676][ T5555] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.870767][ T5555] bridge_slave_1: left allmulticast mode [ 449.882208][ T5555] bridge_slave_1: left promiscuous mode [ 449.888700][ T5555] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.899150][ T5555] bridge_slave_0: left allmulticast mode [ 449.905815][ T5555] bridge_slave_0: left promiscuous mode [ 449.912861][ T5555] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.923600][ T5555] bridge_slave_1: left allmulticast mode [ 449.930412][ T5555] bridge_slave_1: left promiscuous mode [ 449.937145][ T5555] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.949473][ T5555] bridge_slave_0: left allmulticast mode [ 449.957790][ T5555] bridge_slave_0: left promiscuous mode [ 449.964011][ T5555] bridge0: port 1(bridge_slave_0) entered disabled state [ 450.219057][ T5555] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 450.230202][ T5555] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 450.240670][ T5555] bond0 (unregistering): Released all slaves [ 450.253847][ T5555] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 450.266551][ T5555] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 450.280536][ T5555] bond0 (unregistering): Released all slaves [ 450.503810][ T5555] hsr_slave_0: left promiscuous mode [ 450.511503][ T5555] hsr_slave_1: left promiscuous mode [ 450.521686][ T5555] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 450.535639][ T5555] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 450.544359][ T5555] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 450.552351][ T5555] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 450.560912][ T5555] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 450.574237][ T5555] veth1_macvtap: left promiscuous mode [ 450.580511][ T5555] veth0_macvtap: left promiscuous mode [ 450.587058][ T5555] veth1_vlan: left promiscuous mode [ 450.592980][ T5555] veth0_vlan: left promiscuous mode [ 450.869036][ T5555] team0 (unregistering): Port device team_slave_1 removed [ 450.909259][ T5555] team0 (unregistering): Port device team_slave_0 removed