last executing test programs: 22.623903748s ago: executing program 1 (id=4990): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) syz_io_uring_setup(0x23b03, &(0x7f0000000540)={0x0, 0x0, 0x8, 0x0, 0x1c}, 0x0, &(0x7f0000000300)) unshare(0x2a000000) socket(0x11, 0x800, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, 0x0, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f000000e280)={0x2020}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000380)={0x50, 0x0, 0x0, {0x7, 0x28, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x800}}, 0x50) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000004c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0/../file0/file0\x00'}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x100000a, 0x5d032, r1, 0x0) setrlimit(0x8, &(0x7f0000000380)) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0}, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000240)={0xc, 0x0, 0x0}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000280)={0x28, 0x7, r5, 0x0, &(0x7f00007ff000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f0000000400)={0x48, 0x5, r4, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r2, 0x3ba0, &(0x7f0000000080)={0x48, 0x7, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32315d}) 22.333864696s ago: executing program 1 (id=4992): socket$inet6_udp(0xa, 0x2, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x18) lchown(&(0x7f0000000080)='./file0\x00', 0xee00, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0x4, &(0x7f0000000800)=@framed={{0x18, 0x6}, [@map_idx={0x18, 0xd, 0x5, 0x0, 0xa}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080c43000000e8fe55a1190015000600142603600e1209000a0000000401a80016000a0004", 0x37}], 0x1}, 0x0) syz_clone3(&(0x7f00000023c0)={0x20020800, &(0x7f0000000200), &(0x7f0000001280), &(0x7f00000012c0)=0x0, {0x3f}, &(0x7f0000001300)=""/4096, 0x1000, &(0x7f0000002300)=""/84, &(0x7f0000002380)=[0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) prctl$PR_SET_PTRACER(0x59616d61, r0) syz_io_uring_setup(0x5ad, &(0x7f0000000100)={0x0, 0xb421, 0x200, 0x0, 0x1}, &(0x7f0000000000), &(0x7f0000000000)) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4c, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20080800}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x6c, r2, 0x4, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x6c}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x87}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2c3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xe}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x7}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000040}, 0x40) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x15) timer_delete(0x0) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000000)='io.pressure\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) socket$packet(0x11, 0x0, 0x300) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {}, {0x46}}) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x0) ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0x44, 0x4, 0x440, 0xffffffff, 0xd0, 0x2a0, 0x2a0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private0, @mcast1, [], [], 'nr0\x00', 'nr0\x00'}, 0x203, 0xa8, 0xd0, 0x8502}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:modem_device_t:s0\x00'}}}, {{@ipv6={@private2, @mcast2, [], [], 'hsr0\x00', 'bond0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@AUDIT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a0) clock_gettime(0x0, &(0x7f00000006c0)={0x0, 0x0}) utimes(&(0x7f0000000680)='./file0\x00', &(0x7f0000000700)={{r4, r5/1000+10000}, {0x0, 0xea60}}) r6 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0x33fe0) 21.980499347s ago: executing program 1 (id=4994): r0 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) r1 = io_uring_setup(0x5751, &(0x7f0000000100)) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendto$inet(0xffffffffffffffff, &(0x7f0000000180)="d10d7b1ff561d66f0e4ea7290946e2a65bd90c219f640222a4cdbffe842b3f23a6d8d68f5e980aecee60802e8072efce6549a7a7f0b772ce231a59ac90dc2adea9464885a6eb0fcc062f37cfdb261cdd9d0ce365b88bc0cadc7b8a9a5b6e5d884cd7e53b92ba579fcc618016a0183c65a6b03b97e6f8a66e34d91cf9fc5e987b333e85faed7a4837f1c4480765bb35fe7aaffbab09b1d062d40dd00de23ae6447022219ec9d84854adc54191295caaea0720ccf80c2b5cbb3fc6d178c17f31e05ba0c32523c93335ee69cb940ae5edd8e69c2e3ba3eaa0", 0xd7, 0xd0, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x2, &(0x7f00000003c0), 0xffffffffffffef1) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f0000000000)={0x9, {0x0, 0x0, 0xfffffffe, 0x300}}) 21.905100708s ago: executing program 1 (id=4996): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a02fa560186d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f68530c2b21a100efb76cba37ff3111d6847e0c7f719e169a596e5fc008daefba68f6222103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34171113d806726615380fe65a6a0a72e19c2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe3635b2ee97c143f28def4b73905ca14d90d1f6"}) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd\x00') r2 = socket(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x278, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x2d8) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x0, 0x0, &(0x7f0000001040)='GPL\x00', 0x0, 0x99, &(0x7f00000004c0)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1000}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff60) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r4, 0x4048aec9, &(0x7f0000000040)) 21.504048568s ago: executing program 1 (id=4997): gettid() mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/sctp\x00') r1 = open_tree(r0, &(0x7f0000000640)='\x00', 0x89901) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d440fe0000000000002900000043000000", 0xfe60) move_mount(r1, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901) move_mount(r3, &(0x7f0000000100)='./file0\x00', r1, &(0x7f0000000080)='./file0\x00', 0x2) socket$can_j1939(0x1d, 0x2, 0x7) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x70, r6, 0x1, 0x0, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME={0x4f, 0x33, @beacon={{{}, {}, @device_b, @device_b, @from_mac=@broadcast}, 0x0, @random, 0x0, @void, @void, @val={0x3, 0x1}, @void, @void, @void, @void, @void, @void, @val={0x2d, 0x1a, {0x40, 0x3, 0x1, 0x0, {0x9e50, 0x6, 0x0, 0x184, 0x0, 0x1, 0x1, 0x2}, 0x1, 0x586, 0x5}}, @val={0x72, 0x6}, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x70}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x48) socket$rds(0x15, 0x5, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000004c0)=[{0x20, 0x0, 0x0, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) r11 = fcntl$dupfd(r9, 0x0, r10) sendmsg$nl_route(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) r12 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r12, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r12, &(0x7f0000004200)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r12, &(0x7f0000006240)="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", 0x2000, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x90, 0x0, 0x0, {0x1, 0x0, 0xfffffffffefffffd, 0x0, 0xfffffe00, 0x0, {0xfffffffffffffffc, 0x0, 0x3, 0x80000000, 0xfffffffffffffffe, 0x3, 0x9, 0x8, 0x18, 0xa000, 0x0, r13, 0x0, 0x20000, 0x812}}}, 0x0, 0x0, 0x0, 0x0}) move_mount(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file0\x00', 0xffffffffffffffff, 0x0, 0x0) 20.434955861s ago: executing program 1 (id=5003): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000017c0), 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000001200)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x24c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x40, 0x30, 0x4, [{{0x9, 0x4, 0x0, 0xe, 0x2, 0x3, 0x1, 0x2, 0x81, {0x9, 0x21, 0x400, 0x4, 0x1, {0x22, 0xd04}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x9, 0xf, 0x1}}}}}]}}]}}, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0}) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="38000000030171f06ab0000001000100e000000108000200e00000010c000280050001"], 0x38}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000001200)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000000100)=ANY=[@ANYBLOB="1cb0d0bbc0236ed726025dfb92471f3c000004", @ANYRES16=r1, @ANYBLOB="595a0000000000000000450000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e0003000000"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) open(0x0, 0x0, 0x0) eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af12, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0700000000000000000005000000180001801400020073797a5f74756e000000000000000000180003800800040000000000080002002000000004000100080005"], 0x4c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xebe3}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @private1}, @IFLA_IPTUN_TTL={0x5, 0x4, 0x40}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20811}, 0x0) r7 = socket$igmp6(0xa, 0x3, 0x2) sendmmsg$inet6(r7, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x4048000) ioctl$sock_TIOCINQ(r7, 0x541b, &(0x7f0000000200)) 8.965815698s ago: executing program 2 (id=5034): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000010140)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @remote, 0x1}], 0x1c) (fail_nth: 5) 8.368504721s ago: executing program 2 (id=5035): syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010000000000000000001700000018000680120003000617e510ec6bfa9b8f977148fc1c0000"], 0x2c}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f0000000040)={0x5}) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f00000000c0)=0x3) r4 = syz_open_dev$vbi(&(0x7f0000000140), 0x3, 0x2) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000200)={0x7, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8946, 0x0) timer_create(0x0, &(0x7f0000002dc0)={0x0, 0x21, 0x0, @thr={&(0x7f0000003c80)="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", &(0x7f0000000300)="f2cecfa055b71d81b399fa004ba1e410742888a928a8c6deb3bd21e8c95ae3b7ad499bc252896a30e05d415f507280d3f105b70975a1302e97535e3318156a5ce8588edbb178f00e1b47204fc9b96104e2a944f3f23d1454ce6c3e09d19c8e542038fa4f006c2d8fdf7acd03c20c7212cc93d3f7971951303bceb6230fac9b56e0c66e6fb734494e9c058e5482089663ac1d24c1d8b88f7abc84448906f3c32a147601b835ca3faf2df62679e1be23a867d0ff6141"}}, &(0x7f0000000100)=0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18}, './file0\x00'}) socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r6, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x0) timer_gettime(r5, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWCHAIN={0x64, 0x3, 0xa, 0xb00, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_CHAIN_ID={0x8}, @NFTA_CHAIN_HOOK={0x48, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'wg0\x00'}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'vlan0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_virt_wifi\x00'}]}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x779d40ca}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0xf8}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 6.727396822s ago: executing program 2 (id=5040): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x24) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet(0x2, 0x80001, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f00006f0000/0x3000)=nil) r2 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f00000002c0)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_setup(0x5ce2, &(0x7f0000000000)={0x0, 0x0, 0x40}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x3, 0x0, 0x0, 0x0, 0xffffffff}, 0x2}}, @TCA_MPLS_LABEL={0x8}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x0, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000300000000000000000000008500000087000000180100002020692500000000002420207b1af8ff00000000"], &(0x7f0000000240)='GPL\x00'}, 0x90) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) write$binfmt_script(r4, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 6.659324109s ago: executing program 4 (id=5041): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x20200, 0x0) r1 = dup(r0) preadv(r1, &(0x7f00000000c0)=[{&(0x7f000001aa80)=""/102388, 0x12de0}], 0x1, 0xfffffffd, 0x5) (fail_nth: 4) 6.326105719s ago: executing program 4 (id=5043): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_emit_ethernet(0x32, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r1, 0x40096101, &(0x7f0000000780)={{}, 0x3}) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r2, &(0x7f0000000000)=ANY=[], 0xc8) write$binfmt_aout(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="03040000b500000000000000feef"], 0xc8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0xa) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$IOMMU_VFIO_SET_IOMMU(r4, 0x3b66, 0x3) connect$rxrpc(r3, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e21, 0x0, @dev}}, 0x24) syz_80211_join_ibss(&(0x7f0000000300)='wlan1\x00', &(0x7f0000000340)=@default_ap_ssid, 0x6, 0x0) sendmsg$inet(r3, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) socket$rxrpc(0x21, 0x2, 0xa) sendmsg$NFT_BATCH(r4, &(0x7f0000000640)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x2e0}, 0x1, 0x0, 0x0, 0x8004}, 0x24004091) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000800)=[{0x6}]}) syz_extract_tcp_res(&(0x7f00000002c0), 0xa, 0x3a) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000680)={'veth0_to_team\x00', {0x2, 0x0, @dev}}) close_range(r5, 0xffffffffffffffff, 0x0) 4.645489398s ago: executing program 4 (id=5045): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = userfaultfd(0x801) unshare(0x0) syz_emit_vhci(&(0x7f00000028c0)=ANY=[@ANYRES64=r1], 0xd) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0xe, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000190081054e81f782db44b904021d005c06007c09e8fe55a10a0005400100142603600e1208001e0000000401a80016000800014009001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') write$FUSE_INIT(r4, &(0x7f0000000240)={0x50}, 0x50) ioctl$VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000240)=@multiplanar_mmap={0x6, 0x1, 0x4, 0x4000, 0xda3f, {}, {0x4, 0x8, 0x6, 0x4, 0x7, 0x1, "fbc78baa"}, 0x7, 0x1, {&(0x7f0000000500)=[{0xfffffffa, 0x1, {0x73c76677}, 0xb4b4}, {0xfffffff8, 0x8, {0x5}, 0x33b}]}, 0x5, 0x0, r3}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f00000004c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000340)}}, 0x10) r5 = socket$inet6(0xa, 0x0, 0x4000006) setsockopt$inet6_int(r5, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r5, 0x0, 0x0) socket(0x2, 0x2, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2e, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6}]}) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000740)="10f1e2a2") syz_usbip_server_init(0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000020301040000000000aeb2212c4d22a8e16eff0f1761fa7d56d2ba9e4ef4bfb03eaa640f1a0000"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[], 0x20}}, 0x0) write(r6, &(0x7f0000000080)="99", 0x1) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r8, 0x5408, &(0x7f0000000080)={0x4e00, 0x0, 0x0, 0xbdff, 0x0, "ec28a1ba80a20507"}) ioctl$TCSETS(r8, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7fffeff00"}) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="900000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="8b04040000000000700012800b00010067656e65766500006000028005000400010000001400070000000000000000000000000000000001060005004e200000050003000000000005000c00010000000500080000000000050003003f00000005000de901000000090001"], 0x90}}, 0x0) 4.489756533s ago: executing program 2 (id=5046): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32=r0], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000001f00)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) prctl$PR_GET_TSC(0x43, &(0x7f0000000040)) r4 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r4, 0x10d, 0xfa, 0x0, 0x0) r5 = userfaultfd(0x801) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) prctl$PR_MCE_KILL(0x43, 0x0, 0x0) syz_emit_ethernet(0xb94, &(0x7f0000002600)=ANY=[@ANYBLOB], 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000016c0)={0x1a, 0x7, &(0x7f0000000140)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x1, 0x4, 0x1}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x90) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$UI_SET_RELBIT(r6, 0x40045566, 0x1e) read$char_usb(r2, &(0x7f0000000180)=""/97, 0x61) write$char_usb(r2, 0x0, 0x0) syz_usb_disconnect(r1) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000001280), 0xb4b}, 0x38) socket$nl_generic(0x10, 0x3, 0x10) 4.348359408s ago: executing program 0 (id=5047): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000002f40)=""/102392, 0x18ff8}], 0x1, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x30000, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) getdents(r2, &(0x7f0000000080), 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$IP6T_SO_GET_INFO(r3, 0x29, 0x7, 0x0, &(0x7f0000000180)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, &(0x7f00000000c0)={&(0x7f0000000080), 0x23}) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000000140)=0x1, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'erspan0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x8}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x48}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000b00)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa1786dd6012000800103a00fe8000000000000000000000000000bbfe8000000000000000000000000000aa8b0090780200"/70], 0x0) memfd_create(&(0x7f00000001c0)='\xff\xff\xff\xff\xff\xff', 0x1) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000140), 0x4) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000002ec0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x58) 4.004701674s ago: executing program 3 (id=5049): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=ANY=[@ANYBLOB="7800f000", @ANYRES16=r1, @ANYRES32=r2, @ANYBLOB="0a003400020202"], 0x78}}, 0x0) 3.804298456s ago: executing program 3 (id=5050): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cipher_null-generic)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000600), 0xfec8) recvmmsg(r1, &(0x7f0000009280)=[{{&(0x7f0000000040)=@nfc_llcp, 0x80, &(0x7f00000002c0), 0x0, &(0x7f0000000300)=""/3, 0x3}, 0x6}, {{&(0x7f0000000340)=@phonet, 0x80, &(0x7f0000000680)=[{&(0x7f00000003c0)=""/156, 0x9c}, {&(0x7f0000000480)=""/115, 0x73}, {&(0x7f0000000500)=""/217, 0xd9}, {&(0x7f00000007c0)=""/4096, 0x1000}, {&(0x7f0000000640)=""/13, 0xd}, {&(0x7f00000017c0)=""/194, 0xc2}], 0x6}, 0x81}, {{&(0x7f0000003bc0)=@nfc, 0x80, &(0x7f0000005100)=[{0x0}, {&(0x7f0000004e40)=""/235, 0xeb}, {0x0}, {&(0x7f0000004fc0)=""/39, 0x27}], 0x4, &(0x7f00000051c0)=""/170, 0xaa}, 0x4}, {{&(0x7f0000005280)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, 0x0, 0x0, &(0x7f00000064c0)=""/252, 0xfc}, 0xfe}, {{&(0x7f00000065c0)=@nl, 0x80, &(0x7f0000006bc0)=[{0x0}, {&(0x7f0000006700)=""/211, 0xd3}, {0x0}], 0x3, &(0x7f0000006c40)=""/4096, 0x1000}, 0x5}], 0x5, 0x10123, 0x0) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) write$binfmt_script(r2, &(0x7f00000018c0)={'#! ', './file0', [{0x20, '#! '}, {0x20, '-{&'}], 0xa, "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"}, 0x1013) 3.166058952s ago: executing program 0 (id=5051): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r0) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f0000000080)=0x1, 0x4) mmap(&(0x7f0000000000/0x2000)=nil, 0x152000, 0x0, 0x12, r3, 0x0) sendmsg$NFT_MSG_GETSET(r3, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x124, 0xa, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x82}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_EXPR={0x98, 0x11, 0x0, 0x1, @match={{0xa}, @val={0x88, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x81, 0x3, "41260ee1787dbd66a09aef5be855c637717fb514ad84f334db161753b85d457d815d107e85aaaad5117ba50cb6c9f0bf02036a23a3280ba7e6c43ec3c6920d8858dc18e91be95b82687ee61df450d3f1e95abaa88d389612b66dab32a72af61825ac279b58e2b960877dfced8f60792bb5fac52c35c268ed86d1eaea3b"}]}}}, @NFTA_SET_EXPR={0x48, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xfeba}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x800}]}}}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x50}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}]}, 0x124}, 0x1, 0x0, 0x0, 0x20000001}, 0x81) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 3.104662866s ago: executing program 3 (id=5052): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) syz_io_uring_setup(0x23b03, &(0x7f0000000540)={0x0, 0x0, 0x8, 0x0, 0x1c}, 0x0, &(0x7f0000000300)) unshare(0x2a000000) socket(0x11, 0x800, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{0x0}], 0x1, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f000000e280)={0x2020}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000380)={0x50, 0x0, 0x0, {0x7, 0x28, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x800}}, 0x50) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000004c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0/../file0/file0\x00'}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x100000a, 0x5d032, r1, 0x0) setrlimit(0x8, &(0x7f0000000380)) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0}, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000240)={0xc, 0x0, 0x0}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000280)={0x28, 0x7, r5, 0x0, &(0x7f00007ff000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f0000000400)={0x48, 0x5, r4, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r2, 0x3ba0, &(0x7f0000000080)={0x48, 0x7, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32315d}) 2.931004704s ago: executing program 4 (id=5053): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xec}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) close(r1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/stat\x00', 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000001a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x600, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x8, 0x1c, &(0x7f0000000300)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000030000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007b2af0ff00000000d609080000000000db9af0ff41000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7050000080000001500000076000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = syz_open_dev$radio(&(0x7f00000003c0), 0x2, 0x2) ioctl$VIDIOC_LOG_STATUS(r5, 0x5646, 0x0) read(r5, &(0x7f0000001e80)=""/96, 0x60) r6 = socket(0x840000000002, 0x80000, 0xfd) connect$inet(r6, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2e0, 0x148, 0x1170, 0x1170, 0x148, 0x1170, 0x260, 0x1398, 0x1398, 0x260, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @remote, [0x0, 0x322], [], 'veth0_vlan\x00', 'veth0_to_hsr\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@connlabel={{0x28}}]}, @common=@unspec=@CLASSIFY={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, [], [], 'veth1_to_hsr\x00', 'vlan1\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x340) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_GET(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)={0x14, r9, 0xc99752fbd6bf8f05, 0x0, 0x0, {0x4e}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r9, 0x100, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4001}, 0x4000080) unshare(0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 2.792578889s ago: executing program 3 (id=5054): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) r0 = socket(0x10, 0x803, 0x0) recvmmsg(r0, 0x0, 0x0, 0x100000000000000, &(0x7f0000003700)={0x77359400}) 2.660736899s ago: executing program 0 (id=5055): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x30000, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000040)={0x0, 0x0, 0x0, 'queue0\x00'}) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000180)={0x21000000}) 2.564389418s ago: executing program 3 (id=5056): bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x0) syz_usb_connect(0x0, 0x5d, &(0x7f0000001800)=ANY=[@ANYBLOB="1201000093007a402104070051b80102030109024b00010000000009040000000202ff00052406000105110000000d240f0100000000000000000006241a0000000524010000052406000005240000000d240f"], 0x0) r0 = socket$kcm(0x10, 0x0, 0x4) mmap(&(0x7f000089c000/0x3000)=nil, 0x3000, 0x1, 0x8031, r0, 0xf89f000) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) r2 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x550, 0x1c0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x480, 0xffffffff, 0xffffffff, 0x480, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x4, 0x0, 'syz0\x00'}}]}, @common=@inet=@SET1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB="2c69000000000001001c4cf362a7", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r3, &(0x7f0000002300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000001200)={0x50, 0x0, r4}, 0x50) read$FUSE(r3, &(0x7f0000004340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r3, &(0x7f0000000200)={0x10, 0xffffffffffffffda, r5}, 0x10) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) openat$vnet(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000600)) syz_genetlink_get_family_id$batadv(0x0, r1) syz_genetlink_get_family_id$tipc2(&(0x7f0000000640), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000280)) 2.092007824s ago: executing program 4 (id=5057): r0 = creat(&(0x7f0000000140)='./file0\x00', 0xea) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',no']) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) getsockname$unix(r1, &(0x7f0000000180), &(0x7f0000000080)=0x6e) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x101, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x200}}, './file0\x00'}) 1.874390376s ago: executing program 2 (id=5058): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, 0x0, &(0x7f0000000680)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0xfffff000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) sched_setaffinity(0x0, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000580)=[{&(0x7f00000066c0)=""/102400, 0x19000}, {&(0x7f0000000400)=""/252, 0xfc}], 0x2, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000070601080000000000000000000000000500010600000000"], 0x1c}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'gre0\x00', &(0x7f00000006c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x36, 0x4, 0x0, 0x0, 0xd8, 0x64, 0x0, 0x0, 0x0, 0x0, @broadcast, @broadcast, {[@cipso={0x86, 0x13, 0x1, [{0x6, 0xd, "4ebc906a4115167812831c"}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private}, {@empty, 0xfffffffc}, {@remote, 0xfffffffd}, {@dev}, {@empty}, {@multicast1}, {@private}]}, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x0, [{@remote, 0xe}, {@private}, {@rand_addr=0x64010100}, {@broadcast}, {@multicast2, 0x10000}]}, @noop, @ssrr={0x89, 0x27, 0xf5, [@multicast1, @private=0xa010102, @remote, @broadcast, @remote, @private=0xa010100, @private=0xa010102, @local, @rand_addr=0x64010100]}, @noop, @lsrr={0x83, 0xb, 0x0, [@rand_addr, @multicast1]}, @rr={0x7, 0x13, 0x0, [@empty, @remote, @dev={0xac, 0x14, 0x14, 0xb}, @remote]}]}}}}}) socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_setup(0x3ed9, &(0x7f0000000080)={0x0, 0x5708, 0x200, 0x2, 0x9, 0x0, r0}, &(0x7f0000000100), &(0x7f00000003c0)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) epoll_create1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) unshare(0x2a020400) ioctl$SNDRV_CTL_IOCTL_TLV_READ(0xffffffffffffffff, 0xc008551a, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) quotactl_fd$Q_SETINFO(r2, 0xffffffff80000602, 0xee01, &(0x7f0000000180)={0x8000, 0x8000000000000000, 0x1, 0x7}) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000b40)=@nat={'nat\x00', 0x6a0, 0x5, 0x348, 0x0, 0xb8, 0xfeffffff, 0x208, 0xb8, 0x2b0, 0x2b0, 0xffffffff, 0x2b0, 0x2b0, 0x5, 0x0, {[{{@uncond, 0x3e7, 0x70, 0xb8, 0xe000000}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@local, @gre_key}}}, {{@ip={@rand_addr, @local, 0x0, 0x0, 'veth1_to_batadv\x00', 'xfrm0\x00'}, 0x0, 0x70, 0xa8, 0x0, {0x0, 0x7}}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x3, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @gre_key, @gre_key}}}}, {{@ip={@local, @rand_addr, 0x0, 0x0, 'team_slave_1\x00', 'netpci0\x00'}, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @dev, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r4 = shmget$private(0x0, 0x1000, 0x800, &(0x7f0000838000/0x1000)=nil) shmat(r4, &(0x7f0000800000/0x800000)=nil, 0x5000) 1.51672742s ago: executing program 0 (id=5059): sched_setaffinity(0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = shmget$private(0x0, 0x1000, 0x800, &(0x7f0000838000/0x1000)=nil) shmat(r0, &(0x7f0000800000/0x800000)=nil, 0x5000) 1.353143732s ago: executing program 0 (id=5060): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x5, 0x800, 0x3) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20045000}, 0x20040050) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x24}, 0x24}}, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x1501) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0xe4, &(0x7f0000000280)={0x4b5a9da54893e123, 0x3, 0x7}, 0x8, 0x0, 0x6, 0x0, 0x0, 0xfffffffe, 0x0}) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c0005d46d4f9dc13c7b64f4265315d3eb1c6609b787d25a642b74179a1ca75e9de5934bb8a71a34b99decc60ee9b9890dec213d3942c3a935d1b798bb9f46f1781a55212c932842341f2950a24526ece26866bc7c85dc93"]) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0x4) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0x0, 0xb000}, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000180)="0b0306144f04020002004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r6}, 0x14) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'bridge0\x00'}) bind$packet(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x802, 0x0, 0x0) utime(&(0x7f0000000040)='./file0\x00', 0x0) waitid(0x1, r1, 0x0, 0x4, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.008367629s ago: executing program 4 (id=5061): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r2 = syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="120100001d122610d118af1e79070102030109021b0001000000000904000001e1153d0009050662"], 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000000340)={0x1c, &(0x7f00000001c0)=ANY=[@ANYBLOB="0017c8000000b8"], 0x0, 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r4, 0x89fb, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000140)={@private2, @private, 0x1c}}) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x28f) sendmsg$nl_route(r3, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001f00)=ANY=[@ANYBLOB="300000001900010000000000000000008020000000110005000000000c00090008"], 0x30}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(0xffffffffffffffff, 0x47ba, 0x0, 0x0, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x5400, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f00000000c0)={0x5, &(0x7f0000000000)=[{0x40, 0x5, 0x6, 0x2}, {0x9, 0xf, 0x4}, {0x9, 0xb, 0x7, 0x40d}, {0x9, 0x0, 0x7c, 0x7fffffff}, {0x8, 0x7f, 0x5, 0x4}]}) r5 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000001c0)=0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000240)=0x0) syz_clone3(&(0x7f0000000580)={0x24080, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)=0x0, {0x3a}, &(0x7f0000000340)=""/208, 0xd0, &(0x7f0000000500)=""/70, &(0x7f0000000440)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) sendmsg$nl_generic(r0, &(0x7f0000000ac0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f0000000680)={0x420, 0x16, 0x1, 0x70bd28, 0x25dfdbfc, {0x8}, [@typed={0x8, 0xf, 0x0, 0x0, @uid=r6}, @nested={0x258, 0xa5, 0x0, 0x1, [@typed={0x8, 0x8d, 0x0, 0x0, @pid=r7}, @generic="28577f554c989057e69ccc6f82a3a7c0f5d363cc93089462afa33f887d853aa557c1b10594e5bc306802dce0b003f00e0645b5340da35dd825431fe0be2aa1562549f4969ac27132e3d2986a91991d071630009f1158f526d224b78f502beeb710b8ab09794ab43992f1147bbbdcf72f8380dd3982650a4a98ea2886f00744d54acb0abc010ee9ee5f173065cec641bb172d85bf1f7917fb61d6815c8a2943f543588a7f15b6ab37864e36a6a4c129cb079ecd696e280bba0ba5183c28a077ad1928ba155fe97c1fd8b37d66519329700c7743d9f7acbf8199ba1526564ddbbd7e85f45d940ef59cc8dd43f7c7dccdd6f4954424f2abca0d", @generic="8c9ff5a8ab8ea62f2400f9b2a165019967e9931eb6d592d5ea3001518516864b717c4197771e5f1bc578097d9f79e0a0443fb4d5c8db8c4a969cd4e0388c1f299c9089075142a6db139f9623330b3f279c31ae74e2336f37be21a820bc0ce2a9f58b56985fda0db034bb9c91b90bd21b23d00437fa0b1e4d", @generic="12", @generic="194305a03a63f02ea5018b7a503d87356d439e093f79770afbcc27717b4f93349e003ca2ba9a9e243f0f03c3eecb33bc7eb3f481540ec22b27daa43615392c2ed258498f5bbacc23eae5edf844a22c2ed3811147c8210c23c64f6ad39b28323eb7ee973541474ea64732280f2f8a90df222a320191c87736c5fe1ccbd9a33f99fa42916fa3f5416ce6c8975755b11d769fa5368ab32cff38e44074bc1e1ee23960aea866a11f626cbf97f9a121e28ecef3b9a18d7cd342409a76aec561b1fcf1232625e7ffa78478209bf6d939012cba92c678a1441950db818ffb"]}, @typed={0x88, 0xf8, 0x0, 0x0, @binary="56b2ff0759d9512c9932178e333ed9433c4fff415d4b5a98a80baa8fbbbc24e13e3b327ab78fbcca47f6ae40a9a662b2a5e8537681a6162c6d405f64c26ca0958e98a35f212b9e309a59aad0cb9fc45068f8eac1f0ea4ccedee33965c76d35a1245970a72a40aa8d3540bedf3aa95c6d4af842dc8d55b4c489551c13ed17e0c75e54c2fb"}, @nested={0x121, 0x100, 0x0, 0x1, [@generic="0a9061123cad5475f7d42101b6dbb5c7035ff1763f9f04bb3baa930ed654f0a211615636b2c845ae37cd55ba4d4329f0dbf6d25fa0b242d1d7ae96a546b644", @typed={0x8, 0x8e, 0x0, 0x0, @pid=r8}, @generic="7b2f0f9ef586a838168ea44bcd6d30aa35ed4e03514cbaef7921fd8f9a4d7ed4851b0553c0b51e73be9ae02c4d544e48f1e784ba0248c91b5eb6a84348dae22293d3fa2ac13daf55af42cb21298732b885de7bd37fedfab2f6930b0d1cd316de458314c5b4a2360d23834484b02e6fa4af0de0abe8e79b35ca12fa9952cdc8ce931de8e30738d9a3552fde63e0296f74907db3e369299a0b3d4ddfc6312ea883b90049db5b11ca002f8ec4cf882f5f7507ce7ef3c34d35453e8f2ab7c30f0ecf44f11b0ab817c5180e358a4d38e884192654ddd76ec5"]}]}, 0x420}, 0x1, 0x0, 0x0, 0x40}, 0x20000004) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB='\x00'/18, @ANYRES32=r9, @ANYBLOB="0800050002000000"], 0x24}}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) 798.667735ms ago: executing program 3 (id=5062): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_emit_ethernet(0x14a, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00", @ANYRES32, @ANYBLOB="fe000000000000001c"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0x24}}, 0x0) syz_usb_connect$hid(0xf63067478e218e8, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) write$binfmt_script(r2, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x4040800, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = syz_open_dev$vim2m(0x0, 0x40000000f, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000000)={0x32, 0x2, 0x0, "444900e1b0faa9b0071c937f7f00002e0c0000ff070000ff0f0000c39b00"}) r5 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x422000) r6 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) r7 = fsmount(r6, 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r5, 0xc0205648, &(0x7f0000000140)={0xf010000, 0x0, 0x0, r7, 0x0, 0x0}) syz_emit_ethernet(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) get_mempolicy(0x0, &(0x7f0000000080), 0x1ff, &(0x7f0000ffc000/0x1000)=nil, 0x4) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r8, &(0x7f0000001ac0)=[{&(0x7f0000000140)=""/46, 0x2e}, {&(0x7f0000001800)=""/202, 0xca}, {0x0}, {0x0}], 0x4, 0xfff, 0x0) 285.0821ms ago: executing program 0 (id=5063): ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) prlimit64(r0, 0xf, &(0x7f00000001c0)={0x7, 0x3}, &(0x7f0000000240)) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r3 = syz_open_dev$video(&(0x7f0000000000), 0x75, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r3, 0xc034564b, &(0x7f0000000040)={0x0, 0x32315659, 0x280}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x2, 0x30}, @IFLA_GRE_IKEY={0x8}]}}}]}, 0x44}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002280)=ANY=[@ANYBLOB="420000001800010000000000000000000a800000000000000000000018001600140001000000000000000000000010000000000008000400", @ANYRES32=r2, @ANYBLOB="0600150003"], 0x44}}, 0x0) 0s ago: executing program 2 (id=5064): syz_usb_connect(0x5, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd2, 0x0, 0xb8, 0x8, 0x424, 0xc001, 0xbaeb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xc0, 0x0, 0x0, 0xc6, 0x9f, 0x58, 0x3}}]}}]}}, 0x0) kernel console output (not intermixed with test programs): isconnect, device number 55 [ 2123.281352][T27604] letsketch 0003:6161:4D15.0028: Device info: Г [ 2123.447762][ T5240] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2123.463105][ T5240] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2123.483394][ T5240] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2123.502458][ T5240] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2123.510667][ T5240] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 2123.520022][ T5240] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2123.528404][ T12] bridge_slave_1: left allmulticast mode [ 2123.529963][T27604] usb 5-1: Max retries (5) exceeded reading string descriptor 202 [ 2123.539949][ T12] bridge_slave_1: left promiscuous mode [ 2123.547809][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 2123.572875][ T12] bridge_slave_0: left allmulticast mode [ 2123.600457][T27604] letsketch 0003:6161:4D15.0028: probe with driver letsketch failed with error -71 [ 2123.609249][ T12] bridge_slave_0: left promiscuous mode [ 2123.628010][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 2123.693833][T27604] usb 5-1: USB disconnect, device number 35 [ 2124.028223][T27600] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 2124.238476][T27600] usb 2-1: Using ep0 maxpacket: 8 [ 2124.249053][T27600] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 2124.287078][T27600] usb 2-1: config 0 has no interface number 0 [ 2124.301470][T19337] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2124.303955][T27600] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 101, changing to 10 [ 2124.327883][T27600] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 59093, setting to 1024 [ 2124.328310][T19337] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2124.345738][T27600] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2124.358451][T19337] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2124.381502][T19337] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2124.395581][T19337] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 2124.405210][T19337] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2124.469743][T27600] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2124.520042][T27600] usb 2-1: config 0 descriptor?? [ 2124.525964][T31980] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2124.546607][T27600] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 2124.678812][T31999] ALSA: seq fatal error: cannot create timer (-22) [ 2124.726148][T32001] fuse: Unknown parameter 'pcr' [ 2124.854014][ T5287] usb 2-1: USB disconnect, device number 56 [ 2124.860042][ C1] iowarrior 2-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 2124.944235][ T5287] iowarrior 2-1:0.1: I/O-Warror #0 now disconnected [ 2125.471828][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2125.489232][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2125.507382][ T12] bond0 (unregistering): Released all slaves [ 2125.617894][ T5240] Bluetooth: hci2: command tx timeout [ 2125.710006][ T29] audit: type=1326 audit(1725832922.988:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32008 comm="syz.4.4795" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffb8497cef9 code=0x0 [ 2125.731964][ C0] vkms_vblank_simulate: vblank timer overrun [ 2126.420958][ T12] hsr_slave_0: left promiscuous mode [ 2126.479603][ T12] hsr_slave_1: left promiscuous mode [ 2126.488615][ T5240] Bluetooth: hci4: command tx timeout [ 2126.537798][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2126.551171][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2126.573179][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2126.589597][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2126.630733][ T12] veth1_macvtap: left promiscuous mode [ 2126.637475][ T12] veth0_macvtap: left promiscuous mode [ 2126.643898][ T12] veth1_vlan: left promiscuous mode [ 2126.649935][ T12] veth0_vlan: left promiscuous mode [ 2126.656360][T27604] usb 4-1: new low-speed USB device number 29 using dummy_hcd [ 2126.878213][T27604] usb 4-1: Invalid ep0 maxpacket: 32 [ 2126.931517][T32040] random: crng reseeded on system resumption [ 2126.973118][ T5240] Bluetooth: hci1: command 0x0406 tx timeout [ 2127.029012][T27604] usb 4-1: new low-speed USB device number 30 using dummy_hcd [ 2127.148821][T32045] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4801'. [ 2127.248391][T27604] usb 4-1: Invalid ep0 maxpacket: 32 [ 2127.267493][T27604] usb usb4-port1: attempt power cycle [ 2127.334946][T32050] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4801'. [ 2127.689164][T19337] Bluetooth: hci2: command tx timeout [ 2127.730330][T27604] usb 4-1: new low-speed USB device number 31 using dummy_hcd [ 2127.780552][T27604] usb 4-1: Invalid ep0 maxpacket: 32 [ 2127.983257][T27604] usb 4-1: new low-speed USB device number 32 using dummy_hcd [ 2128.038921][T27604] usb 4-1: Invalid ep0 maxpacket: 32 [ 2128.051061][T27604] usb usb4-port1: unable to enumerate USB device [ 2128.144407][ T12] team0 (unregistering): Port device team_slave_1 removed [ 2128.253909][ T12] team0 (unregistering): Port device team_slave_0 removed [ 2128.568620][T19337] Bluetooth: hci4: command tx timeout [ 2129.768840][T19337] Bluetooth: hci2: command tx timeout [ 2129.800706][T31996] chnl_net:caif_netlink_parms(): no params data found [ 2130.064186][T31978] chnl_net:caif_netlink_parms(): no params data found [ 2130.295770][T31996] bridge0: port 1(bridge_slave_0) entered blocking state [ 2130.307132][T31996] bridge0: port 1(bridge_slave_0) entered disabled state [ 2130.317622][T31996] bridge_slave_0: entered allmulticast mode [ 2130.327997][T31996] bridge_slave_0: entered promiscuous mode [ 2130.339310][T32083] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4807'. [ 2130.406866][T31996] bridge0: port 2(bridge_slave_1) entered blocking state [ 2130.439297][T31996] bridge0: port 2(bridge_slave_1) entered disabled state [ 2130.479165][T31996] bridge_slave_1: entered allmulticast mode [ 2130.521959][T31996] bridge_slave_1: entered promiscuous mode [ 2130.661399][T19337] Bluetooth: hci4: command tx timeout [ 2130.853374][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2130.957113][T31978] bridge0: port 1(bridge_slave_0) entered blocking state [ 2130.979367][T31978] bridge0: port 1(bridge_slave_0) entered disabled state [ 2130.996927][T31978] bridge_slave_0: entered allmulticast mode [ 2131.008695][T31978] bridge_slave_0: entered promiscuous mode [ 2131.025843][T31978] bridge0: port 2(bridge_slave_1) entered blocking state [ 2131.045261][T31978] bridge0: port 2(bridge_slave_1) entered disabled state [ 2131.061685][T31978] bridge_slave_1: entered allmulticast mode [ 2131.080117][T31978] bridge_slave_1: entered promiscuous mode [ 2131.136282][T31996] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2131.265295][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2131.321580][ T5240] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2131.343590][ T5240] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2131.389639][ T5240] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2131.400746][ T5240] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2131.411276][ T5240] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 2131.420437][ T5240] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2131.432380][T31996] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2131.506884][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2131.544142][T31978] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2131.548606][ T1852] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 2131.573679][T31978] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2131.626544][T32117] vivid-002: ================= START STATUS ================= [ 2131.648707][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2131.659848][T32117] vivid-002: Radio HW Seek Mode: Bounded [ 2131.665539][T32117] vivid-002: Radio Programmable HW Seek: false [ 2131.676990][T32117] vivid-002: RDS Rx I/O Mode: Block I/O [ 2131.722068][T32117] vivid-002: Generate RBDS Instead of RDS: false [ 2131.752749][T32117] vivid-002: RDS Reception: true [ 2131.788404][T32117] vivid-002: RDS Program Type: 0 inactive [ 2131.794393][T32117] vivid-002: RDS PS Name: [ 2131.801407][ T1852] usb 5-1: config 1 interface 0 has no altsetting 0 [ 2131.813649][T32117] inactive [ 2131.820389][ T1852] usb 5-1: New USB device found, idVendor=056a, idProduct=0018, bcdDevice= 0.40 [ 2131.840802][ T1852] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2131.848563][T19337] Bluetooth: hci2: command tx timeout [ 2131.857780][ T1852] usb 5-1: Product: syz [ 2131.858542][T32117] vivid-002: RDS Radio Text: inactive [ 2131.868143][ T1852] usb 5-1: Manufacturer: syz [ 2131.878177][ T1852] usb 5-1: SerialNumber: syz [ 2131.893901][T31978] team0: Port device team_slave_0 added [ 2131.903456][T32117] vivid-002: RDS Traffic Announcement: false inactive [ 2131.917107][T32117] vivid-002: RDS Traffic Program: false inactive [ 2131.955218][T32117] vivid-002: RDS Music: false inactive [ 2131.980354][T32117] vivid-002: ================== END STATUS ================== [ 2131.991218][T31996] team0: Port device team_slave_0 added [ 2132.020603][T31978] team0: Port device team_slave_1 added [ 2132.119339][T32112] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2132.146270][T31996] team0: Port device team_slave_1 added [ 2132.152579][T32112] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2132.173604][T31978] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2132.208735][T31978] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2132.234955][ C0] vkms_vblank_simulate: vblank timer overrun [ 2132.251351][T31978] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2132.469731][T31978] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2132.491895][T31978] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2132.517916][ C0] vkms_vblank_simulate: vblank timer overrun [ 2132.535490][T31978] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2132.585664][T31996] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2132.587678][ T1852] usbhid 5-1:1.0: can't add hid device: -71 [ 2132.601547][T31996] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2132.637385][ T1852] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 2132.656424][T31996] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2132.669417][ T1852] usb 5-1: USB disconnect, device number 36 [ 2132.706949][T31996] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2132.728319][T19337] Bluetooth: hci4: command tx timeout [ 2132.751624][T31996] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2132.791915][T31996] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2132.946133][T32143] netlink: 'syz.3.4817': attribute type 12 has an invalid length. [ 2132.972139][T32143] netlink: 197276 bytes leftover after parsing attributes in process `syz.3.4817'. [ 2133.004490][T31978] hsr_slave_0: entered promiscuous mode [ 2133.022560][T31978] hsr_slave_1: entered promiscuous mode [ 2133.047696][T31978] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2133.062341][T31978] Cannot create hsr debugfs directory [ 2133.252849][ T12] bridge_slave_1: left allmulticast mode [ 2133.259185][ T12] bridge_slave_1: left promiscuous mode [ 2133.267672][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 2133.293305][ T12] bridge_slave_0: left allmulticast mode [ 2133.300231][ T12] bridge_slave_0: left promiscuous mode [ 2133.315996][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 2133.528283][T19337] Bluetooth: hci0: command tx timeout [ 2134.101776][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2134.130757][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2134.160779][ T12] bond0 (unregistering): Released all slaves [ 2134.329403][T32148] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4818'. [ 2134.398957][T31996] hsr_slave_0: entered promiscuous mode [ 2134.405831][T31996] hsr_slave_1: entered promiscuous mode [ 2134.412987][T31996] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2134.420857][T31996] Cannot create hsr debugfs directory [ 2134.592119][T27604] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 2134.707871][T32114] chnl_net:caif_netlink_parms(): no params data found [ 2134.777287][ T12] hsr_slave_0: left promiscuous mode [ 2134.779136][T27604] usb 4-1: Using ep0 maxpacket: 8 [ 2134.789885][ T12] hsr_slave_1: left promiscuous mode [ 2134.793759][T27604] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 2134.803364][T27604] usb 4-1: config 0 has no interface number 0 [ 2134.809926][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2134.809987][T27604] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 101, changing to 10 [ 2134.817391][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2134.828820][T27604] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 59093, setting to 1024 [ 2134.828877][T27604] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2134.828906][T27604] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2134.839052][T27604] usb 4-1: config 0 descriptor?? [ 2134.856209][ T5287] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 2134.880781][T32157] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2134.881312][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2134.894752][T27604] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 2134.917297][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2134.946427][ T12] veth1_macvtap: left promiscuous mode [ 2134.952324][ T12] veth0_macvtap: left promiscuous mode [ 2134.958890][ T12] veth1_vlan: left promiscuous mode [ 2134.964244][ T12] veth0_vlan: left promiscuous mode [ 2135.043466][ T5287] usb 5-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 2135.055359][ T5287] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2135.064548][ T5287] usb 5-1: Product: syz [ 2135.071609][ T5287] usb 5-1: Manufacturer: syz [ 2135.076252][ T5287] usb 5-1: SerialNumber: syz [ 2135.094169][ T5287] r8152-cfgselector 5-1: Unknown version 0x0000 [ 2135.102426][ T5287] r8152-cfgselector 5-1: config 0 descriptor?? [ 2135.243274][ T1852] usb 4-1: USB disconnect, device number 33 [ 2135.256935][ T1852] iowarrior 4-1:0.1: I/O-Warror #0 now disconnected [ 2135.399898][T32166] random: crng reseeded on system resumption [ 2135.608456][T19337] Bluetooth: hci0: command tx timeout [ 2136.362600][ T12] team0 (unregistering): Port device team_slave_1 removed [ 2136.474699][ T12] team0 (unregistering): Port device team_slave_0 removed [ 2137.690254][T19337] Bluetooth: hci0: command tx timeout [ 2138.370719][T32114] bridge0: port 1(bridge_slave_0) entered blocking state [ 2138.382962][T32114] bridge0: port 1(bridge_slave_0) entered disabled state [ 2138.393004][T32114] bridge_slave_0: entered allmulticast mode [ 2138.417292][T32114] bridge_slave_0: entered promiscuous mode [ 2138.435711][T32114] bridge0: port 2(bridge_slave_1) entered blocking state [ 2138.438476][T27600] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 2138.460751][T32114] bridge0: port 2(bridge_slave_1) entered disabled state [ 2138.474619][T32114] bridge_slave_1: entered allmulticast mode [ 2138.501187][T32114] bridge_slave_1: entered promiscuous mode [ 2138.678959][T27600] usb 4-1: Using ep0 maxpacket: 8 [ 2138.692942][T27600] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 2138.713428][T27600] usb 4-1: config 179 has no interface number 0 [ 2138.728195][T27600] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 2138.739862][T27600] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 2138.753492][T27600] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2138.767375][T32114] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2138.776561][T27600] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 2138.788996][T27600] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 2138.803435][T27600] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 2138.866317][T27600] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2138.871289][T32114] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2138.933511][T32172] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2139.115689][T32114] team0: Port device team_slave_0 added [ 2139.324153][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2139.354165][T27600] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input43 [ 2139.409601][T32114] team0: Port device team_slave_1 added [ 2139.607181][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2139.630878][T32172] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4824'. [ 2139.770667][T19337] Bluetooth: hci0: command tx timeout [ 2139.780393][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2139.827077][T32114] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2139.844707][T32114] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2139.877045][T32114] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2140.007660][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2140.077703][T32114] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2140.097579][T32114] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2140.127924][T32114] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2140.142929][T31978] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2140.236024][T31978] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2140.342142][ T5287] r8152-cfgselector 5-1: Unknown version 0x0000 [ 2140.353607][ T5287] r8152-cfgselector 5-1: bad CDC descriptors [ 2140.371140][T31978] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2140.419836][T31978] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2140.465146][T32114] hsr_slave_0: entered promiscuous mode [ 2140.506173][T32114] hsr_slave_1: entered promiscuous mode [ 2140.526482][T27604] r8152-cfgselector 5-1: USB disconnect, device number 37 [ 2141.016951][ T5288] usb 4-1: USB disconnect, device number 34 [ 2141.016958][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 2141.017145][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 2141.039916][ T5288] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 2141.133251][ T12] bridge_slave_1: left allmulticast mode [ 2141.175447][ T12] bridge_slave_1: left promiscuous mode [ 2141.193593][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 2141.250006][ T12] bridge_slave_0: left allmulticast mode [ 2141.263957][ T12] bridge_slave_0: left promiscuous mode [ 2141.276642][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 2142.087763][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2142.105278][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2142.137411][ T12] bond0 (unregistering): Released all slaves [ 2142.193239][T32186] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4826'. [ 2142.533043][T31996] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2142.565726][T31996] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2142.722831][T31996] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2142.736947][T31996] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2142.904801][ T12] hsr_slave_0: left promiscuous mode [ 2142.912954][ T12] hsr_slave_1: left promiscuous mode [ 2142.921183][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2142.930368][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2142.951176][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2142.958827][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2143.000987][ T12] veth1_macvtap: left promiscuous mode [ 2143.006569][ T12] veth0_macvtap: left promiscuous mode [ 2143.012509][ T12] veth1_vlan: left promiscuous mode [ 2143.017842][ T12] veth0_vlan: left promiscuous mode [ 2143.138670][T11564] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 2143.334415][T11564] usb 5-1: Using ep0 maxpacket: 16 [ 2143.362168][T11564] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 2143.372069][T11564] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 0 [ 2143.385025][T11564] usb 5-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 7.79 [ 2143.394506][T11564] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2143.402697][T11564] usb 5-1: Product: syz [ 2143.406940][T11564] usb 5-1: Manufacturer: syz [ 2143.423249][T11564] usb 5-1: SerialNumber: syz [ 2143.443752][T11564] usb 5-1: config 0 descriptor?? [ 2143.684558][T11564] usb 5-1: Not enough endpoints found in device, aborting! [ 2143.824216][ T12] team0 (unregistering): Port device team_slave_1 removed [ 2143.890228][ T12] team0 (unregistering): Port device team_slave_0 removed [ 2144.136219][ T29] audit: type=1326 audit(1725832941.408:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32204 comm="syz.4.4832" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ffb8497cef9 code=0x0 [ 2144.671661][T32207] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4833'. [ 2144.688322][T32208] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4832'. [ 2144.752518][T31978] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2144.827390][T31978] 8021q: adding VLAN 0 to HW filter on device team0 [ 2144.906394][ T2908] bridge0: port 1(bridge_slave_0) entered blocking state [ 2144.913655][ T2908] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2144.943463][ T2908] bridge0: port 2(bridge_slave_1) entered blocking state [ 2144.950726][ T2908] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2145.389478][T32114] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2145.409241][T32114] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2145.448979][T32114] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2145.481939][T32114] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2145.514443][T31996] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2145.634033][T31978] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2145.652008][T31996] 8021q: adding VLAN 0 to HW filter on device team0 [ 2145.713941][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 2145.721107][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2145.735993][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 2145.743290][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2145.957832][T27600] usb 5-1: USB disconnect, device number 38 [ 2146.151302][T31978] veth0_vlan: entered promiscuous mode [ 2146.264240][T31978] veth1_vlan: entered promiscuous mode [ 2146.402317][T32114] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2146.447344][T31978] veth0_macvtap: entered promiscuous mode [ 2146.513195][T31978] veth1_macvtap: entered promiscuous mode [ 2146.556379][T31996] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2146.619123][T32114] 8021q: adding VLAN 0 to HW filter on device team0 [ 2146.726231][ T1120] bridge0: port 1(bridge_slave_0) entered blocking state [ 2146.733739][ T1120] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2146.870591][ T1120] bridge0: port 2(bridge_slave_1) entered blocking state [ 2146.877819][ T1120] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2146.955338][T31978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2147.005698][T31978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2147.037004][T31978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2147.062213][T31978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2147.074085][T31978] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2147.091438][T32264] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4841'. [ 2147.120112][T31978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2147.156366][T31978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2147.184003][T31978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2147.219420][T31978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2147.250042][T31978] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2147.267933][T31978] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2147.288635][T31978] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2147.297383][T31978] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2147.325080][T31978] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2147.344523][T32271] netlink: 'syz.4.4842': attribute type 1 has an invalid length. [ 2147.360251][ T29] audit: type=1326 audit(1725832944.638:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32270 comm="syz.3.4843" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2f48d7cef9 code=0x0 [ 2147.466998][T31996] veth0_vlan: entered promiscuous mode [ 2147.640610][T31996] veth1_vlan: entered promiscuous mode [ 2147.767201][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2147.816447][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2147.935802][T31996] veth0_macvtap: entered promiscuous mode [ 2147.957573][T21645] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2147.972977][T31996] veth1_macvtap: entered promiscuous mode [ 2147.984829][T21645] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2148.056910][T32114] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2148.147564][T31996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2148.166988][T31996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2148.185035][T31996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2148.202667][T31996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2148.214316][T31996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2148.242599][T31996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2148.266345][T31996] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2148.464431][T31996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2148.528342][T31996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2148.576662][T31996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2148.613509][T31996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2148.644832][T31996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2148.675447][T31996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2148.760352][T31996] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2148.768418][T24036] usb 4-1: new full-speed USB device number 35 using dummy_hcd [ 2148.841577][T31996] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2148.867414][T31996] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2148.904081][T31996] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2148.930880][T31996] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2148.950389][T24036] usb 4-1: config index 0 descriptor too short (expected 6427, got 27) [ 2148.978493][T24036] usb 4-1: config 0 has an invalid interface number: 21 but max is 0 [ 2149.044692][T24036] usb 4-1: config 0 has no interface number 0 [ 2149.081935][T24036] usb 4-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2149.120471][T32114] veth0_vlan: entered promiscuous mode [ 2149.147717][T24036] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 2149.198456][T24036] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 2149.215601][T24036] usb 4-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 2149.229595][T24036] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2149.303257][T24036] usb 4-1: config 0 descriptor?? [ 2149.303790][T32114] veth1_vlan: entered promiscuous mode [ 2149.333436][T32304] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2149.519861][T21645] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2149.573967][T21645] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2149.663884][ T2908] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2149.677902][T32114] veth0_macvtap: entered promiscuous mode [ 2149.699174][ T2908] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2149.722535][T32114] veth1_macvtap: entered promiscuous mode [ 2149.825483][T32114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2149.867531][T32114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2149.887485][T32114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2149.898833][T32114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2149.923030][T32114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2149.945450][T32114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2149.966180][T32114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2150.001235][T32114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2150.042379][T24036] usb 4-1: USB disconnect, device number 35 [ 2150.072931][T32114] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2150.117352][T32328] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4849'. [ 2150.190960][T32114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2150.240791][T32114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2150.276872][T32114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2150.304143][T32114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2150.325632][T32114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2150.346625][T32114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2150.377016][T32114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2150.441644][T32114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2150.464839][T32341] program syz.4.4850 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2150.493903][T32114] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2150.575532][T32114] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2150.619726][T32114] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2150.670607][T32114] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2150.706314][T32114] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2151.156512][ T2908] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2151.185118][ T2908] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2151.238214][T27600] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 2151.306816][T21645] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2151.345169][T21645] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2151.454335][T27600] usb 4-1: config 0 has no interfaces? [ 2151.470364][T27600] usb 4-1: New USB device found, idVendor=0458, idProduct=0087, bcdDevice= 0.00 [ 2151.515869][T27600] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2151.570387][T27600] usb 4-1: config 0 descriptor?? [ 2151.866555][T32375] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4857'. [ 2151.970568][T32376] xt_cgroup: path and classid specified [ 2152.169773][T32386] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4859'. [ 2152.312279][T32391] vivid-004: ================= START STATUS ================= [ 2152.329908][T32391] vivid-004: Radio HW Seek Mode: Bounded [ 2152.343812][T32391] vivid-004: Radio Programmable HW Seek: false [ 2152.350610][T32391] vivid-004: RDS Rx I/O Mode: Block I/O [ 2152.356364][T32391] vivid-004: Generate RBDS Instead of RDS: false [ 2152.389039][T32391] vivid-004: RDS Reception: true [ 2152.399512][T32391] vivid-004: RDS Program Type: 0 inactive [ 2152.406821][T32391] vivid-004: RDS PS Name: inactive [ 2152.457534][T32391] vivid-004: RDS Radio Text: inactive [ 2152.510274][T32391] vivid-004: RDS Traffic Announcement: false inactive [ 2152.517897][T32391] vivid-004: RDS Traffic Program: false inactive [ 2152.525271][T32391] vivid-004: RDS Music: false inactive [ 2152.531233][T32391] vivid-004: ================== END STATUS ================== [ 2153.172580][ T29] audit: type=1326 audit(1725832950.458:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32406 comm="syz.0.4863" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1d0cf7cef9 code=0x0 [ 2153.229371][ T29] audit: type=1326 audit(1725832950.508:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32406 comm="syz.0.4863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d0cf7cef9 code=0x7ffc0000 [ 2153.258332][ T29] audit: type=1326 audit(1725832950.508:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32406 comm="syz.0.4863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d0cf7cef9 code=0x7ffc0000 [ 2153.283942][ T29] audit: type=1326 audit(1725832950.508:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32406 comm="syz.0.4863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=191 compat=0 ip=0x7f1d0cf7cef9 code=0x7ffc0000 [ 2153.309700][ T29] audit: type=1326 audit(1725832950.508:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32406 comm="syz.0.4863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d0cf7cef9 code=0x7ffc0000 [ 2153.333877][ T29] audit: type=1326 audit(1725832950.508:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32406 comm="syz.0.4863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7f1d0cf7cef9 code=0x7ffc0000 [ 2153.357130][ T29] audit: type=1326 audit(1725832950.508:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32406 comm="syz.0.4863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d0cf7cef9 code=0x7ffc0000 [ 2153.393513][ T29] audit: type=1326 audit(1725832950.518:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32406 comm="syz.0.4863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d0cf7cef9 code=0x7ffc0000 [ 2153.415870][ C0] vkms_vblank_simulate: vblank timer overrun [ 2153.668272][T27989] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 2153.860016][T27989] usb 5-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 2153.876660][T27989] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2153.891412][T27989] usb 5-1: Product: syz [ 2153.898273][T27989] usb 5-1: Manufacturer: syz [ 2153.911642][T27989] usb 5-1: SerialNumber: syz [ 2153.953995][T27989] r8152-cfgselector 5-1: Unknown version 0x0000 [ 2153.970947][T27989] r8152-cfgselector 5-1: config 0 descriptor?? [ 2154.055585][T27604] usb 4-1: USB disconnect, device number 36 [ 2154.189587][T27989] r8152-cfgselector 5-1: Unknown version 0x0000 [ 2154.207030][T27989] r8152-cfgselector 5-1: bad CDC descriptors [ 2154.455867][T32424] random: crng reseeded on system resumption [ 2154.659879][T32432] fuse: Bad value for 'fd' [ 2155.265323][T32436] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2155.808172][T11564] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 2155.869244][T32441] netlink: 'syz.3.4873': attribute type 1 has an invalid length. [ 2155.885797][T32441] program syz.3.4873 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2155.998491][T11564] usb 3-1: Using ep0 maxpacket: 32 [ 2156.023241][T11564] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 2156.058112][T11564] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 2156.083884][T11564] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 2156.119640][T11564] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2156.138748][T11564] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2156.149512][T11564] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 2156.172100][T11564] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 2156.181384][T11564] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2156.245673][T11564] usb 3-1: config 0 descriptor?? [ 2156.476218][T11564] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 18 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 2156.501625][T32447] xt_cgroup: path and classid specified [ 2156.539809][T11564] usb 3-1: USB disconnect, device number 18 [ 2156.601215][T11564] usblp0: removed [ 2156.744233][T27989] r8152-cfgselector 5-1: USB disconnect, device number 39 [ 2157.018186][ T5288] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 2157.035576][T11564] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 2157.263669][ T5288] usb 4-1: Using ep0 maxpacket: 8 [ 2157.268925][T11564] usb 3-1: Using ep0 maxpacket: 32 [ 2157.278295][T27989] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 2157.294034][T11564] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 2157.307435][ T5288] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 2157.315348][T11564] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 2157.326536][ T5288] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 2157.339023][T11564] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 2157.352805][ T5288] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2157.364769][T11564] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2157.388935][ T5288] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2157.395527][T11564] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2157.419032][ T5288] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2157.442479][T11564] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 2157.456001][T11564] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 2157.465706][T11564] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2157.473938][ T5288] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 2157.481560][ T5288] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 2157.494379][ T5288] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2157.506248][T27989] usb 5-1: Using ep0 maxpacket: 16 [ 2157.507924][ T5288] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2157.524409][T11564] usb 3-1: config 0 descriptor?? [ 2157.581701][ T5288] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2157.583581][T27989] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2157.621264][ T5288] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 2157.656240][T27989] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2157.674976][ T5288] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 2157.706733][T27989] usb 5-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.00 [ 2157.732285][ T5288] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2157.738807][T27989] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2157.784275][ T5288] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2157.801580][ T5288] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2157.860597][ T5288] usb 4-1: string descriptor 0 read error: -22 [ 2157.877869][T11564] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 19 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 2157.893275][T27989] usb 5-1: config 0 descriptor?? [ 2157.901842][ T5288] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 2157.953197][ T5288] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2157.988103][T11564] usb 3-1: USB disconnect, device number 19 [ 2158.038444][T11564] usblp0: removed [ 2158.057071][ T5288] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 2158.344713][T27989] ryos 0003:1E7D:3232.0029: unknown main item tag 0x0 [ 2158.375406][T27989] ryos 0003:1E7D:3232.0029: hidraw0: USB HID v0.00 Device [HID 1e7d:3232] on usb-dummy_hcd.4-1/input0 [ 2158.668179][T11564] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 2158.720011][ T1852] usb 4-1: USB disconnect, device number 37 [ 2158.881734][T11564] usb 3-1: New USB device found, idVendor=0421, idProduct=0007, bcdDevice=b8.51 [ 2158.923695][T11564] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2158.949757][T11564] usb 3-1: Product: syz [ 2158.955331][T11564] usb 3-1: Manufacturer: syz [ 2158.970885][T11564] usb 3-1: SerialNumber: syz [ 2158.982317][T11564] usb 3-1: config 0 descriptor?? [ 2158.991666][T11564] rndis_host 3-1:0.0: skipping garbage [ 2158.997233][T11564] rndis_host 3-1:0.0: More than one union descriptor, skipping ... [ 2159.010939][T11564] usb 3-1: bad CDC descriptors [ 2159.024513][T11564] cdc_acm 3-1:0.0: skipping garbage [ 2159.035974][T11564] cdc_acm 3-1:0.0: More than one union descriptor, skipping ... [ 2159.202308][T32467] Cannot find add_set index 0 as target [ 2159.222533][T27989] usb 3-1: USB disconnect, device number 20 [ 2159.562095][T32481] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2159.914442][T22638] usb 5-1: USB disconnect, device number 40 [ 2159.980377][T11564] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 2160.002139][T32490] vivid-000: ================= START STATUS ================= [ 2160.012180][T32490] vivid-000: Radio HW Seek Mode: Bounded [ 2160.017996][T32490] vivid-000: Radio Programmable HW Seek: false [ 2160.024717][T32490] vivid-000: RDS Rx I/O Mode: Block I/O [ 2160.030735][T32490] vivid-000: Generate RBDS Instead of RDS: false [ 2160.037303][T32490] vivid-000: RDS Reception: true [ 2160.042848][T32490] vivid-000: RDS Program Type: 0 inactive [ 2160.081623][T32490] vivid-000: RDS PS Name: inactive [ 2160.103085][T32490] vivid-000: RDS Radio Text: inactive [ 2160.123570][T32490] vivid-000: RDS Traffic Announcement: false inactive [ 2160.154602][T32490] vivid-000: RDS Traffic Program: false inactive [ 2160.185088][T32490] vivid-000: RDS Music: false inactive [ 2160.207567][T11564] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2160.221794][T32490] vivid-000: ================== END STATUS ================== [ 2160.268687][T11564] usb 4-1: config 1 interface 0 altsetting 253 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 2160.357100][T11564] usb 4-1: config 1 interface 0 has no altsetting 0 [ 2160.387261][T11564] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2160.419315][T11564] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2160.460825][T11564] usb 4-1: SerialNumber: syz [ 2160.478175][T22638] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 2160.516084][T11564] cdc_ether 4-1:1.0: skipping garbage [ 2160.548250][T11564] usb 4-1: bad CDC descriptors [ 2160.692268][T22638] usb 5-1: config 0 has an invalid interface number: 242 but max is 0 [ 2160.722251][T22638] usb 5-1: config 0 has an invalid descriptor of length 180, skipping remainder of the config [ 2160.746421][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 2160.746489][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 2160.793657][T27989] usb 4-1: USB disconnect, device number 38 [ 2160.819684][T22638] usb 5-1: config 0 has no interface number 0 [ 2160.827789][T22638] usb 5-1: config 0 interface 242 has no altsetting 0 [ 2160.839858][T22638] usb 5-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice=51.ba [ 2160.850444][T22638] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2160.859965][T22638] usb 5-1: Product: syz [ 2160.864363][T22638] usb 5-1: Manufacturer: syz [ 2160.870894][T22638] usb 5-1: SerialNumber: syz [ 2160.881894][T22638] usb 5-1: config 0 descriptor?? [ 2161.094979][T32493] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2161.122715][T32493] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2161.349130][T32493] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2161.401361][T32515] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2161.421509][T32493] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2161.447328][T32515] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2161.597308][ T5288] usb 5-1: USB disconnect, device number 41 [ 2162.188156][ T5288] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 2162.406572][ T5288] usb 5-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 2162.420835][T22638] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 2162.441270][ T5288] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2162.483177][ T5288] usb 5-1: Product: syz [ 2162.503357][ T5288] usb 5-1: Manufacturer: syz [ 2162.532422][ T5288] usb 5-1: SerialNumber: syz [ 2162.581183][ T5288] r8152-cfgselector 5-1: Unknown version 0x0000 [ 2162.602468][ T5288] r8152-cfgselector 5-1: config 0 descriptor?? [ 2162.618978][T22638] usb 3-1: Using ep0 maxpacket: 16 [ 2162.673690][T22638] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2162.705362][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2162.740631][T22638] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2162.783190][T22638] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2162.810572][T22638] usb 3-1: New USB device found, idVendor=045e, idProduct=9994, bcdDevice=fc.3c [ 2162.827654][T22638] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2162.842737][T22638] usb 3-1: config 0 descriptor?? [ 2162.893971][ T5288] r8152-cfgselector 5-1: Unknown version 0x0000 [ 2162.908368][ T5288] r8152-cfgselector 5-1: bad CDC descriptors [ 2162.953090][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2163.161915][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2163.224762][T32536] random: crng reseeded on system resumption [ 2163.303656][T22638] hid-generic 0003:045E:9994.002A: unknown main item tag 0x7 [ 2163.326414][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2163.339382][T22638] hid-generic 0003:045E:9994.002A: item fetching failed at offset 32/34 [ 2163.357970][T22638] hid-generic 0003:045E:9994.002A: probe with driver hid-generic failed with error -22 [ 2163.458307][T27600] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 2163.545049][ T12] bridge_slave_1: left allmulticast mode [ 2163.560054][ T12] bridge_slave_1: left promiscuous mode [ 2163.566020][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 2163.590928][ T12] bridge_slave_0: left allmulticast mode [ 2163.599483][ T12] bridge_slave_0: left promiscuous mode [ 2163.609894][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 2163.678740][T27600] usb 2-1: Using ep0 maxpacket: 16 [ 2163.695806][T27600] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 2163.718190][T27600] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 0 [ 2163.760303][T27600] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 7.79 [ 2163.775700][T27600] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2163.809916][T27600] usb 2-1: Product: syz [ 2163.824612][T27600] usb 2-1: Manufacturer: syz [ 2163.856847][T27600] usb 2-1: SerialNumber: syz [ 2163.880360][T27600] usb 2-1: config 0 descriptor?? [ 2164.159175][T27600] usb 2-1: Not enough endpoints found in device, aborting! [ 2164.529863][ T5240] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2164.545625][ T5240] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2164.555561][T27604] usb 3-1: USB disconnect, device number 21 [ 2164.558474][ T5240] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2164.612812][ T29] audit: type=1326 audit(1725832961.888:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32532 comm="syz.1.4906" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7dc537cef9 code=0x0 [ 2164.639524][T31492] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2164.668888][T31492] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 2164.689495][T31492] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2165.197579][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2165.230448][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2165.266769][ T12] bond0 (unregistering): Released all slaves [ 2165.331880][T32547] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4906'. [ 2165.778403][ T5288] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 2165.937234][T22638] r8152-cfgselector 5-1: USB disconnect, device number 42 [ 2166.021109][ T5288] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2166.036330][ T12] hsr_slave_0: left promiscuous mode [ 2166.039079][T32574] FAULT_INJECTION: forcing a failure. [ 2166.039079][T32574] name failslab, interval 1, probability 0, space 0, times 0 [ 2166.054887][ T12] hsr_slave_1: left promiscuous mode [ 2166.070341][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2166.071296][ T5288] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2166.078314][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2166.099894][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2166.104869][T32574] CPU: 0 UID: 0 PID: 32574 Comm: syz.2.4914 Not tainted 6.11.0-rc6-syzkaller-00355-g5dadc1be8fc5 #0 [ 2166.117884][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2166.118037][T32574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 2166.118055][T32574] Call Trace: [ 2166.118067][T32574] [ 2166.118078][T32574] dump_stack_lvl+0x241/0x360 [ 2166.118115][T32574] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2166.151445][T32574] ? __pfx__printk+0x10/0x10 [ 2166.156083][T32574] ? __kmalloc_cache_noprof+0x44/0x2c0 [ 2166.161584][T32574] ? __pfx___might_resched+0x10/0x10 [ 2166.166912][T32574] should_fail_ex+0x3b0/0x4e0 [ 2166.171715][T32574] should_failslab+0xac/0x100 [ 2166.176415][T32574] ? __vb2_init_fileio+0x1e9/0xf90 [ 2166.181542][T32574] __kmalloc_cache_noprof+0x6c/0x2c0 [ 2166.186943][T32574] ? __mutex_trylock_common+0x183/0x2e0 [ 2166.192613][T32574] __vb2_init_fileio+0x1e9/0xf90 [ 2166.197676][T32574] ? __pfx___mutex_trylock_common+0x10/0x10 [ 2166.203597][T32574] ? rcu_is_watching+0x15/0xb0 [ 2166.208409][T32574] ? trace_contention_end+0x3c/0x120 [ 2166.213739][T32574] __vb2_perform_fileio+0x31a/0x17b0 [ 2166.219079][T32574] ? mark_lock+0x9a/0x350 [ 2166.223433][T32574] ? vb2_fop_write+0x110/0x340 [ 2166.228256][T32574] ? __pfx___mutex_lock+0x10/0x10 [ 2166.233454][T32574] ? __pfx___vb2_perform_fileio+0x10/0x10 [ 2166.239232][T32574] ? end_current_label_crit_section+0x151/0x180 [ 2166.245522][T32574] vb2_fop_write+0x222/0x340 [ 2166.250156][T32574] v4l2_write+0x1a7/0x2d0 [ 2166.254515][T32574] ? __pfx_v4l2_write+0x10/0x10 [ 2166.259393][T32574] vfs_write+0x2a2/0xc90 [ 2166.263666][T32574] ? __pfx_vfs_write+0x10/0x10 [ 2166.268439][T32574] ? __fget_files+0x29/0x470 [ 2166.273056][T32574] ? __fget_files+0x3f6/0x470 [ 2166.277770][T32574] ? __fget_files+0x29/0x470 [ 2166.282377][T32574] ksys_write+0x1a0/0x2c0 [ 2166.286725][T32574] ? __pfx_ksys_write+0x10/0x10 [ 2166.291580][T32574] ? do_syscall_64+0x100/0x230 [ 2166.296446][T32574] ? do_syscall_64+0xb6/0x230 [ 2166.301150][T32574] do_syscall_64+0xf3/0x230 [ 2166.305766][T32574] ? clear_bhb_loop+0x35/0x90 [ 2166.310467][T32574] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2166.316399][T32574] RIP: 0033:0x7f6e61f7cef9 [ 2166.320840][T32574] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2166.340511][T32574] RSP: 002b:00007f6e62e48038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2166.348948][T32574] RAX: ffffffffffffffda RBX: 00007f6e62135f80 RCX: 00007f6e61f7cef9 [ 2166.356954][T32574] RDX: 00000000fffffd9d RSI: 0000000020000100 RDI: 0000000000000004 [ 2166.364957][T32574] RBP: 00007f6e62e48090 R08: 0000000000000000 R09: 0000000000000000 [ 2166.372935][T32574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2166.380916][T32574] R13: 0000000000000000 R14: 00007f6e62135f80 R15: 00007f6e6225fa28 [ 2166.389001][T32574] [ 2166.392190][ C0] vkms_vblank_simulate: vblank timer overrun [ 2166.399666][ T5288] usb 1-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 2166.410108][ T5288] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2166.425174][ T5288] usb 1-1: config 0 descriptor?? [ 2166.500983][ T12] veth1_macvtap: left promiscuous mode [ 2166.521452][ T12] veth0_macvtap: left promiscuous mode [ 2166.542855][ T12] veth1_vlan: left promiscuous mode [ 2166.559430][T22638] usb 2-1: USB disconnect, device number 57 [ 2166.565674][ T12] veth0_vlan: left promiscuous mode [ 2166.750240][T31492] Bluetooth: hci0: unexpected event 0x06 length: 17 > 3 [ 2166.808303][T31492] Bluetooth: hci3: command tx timeout [ 2166.886551][T31492] Bluetooth: Unknown BR/EDR signaling command 0x10 [ 2166.893600][T31492] Bluetooth: Wrong link type (-22) [ 2166.934681][ T5288] isku 0003:1E7D:319C.002B: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.0-1/input0 [ 2167.775662][ T12] team0 (unregistering): Port device team_slave_1 removed [ 2167.846109][ T12] team0 (unregistering): Port device team_slave_0 removed [ 2168.648494][ T5288] usb 1-1: USB disconnect, device number 54 [ 2168.713380][T32554] chnl_net:caif_netlink_parms(): no params data found [ 2168.898415][T31492] Bluetooth: hci3: command tx timeout [ 2169.130863][T32554] bridge0: port 1(bridge_slave_0) entered blocking state [ 2169.198667][T27600] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 2169.268337][T32554] bridge0: port 1(bridge_slave_0) entered disabled state [ 2169.290718][T32554] bridge_slave_0: entered allmulticast mode [ 2169.330896][T32554] bridge_slave_0: entered promiscuous mode [ 2169.361587][T32554] bridge0: port 2(bridge_slave_1) entered blocking state [ 2169.377034][T32554] bridge0: port 2(bridge_slave_1) entered disabled state [ 2169.386515][T32554] bridge_slave_1: entered allmulticast mode [ 2169.397601][T32554] bridge_slave_1: entered promiscuous mode [ 2169.408393][T27600] usb 3-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 2169.418009][T27600] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2169.428187][ T5288] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 2169.432428][T27600] usb 3-1: Product: syz [ 2169.453164][T27600] usb 3-1: Manufacturer: syz [ 2169.461990][T27600] usb 3-1: SerialNumber: syz [ 2169.478834][T27600] usb 3-1: config 0 descriptor?? [ 2169.500414][T27600] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 2169.580818][T32554] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2169.634106][T32554] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2169.708175][ T5288] usb 2-1: device descriptor read/64, error -71 [ 2169.867261][T32554] team0: Port device team_slave_0 added [ 2169.893863][T32554] team0: Port device team_slave_1 added [ 2170.006695][ T5288] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 2170.020004][T32554] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2170.049212][T32554] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2170.129039][T11564] usb 3-1: USB disconnect, device number 22 [ 2170.149481][T32554] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2170.199867][T32554] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2170.238618][T32554] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2170.247441][ T5288] usb 2-1: device descriptor read/64, error -71 [ 2170.338306][T32554] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2170.428739][ T5288] usb usb2-port1: attempt power cycle [ 2170.470145][T32554] hsr_slave_0: entered promiscuous mode [ 2170.476704][T32554] hsr_slave_1: entered promiscuous mode [ 2170.484070][T32554] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2170.493278][T32554] Cannot create hsr debugfs directory [ 2170.608901][ T940] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 2170.698365][T24036] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 2170.818251][ T940] usb 1-1: Using ep0 maxpacket: 16 [ 2170.834547][ T940] usb 1-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 2170.854619][ T5288] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 2170.862695][ T940] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2170.884116][ T940] usb 1-1: Product: syz [ 2170.888434][ T940] usb 1-1: Manufacturer: syz [ 2170.893057][ T940] usb 1-1: SerialNumber: syz [ 2170.902772][ T5288] usb 2-1: device descriptor read/8, error -71 [ 2170.921618][T24036] usb 5-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 2170.940384][ T940] usb 1-1: config 0 descriptor?? [ 2170.945427][T24036] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2170.972546][T31492] Bluetooth: hci3: command tx timeout [ 2170.997780][T24036] usb 5-1: Product: syz [ 2171.018265][T24036] usb 5-1: Manufacturer: syz [ 2171.022900][T24036] usb 5-1: SerialNumber: syz [ 2171.068200][T24036] r8152-cfgselector 5-1: Unknown version 0x0000 [ 2171.090497][T24036] r8152-cfgselector 5-1: config 0 descriptor?? [ 2171.193473][ T5288] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 2171.237437][ T29] audit: type=1326 audit(1725832968.518:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32633 comm="syz.0.4923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d0cf7cef9 code=0x7ffc0000 [ 2171.258871][ T5288] usb 2-1: device descriptor read/8, error -71 [ 2171.368243][T24036] r8152-cfgselector 5-1: Unknown version 0x0000 [ 2171.377920][ T29] audit: type=1326 audit(1725832968.518:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32633 comm="syz.0.4923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d0cf7cef9 code=0x7ffc0000 [ 2171.394769][ T5288] usb usb2-port1: unable to enumerate USB device [ 2171.407082][T24036] r8152-cfgselector 5-1: bad CDC descriptors [ 2171.528274][ T29] audit: type=1326 audit(1725832968.518:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32633 comm="syz.0.4923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f1d0cf7cef9 code=0x7ffc0000 [ 2171.550566][ C0] vkms_vblank_simulate: vblank timer overrun [ 2171.611860][ T29] audit: type=1326 audit(1725832968.518:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32633 comm="syz.0.4923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d0cf7cef9 code=0x7ffc0000 [ 2171.703896][ T29] audit: type=1326 audit(1725832968.518:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32633 comm="syz.0.4923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d0cf7cef9 code=0x7ffc0000 [ 2171.785932][ T29] audit: type=1326 audit(1725832968.518:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32633 comm="syz.0.4923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f1d0cf7cef9 code=0x7ffc0000 [ 2171.819388][T32662] random: crng reseeded on system resumption [ 2171.838284][ T29] audit: type=1326 audit(1725832968.518:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32633 comm="syz.0.4923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d0cf7cef9 code=0x7ffc0000 [ 2171.941174][ T29] audit: type=1326 audit(1725832968.518:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32633 comm="syz.0.4923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d0cf7cef9 code=0x7ffc0000 [ 2172.041889][ T29] audit: type=1326 audit(1725832968.518:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32633 comm="syz.0.4923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f1d0cf7cef9 code=0x7ffc0000 [ 2172.064157][ C0] vkms_vblank_simulate: vblank timer overrun [ 2172.134547][ T29] audit: type=1326 audit(1725832968.518:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32633 comm="syz.0.4923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d0cf7cef9 code=0x7ffc0000 [ 2172.323302][T32554] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2172.362470][T32554] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2172.384813][T32554] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2172.414490][T32554] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2172.563952][T22638] usb 1-1: USB disconnect, device number 55 [ 2172.666416][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2172.943697][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2173.057864][T31492] Bluetooth: hci3: command tx timeout [ 2173.382976][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2173.560801][T27600] r8152-cfgselector 5-1: USB disconnect, device number 43 [ 2173.609247][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2173.733505][T19337] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2173.746887][T19337] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2173.756003][T19337] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2173.772488][T19337] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2173.781670][T19337] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 2173.795633][T19337] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2173.985146][T32554] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2174.064286][T32554] 8021q: adding VLAN 0 to HW filter on device team0 [ 2174.158286][T27600] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 2174.197254][T15120] bridge0: port 1(bridge_slave_0) entered blocking state [ 2174.204467][T15120] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2174.295969][ T12] bridge_slave_1: left allmulticast mode [ 2174.309379][ T12] bridge_slave_1: left promiscuous mode [ 2174.338881][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 2174.362974][ T12] bridge_slave_0: left allmulticast mode [ 2174.379509][ T12] bridge_slave_0: left promiscuous mode [ 2174.401165][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 2174.419266][T27600] usb 5-1: no configurations [ 2174.424400][T27600] usb 5-1: can't read configurations, error -22 [ 2174.588269][T27600] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 2174.714818][T32693] tipc: Failed to remove unknown binding: 65,0,0/0:739694352/739694353 [ 2174.801235][T32695] FAULT_INJECTION: forcing a failure. [ 2174.801235][T32695] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2174.823844][T32695] CPU: 0 UID: 0 PID: 32695 Comm: syz.0.4934 Not tainted 6.11.0-rc6-syzkaller-00355-g5dadc1be8fc5 #0 [ 2174.826264][T27600] usb 5-1: no configurations [ 2174.834645][T32695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 2174.834665][T32695] Call Trace: [ 2174.834677][T32695] [ 2174.834688][T32695] dump_stack_lvl+0x241/0x360 [ 2174.847687][T27600] usb 5-1: can't read configurations, error -22 [ 2174.849418][T32695] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2174.849453][T32695] ? __pfx__printk+0x10/0x10 [ 2174.849480][T32695] ? __pfx_lock_release+0x10/0x10 [ 2174.866682][T27600] usb usb5-port1: attempt power cycle [ 2174.871834][T32695] should_fail_ex+0x3b0/0x4e0 [ 2174.871884][T32695] _copy_from_user+0x2f/0xe0 [ 2174.871916][T32695] do_ipv6_setsockopt+0x2f1/0x3630 [ 2174.871963][T32695] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 2174.907003][T32695] ? __mutex_trylock_common+0x183/0x2e0 [ 2174.912596][T32695] ? __pfx___might_resched+0x10/0x10 [ 2174.917929][T32695] ? __pfx___mutex_trylock_common+0x10/0x10 [ 2174.923865][T32695] ? rcu_is_watching+0x15/0xb0 [ 2174.928696][T32695] ? trace_contention_end+0x3c/0x120 [ 2174.934019][T32695] ? __mutex_lock+0x2ef/0xd70 [ 2174.938736][T32695] ? __pfx___might_resched+0x10/0x10 [ 2174.944071][T32695] ? smc_setsockopt+0x1c3/0xe50 [ 2174.948968][T32695] ? __pfx___mutex_lock+0x10/0x10 [ 2174.954043][T32695] ipv6_setsockopt+0x5c/0x1a0 [ 2174.958761][T32695] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 2174.964696][T32695] smc_setsockopt+0x275/0xe50 [ 2174.969515][T32695] ? __pfx_smc_setsockopt+0x10/0x10 [ 2174.974765][T32695] ? aa_sock_opt_perm+0x79/0x120 [ 2174.979753][T32695] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 2174.985346][T32695] ? security_socket_setsockopt+0x87/0xb0 [ 2174.991201][T32695] ? __pfx_smc_setsockopt+0x10/0x10 [ 2174.996442][T32695] do_sock_setsockopt+0x3af/0x720 [ 2175.001520][T32695] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 2175.007121][T32695] ? __fget_files+0x29/0x470 [ 2175.011757][T32695] ? __fget_files+0x3f6/0x470 [ 2175.016494][T32695] __sys_setsockopt+0x1ae/0x250 [ 2175.021403][T32695] __x64_sys_setsockopt+0xb5/0xd0 [ 2175.026477][T32695] do_syscall_64+0xf3/0x230 [ 2175.031027][T32695] ? clear_bhb_loop+0x35/0x90 [ 2175.035748][T32695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2175.041683][T32695] RIP: 0033:0x7f1d0cf7cef9 [ 2175.046133][T32695] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2175.065781][T32695] RSP: 002b:00007f1d0dd01038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2175.074244][T32695] RAX: ffffffffffffffda RBX: 00007f1d0d135f80 RCX: 00007f1d0cf7cef9 [ 2175.082257][T32695] RDX: 000000000000001e RSI: 0000000000000029 RDI: 0000000000000003 [ 2175.090262][T32695] RBP: 00007f1d0dd01090 R08: 0000000000000008 R09: 0000000000000000 [ 2175.098274][T32695] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000001 [ 2175.106365][T32695] R13: 0000000000000000 R14: 00007f1d0d135f80 R15: 00007f1d0d25fa28 [ 2175.114491][T32695] [ 2175.117694][ C0] vkms_vblank_simulate: vblank timer overrun [ 2175.358207][T27600] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 2175.418831][T27600] usb 5-1: no configurations [ 2175.428370][T27600] usb 5-1: can't read configurations, error -22 [ 2175.598219][T27600] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 2175.730021][T27600] usb 5-1: no configurations [ 2175.744937][T27600] usb 5-1: can't read configurations, error -22 [ 2175.752497][T27600] usb usb5-port1: unable to enumerate USB device [ 2175.835871][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2175.848668][T31492] Bluetooth: hci0: command tx timeout [ 2175.865793][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2175.911314][ T12] bond0 (unregistering): Released all slaves [ 2176.019157][T12859] bridge0: port 2(bridge_slave_1) entered blocking state [ 2176.026437][T12859] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2176.152887][T32691] netlink: 'syz.2.4933': attribute type 10 has an invalid length. [ 2176.229858][T32691] team0: Device ipvlan1 failed to register rx_handler [ 2176.466638][T32735] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4936'. [ 2176.726798][T32726] bridge_slave_1: left allmulticast mode [ 2176.784899][T32726] bridge_slave_1: left promiscuous mode [ 2176.816336][T32726] bridge0: port 2(bridge_slave_1) entered disabled state [ 2176.859608][T32726] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 2176.952869][ T12] hsr_slave_0: left promiscuous mode [ 2176.963576][ T12] hsr_slave_1: left promiscuous mode [ 2176.980171][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2176.987659][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2177.019327][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2177.026871][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2177.115696][ T12] veth1_macvtap: left promiscuous mode [ 2177.136097][ T12] veth0_macvtap: left promiscuous mode [ 2177.150095][ T12] veth1_vlan: left promiscuous mode [ 2177.162278][ T12] veth0_vlan: left promiscuous mode [ 2177.443044][T32765] openvswitch: netlink: ct_state flags 00000300 unsupported [ 2177.558228][T22638] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 2177.783872][T22638] usb 1-1: Using ep0 maxpacket: 16 [ 2177.791453][T22638] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 2177.805046][T22638] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 0 [ 2177.831509][T22638] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 7.79 [ 2177.867234][T22638] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2177.881373][T22638] usb 1-1: Product: syz [ 2177.905192][T22638] usb 1-1: Manufacturer: syz [ 2177.913520][T22638] usb 1-1: SerialNumber: syz [ 2177.924069][T22638] usb 1-1: config 0 descriptor?? [ 2177.929183][T31492] Bluetooth: hci0: command tx timeout [ 2178.154486][T22638] usb 1-1: Not enough endpoints found in device, aborting! [ 2178.630036][ T29] kauditd_printk_skb: 36 callbacks suppressed [ 2178.630058][ T29] audit: type=1326 audit(1725832975.898:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32758 comm="syz.0.4943" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1d0cf7cef9 code=0x0 [ 2178.738431][T22638] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 2178.807870][ T12] team0 (unregistering): Port device team_slave_1 removed [ 2178.874762][ T12] team0 (unregistering): Port device team_slave_0 removed [ 2178.940299][T22638] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2178.955292][T22638] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2178.965639][T22638] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 2178.974776][T22638] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2178.993954][T22638] usb 3-1: config 0 descriptor?? [ 2179.740307][ T317] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4943'. [ 2179.865899][T32554] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2179.878687][T22638] hid-led 0003:27B8:01ED.002C: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.2-1/input0 [ 2179.949960][T22638] hid-led 0003:27B8:01ED.002C: ThingM blink(1) v1 initialized [ 2180.020367][T31492] Bluetooth: hci0: command tx timeout [ 2180.053523][T32554] veth0_vlan: entered promiscuous mode [ 2180.078622][T32679] chnl_net:caif_netlink_parms(): no params data found [ 2180.176713][T22638] usb 3-1: USB disconnect, device number 23 [ 2180.277467][T32554] veth1_vlan: entered promiscuous mode [ 2180.365373][T32679] bridge0: port 1(bridge_slave_0) entered blocking state [ 2180.378565][ T5288] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 2180.384754][T32679] bridge0: port 1(bridge_slave_0) entered disabled state [ 2180.404916][T32679] bridge_slave_0: entered allmulticast mode [ 2180.429502][T32679] bridge_slave_0: entered promiscuous mode [ 2180.446341][T32679] bridge0: port 2(bridge_slave_1) entered blocking state [ 2180.461740][T32679] bridge0: port 2(bridge_slave_1) entered disabled state [ 2180.472170][T32679] bridge_slave_1: entered allmulticast mode [ 2180.485733][T32679] bridge_slave_1: entered promiscuous mode [ 2180.581250][ T5288] usb 5-1: no configurations [ 2180.590857][ T5288] usb 5-1: can't read configurations, error -22 [ 2180.604179][T32679] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2180.629276][T32679] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2180.703760][T32679] team0: Port device team_slave_0 added [ 2180.723700][T32679] team0: Port device team_slave_1 added [ 2180.748261][ T5288] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 2180.813276][ T8] usb 1-1: USB disconnect, device number 56 [ 2180.927776][ T351] Cannot find del_set index 0 as target [ 2180.934949][ T351] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4949'. [ 2180.955674][ T5288] usb 5-1: no configurations [ 2180.960699][ T5288] usb 5-1: can't read configurations, error -22 [ 2180.974224][ T5288] usb usb5-port1: attempt power cycle [ 2180.990267][T32554] veth0_macvtap: entered promiscuous mode [ 2181.015033][ T353] fuse: Bad value for 'fd' [ 2181.097894][T32679] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2181.116624][T32679] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2181.184603][T32679] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2181.206739][T32554] veth1_macvtap: entered promiscuous mode [ 2181.248784][T32679] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2181.255787][T32679] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2181.281766][ C0] vkms_vblank_simulate: vblank timer overrun [ 2181.294072][T32679] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2181.399193][ T5288] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 2181.451478][ T5288] usb 5-1: no configurations [ 2181.455929][ T352] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2181.456116][ T5288] usb 5-1: can't read configurations, error -22 [ 2181.484962][T32679] hsr_slave_0: entered promiscuous mode [ 2181.495791][T32679] hsr_slave_1: entered promiscuous mode [ 2181.518907][T32554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2181.558538][T32554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2181.578106][T32554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2181.598463][T32554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2181.628103][T32554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2181.643787][T32554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2181.658757][ T5288] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 2181.666788][T32554] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2181.710105][ T5288] usb 5-1: no configurations [ 2181.714961][ T5288] usb 5-1: can't read configurations, error -22 [ 2181.724695][ T5288] usb usb5-port1: unable to enumerate USB device [ 2181.732831][T32554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2181.751424][T32554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2181.763328][T32554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2181.773980][T32554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2181.811498][T32554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2181.834088][T32554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2181.846165][T32554] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2181.922703][T32554] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2181.954750][T32554] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2181.983688][T32554] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2182.017522][T32554] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2182.088478][T31492] Bluetooth: hci0: command tx timeout [ 2182.393102][T21645] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2182.425230][T21645] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2182.541814][T21645] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2182.551263][T21645] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2183.201685][T32679] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2183.218198][ T8] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 2183.257330][T32679] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2183.285157][T32679] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2183.332585][T32679] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2183.421359][ T8] usb 4-1: config 1 interface 0 has no altsetting 0 [ 2183.439956][ T8] usb 4-1: New USB device found, idVendor=056a, idProduct=0018, bcdDevice= 0.40 [ 2183.463740][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2183.511700][ T8] usb 4-1: Product: syz [ 2183.531999][ T8] usb 4-1: Manufacturer: syz [ 2183.536763][ T8] usb 4-1: SerialNumber: syz [ 2183.663295][T32679] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2183.793001][ T380] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2183.797982][T32679] 8021q: adding VLAN 0 to HW filter on device team0 [ 2183.821208][ T380] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2183.865929][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 2183.873389][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2184.006147][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 2184.013356][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2184.476047][T32679] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2184.531520][ T8] usbhid 4-1:1.0: can't add hid device: -71 [ 2184.537565][ T8] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 2184.604303][ T8] usb 4-1: USB disconnect, device number 39 [ 2184.739582][T32679] veth0_vlan: entered promiscuous mode [ 2184.821148][T32679] veth1_vlan: entered promiscuous mode [ 2184.946302][T32679] veth0_macvtap: entered promiscuous mode [ 2184.997842][T32679] veth1_macvtap: entered promiscuous mode [ 2185.052368][T32679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2185.067005][T32679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2185.079219][T32679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2185.091252][T32679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2185.120763][T32679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2185.173764][T32679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2185.239378][T32679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2185.284091][T32679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2185.316804][T32679] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2185.361358][T32679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2185.398271][T32679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2185.451692][T32679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2185.475342][T32679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2185.492466][ T423] random: crng reseeded on system resumption [ 2185.502569][T32679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2185.524895][T32679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2185.583952][T32679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2185.611609][T32679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2185.651932][T32679] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2185.730609][T32679] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2185.780169][ T426] vivid-000: ================= START STATUS ================= [ 2185.787852][ T426] vivid-000: Radio HW Seek Mode: Bounded [ 2185.792460][T32679] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2185.833629][T32679] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2185.858394][ T426] vivid-000: Radio Programmable HW Seek: false [ 2185.901550][T32679] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2185.910703][ T426] vivid-000: RDS Rx I/O Mode: Block I/O [ 2185.943149][ T426] vivid-000: Generate RBDS Instead of RDS: false [ 2185.950868][ T426] vivid-000: RDS Reception: true [ 2185.984600][ T426] vivid-000: RDS Program Type: 0 inactive [ 2186.015628][ T426] vivid-000: RDS PS Name: inactive [ 2186.023829][ T426] vivid-000: RDS Radio Text: inactive [ 2186.079148][ T426] vivid-000: RDS Traffic Announcement: false inactive [ 2186.096252][ T426] vivid-000: RDS Traffic Program: false inactive [ 2186.106635][ T426] vivid-000: RDS Music: false inactive [ 2186.132794][ T426] vivid-000: ================== END STATUS ================== [ 2186.346811][ T443] xt_cgroup: path and classid specified [ 2186.810989][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2186.904663][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2186.983475][T21645] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2187.014862][T21645] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2187.186064][ T452] xt_cgroup: path and classid specified [ 2187.328508][T27600] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 2187.558730][T27600] usb 5-1: Using ep0 maxpacket: 16 [ 2187.580260][T27600] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 2187.616301][T27600] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 0 [ 2187.647860][T27600] usb 5-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 7.79 [ 2187.658353][T27600] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2187.676100][T27600] usb 5-1: Product: syz [ 2187.683211][T27600] usb 5-1: Manufacturer: syz [ 2187.689851][T27600] usb 5-1: SerialNumber: syz [ 2187.705631][T27600] usb 5-1: config 0 descriptor?? [ 2187.931753][T27600] usb 5-1: Not enough endpoints found in device, aborting! [ 2188.033937][ T29] audit: type=1326 audit(1725832985.318:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=482 comm="syz.0.4969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d0cf7cef9 code=0x7ffc0000 [ 2188.102814][ T29] audit: type=1326 audit(1725832985.318:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=482 comm="syz.0.4969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d0cf7cef9 code=0x7ffc0000 [ 2188.166576][ T29] audit: type=1326 audit(1725832985.348:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=482 comm="syz.0.4969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=255 compat=0 ip=0x7f1d0cf7cef9 code=0x7ffc0000 [ 2188.228331][ T459] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4965'. [ 2188.281977][ T29] audit: type=1326 audit(1725832985.348:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=482 comm="syz.0.4969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d0cf7cef9 code=0x7ffc0000 [ 2188.305646][ T29] audit: type=1326 audit(1725832985.348:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=482 comm="syz.0.4969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d0cf7cef9 code=0x7ffc0000 [ 2188.336597][ T29] audit: type=1326 audit(1725832985.348:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=482 comm="syz.0.4969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1d0cf7cef9 code=0x7ffc0000 [ 2188.401220][ T29] audit: type=1326 audit(1725832985.348:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=482 comm="syz.0.4969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d0cf7cef9 code=0x7ffc0000 [ 2188.491969][ T29] audit: type=1326 audit(1725832985.348:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=482 comm="syz.0.4969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d0cf7cef9 code=0x7ffc0000 [ 2188.584263][ T29] audit: type=1326 audit(1725832985.348:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=482 comm="syz.0.4969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f1d0cf7cef9 code=0x7ffc0000 [ 2188.634706][ T29] audit: type=1326 audit(1725832985.348:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=482 comm="syz.0.4969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d0cf7cef9 code=0x7ffc0000 [ 2189.228393][ T1852] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 2189.438332][ T1852] usb 1-1: Using ep0 maxpacket: 8 [ 2189.455912][ T1852] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 2189.464758][ T1852] usb 1-1: config 0 has no interface number 0 [ 2189.477418][ T1852] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 101, changing to 10 [ 2189.493735][ T1852] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 59093, setting to 1024 [ 2189.512670][ T1852] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2189.526108][ T1852] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2189.549853][ T1852] usb 1-1: config 0 descriptor?? [ 2189.557945][ T506] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 2189.574997][ T1852] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 2189.776709][ T1852] usb 1-1: USB disconnect, device number 57 [ 2189.776787][ C1] iowarrior 1-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 2189.817452][ T1852] iowarrior 1-1:0.1: I/O-Warror #0 now disconnected [ 2190.129542][ T1852] usb 5-1: USB disconnect, device number 52 [ 2190.278703][ T518] FAULT_INJECTION: forcing a failure. [ 2190.278703][ T518] name failslab, interval 1, probability 0, space 0, times 0 [ 2190.302685][ T518] CPU: 0 UID: 0 PID: 518 Comm: syz.4.4979 Not tainted 6.11.0-rc6-syzkaller-00355-g5dadc1be8fc5 #0 [ 2190.313319][ T518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 2190.323493][ T518] Call Trace: [ 2190.327066][ T518] [ 2190.330028][ T518] dump_stack_lvl+0x241/0x360 [ 2190.334740][ T518] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2190.339966][ T518] ? __pfx__printk+0x10/0x10 [ 2190.344559][ T518] ? kmem_cache_alloc_noprof+0x44/0x2a0 [ 2190.350123][ T518] ? __pfx___might_resched+0x10/0x10 [ 2190.355526][ T518] should_fail_ex+0x3b0/0x4e0 [ 2190.360387][ T518] ? audit_log_start+0x15e/0xa30 [ 2190.365327][ T518] should_failslab+0xac/0x100 [ 2190.370030][ T518] ? audit_log_start+0x15e/0xa30 [ 2190.374979][ T518] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 2190.380357][ T518] audit_log_start+0x15e/0xa30 [ 2190.385127][ T518] ? __pfx_audit_log_start+0x10/0x10 [ 2190.390458][ T518] ? migrate_enable+0x3b5/0x520 [ 2190.395313][ T518] ? __pfx_migrate_enable+0x10/0x10 [ 2190.400526][ T518] ? __pfx___cant_migrate+0x10/0x10 [ 2190.405829][ T518] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 2190.411824][ T518] audit_seccomp+0x63/0x1f0 [ 2190.416325][ T518] ? migrate_disable+0xce/0x180 [ 2190.421204][ T518] __seccomp_filter+0xb38/0x1fe0 [ 2190.426154][ T518] ? __pfx_vfs_statx+0x10/0x10 [ 2190.430942][ T518] ? __pfx___seccomp_filter+0x10/0x10 [ 2190.436309][ T518] ? putname+0x22/0x160 [ 2190.440472][ T518] ? __se_sys_statx+0x254/0x2b0 [ 2190.445331][ T518] ? __fget_files+0x3f6/0x470 [ 2190.450038][ T518] ? __pfx___se_sys_statx+0x10/0x10 [ 2190.455274][ T518] ? __secure_computing+0x125/0x370 [ 2190.460497][ T518] syscall_trace_enter+0xa8/0x150 [ 2190.465523][ T518] do_syscall_64+0xcc/0x230 [ 2190.470026][ T518] ? clear_bhb_loop+0x35/0x90 [ 2190.474810][ T518] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2190.480702][ T518] RIP: 0033:0x7ffb8497b93c [ 2190.485111][ T518] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 2190.504739][ T518] RSP: 002b:00007ffb85776030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2190.513162][ T518] RAX: ffffffffffffffda RBX: 00007ffb84b35f80 RCX: 00007ffb8497b93c [ 2190.521148][ T518] RDX: 000000000000000f RSI: 00007ffb857760a0 RDI: 0000000000000003 [ 2190.529141][ T518] RBP: 00007ffb85776090 R08: 0000000000000000 R09: 0000000000000000 [ 2190.537109][ T518] R10: 0000000000000080 R11: 0000000000000246 R12: 0000000000000001 [ 2190.545097][ T518] R13: 0000000000000000 R14: 00007ffb84b35f80 R15: 00007ffb84c5fa28 [ 2190.553086][ T518] [ 2190.556206][ C0] vkms_vblank_simulate: vblank timer overrun [ 2190.889131][ T527] xt_cgroup: path and classid specified [ 2191.179326][T24036] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 2191.243464][T12859] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2191.408600][T24036] usb 5-1: config index 0 descriptor too short (expected 45, got 36) [ 2191.434788][T24036] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2191.532691][T12859] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2191.543321][T24036] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2191.583958][T24036] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2191.635444][T24036] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2191.698332][T24036] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2191.734000][T24036] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2191.775473][T24036] usb 5-1: config 0 descriptor?? [ 2191.785189][T12859] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2191.804960][ T528] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2191.846839][ T538] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4986'. [ 2191.927126][T12859] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2192.424334][T24036] usbhid 5-1:0.0: can't add hid device: -71 [ 2192.437015][T24036] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 2192.477039][T12859] bridge_slave_1: left allmulticast mode [ 2192.487927][T12859] bridge_slave_1: left promiscuous mode [ 2192.498427][T24036] usb 5-1: USB disconnect, device number 53 [ 2192.514572][T12859] bridge0: port 2(bridge_slave_1) entered disabled state [ 2192.606022][T12859] bridge_slave_0: left allmulticast mode [ 2192.634939][T19337] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2192.656837][T19337] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2192.660506][T12859] bridge_slave_0: left promiscuous mode [ 2192.679399][T19337] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2192.687654][T19337] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2192.696664][T19337] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 2192.704432][T19337] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2192.742229][T12859] bridge0: port 1(bridge_slave_0) entered disabled state [ 2192.812775][ T548] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 0 [ 2193.118284][T24036] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 2193.318226][T24036] usb 3-1: device descriptor read/64, error -71 [ 2193.608305][T24036] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 2193.788215][T24036] usb 3-1: device descriptor read/64, error -71 [ 2193.926944][T24036] usb usb3-port1: attempt power cycle [ 2193.996495][T12859] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2194.034737][T12859] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2194.075347][T12859] bond0 (unregistering): Released all slaves [ 2194.349420][T24036] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 2194.402097][T24036] usb 3-1: device descriptor read/8, error -71 [ 2194.698199][T24036] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 2194.779482][T24036] usb 3-1: device descriptor read/8, error -71 [ 2194.818691][T31492] Bluetooth: hci3: command tx timeout [ 2194.939886][T24036] usb usb3-port1: unable to enumerate USB device [ 2194.955628][T12859] hsr_slave_0: left promiscuous mode [ 2195.018720][T12859] hsr_slave_1: left promiscuous mode [ 2195.044991][T12859] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2195.069154][T12859] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2195.087216][T12859] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2195.104883][T12859] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2195.165362][T12859] veth1_macvtap: left promiscuous mode [ 2195.184249][T12859] veth0_macvtap: left promiscuous mode [ 2195.208471][T12859] veth1_vlan: left promiscuous mode [ 2195.224111][T12859] veth0_vlan: left promiscuous mode [ 2196.761910][ T1852] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 2196.900651][T31492] Bluetooth: hci3: command tx timeout [ 2196.976748][ T1852] usb 1-1: Using ep0 maxpacket: 8 [ 2196.988221][ T1852] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 2196.998976][ T1852] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2197.019602][ T1852] usb 1-1: config 0 descriptor?? [ 2197.258399][ T1852] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 2197.288949][ T1852] asix 1-1:0.0: probe with driver asix failed with error -32 [ 2197.643021][T12859] team0 (unregistering): Port device team_slave_1 removed [ 2197.894829][T12859] team0 (unregistering): Port device team_slave_0 removed [ 2198.974865][T31492] Bluetooth: hci3: command tx timeout [ 2199.114596][ T627] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2199.148595][ T627] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2199.398463][ T5288] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 2199.552464][ T1852] usb 1-1: USB disconnect, device number 58 [ 2200.244172][T24036] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 2200.301100][ T549] chnl_net:caif_netlink_parms(): no params data found [ 2200.493841][T24036] usb 1-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2200.558953][T24036] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2200.641025][T24036] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2200.680890][T24036] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 2200.697085][T24036] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2200.725825][ T635] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2200.800169][ T549] bridge0: port 1(bridge_slave_0) entered blocking state [ 2200.844815][ T549] bridge0: port 1(bridge_slave_0) entered disabled state [ 2200.858278][ T549] bridge_slave_0: entered allmulticast mode [ 2200.878645][ T549] bridge_slave_0: entered promiscuous mode [ 2200.906651][ T549] bridge0: port 2(bridge_slave_1) entered blocking state [ 2200.958826][ T549] bridge0: port 2(bridge_slave_1) entered disabled state [ 2200.987575][ T549] bridge_slave_1: entered allmulticast mode [ 2200.999186][ T549] bridge_slave_1: entered promiscuous mode [ 2201.049434][T31492] Bluetooth: hci3: command tx timeout [ 2201.234201][ T549] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2201.257446][ T549] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2201.433462][ T549] team0: Port device team_slave_0 added [ 2201.466934][ T549] team0: Port device team_slave_1 added [ 2201.715912][ T549] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2201.747400][ T549] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2201.819110][ T549] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2201.841103][ T549] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2201.860043][ T549] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2201.911873][ T549] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2202.290139][ T549] hsr_slave_0: entered promiscuous mode [ 2202.308741][ T549] hsr_slave_1: entered promiscuous mode [ 2202.328687][ T549] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2202.348154][ T549] Cannot create hsr debugfs directory [ 2203.562051][ T549] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2203.600036][ T549] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2203.622929][ T549] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2203.655821][ T549] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2203.967237][ T698] program syz.2.5026 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2204.059094][ T549] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2204.145905][ T549] 8021q: adding VLAN 0 to HW filter on device team0 [ 2204.183670][ T2908] bridge0: port 1(bridge_slave_0) entered blocking state [ 2204.190908][ T2908] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2204.227870][ T2908] bridge0: port 2(bridge_slave_1) entered blocking state [ 2204.235083][ T2908] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2204.437890][ T635] batman_adv: batadv0: Adding interface: macvtap1 [ 2204.470727][ T635] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2204.496158][ C0] vkms_vblank_simulate: vblank timer overrun [ 2204.525542][ T5288] usb 5-1: device descriptor read/64, error -71 [ 2204.547759][ T635] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 2204.587297][T24036] aiptek 1-1:17.0: Aiptek tried all speeds, no sane response [ 2204.617064][T24036] aiptek 1-1:17.0: probe with driver aiptek failed with error -22 [ 2204.688436][T24036] usb 1-1: USB disconnect, device number 59 [ 2204.735567][ T703] xt_cgroup: path and classid specified [ 2204.754644][ T549] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2204.798238][ T5288] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 2205.028873][ T5288] usb 5-1: Using ep0 maxpacket: 8 [ 2205.049811][ T549] veth0_vlan: entered promiscuous mode [ 2205.074265][ T5288] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 2205.108733][ T5288] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 2205.158808][ T549] veth1_vlan: entered promiscuous mode [ 2205.164613][ T5288] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2205.223840][ T5288] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2205.295378][ T5288] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2205.311855][ T549] veth0_macvtap: entered promiscuous mode [ 2205.338236][ T5288] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 2205.347123][ T5288] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 2205.361037][ T549] veth1_macvtap: entered promiscuous mode [ 2205.393354][ T5288] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2205.441177][ T549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2205.467786][ T5288] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2205.522249][ T549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2205.548233][ T5288] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2205.578203][ T549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2205.620406][ T5288] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 2205.628061][ T549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2205.628082][ T549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2205.661791][ T5288] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 2205.698952][ T549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2205.732038][ T549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2205.748306][T19337] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2205.771090][T19337] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2205.779659][T19337] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2205.790568][ T549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2205.805633][T19337] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2205.814376][T19337] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 2205.822515][T19337] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2205.841269][ T5288] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2205.879964][ T549] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2205.914371][ T5288] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2205.969227][ T5288] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2205.990550][ T5288] usb 5-1: string descriptor 0 read error: -22 [ 2205.996925][ T5288] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 2206.043497][ T5288] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2206.110128][ T5288] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 2206.151550][ T730] FAULT_INJECTION: forcing a failure. [ 2206.151550][ T730] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2206.200813][ T730] CPU: 0 UID: 0 PID: 730 Comm: syz.2.5034 Not tainted 6.11.0-rc6-syzkaller-00355-g5dadc1be8fc5 #0 [ 2206.211537][ T730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 2206.221607][ T730] Call Trace: [ 2206.224894][ T730] [ 2206.227875][ T730] dump_stack_lvl+0x241/0x360 [ 2206.232597][ T730] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2206.237823][ T730] ? __pfx__printk+0x10/0x10 [ 2206.242519][ T730] ? snprintf+0xda/0x120 [ 2206.246779][ T730] should_fail_ex+0x3b0/0x4e0 [ 2206.251481][ T730] _copy_to_user+0x2f/0xb0 [ 2206.255911][ T730] simple_read_from_buffer+0xca/0x150 [ 2206.261304][ T730] proc_fail_nth_read+0x1ec/0x260 [ 2206.266344][ T730] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2206.271915][ T730] ? rw_verify_area+0x520/0x6b0 [ 2206.276775][ T730] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2206.282350][ T730] vfs_read+0x204/0xbc0 [ 2206.286525][ T730] ? __pfx_lock_release+0x10/0x10 [ 2206.291597][ T730] ? do_sock_setsockopt+0x3e2/0x720 [ 2206.296828][ T730] ? __pfx_vfs_read+0x10/0x10 [ 2206.301529][ T730] ? __fget_files+0x29/0x470 [ 2206.306142][ T730] ? __fget_files+0x3f6/0x470 [ 2206.310952][ T730] ksys_read+0x1a0/0x2c0 [ 2206.315319][ T730] ? __pfx_ksys_read+0x10/0x10 [ 2206.320216][ T730] ? do_syscall_64+0x100/0x230 [ 2206.325108][ T730] ? do_syscall_64+0xb6/0x230 [ 2206.329814][ T730] do_syscall_64+0xf3/0x230 [ 2206.334333][ T730] ? clear_bhb_loop+0x35/0x90 [ 2206.339040][ T730] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2206.344955][ T730] RIP: 0033:0x7f6e61f7b93c [ 2206.349397][ T730] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 2206.369022][ T730] RSP: 002b:00007f6e62e48030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2206.377447][ T730] RAX: ffffffffffffffda RBX: 00007f6e62135f80 RCX: 00007f6e61f7b93c [ 2206.385430][ T730] RDX: 000000000000000f RSI: 00007f6e62e480a0 RDI: 0000000000000005 [ 2206.393438][ T730] RBP: 00007f6e62e48090 R08: 0000000000000000 R09: 0000000000000000 [ 2206.401415][ T730] R10: 0000000020000080 R11: 0000000000000246 R12: 0000000000000001 [ 2206.409497][ T730] R13: 0000000000000000 R14: 00007f6e62135f80 R15: 00007f6e6225fa28 [ 2206.417488][ T730] [ 2206.420709][ C0] vkms_vblank_simulate: vblank timer overrun [ 2206.487143][ T549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2206.520454][ T549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2206.561840][ T549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2206.573758][ T549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2206.607454][ T549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2206.632374][ T549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2206.662589][ T549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2206.682286][ T549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2206.709442][ T549] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2206.906480][T24036] usb 5-1: USB disconnect, device number 55 [ 2206.972431][T21645] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2207.063614][ T549] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2207.096155][ T549] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2207.118171][ T549] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2207.139231][ T549] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2207.311936][ T748] vivid-001: ================= START STATUS ================= [ 2207.335683][T21645] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2207.347517][ T748] vivid-001: Radio HW Seek Mode: Bounded [ 2207.362804][ T748] vivid-001: Radio Programmable HW Seek: false [ 2207.369172][ T748] vivid-001: RDS Rx I/O Mode: Block I/O [ 2207.374871][ T748] vivid-001: Generate RBDS Instead of RDS: false [ 2207.382919][ T748] vivid-001: RDS Reception: true [ 2207.388074][ T748] vivid-001: RDS Program Type: 0 inactive [ 2207.396070][ T748] vivid-001: RDS PS Name: inactive [ 2207.437241][ T748] vivid-001: RDS Radio Text: inactive [ 2207.462274][ T748] vivid-001: RDS Traffic Announcement: false inactive [ 2207.495236][ T748] vivid-001: RDS Traffic Program: false inactive [ 2207.514473][ T748] vivid-001: RDS Music: false inactive [ 2207.542553][ T748] vivid-001: ================== END STATUS ================== [ 2207.562464][ T748] xt_recent: hitcount (262144) is larger than allowed maximum (65535) [ 2207.586110][T21645] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2207.755259][T21645] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2207.875052][ T762] trusted_key: syz.4.5038 sent an empty control message without MSG_MORE. [ 2207.928275][T31492] Bluetooth: hci5: command tx timeout [ 2208.557945][ T2908] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2208.582478][ T2908] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2208.716006][ T1120] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2208.736875][T21645] bridge_slave_1: left allmulticast mode [ 2208.751149][T21645] bridge_slave_1: left promiscuous mode [ 2208.770430][T21645] bridge0: port 2(bridge_slave_1) entered disabled state [ 2208.800792][ T1120] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2208.847074][T21645] bridge_slave_0: left allmulticast mode [ 2208.857121][T21645] bridge_slave_0: left promiscuous mode [ 2208.888535][T21645] bridge0: port 1(bridge_slave_0) entered disabled state [ 2208.917785][ T790] qrtr: Invalid version 47 [ 2209.068540][ T29] kauditd_printk_skb: 34 callbacks suppressed [ 2209.068561][ T29] audit: type=1326 audit(1725833006.348:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=785 comm="syz.4.5043" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffb8497cef9 code=0x0 [ 2209.096403][ C0] vkms_vblank_simulate: vblank timer overrun [ 2209.268222][ T5288] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 2209.472984][ T5288] usb 1-1: New USB device found, idVendor=0421, idProduct=0007, bcdDevice=b8.51 [ 2209.494902][ T5288] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2209.590706][ T5288] usb 1-1: Product: syz [ 2209.620774][ T5288] usb 1-1: Manufacturer: syz [ 2209.636724][ T5288] usb 1-1: SerialNumber: syz [ 2209.669117][ T5288] usb 1-1: config 0 descriptor?? [ 2209.681422][ T5288] rndis_host 1-1:0.0: skipping garbage [ 2209.688499][ T5288] rndis_host 1-1:0.0: More than one union descriptor, skipping ... [ 2209.696485][ T5288] usb 1-1: bad CDC descriptors [ 2209.704294][ T5288] cdc_acm 1-1:0.0: skipping garbage [ 2209.711171][ T5288] cdc_acm 1-1:0.0: More than one union descriptor, skipping ... [ 2209.922783][ T792] Cannot find add_set index 0 as target [ 2209.957992][ T1852] usb 1-1: USB disconnect, device number 60 [ 2210.023175][T31492] Bluetooth: hci5: command tx timeout [ 2210.067609][T21645] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2210.080776][T21645] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2210.092672][T21645] bond0 (unregistering): Released all slaves [ 2210.187753][ T727] chnl_net:caif_netlink_parms(): no params data found [ 2210.372604][T31492] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 2210.612123][ T29] audit: type=1326 audit(1725833007.898:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=816 comm="syz.4.5045" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffb8497cef9 code=0x0 [ 2210.758846][ T817] netlink: 'syz.4.5045': attribute type 5 has an invalid length. [ 2210.788362][T27604] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 2210.844089][ T835] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10) [ 2210.850863][ T835] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 2210.885061][ T835] vhci_hcd vhci_hcd.0: Device attached [ 2210.885118][ T817] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5045'. [ 2211.038379][T27604] usb 3-1: Using ep0 maxpacket: 8 [ 2211.068843][T27604] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 2211.078584][T22638] vhci_hcd: vhci_device speed not set [ 2211.092134][T27604] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 2211.113571][ T817] netlink: 'syz.4.5045': attribute type 1 has an invalid length. [ 2211.124093][ T817] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5045'. [ 2211.161015][T22638] usb 17-1: new full-speed USB device number 3 using vhci_hcd [ 2211.174434][ T817] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 2211.185740][ T817] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 2211.195230][ T817] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 2211.206472][ T817] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 2211.215471][T27604] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2211.265492][T27604] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2211.299849][T27604] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2211.335562][ T841] vhci_hcd: connection reset by peer [ 2211.352355][T27604] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 2211.356071][ T2908] vhci_hcd: stop threads [ 2211.372763][T27604] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 2211.375535][ T2908] vhci_hcd: release socket [ 2211.407580][ T727] bridge0: port 1(bridge_slave_0) entered blocking state [ 2211.409766][ T2908] vhci_hcd: disconnect device [ 2211.429672][ T727] bridge0: port 1(bridge_slave_0) entered disabled state [ 2211.451739][T27604] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2211.454308][ T727] bridge_slave_0: entered allmulticast mode [ 2211.480683][ T727] bridge_slave_0: entered promiscuous mode [ 2211.505448][T27604] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2211.521571][ T727] bridge0: port 2(bridge_slave_1) entered blocking state [ 2211.522382][T27604] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2211.547188][ T727] bridge0: port 2(bridge_slave_1) entered disabled state [ 2211.559527][T27604] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 2211.564229][ T727] bridge_slave_1: entered allmulticast mode [ 2211.577407][T27604] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 2211.606716][T27604] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2211.629329][T27604] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2211.645478][T27604] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2211.669190][T27604] usb 3-1: string descriptor 0 read error: -22 [ 2211.675894][ T727] bridge_slave_1: entered promiscuous mode [ 2211.685748][T27604] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 2211.720024][T27604] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2211.786399][T27604] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 2211.897890][T21645] hsr_slave_0: left promiscuous mode [ 2211.922389][T21645] hsr_slave_1: left promiscuous mode [ 2211.948295][T21645] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2211.977051][T21645] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2211.999090][T21645] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2212.026854][T21645] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2212.096620][T31492] Bluetooth: hci5: command tx timeout [ 2212.139193][T21645] veth1_macvtap: left promiscuous mode [ 2212.182983][T21645] veth0_macvtap: left promiscuous mode [ 2212.235000][T21645] veth1_vlan: left promiscuous mode [ 2212.245271][T21645] veth0_vlan: left promiscuous mode [ 2212.275123][T27989] usb 3-1: USB disconnect, device number 28 [ 2212.376652][ T873] vivid-004: ================= START STATUS ================= [ 2212.390826][ T873] vivid-004: Radio HW Seek Mode: Bounded [ 2212.396668][ T873] vivid-004: Radio Programmable HW Seek: false [ 2212.403140][ T873] vivid-004: RDS Rx I/O Mode: Block I/O [ 2212.411555][ T873] vivid-004: Generate RBDS Instead of RDS: false [ 2212.424091][ T873] vivid-004: RDS Reception: true [ 2212.452672][ T873] vivid-004: RDS Program Type: 0 inactive [ 2212.468441][ T873] vivid-004: RDS PS Name: inactive [ 2212.480518][ T873] vivid-004: RDS Radio Text: inactive [ 2212.509118][ T873] vivid-004: RDS Traffic Announcement: false inactive [ 2212.518424][ T873] vivid-004: RDS Traffic Program: false inactive [ 2212.526336][ T873] vivid-004: RDS Music: false inactive [ 2212.534382][ T873] vivid-004: ================== END STATUS ================== [ 2212.678168][T24036] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 2212.905093][T24036] usb 4-1: New USB device found, idVendor=0421, idProduct=0007, bcdDevice=b8.51 [ 2212.945738][ T888] fuse: Unknown parameter 'no' [ 2212.950797][T24036] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2212.965227][T24036] usb 4-1: Product: syz [ 2212.971843][T24036] usb 4-1: Manufacturer: syz [ 2212.976944][T24036] usb 4-1: SerialNumber: syz [ 2213.020007][T24036] usb 4-1: config 0 descriptor?? [ 2213.058091][T24036] rndis_host 4-1:0.0: skipping garbage [ 2213.070609][T24036] rndis_host 4-1:0.0: More than one union descriptor, skipping ... [ 2213.095186][T24036] usb 4-1: bad CDC descriptors [ 2213.110129][T24036] cdc_acm 4-1:0.0: skipping garbage [ 2213.119196][T24036] cdc_acm 4-1:0.0: More than one union descriptor, skipping ... [ 2213.327790][ T876] Cannot find add_set index 0 as target [ 2213.411357][T24036] usb 4-1: USB disconnect, device number 40 [ 2213.883815][ T900] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 2213.891350][ T900] vhci_hcd: invalid port number 0 [ 2214.168494][T31492] Bluetooth: hci5: command tx timeout [ 2214.336171][ T914] random: crng reseeded on system resumption [ 2214.411463][T21645] team0 (unregistering): Port device team_slave_1 removed [ 2214.418487][ T8] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 2214.604355][T21645] team0 (unregistering): Port device team_slave_0 removed [ 2214.628147][ T8] usb 5-1: Using ep0 maxpacket: 16 [ 2214.670127][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 2214.707362][ T8] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 0 [ 2214.852439][ T8] usb 5-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 7.79 [ 2214.885374][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2214.914388][ T8] usb 5-1: Product: syz [ 2214.926534][ T8] usb 5-1: Manufacturer: syz [ 2214.940338][ T8] usb 5-1: SerialNumber: syz [ 2214.962241][ T8] usb 5-1: config 0 descriptor?? [ 2215.183184][ T8] usb 5-1: Not enough endpoints found in device, aborting! [ 2215.605624][ T29] audit: type=1326 audit(1725833012.888:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=906 comm="syz.4.5061" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ffb8497cef9 code=0x0 [ 2215.698268][ T8] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 2215.908293][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 2215.916060][ T8] usb 3-1: config 0 has an invalid interface number: 192 but max is 0 [ 2215.932381][ T8] usb 3-1: config 0 has no interface number 0 [ 2215.950463][ T8] usb 3-1: New USB device found, idVendor=0424, idProduct=c001, bcdDevice=ba.eb [ 2215.963669][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2215.971855][ T8] usb 3-1: Product: syz [ 2215.976475][ T8] usb 3-1: Manufacturer: syz [ 2215.982305][ T8] usb 3-1: SerialNumber: syz [ 2216.003341][ T8] usb 3-1: config 0 descriptor?? [ 2216.183150][ T918] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5061'. [ 2216.286068][ T8] usb 3-1: USB disconnect, device number 29 [ 2216.297600][ T727] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2216.316479][ T8] ================================================================== [ 2216.324580][ T8] BUG: KASAN: slab-use-after-free in hdm_disconnect+0x10d/0x1c0 [ 2216.332253][ T8] Read of size 8 at addr ffff88802fe058a0 by task kworker/0:0/8 [ 2216.339912][ T8] [ 2216.342271][ T8] CPU: 0 UID: 0 PID: 8 Comm: kworker/0:0 Not tainted 6.11.0-rc6-syzkaller-00355-g5dadc1be8fc5 #0 [ 2216.342891][ T727] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2216.352772][ T8] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 2216.352791][ T8] Workqueue: usb_hub_wq hub_event [ 2216.352824][ T8] Call Trace: [ 2216.352835][ T8] [ 2216.352846][ T8] dump_stack_lvl+0x241/0x360 [ 2216.352877][ T8] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2216.378309][T22638] vhci_hcd: vhci_device speed not set [ 2216.380304][ T8] ? __pfx__printk+0x10/0x10 [ 2216.403202][ T8] ? _printk+0xd5/0x120 [ 2216.407392][ T8] ? __virt_addr_valid+0x183/0x530 [ 2216.412547][ T8] ? __virt_addr_valid+0x183/0x530 [ 2216.417663][ T8] print_report+0x169/0x550 [ 2216.422186][ T8] ? __virt_addr_valid+0x183/0x530 [ 2216.427318][ T8] ? __virt_addr_valid+0x183/0x530 [ 2216.432454][ T8] ? __virt_addr_valid+0x45f/0x530 [ 2216.437582][ T8] ? __phys_addr+0xba/0x170 [ 2216.442183][ T8] ? hdm_disconnect+0x10d/0x1c0 [ 2216.447036][ T8] kasan_report+0x143/0x180 [ 2216.451555][ T8] ? kfree+0x149/0x360 [ 2216.455627][ T8] ? hdm_disconnect+0x10d/0x1c0 [ 2216.460569][ T8] hdm_disconnect+0x10d/0x1c0 [ 2216.465253][ T8] usb_unbind_interface+0x25e/0x940 [ 2216.470478][ T8] ? kernfs_remove_by_name_ns+0x11b/0x160 [ 2216.476223][ T8] ? __pfx_usb_unbind_interface+0x10/0x10 [ 2216.481954][ T8] device_release_driver_internal+0x503/0x7c0 [ 2216.488039][ T8] bus_remove_device+0x34f/0x420 [ 2216.493005][ T8] device_del+0x57a/0x9b0 [ 2216.497341][ T8] ? __pfx_device_del+0x10/0x10 [ 2216.502193][ T8] ? usb_disconnect+0x103/0x950 [ 2216.507051][ T8] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 2216.513389][ T8] ? __pfx___mutex_lock+0x10/0x10 [ 2216.518472][ T8] usb_disable_device+0x3bf/0x850 [ 2216.523776][ T8] usb_disconnect+0x340/0x950 [ 2216.528471][ T8] hub_event+0x1ebc/0x5150 [ 2216.532908][ T8] ? debug_object_deactivate+0x2d5/0x390 [ 2216.538561][ T8] ? __pfx_hub_event+0x10/0x10 [ 2216.543442][ T8] ? __pfx_lock_acquire+0x10/0x10 [ 2216.548487][ T8] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 2216.554483][ T8] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 2216.560925][ T8] ? process_scheduled_works+0x945/0x1830 [ 2216.566652][ T8] process_scheduled_works+0xa2c/0x1830 [ 2216.572317][ T8] ? __pfx_process_scheduled_works+0x10/0x10 [ 2216.578321][ T8] ? assign_work+0x364/0x3d0 [ 2216.582938][ T8] worker_thread+0x86d/0xd10 [ 2216.587548][ T8] ? __kthread_parkme+0x169/0x1d0 [ 2216.592589][ T8] ? __pfx_worker_thread+0x10/0x10 [ 2216.597715][ T8] kthread+0x2f0/0x390 [ 2216.601785][ T8] ? __pfx_worker_thread+0x10/0x10 [ 2216.606909][ T8] ? __pfx_kthread+0x10/0x10 [ 2216.611501][ T8] ret_from_fork+0x4b/0x80 [ 2216.615947][ T8] ? __pfx_kthread+0x10/0x10 [ 2216.620541][ T8] ret_from_fork_asm+0x1a/0x30 [ 2216.625325][ T8] [ 2216.628344][ T8] [ 2216.630672][ T8] Allocated by task 8: [ 2216.634734][ T8] kasan_save_track+0x3f/0x80 [ 2216.639420][ T8] __kasan_kmalloc+0x98/0xb0 [ 2216.644028][ T8] __kmalloc_cache_noprof+0x19c/0x2c0 [ 2216.649420][ T8] hdm_probe+0x98/0x13e0 [ 2216.653662][ T8] usb_probe_interface+0x645/0xbb0 [ 2216.658780][ T8] really_probe+0x2b8/0xad0 [ 2216.663291][ T8] __driver_probe_device+0x1a2/0x390 [ 2216.668577][ T8] driver_probe_device+0x50/0x430 [ 2216.673614][ T8] __device_attach_driver+0x2d6/0x530 [ 2216.679005][ T8] bus_for_each_drv+0x24e/0x2e0 [ 2216.683952][ T8] __device_attach+0x333/0x520 [ 2216.688717][ T8] bus_probe_device+0x189/0x260 [ 2216.693571][ T8] device_add+0x856/0xbf0 [ 2216.697926][ T8] usb_set_configuration+0x1976/0x1fb0 [ 2216.703388][ T8] usb_generic_driver_probe+0x88/0x140 [ 2216.708943][ T8] usb_probe_device+0x1b8/0x380 [ 2216.713804][ T8] really_probe+0x2b8/0xad0 [ 2216.718311][ T8] __driver_probe_device+0x1a2/0x390 [ 2216.723602][ T8] driver_probe_device+0x50/0x430 [ 2216.728628][ T8] __device_attach_driver+0x2d6/0x530 [ 2216.734000][ T8] bus_for_each_drv+0x24e/0x2e0 [ 2216.738852][ T8] __device_attach+0x333/0x520 [ 2216.743638][ T8] bus_probe_device+0x189/0x260 [ 2216.748495][ T8] device_add+0x856/0xbf0 [ 2216.752832][ T8] usb_new_device+0x104a/0x19a0 [ 2216.757711][ T8] hub_event+0x2d6d/0x5150 [ 2216.762135][ T8] process_scheduled_works+0xa2c/0x1830 [ 2216.767693][ T8] worker_thread+0x86d/0xd10 [ 2216.772293][ T8] kthread+0x2f0/0x390 [ 2216.776369][ T8] ret_from_fork+0x4b/0x80 [ 2216.780835][ T8] ret_from_fork_asm+0x1a/0x30 [ 2216.785638][ T8] [ 2216.787960][ T8] Freed by task 8: [ 2216.791692][ T8] kasan_save_track+0x3f/0x80 [ 2216.796381][ T8] kasan_save_free_info+0x40/0x50 [ 2216.801410][ T8] poison_slab_object+0xe0/0x150 [ 2216.806363][ T8] __kasan_slab_free+0x37/0x60 [ 2216.811136][ T8] kfree+0x149/0x360 [ 2216.815032][ T8] device_release+0x99/0x1c0 [ 2216.819627][ T8] kobject_put+0x22f/0x480 [ 2216.824048][ T8] hdm_disconnect+0xf3/0x1c0 [ 2216.828645][ T8] usb_unbind_interface+0x25e/0x940 [ 2216.833864][ T8] device_release_driver_internal+0x503/0x7c0 [ 2216.839946][ T8] bus_remove_device+0x34f/0x420 [ 2216.844904][ T8] device_del+0x57a/0x9b0 [ 2216.849247][ T8] usb_disable_device+0x3bf/0x850 [ 2216.854292][ T8] usb_disconnect+0x340/0x950 [ 2216.858979][ T8] hub_event+0x1ebc/0x5150 [ 2216.863411][ T8] process_scheduled_works+0xa2c/0x1830 [ 2216.868991][ T8] worker_thread+0x86d/0xd10 [ 2216.873600][ T8] kthread+0x2f0/0x390 [ 2216.877673][ T8] ret_from_fork+0x4b/0x80 [ 2216.882378][ T8] ret_from_fork_asm+0x1a/0x30 [ 2216.887164][ T8] [ 2216.889497][ T8] The buggy address belongs to the object at ffff88802fe04000 [ 2216.889497][ T8] which belongs to the cache kmalloc-8k of size 8192 [ 2216.903573][ T8] The buggy address is located 6304 bytes inside of [ 2216.903573][ T8] freed 8192-byte region [ffff88802fe04000, ffff88802fe06000) [ 2216.917553][ T8] [ 2216.919883][ T8] The buggy address belongs to the physical page: [ 2216.926901][ T8] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2fe00 [ 2216.935664][ T8] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 2216.944176][ T8] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 2216.951725][ T8] page_type: 0xfdffffff(slab) [ 2216.956408][ T8] raw: 00fff00000000040 ffff88801ac42280 ffffea000193f000 0000000000000002 [ 2216.964999][ T8] raw: 0000000000000000 0000000080020002 00000001fdffffff 0000000000000000 [ 2216.973590][ T8] head: 00fff00000000040 ffff88801ac42280 ffffea000193f000 0000000000000002 [ 2216.982270][ T8] head: 0000000000000000 0000000080020002 00000001fdffffff 0000000000000000 [ 2216.990945][ T8] head: 00fff00000000003 ffffea0000bf8001 ffffffffffffffff 0000000000000000 [ 2216.999626][ T8] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 2217.008292][ T8] page dumped because: kasan: bad access detected [ 2217.014716][ T8] page_owner tracks the page as allocated [ 2217.020431][ T8] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 32554, tgid 32554 (syz-executor), ts 2173805087695, free_ts 2173694198905 [ 2217.043796][ T8] post_alloc_hook+0x1f3/0x230 [ 2217.048575][ T8] get_page_from_freelist+0x2e4c/0x2f10 [ 2217.054134][ T8] __alloc_pages_noprof+0x256/0x6c0 [ 2217.059344][ T8] alloc_slab_page+0x5f/0x120 [ 2217.064025][ T8] allocate_slab+0x5a/0x2f0 [ 2217.068541][ T8] ___slab_alloc+0xcd1/0x14b0 [ 2217.073236][ T8] __slab_alloc+0x58/0xa0 [ 2217.077567][ T8] __kmalloc_node_noprof+0x286/0x440 [ 2217.082858][ T8] __kvmalloc_node_noprof+0x72/0x190 [ 2217.088171][ T8] pfifo_fast_init+0x24f/0x6e0 [ 2217.092949][ T8] qdisc_create_dflt+0x136/0x4b0 [ 2217.097898][ T8] dev_activate+0x3c0/0x1240 [ 2217.102492][ T8] __dev_open+0x352/0x450 [ 2217.106849][ T8] __dev_change_flags+0x1e2/0x6f0 [ 2217.111888][ T8] dev_change_flags+0x8b/0x1a0 [ 2217.116672][ T8] do_setlink+0xcd0/0x41f0 [ 2217.121112][ T8] page last free pid 1852 tgid 1852 stack trace: [ 2217.127475][ T8] free_unref_page+0xd22/0xea0 [ 2217.132358][ T8] __put_partials+0xeb/0x130 [ 2217.136963][ T8] put_cpu_partial+0x17c/0x250 [ 2217.141737][ T8] __slab_free+0x2ea/0x3d0 [ 2217.146161][ T8] qlist_free_all+0x9e/0x140 [ 2217.150764][ T8] kasan_quarantine_reduce+0x14f/0x170 [ 2217.156233][ T8] __kasan_slab_alloc+0x23/0x80 [ 2217.161095][ T8] __kmalloc_cache_noprof+0x132/0x2c0 [ 2217.166477][ T8] nsim_fib_event_work+0x19c5/0x4130 [ 2217.171768][ T8] process_scheduled_works+0xa2c/0x1830 [ 2217.177411][ T8] worker_thread+0x86d/0xd10 [ 2217.182006][ T8] kthread+0x2f0/0x390 [ 2217.186164][ T8] ret_from_fork+0x4b/0x80 [ 2217.190600][ T8] ret_from_fork_asm+0x1a/0x30 [ 2217.195380][ T8] [ 2217.197793][ T8] Memory state around the buggy address: [ 2217.203423][ T8] ffff88802fe05780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2217.211486][ T8] ffff88802fe05800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2217.219547][ T8] >ffff88802fe05880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2217.227619][ T8] ^ [ 2217.232724][ T8] ffff88802fe05900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2217.240807][ T8] ffff88802fe05980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2217.248869][ T8] ================================================================== [ 2217.257057][ C0] vkms_vblank_simulate: vblank timer overrun SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 2217.538810][T24036] usb 5-1: USB disconnect, device number 56 [ 2217.735141][ T8] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 2217.742392][ T8] CPU: 0 UID: 0 PID: 8 Comm: kworker/0:0 Not tainted 6.11.0-rc6-syzkaller-00355-g5dadc1be8fc5 #0 [ 2217.752905][ T8] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 2217.762962][ T8] Workqueue: usb_hub_wq hub_event [ 2217.768019][ T8] Call Trace: [ 2217.771306][ T8] [ 2217.774239][ T8] dump_stack_lvl+0x241/0x360 [ 2217.778927][ T8] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2217.784163][ T8] ? __pfx__printk+0x10/0x10 [ 2217.788760][ T8] ? preempt_schedule+0xe1/0xf0 [ 2217.793615][ T8] ? vscnprintf+0x5d/0x90 [ 2217.797953][ T8] panic+0x349/0x860 [ 2217.801860][ T8] ? check_panic_on_warn+0x21/0xb0 [ 2217.806983][ T8] ? __pfx_panic+0x10/0x10 [ 2217.811410][ T8] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 2217.817415][ T8] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 2217.823752][ T8] ? print_report+0x502/0x550 [ 2217.828451][ T8] check_panic_on_warn+0x86/0xb0 [ 2217.833402][ T8] ? hdm_disconnect+0x10d/0x1c0 [ 2217.838260][ T8] end_report+0x77/0x160 [ 2217.842515][ T8] kasan_report+0x154/0x180 [ 2217.847032][ T8] ? kfree+0x149/0x360 [ 2217.851107][ T8] ? hdm_disconnect+0x10d/0x1c0 [ 2217.855958][ T8] hdm_disconnect+0x10d/0x1c0 [ 2217.860640][ T8] usb_unbind_interface+0x25e/0x940 [ 2217.865936][ T8] ? kernfs_remove_by_name_ns+0x11b/0x160 [ 2217.871662][ T8] ? __pfx_usb_unbind_interface+0x10/0x10 [ 2217.877390][ T8] device_release_driver_internal+0x503/0x7c0 [ 2217.883465][ T8] bus_remove_device+0x34f/0x420 [ 2217.888416][ T8] device_del+0x57a/0x9b0 [ 2217.892752][ T8] ? __pfx_device_del+0x10/0x10 [ 2217.897600][ T8] ? usb_disconnect+0x103/0x950 [ 2217.902461][ T8] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 2217.908823][ T8] ? __pfx___mutex_lock+0x10/0x10 [ 2217.913873][ T8] usb_disable_device+0x3bf/0x850 [ 2217.918919][ T8] usb_disconnect+0x340/0x950 [ 2217.923627][ T8] hub_event+0x1ebc/0x5150 [ 2217.928078][ T8] ? debug_object_deactivate+0x2d5/0x390 [ 2217.933729][ T8] ? __pfx_hub_event+0x10/0x10 [ 2217.938597][ T8] ? __pfx_lock_acquire+0x10/0x10 [ 2217.943634][ T8] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 2217.949634][ T8] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 2217.955980][ T8] ? process_scheduled_works+0x945/0x1830 [ 2217.961735][ T8] process_scheduled_works+0xa2c/0x1830 [ 2217.967480][ T8] ? __pfx_process_scheduled_works+0x10/0x10 [ 2217.973496][ T8] ? assign_work+0x364/0x3d0 [ 2217.978100][ T8] worker_thread+0x86d/0xd10 [ 2217.982707][ T8] ? __kthread_parkme+0x169/0x1d0 [ 2217.987746][ T8] ? __pfx_worker_thread+0x10/0x10 [ 2217.992873][ T8] kthread+0x2f0/0x390 [ 2217.996950][ T8] ? __pfx_worker_thread+0x10/0x10 [ 2218.002077][ T8] ? __pfx_kthread+0x10/0x10 [ 2218.006676][ T8] ret_from_fork+0x4b/0x80 [ 2218.011113][ T8] ? __pfx_kthread+0x10/0x10 [ 2218.015710][ T8] ret_from_fork_asm+0x1a/0x30 [ 2218.020494][ T8] [ 2218.023913][ T8] Kernel Offset: disabled [ 2218.028237][ T8] Rebooting in 86400 seconds..