last executing test programs: 9m0.976200625s ago: executing program 32 (id=27): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x581, 0x20000000008c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000002140)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(michael_mic-generic,xchacha20-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="04", 0x1) ioprio_get$pid(0x1, 0x0) 8m34.627611603s ago: executing program 33 (id=77): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace(0x10, r1) ptrace$peeksig(0x4209, r1, &(0x7f0000000700)={0x9, 0x1, 0xfffffffffffffeee}, &(0x7f0000000880)) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$ptys(0xc, 0x3, 0x0) syz_open_dev$vim2m(&(0x7f0000000040), 0x8, 0x2) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0xecf) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x0) readv(r2, &(0x7f00000002c0)=[{&(0x7f0000001500)=""/4110, 0x100e}], 0x1) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x8e383, 0x0) 8m28.943603627s ago: executing program 34 (id=85): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) mount(0x0, 0x0, &(0x7f0000000440)='cifs\x00', 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0xc2d41, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000fc0)={0x0, 0x0, 0x200}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) sendto$inet6(0xffffffffffffffff, &(0x7f00000002c0)="9e", 0x1, 0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4010) prlimit64(0x0, 0xb, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x24000041) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0) 7m35.953937845s ago: executing program 35 (id=183): r0 = io_uring_setup(0x2471, &(0x7f0000000280)={0x0, 0x4170, 0x1000, 0x0, 0x2e6}) io_uring_setup(0x2a5a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) r2 = msgget$private(0x0, 0x123) msgrcv(r2, 0x0, 0x0, 0x3, 0x3000) msgsnd(r2, 0x0, 0x0, 0x800) sendfile(r0, 0xffffffffffffffff, 0x0, 0xb) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) r3 = syz_io_uring_setup(0x3, &(0x7f0000000580)={0x0, 0x226f, 0x13500, 0x0, 0xeffffffd}, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x21, 0x0, 0x1) r4 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) request_key(0x0, &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)='keyring\x00', r4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000140)=@framed={{}, [@printk={@lx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xca}}]}, &(0x7f0000000000)='GPL\x00', 0xd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 7m28.040787121s ago: executing program 6 (id=230): syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0xc508, 0x0, 0x337}, 0x0, 0x0) 7m27.178414912s ago: executing program 6 (id=231): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) sched_setaffinity(0x0, 0xfffffffffffffdc5, &(0x7f00000002c0)=0x800002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) fcntl$setownex(r0, 0xf, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000007480)={'wlan0\x00'}) r3 = syz_genetlink_get_family_id$nl80211(0x0, r2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0x10001}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x9, 0xffffffffffffffff, 0x401, 0x4}, 0x3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}}, 0x0) r5 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x1f7ff6, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000040)={0x1, 0x1, 0x1}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e23, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffff8}}, 0x0, 0x0, 0x9, 0x4, 0x1c4, 0x0, 0xfe}, 0x9c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xe1000, 0x280000b, 0x28011, r5, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ffd000/0x3000)=nil) sendmsg$NL80211_CMD_DEL_PMKSA(r2, &(0x7f0000007700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x4044}, 0x24044011) r7 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r7, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r7, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171, 0x0, 0x0, 0x4000000}}], 0x400000000000172, 0x0) 7m22.997672029s ago: executing program 36 (id=216): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r0, 0x40047438, 0x0) r1 = memfd_secret(0x80000) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r1) sched_setaffinity(0x0, 0xfffffffffffffdc5, &(0x7f00000002c0)=0x800002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$PTP_SYS_OFFSET_EXTENDED(0xffffffffffffffff, 0xc4c03d09, &(0x7f0000000300)={0x13}) r2 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000180)=ANY=[@ANYBLOB="b408c0d9f32b2199e39a6681c0b79400000000000073113200000000008510000002000000b7000000000000009500c200000000009500001200000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) fcntl$setownex(r2, 0xf, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) memfd_create(0x0, 0x4) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r4, 0x0, 0x0, 0x10) setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f00000002c0)={0x3, 0x0, 0x0}) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000240)=0x4, 0x4) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000000080)=""/198) 7m20.008015948s ago: executing program 37 (id=223): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x7001) iopl(0x3) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000200)={0x28, 0x0, 0x2710, @local}, 0x41) ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, 0x0, 0x2, 0x4002) setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) 7m11.013271256s ago: executing program 38 (id=231): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) sched_setaffinity(0x0, 0xfffffffffffffdc5, &(0x7f00000002c0)=0x800002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) fcntl$setownex(r0, 0xf, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000007480)={'wlan0\x00'}) r3 = syz_genetlink_get_family_id$nl80211(0x0, r2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0x10001}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x9, 0xffffffffffffffff, 0x401, 0x4}, 0x3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}}, 0x0) r5 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x1f7ff6, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000040)={0x1, 0x1, 0x1}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e23, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffff8}}, 0x0, 0x0, 0x9, 0x4, 0x1c4, 0x0, 0xfe}, 0x9c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xe1000, 0x280000b, 0x28011, r5, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ffd000/0x3000)=nil) sendmsg$NL80211_CMD_DEL_PMKSA(r2, &(0x7f0000007700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x4044}, 0x24044011) r7 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r7, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r7, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171, 0x0, 0x0, 0x4000000}}], 0x400000000000172, 0x0) 6m18.016432917s ago: executing program 39 (id=278): gettid() fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000080)) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f00000003c0)={0x0, 0x0, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r3, &(0x7f00000000c0)=0x1c3, 0x12) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4004010) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) writev(r2, &(0x7f0000000840), 0x30) r4 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) bind$inet(r4, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) 6m4.959299209s ago: executing program 40 (id=301): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000200)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="34000000000000d330dd0000f8f34a3a8ca3d62b9b03f1c10c4d616c5cc088d48481b21161bbb0", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) r2 = syz_open_dev$radio(&(0x7f0000001640), 0x0, 0x2) r3 = syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) dup2(r3, r3) preadv(r2, &(0x7f00000033c0)=[{&(0x7f00000031c0)=""/207, 0xcf}], 0x1, 0x6, 0x0) ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000100)=0x3) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x25, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0xa00, 0x63c, 0x1, 0x3, 0xd59f83, 0x19f5, 0x3f, 0x7, 0x3, 0x6, 0x2800, 0x2800, 0x2, 0xba2, 0x0, 0x3e, {0x8, 0xffffffff}, 0xd0, 0x9}}) getsockopt$inet_buf(0xffffffffffffffff, 0x6, 0x29, 0x0, &(0x7f0000695ffc)) r4 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r4, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xf0f05e, 0x1ff, '\x00', @p_u32=0x0}}) 5m29.44432883s ago: executing program 41 (id=361): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) read(0xffffffffffffffff, &(0x7f0000000080)=""/186, 0xba) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0xc000) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x40080, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x4000000004002, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r5, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) write$tun(r5, &(0x7f0000000000)=ANY=[@ANYRES32], 0x1c) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0xe0000000, 0x5e490420, 0x2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x50) syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x88a, &(0x7f0000000140)={0x0, 0xa65a, 0x4000, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000480)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xffffbffc, 0x0, 0x4) 5m18.587544917s ago: executing program 42 (id=384): r0 = memfd_secret(0x80000) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) sched_setaffinity(0x0, 0xfffffffffffffdc5, &(0x7f00000002c0)=0x800002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x280481, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) memfd_create(0x0, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r2, &(0x7f0000001300)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000280)}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x4, 0x10) setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040), 0x3, 0x2000) 5m17.225585071s ago: executing program 43 (id=387): r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x42031, 0xffffffffffffffff, 0x0) userfaultfd(0x801) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, 0x0, 0x0) sendmmsg$inet(r2, &(0x7f0000004980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20008000) setsockopt$inet_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f1a0f9fff9e440b4", "881aae83544dfa6412f91b9057e3f415", "9dca43b6", "9ecb592c6ee49fbd"}, 0x28) r3 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000000)={0x81, 0x4, {0xffffffffffffffff}, {}, 0x16, 0x101}) syz_open_procfs(r4, &(0x7f0000000040)='coredump_filter\x00') ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0xc0481273, 0x0) 4m36.666032581s ago: executing program 6 (id=404): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r2, r1, 0x25, 0x8, @void}, 0x10) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f0000000000)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x7, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 4m35.928880317s ago: executing program 6 (id=465): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00'}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000017c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="33022dbd7000fcdbdf251b00000008000300", @ANYBLOB="10002e800c0004"], 0x2c}, 0x1, 0x0, 0x0, 0x4040000}, 0x240048d4) 4m35.280369874s ago: executing program 6 (id=468): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0xffff, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x2}, 0xe) 4m34.707040288s ago: executing program 6 (id=470): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet(0x2, 0x1, 0x100) socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x3, &(0x7f00000000c0)=0x7a, 0x4) prctl$PR_GET_TIMERSLACK(0x1e) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000200), 0x0) r2 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000080)="bc5dfc7f", 0x4, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r2}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) 4m19.276067218s ago: executing program 44 (id=470): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet(0x2, 0x1, 0x100) socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x3, &(0x7f00000000c0)=0x7a, 0x4) prctl$PR_GET_TIMERSLACK(0x1e) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000200), 0x0) r2 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000080)="bc5dfc7f", 0x4, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r2}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) 3m33.64058301s ago: executing program 2 (id=660): mknod$loop(&(0x7f0000000200)='./file0\x00', 0x200, 0x1) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r1 = dup(r0) write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)=ANY=[]) truncate(&(0x7f0000000240)='./file0\x00', 0x206b12) openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0xff0f, 0x8c) creat(&(0x7f0000000240)='./file0\x00', 0x0) 3m33.151334756s ago: executing program 2 (id=661): socket(0x848000000015, 0x805, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) socket$alg(0x26, 0x5, 0x0) socket(0x1e, 0x805, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000010001ffe0098", @ANYRES32=0x0, @ANYBLOB="ff7f000080000000140012800a00010076786c616e0000000400028008000a00", @ANYRES64=r0], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) 3m32.597275302s ago: executing program 2 (id=664): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009e602206d0414c340000000000109022400010400a000090480000103010100093700086ce8220100090581"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) 3m30.771029363s ago: executing program 2 (id=667): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/clear_refs\x00', 0x1, 0x0) syz_clone(0xa04c280, 0x0, 0x0, 0x0, 0x0, 0x0) write$sysctl(r0, &(0x7f0000000180)='4\x00', 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 3m28.934072082s ago: executing program 2 (id=676): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect$uac1(0x0, 0x93, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000086b1d01014000010203010902810003010060000904000000010100000a240100000002010205240506000904010000010200000904010101010200000e240201000000009290d2199a5a09050109000000040007250180000000090402000001020000090402010101021b00082402"], 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)="5487915cadde583c7dee2f54b52d47aec149b804702ca7f71719377b1c46cf7ab1c0fa2a25e33fb3517d549560104df969e6891045835c7763ea6cff8277554c6e544b4551e547108aa55032b54f35fb1db036e7d4bda74bcb7dbd7d92c134a9e5cbe9045b64cfe5bbef8921739241b7d8fc6eaaa3abcfc8cab5eb26b6494a9d884c2e759b00362f4b211ae53ada521fe69d05efc037acb543e0ce110f27511fb7ba77779c0e846774a25d2a02bb7d6bb1c59f571c92aa89", 0xb8}], 0x1, &(0x7f0000000540)=[{0x40, 0x107, 0x5, "936a517dcc7017ee2a2dc1e6f1f8a9b7987580d59db85c56b4a3c8e5179da939837151afffab4afb06a0b8a5b79d7b"}, {0x18, 0x84, 0xca14, "9ff8dcd0bbb540"}], 0x58}, 0xc0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}]}], {0x14}}, 0x64}}, 0x0) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100001}, 0xc, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x41}, 0x4) 3m26.707482623s ago: executing program 2 (id=684): fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) socket$inet6_tcp(0xa, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f00000000c0)={0x0, 0x7f, 0x2, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x18, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x7e}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0xb3}}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}]}, &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x38, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 3m10.942227417s ago: executing program 45 (id=684): fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) socket$inet6_tcp(0xa, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f00000000c0)={0x0, 0x7f, 0x2, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x18, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x7e}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0xb3}}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}]}, &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x38, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 2m35.681676526s ago: executing program 8 (id=859): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r1, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0) io_submit(0x0, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}]) sync() mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 2m34.954460421s ago: executing program 8 (id=863): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000008000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000070000000"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) r0 = inotify_init1(0x80000) inotify_add_watch(r0, &(0x7f0000000400)='.\x00', 0xa4000021) read(r0, 0x0, 0x0) close(r0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) 2m34.314362615s ago: executing program 8 (id=867): socket$nl_route(0x10, 0x3, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) fsopen(&(0x7f0000000100)='udf\x00', 0x0) syz_open_dev$video4linux(&(0x7f00000001c0), 0xff, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000000000fe8000000000000000000400000000aa"], 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="010000000000000000000900000030000380140002"], 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x5000002}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040804}, 0x20000000) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2m32.835027998s ago: executing program 8 (id=871): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x10}]}}}, {0x10, 0x1, 0x0, 0x1, @queue={{0xa}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) 2m32.286064712s ago: executing program 8 (id=875): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009e602206d0414c340000000000109022400010400a000090480000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x14, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}, 0x0) 2m30.256527499s ago: executing program 8 (id=885): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x581, 0x20000000008c}, 0x0) r0 = gettid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x1) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000200)=""/161, 0x1018000, 0x1000, 0x10001}, 0x20) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$alg(0x26, 0x5, 0x0) futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000), 0x2}, {0x3, &(0x7f0000000040)=0x84, 0x2}], 0x2, 0x0, 0x0, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) eventfd(0x4) io_submit(0x0, 0x0, &(0x7f0000001d00)) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x41460, 0x0) 2m22.501816769s ago: executing program 1 (id=904): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, &(0x7f0000000240)={0x40, 0xb, 0x4, "899cb13e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000001dc0)={0x44, &(0x7f0000000540)={0x40, 0x18, 0x4, "7833b853"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m19.468835785s ago: executing program 1 (id=912): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) r1 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x8a73, 0x100, 0x1, 0x335}, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0x103, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0) 2m18.596579392s ago: executing program 1 (id=913): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x4}]}], {0x14}}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x0) 2m17.951696336s ago: executing program 1 (id=917): mkdir(0x0, 0x12c) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mount$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080), 0x1200002, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 2m17.343306831s ago: executing program 1 (id=919): r0 = io_uring_setup(0x7fdb, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffff, 0x8}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000040)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) statfs(&(0x7f0000000200)='./file0/file0\x00', 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000004300)={0x50, 0x0, r1}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004380)="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", 0x2000, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f000000a3c0)="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", 0x2000, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close_range(r0, 0xffffffffffffffff, 0x0) 2m16.736358575s ago: executing program 1 (id=922): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) rseq(0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8d}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) unshare(0x22020600) r2 = open(0x0, 0x0, 0x0) utimensat(r2, 0x0, &(0x7f0000000300)={{}, {0x0, 0xffffffffffffffff}}, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f00000003c0), &(0x7f0000000340)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x210000, 0x0) r5 = syz_init_net_socket$ax25(0x3, 0x2, 0xcb) getsockopt$ax25_int(r5, 0x101, 0x3, &(0x7f0000000000), &(0x7f00000004c0)=0x4) ioctl$TIOCSSOFTCAR(r4, 0x5453, 0x0) creat(0x0, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="e104000000824b4c4736984e55bf625da87b500000000000003073196d51000000a0c288155cf500", @ANYRES32=0x0, @ANYBLOB="5d5b0000000000001400350077673100"/28], 0x34}}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040), 0x111}}, 0x20) 2m14.807594637s ago: executing program 46 (id=885): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x581, 0x20000000008c}, 0x0) r0 = gettid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x1) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000200)=""/161, 0x1018000, 0x1000, 0x10001}, 0x20) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$alg(0x26, 0x5, 0x0) futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000), 0x2}, {0x3, &(0x7f0000000040)=0x84, 0x2}], 0x2, 0x0, 0x0, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) eventfd(0x4) io_submit(0x0, 0x0, &(0x7f0000001d00)) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x41460, 0x0) 2m0.942383502s ago: executing program 47 (id=922): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) rseq(0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8d}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) unshare(0x22020600) r2 = open(0x0, 0x0, 0x0) utimensat(r2, 0x0, &(0x7f0000000300)={{}, {0x0, 0xffffffffffffffff}}, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f00000003c0), &(0x7f0000000340)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x210000, 0x0) r5 = syz_init_net_socket$ax25(0x3, 0x2, 0xcb) getsockopt$ax25_int(r5, 0x101, 0x3, &(0x7f0000000000), &(0x7f00000004c0)=0x4) ioctl$TIOCSSOFTCAR(r4, 0x5453, 0x0) creat(0x0, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="e104000000824b4c4736984e55bf625da87b500000000000003073196d51000000a0c288155cf500", @ANYRES32=0x0, @ANYBLOB="5d5b0000000000001400350077673100"/28], 0x34}}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040), 0x111}}, 0x20) 1m21.423817223s ago: executing program 5 (id=1041): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) io_setup(0x8, 0x0) open(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$VT_ACTIVATE(r0, 0x5606, 0x4) ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000000)) 1m20.807817038s ago: executing program 5 (id=1044): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, 0x0) pipe2(0x0, 0x4000) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r2, 0x0, 0x0, 0x0}) r4 = socket(0x2b, 0x80801, 0x1) connect$l2tp6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) ioctl$sock_SIOCINQ(r4, 0x541b, &(0x7f0000000440)) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r1, 0x3b8c, &(0x7f0000000040)={0x30, r3, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x40000, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) write$tun(0xffffffffffffffff, 0x0, 0x0) r7 = open$dir(&(0x7f0000000000)='./file0\x00', 0x10380, 0x16) fanotify_mark(0xffffffffffffffff, 0x8, 0x8000000, r7, &(0x7f0000000040)='./file0\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r8 = getpid() bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x4) syz_open_procfs(r8, &(0x7f0000000040)='net/fib_triestat\x00') 1m20.076565655s ago: executing program 5 (id=1049): mkdir(&(0x7f0000000280)='./file0\x00', 0x54) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x4047b013}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003c58b3bd0000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x2, {0x0, 0x1e}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x78, 0x0, 0x35a74, {0x0, 0x2, 0x0, {0x0, 0x68, 0xfffffffffffffff7, 0x5, 0x8, 0x0, 0x200, 0xe821, 0xfffffff9, 0xa000, 0xd, r2, 0x0, 0x6, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getdents64(r3, 0x0, 0x0) getdents(r3, 0x0, 0x0) 1m19.492585341s ago: executing program 5 (id=1053): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4e21, 0xb744, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffffd}, 0x1c) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f00000001c0)) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4138ae84, &(0x7f0000000380)=@x86={0x6, 0xa, 0x7, 0x0, 0x3, 0x8d, 0xce, 0x1c, 0x89, 0xa0, 0x7, 0x8, 0x0, 0x8000, 0xb, 0x2, 0x8, 0x2, 0x1, '\x00', 0x9, 0x3fb}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x8, 0x80, 0x0, '\x00', 0x5c8d}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1m18.228866979s ago: executing program 5 (id=1061): mkdir(&(0x7f00000003c0)='./file0\x00', 0x12c) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mount$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080), 0x1200002, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 1m17.659751701s ago: executing program 5 (id=1066): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1d, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000fcffffef00000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @lsm, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000500)=0xffffffffffffffff, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0}, 0x18) r1 = socket$vsock_stream(0x28, 0x1, 0x0) getpid() connect$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, 0x0, 0x48000) prlimit64(0x0, 0xe, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, 0x0, 0x108) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, &(0x7f00000000c0)=0xffff) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) openat$incfs(0xffffffffffffffff, &(0x7f0000000040)='.pending_reads\x00', 0x400, 0xcc) setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x224}) timer_create(0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) 1m2.325156552s ago: executing program 48 (id=1066): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1d, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000fcffffef00000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @lsm, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000500)=0xffffffffffffffff, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0}, 0x18) r1 = socket$vsock_stream(0x28, 0x1, 0x0) getpid() connect$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, 0x0, 0x48000) prlimit64(0x0, 0xe, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, 0x0, 0x108) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, &(0x7f00000000c0)=0xffff) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) openat$incfs(0xffffffffffffffff, &(0x7f0000000040)='.pending_reads\x00', 0x400, 0xcc) setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x224}) timer_create(0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) 12.117505891s ago: executing program 4 (id=1260): r0 = syz_io_uring_setup(0x890, &(0x7f0000000140)={0x0, 0xaee2, 0x800, 0x2, 0xbfdffffc}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2040}}) io_uring_enter(r0, 0x47f6, 0x0, 0x2, 0x0, 0x0) 11.190253248s ago: executing program 4 (id=1262): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) ioperm(0x0, 0x2, 0x7e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0xc, 0x3}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000300)='ns\x00') mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={0xb, 0x0, 0x40000, {r2}}, 0x20) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) socket(0x10, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="400000000a0601020000000000000000000000000900020073797a31000000000500010007000000180007800c00018008000140fffffffe050003"], 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 11.00361284s ago: executing program 3 (id=1264): socket$nl_generic(0x10, 0x3, 0x10) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006840)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x10b}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) open(&(0x7f00000001c0)='./file0/file0\x00', 0x2, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) 9.96523322s ago: executing program 3 (id=1266): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') stat(&(0x7f0000000980)='./file0\x00', 0x0) 9.290834588s ago: executing program 3 (id=1268): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9e, 0x17, 0x36, 0x10, 0x17ef, 0x721e, 0xde06, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000000)={0x10, &(0x7f0000000080)={0x20, 0xc, 0x4, "afa40edd"}, 0x0, 0x0}) bind$tipc(0xffffffffffffffff, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) 6.936926475s ago: executing program 3 (id=1276): getpgid(0x0) userfaultfd(0x80000) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)=@bridge_delneigh={0x1b, 0x1e, 0x1, 0x0, 0x0, {0x7}, [@NDA_LLADDR={0xa, 0x5}]}, 0x28}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) write$binfmt_script(0xffffffffffffffff, &(0x7f0000004180), 0xff77) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a140efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb737ae996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be500e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef1d7ee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) ioctl$USBDEVFS_CLEAR_HALT(r0, 0xc0105502, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) socket(0x80000000000000a, 0x2, 0x0) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000140)={[{@mpol={'mpol', 0x3d, {'default', '', @void}}}], [{@smackfstransmute={'smackfstransmute', 0x3d, '!%/'}}, {@euid_gt}]}) 6.82105932s ago: executing program 7 (id=1277): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000240)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97', 0x3) write$binfmt_misc(r2, &(0x7f0000000740), 0xff67) sendfile(r1, r2, &(0x7f0000000000), 0xfffb) fcntl$addseals(r2, 0x409, 0x8) fsopen(0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) read$rfkill(r3, 0x0, 0x0) ftruncate(r2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000a7c96d5d00000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000001c0)='contention_end\x00', r5}, 0x18) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x9, 0x6576, 0x47ff}) getsockopt$inet6_mreq(r4, 0x29, 0x1c, &(0x7f0000000100)={@initdev}, &(0x7f0000000140)=0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = fsopen(&(0x7f0000000440)='smb3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f00000008c0)='source', 0x0, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r7, 0x100000000) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x8044) 5.904814168s ago: executing program 7 (id=1280): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, 0x0) pipe2(0x0, 0x4000) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r2, 0x0, 0x0, 0x0}) r4 = socket(0x2b, 0x80801, 0x1) connect$l2tp6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) ioctl$sock_SIOCINQ(r4, 0x541b, &(0x7f0000000440)) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r1, 0x3b8c, &(0x7f0000000040)={0x30, r3, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x40000, 0x0) write$tun(0xffffffffffffffff, 0x0, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x10380, 0x16) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_triestat\x00') 5.782026678s ago: executing program 0 (id=1281): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f00000001c0), 0x10) 5.312764109s ago: executing program 7 (id=1282): mount$9p_fd(0x0, &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x200800, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000004000/0x3000)=nil) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0, r0}, &(0x7f0000000300), &(0x7f00000011c0)='%pB \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r0, r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x10, &(0x7f0000000480)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1234}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xa0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000080)={0xf0f003, 0x5}) 5.154427832s ago: executing program 0 (id=1283): openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) socket$netlink(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) pipe(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400000010000304016100"/20, @ANYRES32=0x0, @ANYBLOB="d3ddd1de00000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}}, 0x0) 4.800208837s ago: executing program 9 (id=1284): fanotify_init(0x200, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000002740)=@deltfilter={0x24, 0x2d, 0x8, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0xfff2}, {0xffff, 0xc}, {0x3, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x44801}, 0x800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000000000000000008847", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) r2 = syz_io_uring_setup(0x890, &(0x7f0000000140)={0x0, 0xaee2, 0x800, 0x2, 0xbfdffffc}, &(0x7f0000000100)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r2, 0x47f6, 0x0, 0x2, 0x0, 0x0) 4.478705365s ago: executing program 4 (id=1285): syz_usb_connect$cdc_ecm(0x0, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4c, &(0x7f0000000380)=@string={0x4c, 0x3, "825646c28d8a50835cb56246c0f36821b4a50147118af840b408827cf6c086eb25e79d27af08af992471703e3eaa3128ded03d1e987487173b0d15952eabf7d67406deb7704ddb3dc6be"}}]}) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x9, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f0000000400)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x10000, 0x0, 0x4000, 0x25bd88, 0x13f02e, 0x10000000000001}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000240)=ANY=[], 0x1df) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x10001, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd0000000000004000"}}) 3.905261368s ago: executing program 7 (id=1286): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9e, 0x17, 0x36, 0x10, 0x17ef, 0x721e, 0xde06, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000000)={0x10, &(0x7f0000000080)={0x20, 0xc, 0x4, "afa40edd"}, 0x0, 0x0}) bind$tipc(0xffffffffffffffff, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) 3.588415276s ago: executing program 0 (id=1287): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x8080}, 0x0) 3.488120829s ago: executing program 9 (id=1288): socket$alg(0x26, 0x5, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x1c, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@typed={0x8, 0xc, 0x0, 0x0, @fd=r0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 3.213669158s ago: executing program 0 (id=1289): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x0, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000480)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000640)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x700000000000000, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000240)={0x30, 0x30, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) 3.116220658s ago: executing program 9 (id=1290): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000240)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97', 0x3) write$binfmt_misc(r2, &(0x7f0000000740), 0xff67) sendfile(r1, r2, &(0x7f0000000000), 0xfffb) fcntl$addseals(r2, 0x409, 0x8) fsopen(0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) read$rfkill(r3, 0x0, 0x0) ftruncate(r2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000a7c96d5d00000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000001c0)='contention_end\x00', r5}, 0x18) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x9, 0x6576, 0x47ff}) getsockopt$inet6_mreq(r4, 0x29, 0x1c, &(0x7f0000000100)={@initdev}, &(0x7f0000000140)=0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = fsopen(&(0x7f0000000440)='smb3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f00000008c0)='source', 0x0, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r7, 0x100000000) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x8044) 2.892941844s ago: executing program 0 (id=1291): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)) chdir(&(0x7f0000000140)='./bus\x00') stat(&(0x7f0000000980)='./file0\x00', 0x0) 2.875446758s ago: executing program 4 (id=1292): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, 0x0) pipe2(0x0, 0x4000) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r2, 0x0, 0x0, 0x0}) r4 = socket(0x2b, 0x80801, 0x1) connect$l2tp6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) ioctl$sock_SIOCINQ(r4, 0x541b, &(0x7f0000000440)) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r1, 0x3b8c, &(0x7f0000000040)={0x30, r3, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x40000, 0x0) write$tun(0xffffffffffffffff, 0x0, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x10380, 0x16) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_triestat\x00') 2.437098415s ago: executing program 0 (id=1293): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f0000000500)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x32, &(0x7f0000000140)=""/50, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x7, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x20000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) r6 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r6, &(0x7f0000000300)="4c00000012001f15b9409b849ac00a00a5784004000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdb0200000000000000a351d1ec0cffc8792cd800008012259f0aed6fcdaaaf3df78b8032fe6314a6977f5861c730cebb7aab8a971638742278df38c3eee8915089e37e64fe6150ad005e0b83f02e035a4692a8c94c3f19fab04a6c78ac57540463cebe", 0x99, 0x4000850, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r1, 0x0, 0x3}, 0x18) r7 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) r8 = syz_open_dev$swradio(&(0x7f0000000140), 0x0, 0x2) r9 = dup(r8) ioctl$VIDIOC_S_CTRL(r9, 0xc008561c, &(0x7f0000000000)={0xf0f046}) ioctl$VHOST_SET_MEM_TABLE(r7, 0x4008af03, &(0x7f0000000340)) ioctl$VHOST_NET_SET_BACKEND(r7, 0x4008af30, &(0x7f0000000000)={0x1}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000200)={0x82, 0x7ff, 0x4, {0x2, @raw_data="ceeec385ebfe7f0e3afcb4fdbcebdc30e5af3ee93d7456d11566f356b82730254a5bd9792e57163526e6a0c82f0754ef809e271aacdb461acb3b3bd2811bda8dab9db1c058c48a5dcdda4611a06df004ab331e300db5406d56da5260af997002981e24a7f2953c0ea1ed49a83bf452e1f79988405e3767faad877df0f22337ab0d7eaf288f5cb4c8368df1d7e20d2bcec42044ba6c494a66d653e21511c364a2fb5e9ddf1bfaff2da658231955500e5961ef116a90eb0a17858f2de51340e514301ee1f171295c2f"}, 0x1}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x5, 0x4, {0x2, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0xffff]}}}) 2.396746318s ago: executing program 9 (id=1294): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x24, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) 2.179954003s ago: executing program 4 (id=1295): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0xd, @broadcast, 'tunl0\x00'}}, 0x1e) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x40a40, 0x0) ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f0000000040)=0x2) ioctl$PPPIOCBRIDGECHAN(r3, 0x40047435, &(0x7f0000000200)=0x1) 1.812534718s ago: executing program 4 (id=1296): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_init_net_socket$netrom(0x6, 0x5, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1, 0x0, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setscheduler(r1, 0x5, &(0x7f00000001c0)=0x1a4) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = add_key$user(&(0x7f00000003c0), 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) keyctl$dh_compute(0x17, &(0x7f0000000000)={r4, r4, r4}, 0x0, 0x0, &(0x7f0000000280)={0x0}) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000300)={0x3, 0x2, 0x1, 0x0, 0xbf}) sendto$inet(0xffffffffffffffff, &(0x7f0000000380)="437550b523af1a7f2da599e5139f10a0f56401a09a7d028e47", 0x19, 0x20004801, &(0x7f0000000400)={0x2, 0x4e24, @empty}, 0x10) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc}, 0x10) r6 = socket(0x1e, 0x4, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r5, &(0x7f0000003240), 0x4000000000000e4, 0x0) listen(r0, 0x0) 1.693795593s ago: executing program 3 (id=1297): openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) socket$netlink(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) pipe(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400000010000304016100"/20, @ANYRES32=0x0, @ANYBLOB="d3ddd1de00000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}}, 0x0) 1.606382882s ago: executing program 7 (id=1298): fanotify_init(0x200, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000002740)=@deltfilter={0x24, 0x2d, 0x8, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0xfff2}, {0xffff, 0xc}, {0x3, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x44801}, 0x800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000000000000000008847", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) r2 = syz_io_uring_setup(0x890, &(0x7f0000000140)={0x0, 0xaee2, 0x800, 0x2, 0xbfdffffc}, &(0x7f0000000100)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r2, 0x47f6, 0x0, 0x2, 0x0, 0x0) 1.299562879s ago: executing program 9 (id=1299): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x8080}, 0x0) 495.286207ms ago: executing program 3 (id=1300): syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x4b, 0x41, 0x46, 0x8, 0x1660, 0x932, 0x80ea, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x5, 0x10, 0xf}}]}}]}}, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f0000000040)=0x8, 0x4) socket$packet(0x11, 0x3, 0x300) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=']) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)) pread64(0xffffffffffffffff, &(0x7f0000000140)=""/38, 0x26, 0x8) syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) read(r0, 0x0, 0xffffff0c) 160.041211ms ago: executing program 9 (id=1301): r0 = syz_open_dev$vim2m(&(0x7f0000000580), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$alg(0xffffffffffffffff, 0x0, 0x0) r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r5, 0x110, 0x3) connect$rxrpc(r5, 0x0, 0x0) recvfrom(r4, &(0x7f00000030c0)=""/4117, 0xffffffffffffffbf, 0x1, 0x0, 0xffffffffffffffb5) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x2, @pix_mp={0x0, 0x80000a, 0x31435641, 0x0, 0x0, [{}, {0x0, 0x200}, {}, {0x76e6}, {}, {}, {0x0, 0x2}, {0x0, 0x3fd}], 0x2}}) ioctl$IOMMU_IOAS_COPY$syz(0xffffffffffffffff, 0x3b83, &(0x7f0000001640)={0x28, 0x10000, 0x0, 0x0, 0x34c768, 0x7, 0x4, 0x1f6316}) mount$9p_unix(0x0, &(0x7f0000003600)='.\x00', &(0x7f0000003640), 0x100000, &(0x7f00000003c0)=ANY=[]) 0s ago: executing program 7 (id=1302): syz_usb_connect$cdc_ecm(0x0, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4c, &(0x7f0000000380)=@string={0x4c, 0x3, "825646c28d8a50835cb56246c0f36821b4a50147118af840b408827cf6c086eb25e79d27af08af992471703e3eaa3128ded03d1e987487173b0d15952eabf7d67406deb7704ddb3dc6be"}}]}) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x9, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f0000000400)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x10000, 0x0, 0x4000, 0x25bd88, 0x13f02e, 0x10000000000001}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000240)=ANY=[], 0x1df) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x10001, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd0000000000004000"}}) kernel console output (not intermixed with test programs): 86] fuse: Unknown parameter '0xffffffffffffffff' [ 563.882424][ T7787] loop6: detected capacity change from 0 to 63 [ 564.766371][ T11] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 564.928050][ T11] usb 6-1: Using ep0 maxpacket: 16 [ 564.993885][ T11] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 565.007970][ T11] usb 6-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 565.017482][ T11] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.115389][ T11] usb 6-1: config 0 descriptor?? [ 565.177100][ T11] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input25 [ 566.753182][ T5136] bcm5974 6-1:0.0: could not read from device [ 566.791353][ T5136] bcm5974 6-1:0.0: could not read from device [ 566.840265][ T11] bcm5974 6-1:0.0: could not read from device [ 566.919905][ T11] input: failed to attach handler mousedev to device input25, error: -5 [ 566.959200][ T5136] bcm5974 6-1:0.0: could not read from device [ 566.981994][ T5136] bcm5974 6-1:0.0: could not read from device [ 567.043663][ T11] usb 6-1: USB disconnect, device number 9 [ 568.821603][ T7817] fuse: Unknown parameter '0xffffffffffffffff' [ 568.958823][ T30] audit: type=1326 audit(1747380807.396:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7819 comm="syz.7.505" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd7539 code=0x7ffc0000 [ 568.981902][ T30] audit: type=1326 audit(1747380807.396:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7819 comm="syz.7.505" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd7539 code=0x7ffc0000 [ 569.070786][ T7817] loop6: detected capacity change from 0 to 63 [ 571.586331][ T5854] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 571.806749][ T5854] usb 8-1: Using ep0 maxpacket: 16 [ 571.825289][ T5854] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 571.839414][ T5854] usb 8-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 571.849083][ T5854] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 572.027598][ T5854] usb 8-1: config 0 descriptor?? [ 572.063228][ T5854] input: bcm5974 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/input/input26 [ 572.702275][ T5136] bcm5974 8-1:0.0: could not read from device [ 572.821413][ T5854] bcm5974 8-1:0.0: could not read from device [ 572.864685][ T5854] input: failed to attach handler mousedev to device input26, error: -5 [ 572.878866][ T5136] bcm5974 8-1:0.0: could not read from device [ 572.961668][ T5136] bcm5974 8-1:0.0: could not read from device [ 573.003014][ T5854] usb 8-1: USB disconnect, device number 5 [ 573.661949][ T5799] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 573.678192][ T5799] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 573.687264][ T5799] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 573.759287][ T5799] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 573.777354][ T5799] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 574.684935][ T7851] chnl_net:caif_netlink_parms(): no params data found [ 574.787157][ T7860] fuse: Unknown parameter '0xffffffffffffffff' [ 575.007118][ T7860] loop6: detected capacity change from 0 to 63 [ 575.086904][ T5854] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 575.386974][ T5854] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 575.398450][ T5854] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 575.407772][ T5854] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 575.498310][ T5854] usb 6-1: config 0 descriptor?? [ 575.819945][ T5854] usbhid 6-1:0.0: can't add hid device: -71 [ 575.826775][ T5854] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 575.838179][ T5799] Bluetooth: hci4: command tx timeout [ 575.990337][ T5854] usb 6-1: USB disconnect, device number 10 [ 576.406972][ T5854] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 576.647218][ T5854] usb 6-1: Using ep0 maxpacket: 16 [ 576.760827][ T7851] bridge0: port 1(bridge_slave_0) entered blocking state [ 576.768750][ T7851] bridge0: port 1(bridge_slave_0) entered disabled state [ 576.776487][ T7851] bridge_slave_0: entered allmulticast mode [ 576.784734][ T7851] bridge_slave_0: entered promiscuous mode [ 576.823976][ T5854] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 576.835657][ T5854] usb 6-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 576.845134][ T5854] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.901975][ T7851] bridge0: port 2(bridge_slave_1) entered blocking state [ 576.912924][ T7851] bridge0: port 2(bridge_slave_1) entered disabled state [ 576.920661][ T7851] bridge_slave_1: entered allmulticast mode [ 576.929102][ T7851] bridge_slave_1: entered promiscuous mode [ 577.138474][ T5854] usb 6-1: config 0 descriptor?? [ 577.460526][ T7851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 577.614778][ T5854] kye 0003:0458:5016.0001: control desc unexpectedly large [ 577.625715][ T7851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 577.795398][ T5854] input: HID 0458:5016 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5016.0001/input/input27 [ 577.955632][ T5799] Bluetooth: hci4: command tx timeout [ 578.028058][ T5854] input: HID 0458:5016 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5016.0001/input/input28 [ 578.116451][ T7851] team0: Port device team_slave_0 added [ 578.157396][ T5854] kye 0003:0458:5016.0001: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.5-1/input0 [ 578.217461][ T7851] team0: Port device team_slave_1 added [ 578.242408][ T5854] usb 6-1: USB disconnect, device number 11 [ 578.565805][ T7851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 578.574603][ T7851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 578.602538][ T7851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 578.794562][ T7851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 578.801911][ T7851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 578.828462][ T7851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 579.622671][ T7851] hsr_slave_0: entered promiscuous mode [ 579.633555][ T7851] hsr_slave_1: entered promiscuous mode [ 579.642681][ T7851] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 579.650751][ T7851] Cannot create hsr debugfs directory [ 580.001516][ T4972] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.017329][ T5799] Bluetooth: hci4: command tx timeout [ 580.086475][ T11] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 580.196979][ T4972] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.256578][ T11] usb 3-1: Using ep0 maxpacket: 16 [ 580.271926][ T11] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 580.288939][ T11] usb 3-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 580.299743][ T11] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.374655][ T11] usb 3-1: config 0 descriptor?? [ 580.414110][ T11] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input29 [ 580.434038][ T4972] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.635419][ T4972] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.766844][ T7890] fuse: Unknown parameter '0xffffffffffffffff' [ 581.122911][ T7890] loop6: detected capacity change from 0 to 63 [ 581.446574][ T5136] bcm5974 3-1:0.0: could not read from device [ 581.465452][ T4972] bridge_slave_1: left allmulticast mode [ 581.471608][ T4972] bridge_slave_1: left promiscuous mode [ 581.478642][ T4972] bridge0: port 2(bridge_slave_1) entered disabled state [ 581.489525][ T5136] bcm5974 3-1:0.0: could not read from device [ 581.524737][ T11] bcm5974 3-1:0.0: could not read from device [ 581.552259][ T11] input: failed to attach handler mousedev to device input29, error: -5 [ 581.572506][ T5136] bcm5974 3-1:0.0: could not read from device [ 581.601258][ T4972] bridge_slave_0: left allmulticast mode [ 581.606867][ T5136] bcm5974 3-1:0.0: could not read from device [ 581.607444][ T4972] bridge_slave_0: left promiscuous mode [ 581.625277][ T4972] bridge0: port 1(bridge_slave_0) entered disabled state [ 581.636404][ T11] usb 3-1: USB disconnect, device number 14 [ 582.156506][ T5799] Bluetooth: hci4: command tx timeout [ 582.382777][ T4972] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 582.456699][ T4972] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 582.485661][ T4972] bond0 (unregistering): Released all slaves [ 583.320257][ T4972] hsr_slave_0: left promiscuous mode [ 583.359892][ T4972] hsr_slave_1: left promiscuous mode [ 583.368870][ T4972] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 583.376921][ T4972] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 583.429117][ T4972] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 583.437689][ T4972] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 583.531593][ T4972] veth1_macvtap: left promiscuous mode [ 583.539188][ T4972] veth0_macvtap: left promiscuous mode [ 583.545169][ T4972] veth1_vlan: left promiscuous mode [ 583.550981][ T4972] veth0_vlan: left promiscuous mode [ 584.418449][ T4972] team0 (unregistering): Port device team_slave_1 removed [ 584.528451][ T4972] team0 (unregistering): Port device team_slave_0 removed [ 585.032933][ T7851] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 585.203090][ T7851] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 585.264124][ T7851] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 585.449594][ T7851] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 586.362939][ T7922] bond_slave_0: entered promiscuous mode [ 586.369016][ T7922] bond_slave_1: entered promiscuous mode [ 586.375092][ T7922] macsec1: entered promiscuous mode [ 586.380558][ T7922] bond0: entered promiscuous mode [ 586.438326][ T7922] bond0: left promiscuous mode [ 586.445663][ T7922] bond_slave_0: left promiscuous mode [ 586.451332][ T7922] bond_slave_1: left promiscuous mode [ 586.905115][ T7851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 587.088076][ T7851] 8021q: adding VLAN 0 to HW filter on device team0 [ 587.117327][ T6922] bridge0: port 1(bridge_slave_0) entered blocking state [ 587.124782][ T6922] bridge0: port 1(bridge_slave_0) entered forwarding state [ 587.315920][ T6922] bridge0: port 2(bridge_slave_1) entered blocking state [ 587.323503][ T6922] bridge0: port 2(bridge_slave_1) entered forwarding state [ 587.792678][ T7928] netlink: 16 bytes leftover after parsing attributes in process `syz.8.543'. [ 587.813434][ T7928] ip6gretap0: entered promiscuous mode [ 587.825597][ T7928] ip6gretap0: left promiscuous mode [ 588.357699][ T30] audit: type=1326 audit(1747380826.796:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7931 comm="syz.2.544" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f87539 code=0x7ffc0000 [ 588.525351][ T30] audit: type=1326 audit(1747380826.856:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7931 comm="syz.2.544" exe="/root/syz-executor" sig=0 arch=40000003 syscall=310 compat=1 ip=0xf7f87539 code=0x7ffc0000 [ 588.667876][ T30] audit: type=1326 audit(1747380827.116:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7931 comm="syz.2.544" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f87539 code=0x7ffc0000 [ 588.712978][ T30] audit: type=1326 audit(1747380827.156:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7931 comm="syz.2.544" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f87539 code=0x7ffc0000 [ 589.063111][ T7937] netlink: 4 bytes leftover after parsing attributes in process `syz.8.546'. [ 589.992447][ T7851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 590.038188][ T7944] fuse: Bad value for 'fd' [ 591.013920][ T7851] veth0_vlan: entered promiscuous mode [ 591.109407][ T7955] netlink: 8 bytes leftover after parsing attributes in process `syz.8.548'. [ 591.154602][ T7851] veth1_vlan: entered promiscuous mode [ 591.847252][ T7851] veth0_macvtap: entered promiscuous mode [ 591.917146][ T7851] veth1_macvtap: entered promiscuous mode [ 592.085858][ T7851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 592.180690][ T7851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 592.295022][ T7851] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 592.305604][ T7851] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 592.315586][ T7851] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 592.325022][ T7851] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 592.637264][ T6740] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 592.865214][ T6740] usb 9-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 592.875021][ T6740] usb 9-1: config 1 has an invalid descriptor of length 144, skipping remainder of the config [ 592.888272][ T6740] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 592.898561][ T6740] usb 9-1: config 1 has no interface number 0 [ 592.905046][ T6740] usb 9-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 592.916361][ T6740] usb 9-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 593.011964][ T6740] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 593.021614][ T6740] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 593.030183][ T6740] usb 9-1: Product: syz [ 593.034615][ T6740] usb 9-1: Manufacturer: syz [ 593.040517][ T6740] usb 9-1: SerialNumber: syz [ 593.094742][ T6740] cdc_ncm 9-1:1.1: CDC Union missing and no IAD found [ 593.102313][ T6740] cdc_ncm 9-1:1.1: bind() failure [ 593.150805][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 593.158490][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 593.341692][ T7972] netlink: 16 bytes leftover after parsing attributes in process `syz.5.555'. [ 593.371147][ T7972] ip6gretap0: entered promiscuous mode [ 593.386581][ T7972] ip6gretap0: left promiscuous mode [ 593.878925][ T7977] binder: 7975:7977 ioctl 4018620d 0 returned -22 [ 593.923578][ T7978] netlink: 4 bytes leftover after parsing attributes in process `syz.7.557'. [ 593.996325][ T5799] Bluetooth: hci1: command 0x0406 tx timeout [ 593.998009][ T7949] Bluetooth: hci1: Opcode 0x0401 failed: -110 [ 594.088479][ T6740] usb 9-1: USB disconnect, device number 18 [ 594.433140][ T7984] fuse: Bad value for 'fd' [ 595.256559][ T5854] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 595.426359][ T5854] usb 3-1: Using ep0 maxpacket: 8 [ 595.469704][ T5854] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 595.480647][ T5854] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 595.490073][ T5854] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 595.547748][ T5854] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 595.557440][ T5854] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 595.568735][ T5854] usb 3-1: Product: syz [ 595.575895][ T5854] usb 3-1: Manufacturer: syz [ 595.581071][ T5854] usb 3-1: SerialNumber: syz [ 595.826395][ T7993] netlink: 4 bytes leftover after parsing attributes in process `syz.2.562'. [ 595.889659][ T5854] usb 3-1: 0:2 : does not exist [ 595.919949][ T8006] binder: 8004:8006 ioctl 4018620d 0 returned -22 [ 595.958484][ T5854] usb 3-1: USB disconnect, device number 15 [ 596.728437][ T8018] fuse: Bad value for 'fd' [ 598.047531][ T8040] binder: 8039:8040 ioctl 4018620d 0 returned -22 [ 598.133311][ T6922] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 598.141719][ T6922] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 598.201633][ T3504] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 598.215034][ T3504] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 599.729262][ T6740] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 599.946855][ T6740] usb 8-1: Using ep0 maxpacket: 8 [ 599.984739][ T6740] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 599.995451][ T6740] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 600.004667][ T6740] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 600.086492][ T6740] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 600.096738][ T6740] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 600.105058][ T6740] usb 8-1: Product: syz [ 600.109565][ T6740] usb 8-1: Manufacturer: syz [ 600.114297][ T6740] usb 8-1: SerialNumber: syz [ 600.381972][ T8054] netlink: 4 bytes leftover after parsing attributes in process `syz.7.583'. [ 600.434070][ T6740] usb 8-1: 0:2 : does not exist [ 600.538427][ T6740] usb 8-1: USB disconnect, device number 6 [ 602.384814][ T8075] binder: 8072:8075 ioctl 4018620d 0 returned -22 [ 604.027641][ T46] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 604.216536][ T46] usb 3-1: Using ep0 maxpacket: 8 [ 604.285255][ T46] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 604.296203][ T46] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 604.305453][ T46] usb 3-1: config 1 has no interface number 1 [ 604.312054][ T46] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 604.413931][ T46] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 604.423804][ T46] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 604.432246][ T46] usb 3-1: Product: syz [ 604.436906][ T46] usb 3-1: Manufacturer: syz [ 604.444599][ T46] usb 3-1: SerialNumber: syz [ 604.799740][ T8090] netlink: 4 bytes leftover after parsing attributes in process `syz.2.598'. [ 605.043597][ T46] usb 3-1: USB disconnect, device number 16 [ 605.669400][ T8111] binder: 8110:8111 ioctl 4018620d 0 returned -22 [ 607.438621][ T8140] overlayfs: missing 'lowerdir' [ 608.017119][ T6740] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 608.217091][ T6740] usb 6-1: Using ep0 maxpacket: 8 [ 608.266292][ T6740] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 608.276993][ T6740] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 608.286467][ T6740] usb 6-1: config 1 has no interface number 1 [ 608.292837][ T6740] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 608.371971][ T6740] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 608.382409][ T6740] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 608.390829][ T6740] usb 6-1: Product: syz [ 608.395270][ T6740] usb 6-1: Manufacturer: syz [ 608.400418][ T6740] usb 6-1: SerialNumber: syz [ 608.793616][ T8142] netlink: 4 bytes leftover after parsing attributes in process `syz.5.619'. [ 609.104507][ T6740] usb 6-1: USB disconnect, device number 12 [ 610.466806][ T46] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 610.657365][ T46] usb 2-1: unable to get BOS descriptor or descriptor too short [ 610.687013][ T46] usb 2-1: not running at top speed; connect to a high speed hub [ 610.736291][ T46] usb 2-1: config 12 has an invalid interface number: 178 but max is 1 [ 610.745073][ T46] usb 2-1: config 12 has an invalid interface number: 209 but max is 1 [ 610.753918][ T46] usb 2-1: config 12 has no interface number 0 [ 610.760537][ T46] usb 2-1: config 12 has no interface number 1 [ 610.767136][ T46] usb 2-1: config 12 interface 178 has no altsetting 0 [ 610.774260][ T46] usb 2-1: config 12 interface 209 has no altsetting 0 [ 610.882598][ T46] usb 2-1: New USB device found, idVendor=1164, idProduct=0602, bcdDevice=c5.1b [ 610.892540][ T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 610.906723][ T46] usb 2-1: Product: syz [ 610.911175][ T46] usb 2-1: Manufacturer: syz [ 610.918080][ T46] usb 2-1: SerialNumber: syz [ 611.239699][ T46] pvrusb2: Hardware description: Gotview USB 2.0 DVD Deluxe [ 611.251003][ T46] usb 2-1: selecting invalid altsetting 0 [ 611.260060][ T2333] pvrusb2: Invalid write control endpoint [ 611.308882][ T46] pvrusb2: Hardware description: Gotview USB 2.0 DVD Deluxe [ 611.329926][ T46] usb 2-1: selecting invalid altsetting 0 [ 611.427798][ T46] usb 2-1: USB disconnect, device number 2 [ 611.658220][ T2333] pvrusb2: Invalid write control endpoint [ 611.664214][ T2333] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 611.674082][ T2333] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 611.683516][ T2333] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 611.693949][ T2333] pvrusb2: Device being rendered inoperable [ 611.700383][ T2333] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 611.710145][ T2333] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 611.729012][ T2333] pvrusb2: Attached sub-driver cx25840 [ 612.146786][ T2333] pvrusb2: Attempted to execute control transfer when device not ok [ 612.155105][ T2333] pvrusb2: Attempted to execute control transfer when device not ok [ 612.163825][ T2333] pvrusb2: Attempted to execute control transfer when device not ok [ 612.172403][ T2333] pvrusb2: Attempted to execute control transfer when device not ok [ 612.180753][ T2333] pvrusb2: Module ID 4 (tuner) for device Gotview USB 2.0 DVD Deluxe failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 612.615024][ T2333] TUNER: Unable to find symbol tda829x_probe() [ 612.975035][ T2333] DVB: Unable to find symbol tda9887_attach() [ 612.981808][ T2333] tuner: 1-0043: Tuner 4 found with type(s) Radio TV. [ 612.989471][ T2333] pvrusb2: Attached sub-driver tuner [ 612.994988][ T2333] pvrusb2: ***WARNING*** pvrusb2 driver initialization failed due to the failure of one or more sub-device kernel modules. [ 613.008133][ T2333] pvrusb2: You need to resolve the failing condition before this driver can function. There should be some earlier messages giving more information about the problem. [ 613.025420][ T2333] pvrusb2: Invalid write control endpoint [ 613.405038][ T2333] pvrusb2: Invalid write control endpoint [ 613.413574][ T2333] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 613.423260][ T2333] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 613.431132][ T2333] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 613.442271][ T2333] pvrusb2: Device being rendered inoperable [ 613.448588][ T2333] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 613.455910][ T2333] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 613.468404][ T2333] pvrusb2: Attached sub-driver cx25840 [ 613.489555][ T8202] netlink: 8 bytes leftover after parsing attributes in process `syz.8.641'. [ 613.784959][ T2333] pvrusb2: Attempted to execute control transfer when device not ok [ 613.793502][ T2333] pvrusb2: Attempted to execute control transfer when device not ok [ 613.801883][ T2333] pvrusb2: Attempted to execute control transfer when device not ok [ 613.810274][ T2333] pvrusb2: Attempted to execute control transfer when device not ok [ 613.818630][ T2333] pvrusb2: Module ID 4 (tuner) for device Gotview USB 2.0 DVD Deluxe failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 614.655200][ T2333] TUNER: Unable to find symbol tda829x_probe() [ 615.026410][ T2333] DVB: Unable to find symbol tda9887_attach() [ 615.033042][ T2333] tuner: 2-0043: Tuner 4 found with type(s) Radio TV. [ 615.040874][ T2333] pvrusb2: Attached sub-driver tuner [ 615.046893][ T2333] pvrusb2: ***WARNING*** pvrusb2 driver initialization failed due to the failure of one or more sub-device kernel modules. [ 615.060024][ T2333] pvrusb2: You need to resolve the failing condition before this driver can function. There should be some earlier messages giving more information about the problem. [ 615.087735][ T8220] netlink: 28 bytes leftover after parsing attributes in process `syz.2.648'. [ 615.456629][ T46] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 617.826542][ T8247] bond_slave_0: entered promiscuous mode [ 617.832604][ T8247] bond_slave_1: entered promiscuous mode [ 617.838962][ T8247] macsec1: entered promiscuous mode [ 617.844412][ T8247] bond0: entered promiscuous mode [ 617.943640][ T8247] bond0: left promiscuous mode [ 617.952120][ T8247] bond_slave_0: left promiscuous mode [ 617.958056][ T8247] bond_slave_1: left promiscuous mode [ 618.315745][ T8249] netlink: 28 bytes leftover after parsing attributes in process `syz.2.661'. [ 618.796584][ T6740] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 619.016359][ T6740] usb 6-1: Using ep0 maxpacket: 8 [ 619.034675][ T6740] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 619.045433][ T6740] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 619.055104][ T6740] usb 6-1: config 1 has no interface number 1 [ 619.061624][ T6740] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 619.074997][ T6740] usb 6-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 619.116379][ T46] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 619.228106][ T6740] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 619.237683][ T6740] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 619.246109][ T6740] usb 6-1: Product: syz [ 619.250534][ T6740] usb 6-1: Manufacturer: syz [ 619.255386][ T6740] usb 6-1: SerialNumber: syz [ 619.286559][ T46] usb 3-1: Using ep0 maxpacket: 32 [ 619.334271][ T46] usb 3-1: config 4 has an invalid interface number: 128 but max is 0 [ 619.343212][ T46] usb 3-1: config 4 has no interface number 0 [ 619.349871][ T46] usb 3-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 619.361710][ T46] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 619.374212][ T46] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 619.462082][ T46] hub 3-1:4.128: bad descriptor, ignoring hub [ 619.468669][ T46] hub 3-1:4.128: probe with driver hub failed with error -5 [ 619.483681][ T46] usbhid 3-1:4.128: couldn't find an input interrupt endpoint [ 619.555472][ T8251] netlink: 4 bytes leftover after parsing attributes in process `syz.5.662'. [ 619.689952][ T6740] usb 6-1: USB disconnect, device number 13 [ 619.813614][ T9] usb 3-1: USB disconnect, device number 17 [ 622.816543][ T46] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 623.006877][ T46] usb 3-1: Using ep0 maxpacket: 8 [ 623.045398][ T46] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 623.056432][ T46] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 623.065679][ T46] usb 3-1: config 1 has no interface number 1 [ 623.072221][ T46] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 623.091454][ T46] usb 3-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 623.253805][ T46] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 623.263431][ T46] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 623.272239][ T46] usb 3-1: Product: syz [ 623.276936][ T46] usb 3-1: Manufacturer: syz [ 623.281793][ T46] usb 3-1: SerialNumber: syz [ 623.428089][ T5854] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 623.568878][ T8289] netlink: 4 bytes leftover after parsing attributes in process `syz.2.676'. [ 623.596722][ T5854] usb 2-1: Using ep0 maxpacket: 32 [ 623.631895][ T5854] usb 2-1: config 4 has an invalid interface number: 128 but max is 0 [ 623.640652][ T5854] usb 2-1: config 4 has no interface number 0 [ 623.647178][ T5854] usb 2-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 623.657714][ T5854] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 623.667242][ T5854] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 623.736643][ T46] usb 3-1: USB disconnect, device number 18 [ 623.864980][ T5854] hub 2-1:4.128: bad descriptor, ignoring hub [ 623.872763][ T5854] hub 2-1:4.128: probe with driver hub failed with error -5 [ 623.888060][ T5854] usbhid 2-1:4.128: couldn't find an input interrupt endpoint [ 624.246983][ T5854] usb 2-1: USB disconnect, device number 4 [ 625.918029][ T5801] Bluetooth: hci2: command 0x0406 tx timeout [ 627.229410][ T6740] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 627.416807][ T6740] usb 2-1: Using ep0 maxpacket: 8 [ 627.461452][ T6740] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 627.472006][ T6740] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 627.481204][ T6740] usb 2-1: config 1 has no interface number 1 [ 627.488064][ T6740] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 627.504184][ T6740] usb 2-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 627.632079][ T6740] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 627.641817][ T6740] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 627.650193][ T6740] usb 2-1: Product: syz [ 627.654494][ T6740] usb 2-1: Manufacturer: syz [ 627.659355][ T6740] usb 2-1: SerialNumber: syz [ 627.666446][ T5854] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 627.906736][ T5854] usb 8-1: Using ep0 maxpacket: 32 [ 627.937327][ T5854] usb 8-1: config 4 has an invalid interface number: 128 but max is 0 [ 627.945843][ T5854] usb 8-1: config 4 has no interface number 0 [ 627.952388][ T5854] usb 8-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 627.959965][ T8341] netlink: 4 bytes leftover after parsing attributes in process `syz.1.694'. [ 627.962693][ T5854] usb 8-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 627.981844][ T5854] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 628.077952][ T6740] usb 2-1: USB disconnect, device number 5 [ 628.114586][ T8351] fuse: Bad value for 'fd' [ 628.161117][ T5854] hub 8-1:4.128: bad descriptor, ignoring hub [ 628.167900][ T5854] hub 8-1:4.128: probe with driver hub failed with error -5 [ 628.182939][ T5854] usbhid 8-1:4.128: couldn't find an input interrupt endpoint [ 628.547672][ T5854] usb 8-1: USB disconnect, device number 7 [ 631.988716][ T8379] fuse: Bad value for 'fd' [ 632.148375][ T5854] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 632.347186][ T5854] usb 9-1: Using ep0 maxpacket: 16 [ 632.467397][ T5854] usb 9-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 632.476941][ T5854] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 632.485216][ T5854] usb 9-1: Product: syz [ 632.489869][ T5854] usb 9-1: Manufacturer: syz [ 632.494754][ T5854] usb 9-1: SerialNumber: syz [ 632.618737][ T5854] r8152-cfgselector 9-1: Unknown version 0x0000 [ 632.625318][ T5854] r8152-cfgselector 9-1: config 0 descriptor?? [ 632.757314][ T6740] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 632.950810][ T6740] usb 8-1: Using ep0 maxpacket: 8 [ 632.981147][ T6740] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 632.992104][ T6740] usb 8-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 633.001828][ T6740] usb 8-1: config 1 has no interface number 1 [ 633.008825][ T6740] usb 8-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 633.025525][ T6740] usb 8-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 633.082104][ T11] r8152-cfgselector 9-1: USB disconnect, device number 19 [ 633.110074][ T6740] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 633.119627][ T6740] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 633.129460][ T6740] usb 8-1: Product: syz [ 633.133768][ T6740] usb 8-1: Manufacturer: syz [ 633.139191][ T6740] usb 8-1: SerialNumber: syz [ 633.306652][ T9] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 633.390446][ T8382] netlink: 4 bytes leftover after parsing attributes in process `syz.7.712'. [ 633.455954][ T6740] usb 8-1: USB disconnect, device number 8 [ 633.492159][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 633.529888][ T9] usb 6-1: config 4 has an invalid interface number: 128 but max is 0 [ 633.542484][ T9] usb 6-1: config 4 has no interface number 0 [ 633.549012][ T9] usb 6-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 633.560289][ T9] usb 6-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 633.570475][ T9] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 633.579753][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 633.722292][ T9] hub 6-1:4.128: USB hub found [ 633.951029][ T9] hub 6-1:4.128: config failed, can't read hub descriptor (err -22) [ 634.038612][ T9] usb 6-1: USB disconnect, device number 14 [ 635.481340][ T8405] fuse: Bad value for 'fd' [ 636.157186][ T5801] Bluetooth: hci0: command 0x0406 tx timeout [ 637.027723][ T5854] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 637.223183][ T5854] usb 6-1: Using ep0 maxpacket: 8 [ 637.268106][ T5854] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 637.278874][ T5854] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 637.288328][ T5854] usb 6-1: config 1 has no interface number 1 [ 637.294755][ T5854] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 637.308304][ T5854] usb 6-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 637.349429][ T5854] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 637.359339][ T5854] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 637.367946][ T5854] usb 6-1: Product: syz [ 637.372360][ T5854] usb 6-1: Manufacturer: syz [ 637.377386][ T5854] usb 6-1: SerialNumber: syz [ 637.536505][ T46] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 637.707536][ T8421] netlink: 4 bytes leftover after parsing attributes in process `syz.5.729'. [ 637.776705][ T46] usb 9-1: Using ep0 maxpacket: 32 [ 637.812694][ T46] usb 9-1: config 4 has an invalid interface number: 128 but max is 0 [ 637.821367][ T46] usb 9-1: config 4 has no interface number 0 [ 637.828155][ T46] usb 9-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 637.845356][ T46] usb 9-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 637.857800][ T46] usb 9-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 637.867379][ T46] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 637.881149][ T5854] usb 6-1: USB disconnect, device number 15 [ 637.907896][ T46] hub 9-1:4.128: USB hub found [ 638.129091][ T46] hub 9-1:4.128: config failed, can't read hub descriptor (err -22) [ 638.229275][ T46] usb 9-1: USB disconnect, device number 20 [ 639.468785][ T8432] loop9: detected capacity change from 0 to 7 [ 639.517130][ T8432] Dev loop9: unable to read RDB block 7 [ 639.523334][ T8432] loop9: unable to read partition table [ 639.567334][ T8432] loop9: partition table beyond EOD, truncated [ 639.576785][ T8432] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 641.958444][ T5801] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 641.980747][ T5801] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 641.995514][ T5801] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 642.026199][ T5801] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 642.052080][ T5801] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 643.217957][ T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 643.391390][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 643.424879][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 643.435642][ T9] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 643.444933][ T9] usb 2-1: config 1 has no interface number 1 [ 643.451308][ T9] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 643.467138][ T9] usb 2-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 643.483613][ T8445] chnl_net:caif_netlink_parms(): no params data found [ 643.629699][ T9] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 643.639684][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 643.647988][ T9] usb 2-1: Product: syz [ 643.652294][ T9] usb 2-1: Manufacturer: syz [ 643.657369][ T9] usb 2-1: SerialNumber: syz [ 643.663878][ T6740] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 643.837489][ T6740] usb 6-1: Using ep0 maxpacket: 32 [ 643.850654][ T6740] usb 6-1: config 4 has an invalid interface number: 128 but max is 0 [ 643.859775][ T6740] usb 6-1: config 4 has no interface number 0 [ 643.866428][ T6740] usb 6-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 643.879453][ T6740] usb 6-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 643.890223][ T6740] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 643.899653][ T6740] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 643.963669][ T8455] netlink: 4 bytes leftover after parsing attributes in process `syz.1.743'. [ 644.091832][ T6740] hub 6-1:4.128: USB hub found [ 644.110553][ T9] usb 2-1: USB disconnect, device number 6 [ 644.157188][ T5801] Bluetooth: hci3: command tx timeout [ 644.308292][ T6740] hub 6-1:4.128: config failed, can't read hub descriptor (err -22) [ 644.420023][ T6740] usb 6-1: USB disconnect, device number 16 [ 645.132153][ T8445] bridge0: port 1(bridge_slave_0) entered blocking state [ 645.144610][ T8445] bridge0: port 1(bridge_slave_0) entered disabled state [ 645.152509][ T8445] bridge_slave_0: entered allmulticast mode [ 645.160960][ T8445] bridge_slave_0: entered promiscuous mode [ 645.279222][ T8445] bridge0: port 2(bridge_slave_1) entered blocking state [ 645.287162][ T8445] bridge0: port 2(bridge_slave_1) entered disabled state [ 645.294758][ T8445] bridge_slave_1: entered allmulticast mode [ 645.303247][ T8445] bridge_slave_1: entered promiscuous mode [ 645.730406][ T8445] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 645.845644][ T8445] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 646.220278][ T8445] team0: Port device team_slave_0 added [ 646.236645][ T5801] Bluetooth: hci3: command tx timeout [ 646.283568][ T8445] team0: Port device team_slave_1 added [ 646.388260][ T8445] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 646.395365][ T8445] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 646.422027][ T8445] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 646.504563][ T8445] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 646.511963][ T8445] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 646.541014][ T8445] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 647.142571][ T8445] hsr_slave_0: entered promiscuous mode [ 647.156725][ T8445] hsr_slave_1: entered promiscuous mode [ 647.164394][ T8445] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 647.172216][ T8445] Cannot create hsr debugfs directory [ 648.283387][ T6740] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 648.349560][ T5801] Bluetooth: hci3: command tx timeout [ 648.391317][ T46] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 648.485949][ T6740] usb 2-1: Using ep0 maxpacket: 32 [ 648.498893][ T6740] usb 2-1: config 4 has an invalid interface number: 128 but max is 0 [ 648.507744][ T6740] usb 2-1: config 4 has no interface number 0 [ 648.514147][ T6740] usb 2-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 648.525693][ T6740] usb 2-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 648.536385][ T6740] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 648.545690][ T6740] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 648.615533][ T6740] hub 2-1:4.128: USB hub found [ 648.616341][ T46] usb 9-1: Using ep0 maxpacket: 8 [ 648.807683][ T46] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 648.818405][ T46] usb 9-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 648.827963][ T46] usb 9-1: config 1 has no interface number 1 [ 648.834330][ T46] usb 9-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 648.847659][ T46] usb 9-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 648.872259][ T6740] hub 2-1:4.128: config failed, can't read hub descriptor (err -22) [ 649.041992][ T6740] usb 2-1: USB disconnect, device number 7 [ 649.217250][ T46] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 649.227274][ T46] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 649.238246][ T46] usb 9-1: Product: syz [ 649.242667][ T46] usb 9-1: Manufacturer: syz [ 649.247677][ T46] usb 9-1: SerialNumber: syz [ 649.653499][ T8445] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 649.788138][ T8445] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 649.950018][ T8487] netlink: 4 bytes leftover after parsing attributes in process `syz.8.756'. [ 649.961824][ T8445] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 650.068658][ T8445] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 650.203359][ T46] usb 9-1: USB disconnect, device number 21 [ 650.397360][ T5801] Bluetooth: hci3: command tx timeout [ 651.371480][ T35] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.592259][ T35] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.709999][ T35] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.810462][ T35] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.864755][ T8445] 8021q: adding VLAN 0 to HW filter on device bond0 [ 652.013972][ T8445] 8021q: adding VLAN 0 to HW filter on device team0 [ 652.016759][ T8513] fuse: Bad value for 'group_id' [ 652.030497][ T8513] fuse: Bad value for 'group_id' [ 652.132907][ T1146] bridge0: port 1(bridge_slave_0) entered blocking state [ 652.140705][ T1146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 652.245069][ T35] bridge_slave_1: left allmulticast mode [ 652.252497][ T35] bridge_slave_1: left promiscuous mode [ 652.259308][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 652.417143][ T35] bridge_slave_0: left allmulticast mode [ 652.423086][ T35] bridge_slave_0: left promiscuous mode [ 652.430004][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 652.826510][ T46] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 653.019066][ T46] usb 6-1: Using ep0 maxpacket: 32 [ 653.052064][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 653.074146][ T46] usb 6-1: config 4 has an invalid interface number: 128 but max is 0 [ 653.082883][ T46] usb 6-1: config 4 has no interface number 0 [ 653.095647][ T46] usb 6-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 653.109110][ T46] usb 6-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 653.119928][ T46] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 653.129533][ T46] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 653.142663][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 653.188279][ T35] bond0 (unregistering): Released all slaves [ 653.280731][ T1146] bridge0: port 2(bridge_slave_1) entered blocking state [ 653.288449][ T1146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 653.349803][ T46] hub 6-1:4.128: USB hub found [ 653.674835][ T46] hub 6-1:4.128: config failed, can't read hub descriptor (err -22) [ 653.783059][ T46] usb 6-1: USB disconnect, device number 17 [ 653.927182][ T8530] fuse: Bad value for 'group_id' [ 653.932404][ T8530] fuse: Bad value for 'group_id' [ 654.004411][ T5854] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 654.094176][ T35] hsr_slave_0: left promiscuous mode [ 654.120032][ T35] hsr_slave_1: left promiscuous mode [ 654.128265][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 654.137011][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 654.179250][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 654.187289][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 654.244820][ T5854] usb 8-1: Using ep0 maxpacket: 8 [ 654.262541][ T5854] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 654.273194][ T5854] usb 8-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 654.282741][ T5854] usb 8-1: config 1 has no interface number 1 [ 654.289325][ T5854] usb 8-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 654.302708][ T5854] usb 8-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 654.347815][ T35] veth1_macvtap: left promiscuous mode [ 654.353627][ T35] veth0_macvtap: left promiscuous mode [ 654.359762][ T35] veth1_vlan: left promiscuous mode [ 654.365381][ T35] veth0_vlan: left promiscuous mode [ 654.592745][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 654.599804][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 654.841090][ T5854] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 654.851804][ T5854] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 654.862353][ T5854] usb 8-1: Product: syz [ 654.868639][ T5854] usb 8-1: Manufacturer: syz [ 654.874327][ T5854] usb 8-1: SerialNumber: syz [ 655.016467][ T6740] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 655.158427][ T8528] netlink: 4 bytes leftover after parsing attributes in process `syz.7.774'. [ 655.263139][ T6740] usb 9-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 655.275513][ T6740] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 655.285906][ T35] team0 (unregistering): Port device team_slave_1 removed [ 655.331411][ T6740] usb 9-1: config 0 descriptor?? [ 655.364488][ T5854] usb 8-1: USB disconnect, device number 9 [ 655.367977][ T6740] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 655.375135][ T35] team0 (unregistering): Port device team_slave_0 removed [ 656.425190][ T8544] fuse: Bad value for 'group_id' [ 656.430692][ T8544] fuse: Bad value for 'group_id' [ 656.553770][ T35] IPVS: stop unused estimator thread 0... [ 657.175021][ T8445] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 657.254681][ T6740] gspca_stv06xx: I2C: Read error writing address: -71 [ 657.280794][ T6740] usb 9-1: USB disconnect, device number 22 [ 657.792684][ T8445] veth0_vlan: entered promiscuous mode [ 657.915292][ T8445] veth1_vlan: entered promiscuous mode [ 657.939611][ T8568] fuse: Bad value for 'group_id' [ 657.944959][ T8568] fuse: Bad value for 'group_id' [ 658.284987][ T8445] veth0_macvtap: entered promiscuous mode [ 658.309920][ T8445] veth1_macvtap: entered promiscuous mode [ 658.396720][ T46] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 658.469544][ T8445] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 658.544116][ T8445] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 658.586460][ T46] usb 8-1: Using ep0 maxpacket: 32 [ 658.628859][ T8445] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.635254][ T46] usb 8-1: config 4 has an invalid interface number: 128 but max is 0 [ 658.639123][ T8445] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.646382][ T46] usb 8-1: config 4 has no interface number 0 [ 658.655132][ T8445] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.661534][ T46] usb 8-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 658.670311][ T8445] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.681475][ T46] usb 8-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 658.701167][ T46] usb 8-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 658.710749][ T46] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 658.880291][ T46] hub 8-1:4.128: USB hub found [ 659.093687][ T46] hub 8-1:4.128: config failed, can't read hub descriptor (err -22) [ 659.123895][ T5854] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 659.192316][ T46] usb 8-1: USB disconnect, device number 10 [ 659.308562][ T5854] usb 6-1: Using ep0 maxpacket: 8 [ 659.342168][ T5854] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 659.352956][ T5854] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 659.362480][ T5854] usb 6-1: config 1 has no interface number 1 [ 659.369405][ T5854] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 659.382893][ T5854] usb 6-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 659.525308][ T5854] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 659.534940][ T5854] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 659.552362][ T5854] usb 6-1: Product: syz [ 659.559697][ T5854] usb 6-1: Manufacturer: syz [ 659.564569][ T5854] usb 6-1: SerialNumber: syz [ 659.859210][ T8577] netlink: 4 bytes leftover after parsing attributes in process `syz.5.790'. [ 660.056495][ T5854] usb 6-1: USB disconnect, device number 18 [ 660.058865][ T8589] fuse: Bad value for 'group_id' [ 660.067982][ T8589] fuse: Bad value for 'group_id' [ 660.467668][ T8595] netlink: 48 bytes leftover after parsing attributes in process `syz.1.796'. [ 660.840988][ T8602] fuse: Bad value for 'group_id' [ 660.846673][ T8602] fuse: Bad value for 'group_id' [ 662.176521][ T5854] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 663.038904][ T5854] usb 6-1: Using ep0 maxpacket: 32 [ 663.065582][ T5854] usb 6-1: config 4 has an invalid interface number: 128 but max is 0 [ 663.074428][ T5854] usb 6-1: config 4 has no interface number 0 [ 663.081015][ T5854] usb 6-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 663.092561][ T5854] usb 6-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 663.103030][ T5854] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 663.112536][ T5854] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 663.412102][ T5854] hub 6-1:4.128: USB hub found [ 663.899301][ T5854] hub 6-1:4.128: config failed, can't read hub descriptor (err -22) [ 664.078420][ T5854] usb 6-1: USB disconnect, device number 19 [ 664.099521][ T46] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 664.297846][ T46] usb 9-1: Using ep0 maxpacket: 8 [ 664.342401][ T46] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 664.358618][ T46] usb 9-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 664.369692][ T46] usb 9-1: config 1 has no interface number 1 [ 664.376170][ T46] usb 9-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 664.389614][ T46] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 664.746248][ T46] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 664.755826][ T46] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 664.769241][ T46] usb 9-1: Product: syz [ 664.773656][ T46] usb 9-1: Manufacturer: syz [ 664.780285][ T46] usb 9-1: SerialNumber: syz [ 665.319693][ T8635] netlink: 4 bytes leftover after parsing attributes in process `syz.8.808'. [ 665.478256][ T46] usb 9-1: USB disconnect, device number 23 [ 666.111461][ T8650] fuse: Unknown parameter '0xffffffffffffffff' [ 666.146814][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 666.161434][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 666.194746][ T8650] loop6: detected capacity change from 0 to 63 [ 666.352903][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 666.361378][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 668.320212][ T46] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 668.526658][ T46] usb 2-1: Using ep0 maxpacket: 8 [ 668.566613][ T46] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 668.577302][ T46] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 668.586791][ T46] usb 2-1: config 1 has no interface number 1 [ 668.593152][ T46] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 668.606563][ T46] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 668.713440][ T46] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 668.723084][ T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 668.731884][ T46] usb 2-1: Product: syz [ 668.736432][ T46] usb 2-1: Manufacturer: syz [ 668.741289][ T46] usb 2-1: SerialNumber: syz [ 669.107373][ T8679] netlink: 4 bytes leftover after parsing attributes in process `syz.1.824'. [ 669.232613][ T46] usb 2-1: USB disconnect, device number 8 [ 669.303189][ T8691] fuse: Unknown parameter '0xffffffffffffffff' [ 669.327299][ T8691] loop6: detected capacity change from 0 to 63 [ 672.226618][ T9] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 672.429593][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 672.459891][ T9] usb 6-1: config 0 has an invalid interface number: 202 but max is 1 [ 672.468714][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 672.479921][ T9] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 672.489870][ T9] usb 6-1: config 0 has no interface number 0 [ 672.496562][ T9] usb 6-1: too many endpoints for config 0 interface 202 altsetting 87: 182, using maximum allowed: 30 [ 672.508260][ T9] usb 6-1: config 0 interface 202 altsetting 87 bulk endpoint 0x2 has invalid maxpacket 52 [ 672.518739][ T9] usb 6-1: config 0 interface 202 altsetting 87 has 1 endpoint descriptor, different from the interface descriptor's value: 182 [ 672.532409][ T9] usb 6-1: config 0 interface 202 has no altsetting 0 [ 672.581900][ T9] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.2b [ 672.591767][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 672.600178][ T9] usb 6-1: Product: syz [ 672.604605][ T9] usb 6-1: Manufacturer: syz [ 672.609534][ T9] usb 6-1: SerialNumber: syz [ 672.638719][ T9] usb 6-1: config 0 descriptor?? [ 672.649998][ T8725] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 672.686334][ T6740] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 672.743446][ T9] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 672.866421][ T6740] usb 2-1: Using ep0 maxpacket: 8 [ 672.924084][ T6740] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 672.935285][ T6740] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 672.944723][ T6740] usb 2-1: config 1 has no interface number 1 [ 672.951427][ T6740] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 672.966444][ T6740] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 673.031244][ T9] usb 6-1: USB disconnect, device number 20 [ 673.047880][ T4972] usb 6-1: Failed to submit usb control message: -71 [ 673.055127][ T4972] usb 6-1: unable to send the bmi data to the device: -71 [ 673.064829][ T4972] usb 6-1: unable to get target info from device [ 673.072316][ T4972] usb 6-1: could not get target info (-71) [ 673.078548][ T4972] usb 6-1: could not probe fw (-71) [ 673.125888][ T6740] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 673.135670][ T6740] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 673.144064][ T6740] usb 2-1: Product: syz [ 673.148717][ T6740] usb 2-1: Manufacturer: syz [ 673.153557][ T6740] usb 2-1: SerialNumber: syz [ 673.473736][ T8729] netlink: 4 bytes leftover after parsing attributes in process `syz.1.844'. [ 673.563026][ T6740] usb 2-1: USB disconnect, device number 9 [ 674.570085][ T8754] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 676.996604][ T46] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 677.195597][ T46] usb 6-1: Using ep0 maxpacket: 8 [ 677.219726][ T46] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 677.230562][ T46] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 677.240151][ T46] usb 6-1: config 1 has no interface number 1 [ 677.246643][ T46] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 677.266597][ T46] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 677.282097][ T46] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 677.510528][ T46] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 677.520176][ T46] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 677.528549][ T46] usb 6-1: Product: syz [ 677.532960][ T46] usb 6-1: Manufacturer: syz [ 677.537979][ T46] usb 6-1: SerialNumber: syz [ 677.877719][ T8786] netlink: 4 bytes leftover after parsing attributes in process `syz.5.865'. [ 678.044368][ T46] usb 6-1: USB disconnect, device number 21 [ 679.414014][ T46] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 679.626644][ T46] usb 9-1: Using ep0 maxpacket: 32 [ 679.656487][ T46] usb 9-1: config 4 has an invalid interface number: 128 but max is 0 [ 679.665108][ T46] usb 9-1: config 4 has no interface number 0 [ 679.671689][ T46] usb 9-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 679.683583][ T46] usb 9-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 679.694053][ T46] usb 9-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 679.703564][ T46] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 679.855264][ T46] hub 9-1:4.128: USB hub found [ 680.268797][ T46] hub 9-1:4.128: config failed, can't read hub descriptor (err -22) [ 680.338365][ T46] usb 9-1: USB disconnect, device number 24 [ 680.921949][ T46] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 681.112344][ T46] usb 2-1: Using ep0 maxpacket: 8 [ 681.139422][ T46] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 681.157997][ T46] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 681.170163][ T46] usb 2-1: config 1 has no interface number 1 [ 681.176716][ T46] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 681.190123][ T46] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 681.201560][ T46] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 681.418949][ T46] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 681.428525][ T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 681.437076][ T46] usb 2-1: Product: syz [ 681.441509][ T46] usb 2-1: Manufacturer: syz [ 681.446520][ T46] usb 2-1: SerialNumber: syz [ 681.492825][ T8838] ======================================================= [ 681.492825][ T8838] WARNING: The mand mount option has been deprecated and [ 681.492825][ T8838] and is ignored by this kernel. Remove the mand [ 681.492825][ T8838] option from the mount to silence this warning. [ 681.492825][ T8838] ======================================================= [ 681.821547][ T8830] netlink: 4 bytes leftover after parsing attributes in process `syz.1.883'. [ 681.980068][ T46] usb 2-1: USB disconnect, device number 10 [ 684.806577][ T6740] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 684.996465][ T6740] usb 8-1: Using ep0 maxpacket: 32 [ 685.051632][ T6740] usb 8-1: config 4 has an invalid interface number: 128 but max is 0 [ 685.060562][ T6740] usb 8-1: config 4 has no interface number 0 [ 685.067254][ T6740] usb 8-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 685.078857][ T6740] usb 8-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 685.089746][ T6740] usb 8-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 685.099791][ T6740] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 685.353316][ T6740] hub 8-1:4.128: USB hub found [ 685.735153][ T6740] hub 8-1:4.128: config failed, can't read hub descriptor (err -22) [ 685.844040][ T6740] usb 8-1: USB disconnect, device number 11 [ 686.414600][ T8872] team_slave_0: entered promiscuous mode [ 686.420600][ T8872] team_slave_1: entered promiscuous mode [ 686.427128][ T8872] macsec1: entered promiscuous mode [ 686.432463][ T8872] team0: entered promiscuous mode [ 686.457115][ T8872] team0: left promiscuous mode [ 686.465404][ T8872] team_slave_0: left promiscuous mode [ 686.471280][ T8872] team_slave_1: left promiscuous mode [ 686.954851][ T8876] binder: 8875:8876 ioctl 4018620d 0 returned -22 [ 687.146921][ T6740] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 687.336586][ T6740] usb 8-1: Using ep0 maxpacket: 8 [ 687.377488][ T6740] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 687.388005][ T6740] usb 8-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 687.399195][ T6740] usb 8-1: config 1 has no interface number 1 [ 687.405950][ T6740] usb 8-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 687.419337][ T6740] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 687.430512][ T6740] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 687.632073][ T6740] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 687.641727][ T6740] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 687.649950][ T6740] usb 8-1: Product: syz [ 687.654232][ T6740] usb 8-1: Manufacturer: syz [ 687.659051][ T6740] usb 8-1: SerialNumber: syz [ 687.974792][ T8874] netlink: 4 bytes leftover after parsing attributes in process `syz.7.900'. [ 688.156672][ T6740] usb 8-1: USB disconnect, device number 12 [ 689.319322][ T46] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 689.536766][ T46] usb 2-1: Using ep0 maxpacket: 32 [ 689.653319][ T46] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 689.661689][ T46] usb 2-1: config 0 has no interface number 0 [ 689.767824][ T46] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 689.777472][ T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 689.785610][ T46] usb 2-1: Product: syz [ 689.791418][ T46] usb 2-1: Manufacturer: syz [ 689.796322][ T46] usb 2-1: SerialNumber: syz [ 689.880036][ T46] usb 2-1: config 0 descriptor?? [ 689.919087][ T46] smsc95xx v2.0.0 [ 690.387135][ T8896] fuse: Bad value for 'fd' [ 691.027795][ T46] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000034: -71 [ 691.039122][ T46] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 691.143548][ T46] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 691.155638][ T46] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 691.230053][ T46] usb 2-1: USB disconnect, device number 11 [ 692.093667][ T8903] binder: 8902:8903 ioctl 4018620d 0 returned -22 [ 692.967090][ T8909] fuse: Unknown parameter 'grou00000000000000000000' [ 693.406914][ T6740] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 693.596743][ T6740] usb 8-1: Using ep0 maxpacket: 8 [ 693.634992][ T6740] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 693.647615][ T6740] usb 8-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 693.657852][ T6740] usb 8-1: config 1 has no interface number 1 [ 693.664524][ T6740] usb 8-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 693.677983][ T6740] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 693.689395][ T6740] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 693.897149][ T6740] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 693.906702][ T6740] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 693.915276][ T6740] usb 8-1: Product: syz [ 693.919882][ T6740] usb 8-1: Manufacturer: syz [ 693.924721][ T6740] usb 8-1: SerialNumber: syz [ 694.035731][ T8920] fuse: Bad value for 'fd' [ 694.215665][ T8914] netlink: 4 bytes leftover after parsing attributes in process `syz.7.916'. [ 694.298270][ T6740] usb 8-1: USB disconnect, device number 13 [ 697.317295][ T8938] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 697.342924][ T8938] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 697.352770][ T8938] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 697.375179][ T8938] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 697.422358][ T8938] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 697.689664][ T5801] Bluetooth: hci4: command 0x0406 tx timeout [ 698.681656][ T8946] fuse: Unknown parameter 'group_i00000000000000000000' [ 699.038929][ T8936] chnl_net:caif_netlink_parms(): no params data found [ 699.519597][ T5799] Bluetooth: hci5: command tx timeout [ 700.068360][ T8936] bridge0: port 1(bridge_slave_0) entered blocking state [ 700.075776][ T8936] bridge0: port 1(bridge_slave_0) entered disabled state [ 700.083653][ T8936] bridge_slave_0: entered allmulticast mode [ 700.098635][ T8936] bridge_slave_0: entered promiscuous mode [ 700.123603][ T8936] bridge0: port 2(bridge_slave_1) entered blocking state [ 700.131552][ T8936] bridge0: port 2(bridge_slave_1) entered disabled state [ 700.139221][ T8936] bridge_slave_1: entered allmulticast mode [ 700.147939][ T8936] bridge_slave_1: entered promiscuous mode [ 700.270652][ T8936] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 700.321250][ T8936] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 700.433515][ T8936] team0: Port device team_slave_0 added [ 700.476623][ T8936] team0: Port device team_slave_1 added [ 700.586524][ T8936] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 700.593780][ T8936] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 700.621375][ T8936] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 700.653826][ T8936] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 700.661902][ T8936] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 700.688656][ T8936] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 701.451982][ T8936] hsr_slave_0: entered promiscuous mode [ 701.462562][ T8936] hsr_slave_1: entered promiscuous mode [ 701.471757][ T8936] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 701.479794][ T8936] Cannot create hsr debugfs directory [ 701.596715][ T5799] Bluetooth: hci5: command tx timeout [ 701.981070][ T6740] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 702.146924][ T6740] usb 6-1: Using ep0 maxpacket: 8 [ 702.160818][ T6740] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 702.171322][ T6740] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 702.180661][ T6740] usb 6-1: config 1 has no interface number 1 [ 702.186997][ T6740] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 702.200457][ T6740] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 702.211681][ T6740] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 702.291424][ T8964] fuse: Bad value for 'fd' [ 702.442378][ T6740] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 702.456842][ T6740] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 702.465097][ T6740] usb 6-1: Product: syz [ 702.469984][ T6740] usb 6-1: Manufacturer: syz [ 702.474713][ T6740] usb 6-1: SerialNumber: syz [ 702.880991][ T8959] netlink: 4 bytes leftover after parsing attributes in process `syz.5.933'. [ 703.038170][ T6740] usb 6-1: USB disconnect, device number 22 [ 703.325018][ T8936] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 703.348093][ T8936] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 703.374590][ T8936] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 703.443951][ T8936] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 703.678302][ T5799] Bluetooth: hci5: command tx timeout [ 704.898412][ T8976] fuse: Unknown parameter 'group_i00000000000000000000' [ 704.993964][ T8977] netlink: 16 bytes leftover after parsing attributes in process `syz.7.940'. [ 705.019789][ T8977] ip6gretap0: entered promiscuous mode [ 705.031847][ T8977] ip6gretap0: left promiscuous mode [ 705.264082][ T8936] 8021q: adding VLAN 0 to HW filter on device bond0 [ 705.379818][ T8936] 8021q: adding VLAN 0 to HW filter on device team0 [ 705.477785][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 705.485158][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 705.617160][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 705.624800][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 705.768039][ T5799] Bluetooth: hci5: command tx timeout [ 708.021131][ T8936] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 708.510719][ T8994] netlink: 4 bytes leftover after parsing attributes in process `syz.5.945'. [ 709.098019][ T9] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 709.333576][ T9] usb 8-1: Using ep0 maxpacket: 8 [ 709.398602][ T9] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 709.411766][ T9] usb 8-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 709.424527][ T9] usb 8-1: config 1 has no interface number 1 [ 709.431361][ T9] usb 8-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 709.445343][ T9] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 709.456976][ T9] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 709.633877][ T9] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 709.643620][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 709.651841][ T9] usb 8-1: Product: syz [ 709.656335][ T9] usb 8-1: Manufacturer: syz [ 709.661124][ T9] usb 8-1: SerialNumber: syz [ 709.844592][ T6922] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 709.974733][ T8997] netlink: 4 bytes leftover after parsing attributes in process `syz.7.946'. [ 710.119201][ T6922] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 710.169944][ T9] usb 8-1: USB disconnect, device number 14 [ 710.335678][ T6922] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 710.528715][ T6922] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.130696][ T6922] bridge_slave_1: left allmulticast mode [ 711.136842][ T6922] bridge_slave_1: left promiscuous mode [ 711.143037][ T6922] bridge0: port 2(bridge_slave_1) entered disabled state [ 711.207725][ T9011] fuse: Unknown parameter 'group_i00000000000000000000' [ 711.249511][ T6922] bridge_slave_0: left allmulticast mode [ 711.258162][ T6922] bridge_slave_0: left promiscuous mode [ 711.264433][ T6922] bridge0: port 1(bridge_slave_0) entered disabled state [ 711.708575][ T6922] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 711.758250][ T9013] netlink: 16 bytes leftover after parsing attributes in process `syz.5.951'. [ 711.779884][ T6922] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 711.836585][ T6922] bond0 (unregistering): Released all slaves [ 711.851707][ T5801] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 711.924304][ T5801] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 711.935383][ T5801] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 711.951764][ T5801] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 711.964879][ T5801] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 712.030487][ T9013] ip6gretap0: entered promiscuous mode [ 712.042170][ T9013] ip6gretap0: left promiscuous mode [ 712.150195][ T8936] veth0_vlan: entered promiscuous mode [ 712.574684][ T8936] veth1_vlan: entered promiscuous mode [ 712.865545][ T6922] hsr_slave_0: left promiscuous mode [ 712.879912][ T6922] hsr_slave_1: left promiscuous mode [ 712.889182][ T6922] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 712.900821][ T6922] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 712.911841][ T6922] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 712.920148][ T6922] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 712.947396][ T6922] veth1_macvtap: left promiscuous mode [ 712.953181][ T6922] veth0_macvtap: left promiscuous mode [ 712.959199][ T6922] veth1_vlan: left promiscuous mode [ 712.964634][ T6922] veth0_vlan: left promiscuous mode [ 713.682904][ T6922] team0 (unregistering): Port device team_slave_1 removed [ 713.759359][ T9] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 713.773085][ T6922] team0 (unregistering): Port device team_slave_0 removed [ 714.117942][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 714.133105][ T9] usb 5-1: config 0 has an invalid interface number: 202 but max is 1 [ 714.141980][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 714.152492][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 714.161935][ T9] usb 5-1: config 0 has no interface number 0 [ 714.168307][ T9] usb 5-1: too many endpoints for config 0 interface 202 altsetting 87: 182, using maximum allowed: 30 [ 714.179711][ T9] usb 5-1: config 0 interface 202 altsetting 87 endpoint 0x2 has invalid wMaxPacketSize 0 [ 714.186641][ T5801] Bluetooth: hci1: command tx timeout [ 714.189854][ T9] usb 5-1: config 0 interface 202 altsetting 87 has 1 endpoint descriptor, different from the interface descriptor's value: 182 [ 714.209028][ T9] usb 5-1: config 0 interface 202 has no altsetting 0 [ 714.498867][ T9] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.2b [ 714.508478][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 714.516838][ T9] usb 5-1: Product: syz [ 714.521118][ T9] usb 5-1: Manufacturer: syz [ 714.525838][ T9] usb 5-1: SerialNumber: syz [ 714.598470][ T8936] veth0_macvtap: entered promiscuous mode [ 714.632861][ T9] usb 5-1: config 0 descriptor?? [ 714.707886][ T9] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 714.811163][ T8936] veth1_macvtap: entered promiscuous mode [ 714.970506][ T3504] usb 5-1: Failed to submit usb control message: -71 [ 714.977927][ T3504] usb 5-1: unable to send the bmi data to the device: -71 [ 714.985285][ T3504] usb 5-1: unable to get target info from device [ 714.991963][ T3504] usb 5-1: could not get target info (-71) [ 714.998023][ T3504] usb 5-1: could not probe fw (-71) [ 715.015049][ T46] usb 5-1: USB disconnect, device number 24 [ 715.092281][ T8936] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 715.208677][ T6922] IPVS: stop unused estimator thread 0... [ 715.256739][ T8936] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 715.354401][ T8936] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 715.365457][ T8936] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 715.375072][ T8936] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 715.384369][ T8936] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 715.900891][ T9016] chnl_net:caif_netlink_parms(): no params data found [ 716.035530][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 716.042409][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 716.238607][ T5801] Bluetooth: hci1: command tx timeout [ 716.272889][ T9046] fuse: Unknown parameter 'group_id00000000000000000000' [ 716.348421][ T6740] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 716.560006][ T6740] usb 6-1: Using ep0 maxpacket: 8 [ 716.632902][ T6740] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 716.645194][ T6740] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 716.655148][ T6740] usb 6-1: config 1 has no interface number 1 [ 716.662071][ T6740] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 716.675523][ T6740] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 716.688383][ T6740] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 716.910337][ T6740] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 716.920088][ T6740] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 716.928973][ T6740] usb 6-1: Product: syz [ 716.933281][ T6740] usb 6-1: Manufacturer: syz [ 716.938109][ T6740] usb 6-1: SerialNumber: syz [ 717.309754][ T9055] netlink: 16 bytes leftover after parsing attributes in process `syz.4.963'. [ 717.333566][ T9055] ip6gretap0: entered promiscuous mode [ 717.346913][ T9055] ip6gretap0: left promiscuous mode [ 717.382678][ T9042] netlink: 4 bytes leftover after parsing attributes in process `syz.5.960'. [ 717.593612][ T6740] usb 6-1: USB disconnect, device number 23 [ 717.932833][ T9016] bridge0: port 1(bridge_slave_0) entered blocking state [ 717.940462][ T9016] bridge0: port 1(bridge_slave_0) entered disabled state [ 717.948089][ T9016] bridge_slave_0: entered allmulticast mode [ 717.956960][ T9016] bridge_slave_0: entered promiscuous mode [ 718.069868][ T9016] bridge0: port 2(bridge_slave_1) entered blocking state [ 718.077696][ T9016] bridge0: port 2(bridge_slave_1) entered disabled state [ 718.085269][ T9016] bridge_slave_1: entered allmulticast mode [ 718.094005][ T9016] bridge_slave_1: entered promiscuous mode [ 718.325577][ T5801] Bluetooth: hci1: command tx timeout [ 718.484373][ T9016] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 718.607498][ T9016] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 719.331197][ T9016] team0: Port device team_slave_0 added [ 719.644545][ T9016] team0: Port device team_slave_1 added [ 720.100202][ T9016] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 720.107720][ T9016] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 720.134346][ T9016] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 720.369836][ T9016] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 720.377301][ T9016] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 720.404800][ T9016] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 720.430676][ T5801] Bluetooth: hci1: command tx timeout [ 720.580514][ T6740] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 720.671614][ T9079] lo speed is unknown, defaulting to 1000 [ 720.691991][ T9079] lo speed is unknown, defaulting to 1000 [ 720.699405][ T9079] lo speed is unknown, defaulting to 1000 [ 721.220718][ T9079] infiniband sz1: set active [ 721.225695][ T9079] infiniband sz1: added lo [ 721.232081][ T46] lo speed is unknown, defaulting to 1000 [ 721.397477][ T9079] RDS/IB: sz1: added [ 721.401775][ T9079] smc: adding ib device sz1 with port count 1 [ 721.410376][ T9079] smc: ib device sz1 port 1 has pnetid [ 721.418622][ T9079] lo speed is unknown, defaulting to 1000 [ 722.558808][ T9079] lo speed is unknown, defaulting to 1000 [ 722.629151][ T6740] usb 5-1: Using ep0 maxpacket: 32 [ 722.762418][ T6740] usb 5-1: config 0 has an invalid interface number: 202 but max is 1 [ 722.772567][ T6740] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 722.784139][ T6740] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 722.793616][ T6740] usb 5-1: config 0 has no interface number 0 [ 722.800131][ T6740] usb 5-1: too many endpoints for config 0 interface 202 altsetting 87: 182, using maximum allowed: 30 [ 722.811651][ T6740] usb 5-1: config 0 interface 202 altsetting 87 endpoint 0x2 has invalid wMaxPacketSize 0 [ 722.821972][ T6740] usb 5-1: config 0 interface 202 altsetting 87 has 1 endpoint descriptor, different from the interface descriptor's value: 182 [ 722.836546][ T6740] usb 5-1: config 0 interface 202 has no altsetting 0 [ 723.305505][ T9079] lo speed is unknown, defaulting to 1000 [ 723.457044][ T9016] hsr_slave_0: entered promiscuous mode [ 723.632354][ T9016] hsr_slave_1: entered promiscuous mode [ 723.677789][ T6740] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.2b [ 723.687528][ T6740] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 723.743929][ T9016] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 723.755333][ T9016] Cannot create hsr debugfs directory [ 723.863678][ T6740] usb 5-1: config 0 descriptor?? [ 723.955303][ T6740] usb 5-1: can't set config #0, error -71 [ 724.001516][ T6740] usb 5-1: USB disconnect, device number 25 [ 724.133234][ T9079] lo speed is unknown, defaulting to 1000 [ 724.482990][ T9092] fuse: Unknown parameter 'group_id00000000000000000000' [ 724.796248][ T46] lo speed is unknown, defaulting to 1000 [ 724.802470][ T9079] lo speed is unknown, defaulting to 1000 [ 725.128497][ T9094] netlink: 16 bytes leftover after parsing attributes in process `syz.5.972'. [ 725.276530][ T9094] ip6gretap0: entered promiscuous mode [ 725.293368][ T9094] ip6gretap0: left promiscuous mode [ 725.617959][ T9079] lo speed is unknown, defaulting to 1000 [ 727.054846][ T9016] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 727.187611][ T9016] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 727.298558][ T9016] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 727.370474][ T9016] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 728.559360][ T9016] 8021q: adding VLAN 0 to HW filter on device bond0 [ 728.770030][ T9016] 8021q: adding VLAN 0 to HW filter on device team0 [ 728.884255][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 728.891981][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 729.001333][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 729.009006][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 729.606557][ T2983] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 729.614828][ T2983] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 729.912336][ T3504] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 729.921215][ T3504] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 730.828044][ T5854] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 731.049346][ T5854] usb 8-1: Using ep0 maxpacket: 32 [ 731.125870][ T5854] usb 8-1: config 0 has an invalid interface number: 202 but max is 1 [ 731.134595][ T5854] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 731.145120][ T5854] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 731.154460][ T5854] usb 8-1: config 0 has no interface number 0 [ 731.161156][ T5854] usb 8-1: too many endpoints for config 0 interface 202 altsetting 87: 182, using maximum allowed: 30 [ 731.172659][ T5854] usb 8-1: config 0 interface 202 altsetting 87 endpoint 0x2 has invalid wMaxPacketSize 0 [ 731.182991][ T5854] usb 8-1: config 0 interface 202 altsetting 87 has 1 endpoint descriptor, different from the interface descriptor's value: 182 [ 731.196755][ T5854] usb 8-1: config 0 interface 202 has no altsetting 0 [ 731.417710][ T5854] usb 8-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.2b [ 731.433959][ T5854] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 731.445279][ T5854] usb 8-1: Product: syz [ 731.449845][ T5854] usb 8-1: Manufacturer: syz [ 731.454697][ T5854] usb 8-1: SerialNumber: syz [ 731.523059][ T5854] usb 8-1: config 0 descriptor?? [ 731.648211][ T5854] usb 8-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 731.794045][ T3852] usb 8-1: Failed to submit usb control message: -71 [ 731.801384][ T3852] usb 8-1: unable to send the bmi data to the device: -71 [ 731.808514][ T5854] usb 8-1: USB disconnect, device number 15 [ 731.809343][ T3852] usb 8-1: unable to get target info from device [ 731.821757][ T3852] usb 8-1: could not get target info (-71) [ 731.827953][ T3852] usb 8-1: could not probe fw (-71) [ 731.942443][ T9016] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 732.214488][ T9135] fuse: Unknown parameter 'group_id00000000000000000000' [ 732.642075][ T9016] veth0_vlan: entered promiscuous mode [ 732.762133][ T9016] veth1_vlan: entered promiscuous mode [ 732.878536][ T9137] netlink: 16 bytes leftover after parsing attributes in process `syz.5.982'. [ 732.898763][ T9137] ip6gretap0: entered promiscuous mode [ 732.910421][ T9137] ip6gretap0: left promiscuous mode [ 733.740290][ T9016] veth0_macvtap: entered promiscuous mode [ 733.844275][ T9016] veth1_macvtap: entered promiscuous mode [ 734.135418][ T9016] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 734.239601][ T9016] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 734.358920][ T9152] binder: 9151:9152 ioctl 4018620d 0 returned -22 [ 734.361378][ T9016] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 734.374824][ T9016] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 734.384000][ T9016] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 734.393192][ T9016] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 734.475857][ T6740] usb 6-1: new low-speed USB device number 24 using dummy_hcd [ 734.708583][ T6740] usb 6-1: config 0 has no interfaces? [ 734.714400][ T6740] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 734.724303][ T6740] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 734.849618][ T6740] usb 6-1: config 0 descriptor?? [ 735.743754][ T6740] usb 6-1: USB disconnect, device number 24 [ 736.413161][ T9169] fuse: Unknown parameter '0xffffffffffffffff' [ 736.553914][ T9169] loop6: detected capacity change from 0 to 63 [ 736.593102][ T9173] fuse: Bad value for 'user_id' [ 736.599045][ T9173] fuse: Bad value for 'user_id' [ 736.661205][ T9169] buffer_io_error: 2 callbacks suppressed [ 736.661283][ T9169] Buffer I/O error on dev loop6, logical block 0, async page read [ 736.675437][ T9169] Buffer I/O error on dev loop6, logical block 1, async page read [ 736.683687][ T9169] Buffer I/O error on dev loop6, logical block 2, async page read [ 736.691952][ T9169] Buffer I/O error on dev loop6, logical block 3, async page read [ 736.817714][ T9169] Buffer I/O error on dev loop6, logical block 0, async page read [ 736.826259][ T9169] Buffer I/O error on dev loop6, logical block 1, async page read [ 736.834415][ T9169] Buffer I/O error on dev loop6, logical block 2, async page read [ 736.842831][ T9169] Buffer I/O error on dev loop6, logical block 3, async page read [ 736.927861][ T9169] Buffer I/O error on dev loop6, logical block 0, async page read [ 736.936178][ T9169] Buffer I/O error on dev loop6, logical block 1, async page read [ 737.383282][ T4476] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 737.386614][ T9178] netlink: 16 bytes leftover after parsing attributes in process `syz.5.995'. [ 737.427911][ T9180] binder: 9177:9180 ioctl 4018620d 0 returned -22 [ 737.463691][ T9178] ip6gretap0: entered promiscuous mode [ 737.481853][ T9178] ip6gretap0: left promiscuous mode [ 737.684395][ T4476] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 737.872413][ T4476] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 738.027078][ T4476] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 738.462580][ T4476] bridge_slave_1: left allmulticast mode [ 738.468838][ T4476] bridge_slave_1: left promiscuous mode [ 738.475572][ T4476] bridge0: port 2(bridge_slave_1) entered disabled state [ 738.540885][ T9191] binder: 9190:9191 ioctl 4018620d 0 returned -22 [ 738.549310][ T4476] bridge_slave_0: left allmulticast mode [ 738.555375][ T4476] bridge_slave_0: left promiscuous mode [ 738.564193][ T4476] bridge0: port 1(bridge_slave_0) entered disabled state [ 739.217243][ T4476] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 739.236578][ T5854] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 739.318887][ T4476] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 739.365335][ T4476] bond0 (unregistering): Released all slaves [ 739.446616][ T5854] usb 5-1: Using ep0 maxpacket: 16 [ 739.484796][ T5854] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 739.494482][ T5854] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 739.503245][ T5854] usb 5-1: Product: syz [ 739.507769][ T5854] usb 5-1: Manufacturer: syz [ 739.512613][ T5854] usb 5-1: SerialNumber: syz [ 739.855498][ T5854] r8152-cfgselector 5-1: Unknown version 0x0000 [ 739.862469][ T5854] r8152-cfgselector 5-1: config 0 descriptor?? [ 740.097983][ T5854] r8152-cfgselector 5-1: Unknown version 0x2800 [ 740.105164][ T5854] r8152-cfgselector 5-1: bad CDC descriptors [ 740.297551][ T6740] r8152-cfgselector 5-1: USB disconnect, device number 26 [ 741.189166][ T4476] hsr_slave_0: left promiscuous mode [ 741.206439][ T4476] hsr_slave_1: left promiscuous mode [ 741.214612][ T4476] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 741.223069][ T4476] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 741.320602][ T4476] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 741.329827][ T4476] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 741.449264][ T4476] veth1_macvtap: left promiscuous mode [ 741.455069][ T4476] veth0_macvtap: left promiscuous mode [ 741.463581][ T4476] veth1_vlan: left promiscuous mode [ 741.469664][ T4476] veth0_vlan: left promiscuous mode [ 741.588718][ T9210] fuse: Bad value for 'user_id' [ 741.593889][ T9210] fuse: Bad value for 'user_id' [ 742.361492][ T4476] team0 (unregistering): Port device team_slave_1 removed [ 742.423362][ T4476] team0 (unregistering): Port device team_slave_0 removed [ 742.445101][ T9215] binder: 9211:9215 ioctl 4018620d 0 returned -22 [ 742.459701][ T9213] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1009'. [ 742.598693][ T9216] fuse: Unknown parameter '0xffffffffffffffff' [ 742.754001][ T9213] ip6gretap0: entered promiscuous mode [ 742.767208][ T9216] loop6: detected capacity change from 0 to 63 [ 742.769123][ T9213] ip6gretap0: left promiscuous mode [ 742.847886][ T9216] buffer_io_error: 2 callbacks suppressed [ 742.847969][ T9216] Buffer I/O error on dev loop6, logical block 0, async page read [ 742.862164][ T9216] Buffer I/O error on dev loop6, logical block 1, async page read [ 742.870457][ T9216] Buffer I/O error on dev loop6, logical block 2, async page read [ 742.882312][ T9216] Buffer I/O error on dev loop6, logical block 3, async page read [ 742.936494][ T9216] Buffer I/O error on dev loop6, logical block 0, async page read [ 742.944760][ T9216] Buffer I/O error on dev loop6, logical block 1, async page read [ 742.953914][ T9216] Buffer I/O error on dev loop6, logical block 2, async page read [ 742.963076][ T9216] Buffer I/O error on dev loop6, logical block 3, async page read [ 743.126794][ T9216] Buffer I/O error on dev loop6, logical block 0, async page read [ 743.135092][ T9216] Buffer I/O error on dev loop6, logical block 1, async page read [ 743.941904][ T9228] binder: 9227:9228 ioctl 4018620d 0 returned -22 [ 744.368904][ T3504] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 744.377162][ T3504] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 744.541738][ T3852] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 744.550062][ T3852] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 745.756760][ T9249] binder: 9248:9249 ioctl 4018620d 0 returned -22 [ 746.953916][ T9255] fuse: Unknown parameter '0xffffffffffffffff' [ 747.069518][ T9255] loop6: detected capacity change from 0 to 63 [ 747.145816][ T9260] binder: 9258:9260 ioctl 4018620d 0 returned -22 [ 748.359683][ T9276] binder: 9273:9276 ioctl 4018620d 0 returned -22 [ 749.215222][ T9285] fuse: Bad value for 'fd' [ 749.318321][ T9287] binder: 9286:9287 ioctl 4018620d 0 returned -22 [ 749.793873][ T9292] loop6: detected capacity change from 0 to 63 [ 749.878757][ T9292] buffer_io_error: 14 callbacks suppressed [ 749.878841][ T9292] Buffer I/O error on dev loop6, logical block 0, async page read [ 749.893520][ T9292] Buffer I/O error on dev loop6, logical block 1, async page read [ 749.901996][ T9292] Buffer I/O error on dev loop6, logical block 2, async page read [ 749.910445][ T9292] Buffer I/O error on dev loop6, logical block 3, async page read [ 749.948022][ T9292] Buffer I/O error on dev loop6, logical block 0, async page read [ 749.956623][ T9292] Buffer I/O error on dev loop6, logical block 1, async page read [ 749.974239][ T9292] Buffer I/O error on dev loop6, logical block 2, async page read [ 749.985047][ T9292] Buffer I/O error on dev loop6, logical block 3, async page read [ 750.023585][ T9292] Buffer I/O error on dev loop6, logical block 0, async page read [ 750.032311][ T9292] Buffer I/O error on dev loop6, logical block 1, async page read [ 750.720961][ T9306] binder: 9304:9306 ioctl 4018620d 0 returned -22 [ 750.754841][ T9307] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1043'. [ 750.790860][ T9307] ip6gretap0: entered promiscuous mode [ 750.806370][ T9307] ip6gretap0: left promiscuous mode [ 751.426667][ T9316] fuse: Bad value for 'fd' [ 751.581321][ T9318] binder: 9317:9318 ioctl 4018620d 0 returned -22 [ 752.710555][ T9337] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 752.789331][ T9336] loop6: detected capacity change from 0 to 63 [ 752.847452][ T9341] binder: 9339:9341 ioctl 4018620d 0 returned -22 [ 752.924684][ T9343] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1060'. [ 752.954855][ T9343] ip6gretap0: entered promiscuous mode [ 752.971937][ T9343] ip6gretap0: left promiscuous mode [ 753.652046][ T9353] binder: 9352:9353 ioctl 4018620d 0 returned -22 [ 755.151625][ T9371] loop9: detected capacity change from 0 to 7 [ 755.174473][ T9371] Dev loop9: unable to read RDB block 7 [ 755.183976][ T9371] loop9: unable to read partition table [ 755.224213][ T9371] loop9: partition table beyond EOD, truncated [ 755.230993][ T9371] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 755.459963][ T9373] binder: 9372:9373 ioctl 4018620d 0 returned -22 [ 755.702657][ T9375] loop6: detected capacity change from 0 to 63 [ 755.759338][ T9375] buffer_io_error: 14 callbacks suppressed [ 755.759419][ T9375] Buffer I/O error on dev loop6, logical block 0, async page read [ 755.774766][ T9375] Buffer I/O error on dev loop6, logical block 1, async page read [ 755.783146][ T9375] Buffer I/O error on dev loop6, logical block 2, async page read [ 755.791814][ T9375] Buffer I/O error on dev loop6, logical block 3, async page read [ 755.844401][ T9375] Buffer I/O error on dev loop6, logical block 0, async page read [ 755.853370][ T9375] Buffer I/O error on dev loop6, logical block 1, async page read [ 755.861655][ T9375] Buffer I/O error on dev loop6, logical block 2, async page read [ 755.869725][ T9375] Buffer I/O error on dev loop6, logical block 3, async page read [ 755.986971][ T9375] Buffer I/O error on dev loop6, logical block 0, async page read [ 755.995445][ T9375] Buffer I/O error on dev loop6, logical block 1, async page read [ 756.842512][ T9385] binder: 9383:9385 ioctl 4018620d 0 returned -22 [ 758.710775][ T9399] binder: 9398:9399 ioctl 4018620d 0 returned -22 [ 759.088571][ T9401] loop9: detected capacity change from 0 to 7 [ 759.116615][ T9401] Dev loop9: unable to read RDB block 7 [ 759.122614][ T9401] loop9: unable to read partition table [ 759.183877][ T9401] loop9: partition table beyond EOD, truncated [ 759.190671][ T9401] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 759.336689][ T9405] loop6: detected capacity change from 0 to 63 [ 762.500982][ T9430] binder: 9429:9430 ioctl 4018620d 0 returned -22 [ 763.118285][ T9437] loop6: detected capacity change from 0 to 63 [ 763.339155][ T9439] loop9: detected capacity change from 0 to 7 [ 763.397998][ T9439] Dev loop9: unable to read RDB block 7 [ 763.404139][ T9439] loop9: unable to read partition table [ 763.511797][ T9439] loop9: partition table beyond EOD, truncated [ 763.518477][ T9439] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 763.858184][ T9445] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1105'. [ 764.699148][ T9453] netlink: 76 bytes leftover after parsing attributes in process `syz.9.1109'. [ 766.635657][ T9463] binder: 9462:9463 ioctl 4018620d 0 returned -22 [ 767.456477][ T6740] usb 10-1: new full-speed USB device number 5 using dummy_hcd [ 767.648234][ T6740] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 767.660246][ T6740] usb 10-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 767.669922][ T6740] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 767.746828][ T6740] usb 10-1: config 0 descriptor?? [ 767.753827][ T9469] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 768.251389][ T6740] elan 0003:04F3:0755.0002: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.9-1/input0 [ 768.311647][ T9476] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1118'. [ 768.410497][ T6740] usb 10-1: USB disconnect, device number 5 [ 769.237522][ T9484] mmap: syz.0.1121 (9484) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 769.285880][ T5799] Bluetooth: hci3: command 0x0406 tx timeout [ 770.232878][ T5799] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 770.245833][ T5799] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 770.255240][ T5799] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 770.281937][ T5799] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 770.295553][ T5799] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 770.570338][ T9491] lo speed is unknown, defaulting to 1000 [ 771.666659][ T9500] binder: 9499:9500 ioctl 4018620d 0 returned -22 [ 772.396817][ T5799] Bluetooth: hci4: command tx timeout [ 772.753072][ T9491] chnl_net:caif_netlink_parms(): no params data found [ 774.477173][ T5799] Bluetooth: hci4: command tx timeout [ 775.024388][ T9491] bridge0: port 1(bridge_slave_0) entered blocking state [ 775.032798][ T9491] bridge0: port 1(bridge_slave_0) entered disabled state [ 775.040868][ T9491] bridge_slave_0: entered allmulticast mode [ 775.060239][ T9491] bridge_slave_0: entered promiscuous mode [ 775.317478][ T9491] bridge0: port 2(bridge_slave_1) entered blocking state [ 775.325203][ T9491] bridge0: port 2(bridge_slave_1) entered disabled state [ 775.353177][ T9491] bridge_slave_1: entered allmulticast mode [ 775.373008][ T9491] bridge_slave_1: entered promiscuous mode [ 775.894057][ T9491] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 775.936231][ T9491] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 776.300006][ T9536] binder: 9535:9536 ioctl 4018620d 0 returned -22 [ 776.403933][ T9491] team0: Port device team_slave_0 added [ 776.462973][ T9491] team0: Port device team_slave_1 added [ 776.556522][ T5799] Bluetooth: hci4: command tx timeout [ 776.771044][ T9491] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 776.778466][ T9491] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 776.808168][ T9491] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 776.933524][ T9491] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 776.940954][ T9491] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 776.967732][ T9491] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 777.067366][ T9542] binder: 9541:9542 ioctl 4018620d 0 returned -22 [ 777.137539][ T9542] binder: 9541:9542 ioctl c0306201 0 returned -14 [ 777.483861][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 777.494117][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 777.567501][ T9491] hsr_slave_0: entered promiscuous mode [ 777.578231][ T9491] hsr_slave_1: entered promiscuous mode [ 777.587629][ T9491] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 777.595437][ T9491] Cannot create hsr debugfs directory [ 778.123465][ T9550] netlink: 72 bytes leftover after parsing attributes in process `syz.7.1143'. [ 778.657308][ T5799] Bluetooth: hci4: command tx timeout [ 780.955261][ T35] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 781.147755][ T35] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 781.324070][ T35] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 781.509462][ T35] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 781.566751][ T9491] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 781.667856][ T9491] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 781.707864][ T9571] binder: 9569:9571 ioctl 4018620d 0 returned -22 [ 781.767009][ T9571] binder: 9569:9571 ioctl c0306201 0 returned -14 [ 781.816210][ T9491] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 781.857557][ T9491] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 782.031805][ T35] bridge_slave_1: left allmulticast mode [ 782.038356][ T35] bridge_slave_1: left promiscuous mode [ 782.045106][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 782.103078][ T35] bridge_slave_0: left allmulticast mode [ 782.109420][ T35] bridge_slave_0: left promiscuous mode [ 782.124573][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 782.637295][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 782.660979][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 782.724221][ T35] bond0 (unregistering): Released all slaves [ 783.258298][ T9578] team_slave_0: entered promiscuous mode [ 783.265233][ T9578] team_slave_1: entered promiscuous mode [ 783.271512][ T9578] macsec1: entered promiscuous mode [ 783.277205][ T9578] team0: entered promiscuous mode [ 783.296466][ T9578] team0: left promiscuous mode [ 783.304877][ T9578] team_slave_0: left promiscuous mode [ 783.310697][ T9578] team_slave_1: left promiscuous mode [ 783.768549][ T9581] loop6: detected capacity change from 0 to 63 [ 784.009142][ T35] hsr_slave_0: left promiscuous mode [ 784.043380][ T35] hsr_slave_1: left promiscuous mode [ 784.052698][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 784.065943][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 784.103733][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 784.111837][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 784.182769][ T35] veth1_macvtap: left promiscuous mode [ 784.188920][ T35] veth0_macvtap: left promiscuous mode [ 784.200314][ T35] veth1_vlan: left promiscuous mode [ 784.205938][ T35] veth0_vlan: left promiscuous mode [ 785.310711][ T9595] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1159'. [ 785.406169][ T35] team0 (unregistering): Port device team_slave_1 removed [ 785.433125][ T35] team0 (unregistering): Port device team_slave_0 removed [ 785.654118][ T9595] ip6gretap0: entered promiscuous mode [ 785.669258][ T9595] ip6gretap0: left promiscuous mode [ 785.997623][ T9491] 8021q: adding VLAN 0 to HW filter on device bond0 [ 786.188215][ T9491] 8021q: adding VLAN 0 to HW filter on device team0 [ 786.325676][ T4334] bridge0: port 1(bridge_slave_0) entered blocking state [ 786.333375][ T4334] bridge0: port 1(bridge_slave_0) entered forwarding state [ 786.449657][ T4334] bridge0: port 2(bridge_slave_1) entered blocking state [ 786.457382][ T4334] bridge0: port 2(bridge_slave_1) entered forwarding state [ 786.759248][ T9605] binder: 9603:9605 ioctl 4018620d 0 returned -22 [ 787.384749][ T9611] fuse: Unknown parameter 'group_i00000000000000000000' [ 787.564645][ T9616] loop6: detected capacity change from 0 to 63 [ 787.592910][ T9613] team_slave_0: entered promiscuous mode [ 787.599128][ T9613] team_slave_1: entered promiscuous mode [ 787.606221][ T9613] macsec1: entered promiscuous mode [ 787.611675][ T9613] team0: entered promiscuous mode [ 787.730523][ T9613] team0: left promiscuous mode [ 787.739311][ T9613] team_slave_0: left promiscuous mode [ 787.745119][ T9613] team_slave_1: left promiscuous mode [ 788.431629][ T9491] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 788.775154][ T9628] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1172'. [ 788.801935][ T9628] ip6gretap0: entered promiscuous mode [ 788.817216][ T9628] ip6gretap0: left promiscuous mode [ 788.949151][ T9491] veth0_vlan: entered promiscuous mode [ 789.064431][ T9491] veth1_vlan: entered promiscuous mode [ 789.464807][ T9491] veth0_macvtap: entered promiscuous mode [ 789.641253][ T9491] veth1_macvtap: entered promiscuous mode [ 789.673645][ T9630] warning: `syz.0.1173' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 789.738271][ T9636] binder: 9635:9636 ioctl 4018620d 0 returned -22 [ 789.889405][ T9491] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 790.050744][ T9491] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 790.191203][ T9491] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 790.200712][ T9491] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 790.214640][ T9491] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 790.224493][ T9491] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 790.417356][ T9639] fuse: Unknown parameter 'group_id00000000000000000000' [ 790.501487][ T9643] loop6: detected capacity change from 0 to 63 [ 793.718578][ T9676] binder: 9674:9676 ioctl 4018620d 0 returned -22 [ 794.145358][ T9680] fuse: Unknown parameter 'group_id00000000000000000000' [ 796.310865][ T9708] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1196'. [ 796.646854][ T4476] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 796.658216][ T4476] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 796.822092][ T6922] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 796.830539][ T6922] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 796.980915][ T9715] binder: 9713:9715 ioctl 4018620d 0 returned -22 [ 797.594763][ T9720] fuse: Unknown parameter 'group_id00000000000000000000' [ 797.646666][ T9721] loop9: detected capacity change from 0 to 7 [ 797.668198][ T9721] Dev loop9: unable to read RDB block 7 [ 797.674211][ T9721] loop9: unable to read partition table [ 797.717380][ T9721] loop9: partition table beyond EOD, truncated [ 797.724131][ T9721] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 800.637318][ T9753] binder: 9752:9753 ioctl 4018620d 0 returned -22 [ 800.910352][ T9755] fuse: Bad value for 'user_id' [ 800.915577][ T9755] fuse: Bad value for 'user_id' [ 801.295381][ T9757] netlink: 192 bytes leftover after parsing attributes in process `syz.9.1212'. [ 801.305213][ T9757] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1212'. [ 801.918007][ T9763] loop9: detected capacity change from 0 to 7 [ 801.942765][ T9763] Dev loop9: unable to read RDB block 7 [ 801.948965][ T9763] loop9: unable to read partition table [ 802.024564][ T9763] loop9: partition table beyond EOD, truncated [ 802.031463][ T9763] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 803.007788][ T6740] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 803.209619][ T6740] usb 8-1: Using ep0 maxpacket: 32 [ 803.248508][ T6740] usb 8-1: config 0 has an invalid interface number: 67 but max is 0 [ 803.257261][ T6740] usb 8-1: config 0 has no interface number 0 [ 803.360714][ T6740] usb 8-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 803.370566][ T6740] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 803.379015][ T6740] usb 8-1: Product: syz [ 803.383415][ T6740] usb 8-1: Manufacturer: syz [ 803.388538][ T6740] usb 8-1: SerialNumber: syz [ 803.500556][ T6740] usb 8-1: config 0 descriptor?? [ 803.521131][ T6740] smsc95xx v2.0.0 [ 803.525035][ T6740] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 803.536439][ T6740] smsc95xx 8-1:0.67: probe with driver smsc95xx failed with error -22 [ 805.857984][ T46] usb 8-1: USB disconnect, device number 16 [ 806.184499][ T9786] binder: 9785:9786 ioctl 4018620d 0 returned -22 [ 807.008602][ T9793] fuse: Bad value for 'user_id' [ 807.013759][ T9793] fuse: Bad value for 'user_id' [ 810.760545][ T9803] loop9: detected capacity change from 0 to 7 [ 810.798829][ T9803] Dev loop9: unable to read RDB block 7 [ 810.804865][ T9803] loop9: unable to read partition table [ 810.839826][ T9803] loop9: partition table beyond EOD, truncated [ 810.846690][ T9803] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 812.034615][ T9811] bond_slave_0: entered promiscuous mode [ 812.040837][ T9811] bond_slave_1: entered promiscuous mode [ 812.047245][ T9811] macsec1: entered promiscuous mode [ 812.052682][ T9811] bond0: entered promiscuous mode [ 812.100019][ T9811] bond0: left promiscuous mode [ 812.109261][ T9811] bond_slave_0: left promiscuous mode [ 812.114930][ T9811] bond_slave_1: left promiscuous mode [ 812.539939][ T9818] binder: 9814:9818 ioctl 4018620d 0 returned -22 [ 813.611721][ T9822] fuse: Bad value for 'user_id' [ 813.617084][ T9822] fuse: Bad value for 'user_id' [ 814.428007][ T9834] overlayfs: missing 'lowerdir' [ 814.486928][ T6740] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 814.656345][ T6740] usb 10-1: Using ep0 maxpacket: 16 [ 814.703669][ T6740] usb 10-1: config 0 has an invalid interface number: 41 but max is 0 [ 814.712391][ T6740] usb 10-1: config 0 has no interface number 0 [ 814.718990][ T6740] usb 10-1: too many endpoints for config 0 interface 41 altsetting 2: 171, using maximum allowed: 30 [ 814.730782][ T6740] usb 10-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 814.741221][ T6740] usb 10-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 814.751729][ T6740] usb 10-1: config 0 interface 41 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 171 [ 814.765598][ T6740] usb 10-1: config 0 interface 41 has no altsetting 0 [ 814.852578][ T9836] loop9: detected capacity change from 0 to 7 [ 814.867039][ T9836] Dev loop9: unable to read RDB block 7 [ 814.873203][ T9836] loop9: unable to read partition table [ 814.896886][ T9836] loop9: partition table beyond EOD, truncated [ 814.903553][ T9836] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 814.933201][ T6740] usb 10-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 814.943037][ T6740] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 814.951526][ T6740] usb 10-1: Product: syz [ 814.956147][ T6740] usb 10-1: Manufacturer: syz [ 814.961077][ T6740] usb 10-1: SerialNumber: syz [ 815.018641][ T6740] usb 10-1: config 0 descriptor?? [ 815.037190][ T9832] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 815.045035][ T9832] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 815.366855][ T9832] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 815.381177][ T9832] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 816.035009][ T6740] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 816.070092][ T9842] bond_slave_0: entered promiscuous mode [ 816.076291][ T9842] bond_slave_1: entered promiscuous mode [ 816.082430][ T9842] macsec1: entered promiscuous mode [ 816.088051][ T9842] bond0: entered promiscuous mode [ 816.144113][ T9842] bond0: left promiscuous mode [ 816.154767][ T9842] bond_slave_0: left promiscuous mode [ 816.160605][ T9842] bond_slave_1: left promiscuous mode [ 816.255014][ T9844] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 817.090401][ T6740] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 817.101667][ T6740] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to power up PHY: -71 [ 817.112761][ T6740] CoreChips 10-1:0.41: probe with driver CoreChips failed with error -71 [ 817.126403][ T46] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 817.320777][ T6740] usb 10-1: USB disconnect, device number 6 [ 817.359978][ T46] usb 1-1: Using ep0 maxpacket: 16 [ 817.412460][ T46] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 817.422111][ T46] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 817.430537][ T46] usb 1-1: Product: syz [ 817.434971][ T46] usb 1-1: Manufacturer: syz [ 817.439967][ T46] usb 1-1: SerialNumber: syz [ 817.552843][ T9852] fuse: Bad value for 'fd' [ 817.554402][ T46] r8152-cfgselector 1-1: Unknown version 0x0000 [ 817.564260][ T46] r8152-cfgselector 1-1: config 0 descriptor?? [ 817.944291][ T9859] overlayfs: missing 'lowerdir' [ 818.042296][ T46] r8152-cfgselector 1-1: USB disconnect, device number 9 [ 818.354815][ T9864] loop9: detected capacity change from 0 to 7 [ 818.413991][ T9864] Dev loop9: unable to read RDB block 7 [ 818.420616][ T9864] loop9: unable to read partition table [ 818.460954][ T9864] loop9: partition table beyond EOD, truncated [ 818.470741][ T9864] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 818.610661][ T9868] bond_slave_0: entered promiscuous mode [ 818.616804][ T9868] bond_slave_1: entered promiscuous mode [ 818.623177][ T9868] macsec1: entered promiscuous mode [ 818.628753][ T9868] bond0: entered promiscuous mode [ 818.660539][ T9868] bond0: left promiscuous mode [ 818.673368][ T9868] bond_slave_0: left promiscuous mode [ 818.679186][ T9868] bond_slave_1: left promiscuous mode [ 820.477591][ T5801] Bluetooth: hci5: command 0x0406 tx timeout [ 820.684324][ T9887] fuse: Bad value for 'fd' [ 821.553325][ T9893] overlayfs: missing 'lowerdir' [ 822.425810][ T9899] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1269'. [ 822.456395][ T9900] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0 [ 822.476892][ T6740] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 822.673239][ T9902] bond_slave_0: entered promiscuous mode [ 822.679418][ T9902] bond_slave_1: entered promiscuous mode [ 822.679713][ T6740] usb 4-1: Using ep0 maxpacket: 16 [ 822.685646][ T9902] macsec1: entered promiscuous mode [ 822.696413][ T9902] bond0: entered promiscuous mode [ 822.744993][ T6740] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 822.754433][ T6740] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 822.762722][ T6740] usb 4-1: Product: syz [ 822.769344][ T6740] usb 4-1: Manufacturer: syz [ 822.774147][ T6740] usb 4-1: SerialNumber: syz [ 822.797697][ T9902] bond0: left promiscuous mode [ 822.805947][ T9902] bond_slave_0: left promiscuous mode [ 822.811861][ T9902] bond_slave_1: left promiscuous mode [ 822.923229][ T6740] r8152-cfgselector 4-1: Unknown version 0x0000 [ 822.929936][ T6740] r8152-cfgselector 4-1: config 0 descriptor?? [ 823.123148][ T9904] loop9: detected capacity change from 0 to 7 [ 823.177913][ T9904] Dev loop9: unable to read RDB block 7 [ 823.185417][ T9904] loop9: unable to read partition table [ 823.263501][ T9904] loop9: partition table beyond EOD, truncated [ 823.270726][ T9904] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 823.399348][ T6740] r8152-cfgselector 4-1: USB disconnect, device number 7 [ 823.928529][ T9908] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4294967291 (274877906624 ns) > initial count (30400 ns). Using initial count to start timer. [ 824.984604][ T9922] overlayfs: missing 'lowerdir' [ 826.296834][ T9932] bond_slave_0: entered promiscuous mode [ 826.302862][ T9932] bond_slave_1: entered promiscuous mode [ 826.309098][ T9932] macsec1: entered promiscuous mode [ 826.314555][ T9932] bond0: entered promiscuous mode [ 826.507136][ T9932] bond0: left promiscuous mode [ 826.515205][ T9932] bond_slave_0: left promiscuous mode [ 826.521054][ T9932] bond_slave_1: left promiscuous mode [ 827.333406][ T9939] loop9: detected capacity change from 0 to 7 [ 827.417007][ T9939] Dev loop9: unable to read RDB block 7 [ 827.423014][ T9939] loop9: unable to read partition table [ 827.563011][ T9939] loop9: partition table beyond EOD, truncated [ 827.569957][ T9939] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 828.026744][ T5854] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 828.217480][ T5854] usb 8-1: Using ep0 maxpacket: 16 [ 828.273545][ T5854] usb 8-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 828.283149][ T5854] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 828.292066][ T5854] usb 8-1: Product: syz [ 828.303305][ T5854] usb 8-1: Manufacturer: syz [ 828.309675][ T5854] usb 8-1: SerialNumber: syz [ 828.335442][ T5854] r8152-cfgselector 8-1: Unknown version 0x0000 [ 828.342270][ T5854] r8152-cfgselector 8-1: config 0 descriptor?? [ 828.522149][ T9953] overlayfs: missing 'lowerdir' [ 828.792992][ T6740] r8152-cfgselector 8-1: USB disconnect, device number 17 [ 829.713146][ T9965] bond_slave_0: entered promiscuous mode [ 829.719340][ T9965] bond_slave_1: entered promiscuous mode [ 829.725435][ T9965] macsec1: entered promiscuous mode [ 829.737316][ T9965] bond0: entered promiscuous mode [ 829.806829][ T9965] bond0: left promiscuous mode [ 829.814932][ T9965] bond_slave_0: left promiscuous mode [ 829.820756][ T9965] bond_slave_1: left promiscuous mode [ 831.182656][ T6740] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 831.372559][ T6740] usb 4-1: Using ep0 maxpacket: 8 [ 831.409636][ T6740] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 831.419599][ T6740] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 831.428019][ T6740] usb 4-1: Product: syz [ 831.432425][ T6740] usb 4-1: Manufacturer: syz [ 831.437462][ T6740] usb 4-1: SerialNumber: syz [ 831.476208][ T6740] usb 4-1: config 0 descriptor?? [ 831.496223][ T6740] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 831.504610][ T6740] usb 4-1: setting power ON [ 831.509524][ T6740] dvb-usb: bulk message failed: -22 (2/0) [ 831.520171][ T9976] loop9: detected capacity change from 0 to 7 [ 831.534181][ T6740] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 831.547972][ T6740] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 831.557317][ T6740] usb 4-1: media controller created [ 831.578995][ T9976] Dev loop9: unable to read RDB block 7 [ 831.585026][ T9976] loop9: unable to read partition table [ 831.637671][ T6740] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 831.645596][ T9976] loop9: partition table beyond EOD, truncated [ 831.652788][ T9976] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 831.725567][ T9972] dvb-usb: bulk message failed: -22 (3/0) [ 831.732248][ T9972] ===================================================== [ 831.739865][ T9972] BUG: KMSAN: uninit-value in cxusb_i2c_xfer+0x1303/0x18e0 [ 831.747424][ T9972] cxusb_i2c_xfer+0x1303/0x18e0 [ 831.752557][ T9972] __i2c_transfer+0xec7/0x30e0 [ 831.757915][ T9972] i2c_transfer+0x300/0x4b0 [ 831.762605][ T9972] i2c_transfer_buffer_flags+0x138/0x200 [ 831.768772][ T9972] i2cdev_read+0x1b2/0x3c0 [ 831.773379][ T9972] vfs_read+0x279/0xef0 [ 831.780354][ T9972] __ia32_sys_read+0x1f9/0x4d0 [ 831.786147][ T9972] ia32_sys_call+0x184c/0x42c0 [ 831.791111][ T9972] __do_fast_syscall_32+0xb0/0x110 [ 831.796660][ T9972] do_fast_syscall_32+0x38/0x80 [ 831.801808][ T9972] do_SYSENTER_32+0x1f/0x30 [ 831.806790][ T9972] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 831.813351][ T9972] [ 831.815783][ T9972] Local variable i.i838 created at: [ 831.821723][ T9972] cxusb_i2c_xfer+0x304/0x18e0 [ 831.826877][ T9972] __i2c_transfer+0xec7/0x30e0 [ 831.831832][ T9972] [ 831.834374][ T9972] CPU: 0 UID: 0 PID: 9972 Comm: syz.3.1300 Not tainted 6.15.0-rc6-syzkaller-00173-gf1f2797f8a24 #0 PREEMPT(undef) [ 831.847580][ T9972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 831.858064][ T9972] ===================================================== [ 831.865146][ T9972] Disabling lock debugging due to kernel taint [ 831.871685][ T9972] Kernel panic - not syncing: kmsan.panic set ... [ 831.878291][ T9972] CPU: 0 UID: 0 PID: 9972 Comm: syz.3.1300 Tainted: G B 6.15.0-rc6-syzkaller-00173-gf1f2797f8a24 #0 PREEMPT(undef) [ 831.892186][ T9972] Tainted: [B]=BAD_PAGE [ 831.896471][ T9972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 831.906710][ T9972] Call Trace: [ 831.910131][ T9972] [ 831.913189][ T9972] __dump_stack+0x26/0x30 [ 831.917754][ T9972] dump_stack_lvl+0x53/0x270 [ 831.922574][ T9972] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 831.928664][ T9972] dump_stack+0x1e/0x25 [ 831.933051][ T9972] panic+0x4bd/0xd50 [ 831.937236][ T9972] kmsan_report+0x29d/0x2a0 [ 831.942000][ T9972] ? vprintk_default+0x3f/0x50 [ 831.947021][ T9972] ? __msan_warning+0x96/0x120 [ 831.952033][ T9972] ? cxusb_i2c_xfer+0x1303/0x18e0 [ 831.957292][ T9972] ? __i2c_transfer+0xec7/0x30e0 [ 831.962436][ T9972] ? i2c_transfer+0x300/0x4b0 [ 831.967310][ T9972] ? i2c_transfer_buffer_flags+0x138/0x200 [ 831.973333][ T9972] ? i2cdev_read+0x1b2/0x3c0 [ 831.978117][ T9972] ? vfs_read+0x279/0xef0 [ 831.982666][ T9972] ? __ia32_sys_read+0x1f9/0x4d0 [ 831.987820][ T9972] ? ia32_sys_call+0x184c/0x42c0 [ 831.992951][ T9972] ? __do_fast_syscall_32+0xb0/0x110 [ 831.998501][ T9972] ? do_fast_syscall_32+0x38/0x80 [ 832.003770][ T9972] ? do_SYSENTER_32+0x1f/0x30 [ 832.008685][ T9972] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 832.015431][ T9972] ? kmsan_get_metadata+0x105/0x1b0 [ 832.020889][ T9972] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 832.027493][ T9972] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 832.033814][ T9972] ? kmsan_get_metadata+0x105/0x1b0 [ 832.039281][ T9972] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 832.045869][ T9972] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 832.052208][ T9972] ? mutex_unlock+0x29/0x50 [ 832.056956][ T9972] ? kmsan_get_metadata+0x105/0x1b0 [ 832.062441][ T9972] __msan_warning+0x96/0x120 [ 832.067294][ T9972] cxusb_i2c_xfer+0x1303/0x18e0 [ 832.072418][ T9972] ? kmsan_get_metadata+0x105/0x1b0 [ 832.077875][ T9972] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 832.083963][ T9972] ? ___slab_alloc+0xba5/0x3480 [ 832.089057][ T9972] ? kmsan_get_metadata+0x105/0x1b0 [ 832.094506][ T9972] ? __pfx_cxusb_i2c_xfer+0x10/0x10 [ 832.099942][ T9972] ? __pfx_cxusb_i2c_xfer+0x10/0x10 [ 832.105387][ T9972] __i2c_transfer+0xec7/0x30e0 [ 832.110362][ T9972] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 832.116946][ T9972] ? __pfx_i2c_adapter_lock_bus+0x10/0x10 [ 832.122907][ T9972] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 832.129269][ T9972] ? __pfx_i2c_adapter_lock_bus+0x10/0x10 [ 832.135216][ T9972] i2c_transfer+0x300/0x4b0 [ 832.139931][ T9972] i2c_transfer_buffer_flags+0x138/0x200 [ 832.145803][ T9972] i2cdev_read+0x1b2/0x3c0 [ 832.150411][ T9972] ? __pfx_i2cdev_read+0x10/0x10 [ 832.155547][ T9972] vfs_read+0x279/0xef0 [ 832.159916][ T9972] ? stack_depot_save_flags+0x35/0x7c0 [ 832.165592][ T9972] ? __fget_files+0x3b9/0x4a0 [ 832.170505][ T9972] ? kmsan_get_metadata+0x105/0x1b0 [ 832.175958][ T9972] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 832.182564][ T9972] __ia32_sys_read+0x1f9/0x4d0 [ 832.187592][ T9972] ia32_sys_call+0x184c/0x42c0 [ 832.192552][ T9972] __do_fast_syscall_32+0xb0/0x110 [ 832.197923][ T9972] ? irqentry_exit_to_user_mode+0x82/0xa0 [ 832.203907][ T9972] do_fast_syscall_32+0x38/0x80 [ 832.209030][ T9972] do_SYSENTER_32+0x1f/0x30 [ 832.213780][ T9972] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 832.220362][ T9972] RIP: 0023:0xf7f86539 [ 832.224592][ T9972] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 832.244438][ T9972] RSP: 002b:00000000f50a655c EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 832.253093][ T9972] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000000 [ 832.261249][ T9972] RDX: 00000000ffffff0c RSI: 0000000000000000 RDI: 0000000000000000 [ 832.269395][ T9972] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 832.277536][ T9972] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 832.285678][ T9972] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 832.293847][ T9972] [ 832.297302][ T9972] Kernel Offset: disabled [ 832.301704][ T9972] Rebooting in 86400 seconds..