last executing test programs: 12m38.227386691s ago: executing program 2 (id=200): r0 = socket$inet_sctp(0x2, 0x1, 0x84) io_setup(0x2, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0x1) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000280)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000080)=0x200000000) r3 = dup2(r1, r1) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) utimensat(r3, &(0x7f0000000100)='./file0\x00', &(0x7f0000000240)={{0x0, 0xea60}, {r4, r5/1000+60000}}, 0x100) write$vhost_msg_v2(r3, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, 0xffffffffffffffff, 0x0}]) sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r0, 0xda90) accept$inet(r0, 0x0, 0x0) 12m35.560383936s ago: executing program 2 (id=204): openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x10400, 0x0, 0x0, 0x3, 0x40000}}, 0x50) syz_fuse_handle_req(r3, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) close(r3) openat$vcs(0xffffffffffffff9c, 0x0, 0x62941, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001480)) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, 0x0, 0x0, 0x0) 12m32.809089375s ago: executing program 2 (id=208): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_GET_FPU(r3, 0x81a0ae8c, 0x0) 12m32.434732855s ago: executing program 2 (id=212): r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000015c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024a0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e", @ANYRESHEX], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000001580)={0x34, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000480)='\x00', 0x1) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x2710}) 12m27.825788479s ago: executing program 2 (id=217): socket$kcm(0x10, 0x2, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59", 0x45) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) 12m26.706115955s ago: executing program 2 (id=220): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x20902, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffdfffffffffe, 0xfa11, 0xffffffff}, 0x0) r5 = syz_open_dev$dri(&(0x7f0000001280), 0x1fe, 0xa2142) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, 0x0) write$sequencer(r2, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x24) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0x80) syz_usb_connect(0x0, 0x2d, &(0x7f0000001040)=ANY=[@ANYBLOB="12010000109737107d071004c1ec0102030109021b00010040b000090400"], 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r1, 0xc0045009, &(0x7f0000001300)=0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000003a00010100000000000204000a"], 0x14}}, 0x0) recvmmsg(r0, &(0x7f0000003700)=[{{}, 0x9}], 0x1, 0x40012100, 0x0) openat$vnet(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) 12m11.467033419s ago: executing program 32 (id=220): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x20902, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffdfffffffffe, 0xfa11, 0xffffffff}, 0x0) r5 = syz_open_dev$dri(&(0x7f0000001280), 0x1fe, 0xa2142) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, 0x0) write$sequencer(r2, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x24) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0x80) syz_usb_connect(0x0, 0x2d, &(0x7f0000001040)=ANY=[@ANYBLOB="12010000109737107d071004c1ec0102030109021b00010040b000090400"], 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r1, 0xc0045009, &(0x7f0000001300)=0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000003a00010100000000000204000a"], 0x14}}, 0x0) recvmmsg(r0, &(0x7f0000003700)=[{{}, 0x9}], 0x1, 0x40012100, 0x0) openat$vnet(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) 9m17.460461033s ago: executing program 1 (id=618): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0xa7e, 0x2) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0x2000, 0x3, 0x4, 0x0, 0xd, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x3d, 0x0, 0x0, "a730ba01"}, 0x0, 0x1, {0x0}}) 9m16.321496719s ago: executing program 1 (id=620): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x4, 0x0, 0x0) 9m15.018296558s ago: executing program 1 (id=623): socket$kcm(0x11, 0x2, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="39000000140081ae50003c00fbff008311001f9f660fcf065c05acb612f691f3bd3508abca1be6eeb89c44ebb37358582bb8", 0x32}], 0x1}, 0x0) 9m14.57704067s ago: executing program 1 (id=627): syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/user\x00') openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1c6c, &(0x7f0000000040)={0x0, 0xaebb, 0xd000, 0x20000a, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xd}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$dsp(r2, &(0x7f00000002c0)=""/4096, 0x1000) 9m10.040676096s ago: executing program 1 (id=630): ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0x2000, 0x3, 0x4, 0x0, 0xd, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x3d, 0x0, 0x0, "a730ba01"}, 0x0, 0x1, {0x0}}) 9m9.507152813s ago: executing program 1 (id=631): socket$nl_sock_diag(0x10, 0x3, 0x4) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0xfffffffffffffffc, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) io_uring_setup(0x7e55, 0x0) syz_clone(0x104680, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000000c00078008000640000007010500050002000000050004000000000016000300686173683a6e65742c706f7274"], 0x5c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, 0x0) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, 0x0) r6 = syz_io_uring_setup(0x88f, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000000)) io_uring_enter(r6, 0x47f6, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)=0x8001) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x7}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r8}, {}, {0x46, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r10, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, &(0x7f0000001200), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_netfilter(r3, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xfffffffffffffdfb, &(0x7f0000000300)={&(0x7f0000000200)={0x1c, 0xd, 0x5, 0x801, 0x70bd2b, 0x25dfdbfb, {0x2, 0x0, 0xa}, [@nested={0x8, 0x3d, 0x0, 0x1, [@nested={0x4, 0xbb}]}]}, 0x1c}}, 0x80) sendmmsg$inet(r7, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="d4", 0x1}], 0x1, &(0x7f00000006c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xfd}}, @ip_retopts={{0xb0, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x1c, 0x10, 0x3, 0x7, [{@rand_addr=0x64010101, 0x3}, {@broadcast, 0x6}, {@empty, 0xffffffff}]}, @cipso={0x86, 0xa, 0xffffffffffffffff, [{0x5, 0x2}, {0x6, 0x2}]}, @rr={0x7, 0x3b, 0x3f, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @empty, @multicast1, @broadcast, @local, @private=0xa010100, @empty, @rand_addr=0x64010101, @remote, @loopback, @rand_addr=0x64010102, @empty, @broadcast]}, @timestamp_prespec={0x44, 0x3c, 0x9, 0x3, 0x3, [{@remote, 0x4}, {@loopback, 0x6}, {@remote, 0x2}, {@local, 0x3}, {@dev={0xac, 0x14, 0x14, 0x1c}, 0x6}, {@private=0xa010102, 0xfffffff7}, {@loopback, 0x200}]}]}}}], 0xc8}}, {{&(0x7f0000001900)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000001c40)=[{&(0x7f0000001940)="9513", 0x2}], 0x1, &(0x7f0000001d40)}}], 0x2, 0x20040000) ioctl$TCSETSF(r0, 0x5404, 0x0) r11 = open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x4, 0x13, r11, 0x0) 8m54.11562911s ago: executing program 33 (id=631): socket$nl_sock_diag(0x10, 0x3, 0x4) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0xfffffffffffffffc, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) io_uring_setup(0x7e55, 0x0) syz_clone(0x104680, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000000c00078008000640000007010500050002000000050004000000000016000300686173683a6e65742c706f7274"], 0x5c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, 0x0) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, 0x0) r6 = syz_io_uring_setup(0x88f, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000000)) io_uring_enter(r6, 0x47f6, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)=0x8001) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x7}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r8}, {}, {0x46, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r10, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, &(0x7f0000001200), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_netfilter(r3, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xfffffffffffffdfb, &(0x7f0000000300)={&(0x7f0000000200)={0x1c, 0xd, 0x5, 0x801, 0x70bd2b, 0x25dfdbfb, {0x2, 0x0, 0xa}, [@nested={0x8, 0x3d, 0x0, 0x1, [@nested={0x4, 0xbb}]}]}, 0x1c}}, 0x80) sendmmsg$inet(r7, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="d4", 0x1}], 0x1, &(0x7f00000006c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xfd}}, @ip_retopts={{0xb0, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x1c, 0x10, 0x3, 0x7, [{@rand_addr=0x64010101, 0x3}, {@broadcast, 0x6}, {@empty, 0xffffffff}]}, @cipso={0x86, 0xa, 0xffffffffffffffff, [{0x5, 0x2}, {0x6, 0x2}]}, @rr={0x7, 0x3b, 0x3f, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @empty, @multicast1, @broadcast, @local, @private=0xa010100, @empty, @rand_addr=0x64010101, @remote, @loopback, @rand_addr=0x64010102, @empty, @broadcast]}, @timestamp_prespec={0x44, 0x3c, 0x9, 0x3, 0x3, [{@remote, 0x4}, {@loopback, 0x6}, {@remote, 0x2}, {@local, 0x3}, {@dev={0xac, 0x14, 0x14, 0x1c}, 0x6}, {@private=0xa010102, 0xfffffff7}, {@loopback, 0x200}]}]}}}], 0xc8}}, {{&(0x7f0000001900)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000001c40)=[{&(0x7f0000001940)="9513", 0x2}], 0x1, &(0x7f0000001d40)}}], 0x2, 0x20040000) ioctl$TCSETSF(r0, 0x5404, 0x0) r11 = open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x4, 0x13, r11, 0x0) 2m33.3946846s ago: executing program 6 (id=2850): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x10031, 0xffffffffffffffff, 0x65be1000) sigaltstack(0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 2m32.434494869s ago: executing program 6 (id=2853): r0 = socket(0xa, 0x3, 0x3a) recvmmsg(r0, &(0x7f00000091c0)=[{{0x0, 0x0, 0x0}, 0x10}], 0x2f, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x8}, {0x0, 0xffff}}}, 0x24}}, 0x4000000) syz_emit_ethernet(0x0, 0x0, 0x0) 2m31.477992697s ago: executing program 6 (id=2866): syz_open_dev$sndmidi(0x0, 0x2, 0x141101) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="2c0000001a00010027bd7000fedbdf250a803302fe01fd00000200000800", @ANYRES32=0x0, @ANYBLOB="08ff10000b008000944ba8503df5aca5efb829e955d9a49d80788690a0baff1d2ff55274006451054fe9d742905e9729e77e1633569042ca21ed90f3a7312575c3858e17a0542b4b36917ef060038c6c3210bde0a425ebca0ea62d00"/101], 0x2c}, 0x1, 0x0, 0x0, 0x20044844}, 0x8c4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000040)='source', &(0x7f0000005fc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) syz_open_dev$video4linux(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0, {r2}}, './file0\x00'}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000380)={&(0x7f0000000300)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000004c0)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x8, 0x5, 0x7}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000600)={&(0x7f0000000500)=[0x0], &(0x7f0000000540)=[0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0], 0x1, 0x1, 0x5, 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f0000000800)={r4, r5, r6, 0x0, 0x0, 0x2, &(0x7f0000000640)=[0x0, 0x0]}) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="5c0100001000130700000000fcdbdf25e0000001000000000000000000000000ff020000000000000000000000000001000400004e21000200000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fc010000000000000000000000000000000004d632000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000090000000000000001000000ffffffff0000000000000000010000800000000043050000000000000400000000000000ffffffffffffff7f000000000000000001000000000000000000000000000000000000002cbd70000035000002000000500000000000000060001200726663343130362867636d28616573292900"/201, @ANYBLOB="18"], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x44094}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r9 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) ioctl$IMDELTIMER(r9, 0x80044941, &(0x7f00000001c0)) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000040)=0x4, 0x4) sendto$inet(r2, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) splice(r2, 0x0, r1, 0x0, 0xfea8, 0xa) 2m24.800716709s ago: executing program 6 (id=2920): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r7, 0x3b}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000140)="d0", 0x5dc}], 0x1}, 0xc804) 2m9.759910729s ago: executing program 34 (id=2920): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r7, 0x3b}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000140)="d0", 0x5dc}], 0x1}, 0xc804) 13.920540693s ago: executing program 7 (id=3745): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x3, [@var={0x2, 0x0, 0x0, 0x11, 0x3, 0xffffffff}, @func_proto]}, {0x0, [0x61]}}, 0x0, 0x37}, 0x28) r0 = socket(0xa, 0x3, 0x4) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='bridge0\x00') 13.682609168s ago: executing program 3 (id=3746): bpf$TOKEN_CREATE(0x24, &(0x7f0000000200), 0x8) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x0) r2 = dup(r1) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x8, 0x105}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r3, &(0x7f0000000c40)=[{&(0x7f0000000140)=""/127, 0x7f}], 0x1, 0x0, 0x1) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$inet6(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)="944cf72d", 0x4}], 0x1}, 0x20000010) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1e000000fcffffff021f00000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) munmap(&(0x7f0000001000/0x2000)=nil, 0x2000) rt_sigqueueinfo(0x0, 0x21, &(0x7f0000000100)={0x1f}) sendmsg$unix(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000002c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000580)=[{&(0x7f00000004c0)="466b6d1b493ba0c036323c8f814d7243ed2a4b4a5fc2efbd9c4356c2bee1ee40f22bb3dca76e8f3feb95171abad0279298f18b1be267ed62848e58b18abf810a5f5dc2cdea33e3d82131cab953aa8a0bc9ad2eb8786527afffe77eb836bafc380e3bd27d484cfd3b85aeff5cc79b0ac87dbb54a1afc95d48ee12d312936d1ee6cd6c841696288c20475f896b773558f6b3f9ffd204409536c82b112b653af392733c288f77f5cc035009", 0xaa}], 0x1, 0x0, 0x0, 0x40004}, 0x880) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x1, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000ff7f0000000000009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ptrace$getsig(0x4202, 0x0, 0xfffffffffffffffd, &(0x7f0000000040)) r5 = syz_io_uring_setup(0xf00, &(0x7f00000001c0)={0x0, 0x4fbe, 0xc00, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r6, r7, r8, &(0x7f0000000080)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r5, 0x1, 0x135a, 0xa7, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000280)={0x0, 0x4}, 0x8) 13.21863283s ago: executing program 7 (id=3748): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='setgroups\x00') write$vhost_msg(r0, &(0x7f0000000840)={0x796e6564, {0x0, 0x0, 0x0}}, 0x7) 13.018685397s ago: executing program 7 (id=3750): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) getpid() r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x9a974000) ptrace(0x10, 0x0) ptrace(0x10, 0x0) ptrace(0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) 12.276124356s ago: executing program 3 (id=3755): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a44, 0x1700) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x3c, 0x64, 0x0, 0x7, 0x6, 0x0, @private=0xa010102, @remote}, {{0x6e22, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x8, 0x606d, 0x0, 0x1ff, {[@md5sig={0x13, 0x12, "0e958d0000f1ff000000ec2400000041"}]}}}}}}}, 0x0) 12.01818604s ago: executing program 3 (id=3757): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, 0x0, 0x40814) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f727400"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff705"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='blkio.bfq.idle_time\x00', 0x0, 0x0) preadv2(r5, &(0x7f0000000280)=[{&(0x7f00000008c0)=""/211, 0xd3}], 0x1, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1e000000000000000a000000fbffff"], 0x50) 11.558420226s ago: executing program 3 (id=3759): r0 = syz_usb_connect$lan78xx(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000c80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000008c0)="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", 0x155}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xfffffe8d}], 0x3, &(0x7f0000000380)=[@op={0x18}], 0x18, 0x800}], 0x1, 0x40800) 9.304557646s ago: executing program 5 (id=3771): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='setgroups\x00') write$vhost_msg(r0, &(0x7f0000000840)={0x796e6564, {0x0, 0x0, 0x0}}, 0x7) 9.295915772s ago: executing program 4 (id=3772): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a42, 0x0) r1 = dup(r0) mmap(&(0x7f0000535000/0x2000)=nil, 0x2000, 0xc, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 9.170516357s ago: executing program 5 (id=3773): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x121a03, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @vbi={0x6, 0x2, 0xc7a, 0x38414762, [0x3, 0x7], [0x2, 0x6], 0x2}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x0, 0x28}, 0x28) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f0000000380), 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRES32, @ANYBLOB="1000000000000000280012800b0001006272"], 0x48}}, 0x4084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0x0) syz_usb_connect$uac1(0x0, 0x0, 0x0, 0x0) r2 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x0) 9.104390056s ago: executing program 4 (id=3774): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f531d9ec214627c11430c1", 0x10) recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000b00)=""/46, 0x2e}, {&(0x7f0000000980)=""/106, 0x6a}, {&(0x7f0000000a00)=""/245, 0xf5}, {&(0x7f0000000d00)=""/103, 0x67}, {&(0x7f0000000c00)=""/243, 0xf3}, {&(0x7f0000000e80)=""/90, 0x5a}, {&(0x7f0000000f00)=""/50, 0x32}, {&(0x7f0000000000)=""/117, 0x75}, {&(0x7f0000000180)=""/109, 0x6d}, {&(0x7f0000000140)=""/23, 0x17}, {&(0x7f0000000280)=""/100, 0x64}, {&(0x7f0000000f80)=""/147, 0x93}], 0xc}, 0x3}], 0x1, 0x40, 0x0) sendmmsg$alg(r1, &(0x7f0000003000)=[{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000000240)="810cac7d", 0x4}, {&(0x7f00000033c0)="f5ac467833c129406b9fb74227deb178a089305826e44cfd7f63e9cdf5564909270b6644bb52a5dc8491543df407b54008cbe40ce096d8bcbfb31922bb83ab200a8552b045cbcb3858af82ca2bbafa8c9c88e0c6d7f5a814cd8c50c7f0b30d0f5d80d8edf340a5bbcd0f661371f4eca10ce1043da352b209a70a2a5917b4d5c9b3c9aff3646d66279facf5006a353cc21b2527beb2a2966b2de5f16d1dff662922cf7428691eb0196ae4c102c48740f73f2983285308af441ecb9901e7ce508ac319f8536ec7c7ac38cc994dcc4108c70766668e79a3f15f5e26bb32c42a044c59ac3eb5a12c29b8faf47240bbeed4f9cc2151a5a7339c6a9fc3a264eef894466367ff4e99bd1cd158ad892d22e9c74910f4dcc4a15d0bda7cfb6cd24ae68248164119c05a4cf8209eb7e8b1eb7fadcd71bb5975694206ab0c79e91e4e28bc66f800a25a28abe4862ba2ad30f5b1712dc576fd3dbd90d3b5fd419a027fea14f4b0f0d7e53eb8b44e5876b7163963bbc705962b8b93fd2b93ace470cc4ffd122b966fd43f3367327f10c6a85bc67ae3fdc22235dbcadb37f6fdbf3a4ea7d59ece8281881664c1a63890863a9c3822fbf1d5a3db21a5b28b5f850a0b3f038f70cc395b16d90e39d1dba622cfd980e2a87e5f3652bbe23e77678fcc261d6c95d0e4c10311fe24a479ccb9c9e9a52df2d71f71ca190e1a0f43e0a6aadc4e5b847e3cf4bff7918486551142533ab6ec65d56c13fb2e8b42266f6b4c646f641c27ac71caf1bd42715072ae7d0455f6c3da37780aacb54916fea5ae7da88ee7bf9a89c8da7cc8aa6995569ec94acc79fac6dbcc55ce0bc74916afb52719331c6d913d67da0bef31ffe6d03f55b483c1e03062b47ee149feca8ab633b14243ad6d836ce2d36bdae6de38dab024012264d4053e1bf67a7bb5d50c23f1332ae964df729aee8314d37ba7961390a57f8a6608a2613b566247600b0cd673c4e04e2b5046325871ae90cf614b6d596eeb1d7c33f0317cad3d98b92cc04379e6d07ce68d56ab5b470f29b6294965171385cd9053a858ec09e8c2c3a1bb0fa6b2ab3607a5931cfaeee6f2832ccb28adc567ada1d59b7cbe6577e84a9a33cb73dddb5521853df098850b4f9c5209d3a838e6b23ba524efb3d7308036e563b0d0d439361a20c8269125496257763fb69fa3efe949d5949356ea2c216fdd06fff6616caebb718e0d3f34541da48466e70863b147560534da4e5bb6d0908e0ac04d3bc186cda7637979f697a1a44ac3aa54ea99f32f2d1b50dd9e2ce04428e5e4e6290d20718d916b361b99d5a461b9924f94e05bde15509f60648152900b7a4b10d1408109501c96122c2e488519c05b2fe97cf7888e0b0e37ee9c3a24cd8dde1a3edeb86d79451bc7ec827dcc205e40543f8f2c426171546d7e7cebf492603f63d74ed47566f177da6d92ff268547f3a02cec476f2aa084f29dca079835b72aadb8d0a6b1304667b6197c51f6846b0f7195acb5d5032ebb4fced8c631dbc97063755e041ed17609b1b6e82fa5da5e2f699abddf630cf8e7975b3f577d66ba205c4a803e44ce54d08815e2bea6f6321741499c239b2046fb203b63e05fcbf4d1346dd215647eb1a6a54018f842e100b83e5190b74aa7dedb8426ace1b7a2ef7128fd7981b2c9b7e32b5a66d74ad97e84ad30f6861a37695dc10527601eba116fba69c7fcc87053b8796c53b25177dcbaa1c55401623ab3d114f3752c1310cff30c712d29640bfbeee1a3c983185ca73e021c60438c73b760124267444f737e29f30bb4fc5fd78252f7928aa5f0e5e261b5dc17c82dce3db5f20a335bbbb8817b1898b65cf8f6a02e9a69e3a3119899d64cdaa162c215f4b2357db6c8e4f6421192422caf89035ef88ef07a41e084e942ef57c62962129a79acd161ea05e114d1c485f729f2d67d4dc283488f68e5c4f72114e04a1236fffe2d58d9c1a6f51d9fbea8d810de802c8a0032689f9c091b1f0dba896d647dd6c14fdea592d18d7888abd812cd6f01cd880358f7588f1517e6c256465d0dce577bd6b450d974e619dfb2f8a945a8921622cce585a219d26bb01d02fd4ba2132f3ce4405c382af5624c22a9c5b42cc8ac951a76d6bb24dea6655c577f5cd98d0e840dacfd418e68103cd1d01edeee7cab170b990d6b93e354d908095c545cc458d5e2030dd5b6c225646a06f8aedb59fc853b0bca8e8aa5357803a6a3c494e793da5267f6c1be4f775144c61fbc29ae97717e56dbf71d24856e54f4b4801d088049ed2150baa4b7d2bdb856493e03d0a4999f3118558a32ce5c40ee257b1b90a185e5f83b733c20b56ba9525a47012cb251f4b2c4e9333ba1d275c2d69460ad58f3bcdbfcd90311681f3ddf31921e1b6606672a3dd4fb6c4a58ebb8d1fa65ca4024056a1217b5da95552b91ab17e523b01521cce7681bbe823d7bd23ea466e3f5f68298d956d686a480159cb3a4f0e22c287ec64115777c861a96ca88a13853748e4dbc6648e321572717260e638733f3e5cee62b82eebf5e975609397b9ff4a30c36c6aa7c25fdab51a2785c14cdc8170b265ae0c7777b1627c6a5b9c9c3ce", 0x72d}], 0x2, 0x0, 0x0, 0xc855}], 0x1, 0x4004004) recvmsg(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000600)=""/124}, {&(0x7f00000006c0)=""/128}, {&(0x7f0000000740)=""/105}, {&(0x7f00000007c0)=""/16}, {&(0x7f0000000800)=""/4}], 0x189}, 0x102) 8.963864727s ago: executing program 7 (id=3775): openat$panthor(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 6.635944263s ago: executing program 3 (id=3776): syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000880)=[0x77, 0x7]) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000040)=[0x2a, 0x7]) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000340)=[0x2a]) 6.398118483s ago: executing program 7 (id=3777): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xaece, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffc, 0x6, 0x0, @scatter={0x0, 0x3, 0x0}, &(0x7f0000000240)="be8d7acda0b2", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="12010000b9b66040ac0501b300e4090203010902120001000000000904000000ff0101"], 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'}) 5.879278736s ago: executing program 5 (id=3779): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000000)=0x2, 0x4) recvmmsg(r0, &(0x7f000000a440)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000028c0)=""/94, 0x5e}, 0x2}], 0x1, 0x10020, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r1 = socket$nl_route(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="240000005800410f9c00f4f90085b3a85c91fddf080001000501009f0800028001000000", 0x24) 5.874857672s ago: executing program 4 (id=3780): syz_open_dev$mouse(&(0x7f0000000140), 0x1, 0x24800) 5.814289856s ago: executing program 4 (id=3781): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, 0x0, 0x40814) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f727400"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff705"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='blkio.bfq.idle_time\x00', 0x0, 0x0) preadv2(r5, &(0x7f0000000280)=[{&(0x7f00000008c0)=""/211, 0xd3}], 0x1, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1e000000000000000a000000fbffff"], 0x50) 5.694236402s ago: executing program 4 (id=3783): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="48000000020601080000000000000000000000000d0003006c6973743a736574"], 0x48}}, 0x0) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11012, r1, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) execveat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)={[&(0x7f0000000140)='*:-\x00']}, &(0x7f0000000240)={[&(0x7f0000000200)='/dev/fuse\x00']}, 0x400) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd', @ANYRESHEX, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020}, 0x2020) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000006380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000810a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea2105600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000efff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b60000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ca8e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000364800000000000000000000000000000000000000000000000000000000004000", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x7fb, {0x0, 0x7f69ff17f1e1ab77}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, 0x0, 0x2c41, 0x0) flock(r2, 0x8) open(&(0x7f0000000000)='./file0\x00', 0x90000, 0x100) syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(0x0, 0x0, 0x8002) r4 = fcntl$dupfd(r3, 0x0, r3) write$sndseq(r4, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0xd, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) getsockopt$sock_buf(r5, 0x1, 0x1c, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) 5.662033697s ago: executing program 0 (id=3784): bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0x1, 0xe, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x58, '\x00', 0x0, @fallback=0x33}, 0x94) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='setgroups\x00') write$vhost_msg(r0, &(0x7f0000000840)={0x796e6564, {0x0, 0x0, 0x0}}, 0x7) 5.433407575s ago: executing program 0 (id=3785): pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r0, 0x0, 0x9, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0xfd2, &(0x7f0000000040)={0x0, 0x36e, 0xc000, 0xc, 0xa0002f5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000004"], 0x50) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000021180)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x10009) 5.355021186s ago: executing program 0 (id=3786): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffe00, {0x0, 0x0, 0x0, r2, {0x8}, {0xffff}, {0xfff2, 0xffe1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x45, 0x1, {0xe, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x6, 0x1, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x5, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x8000, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0x2, 0x5, 0x2, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 5.189567048s ago: executing program 0 (id=3787): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000040), 0x10001, &(0x7f0000000500)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r1, &(0x7f00000002c0)=@file={0x1, './file0\x00'}, 0x6e) 5.147632597s ago: executing program 0 (id=3788): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000009c0)={0x44, &(0x7f0000000080)={0x60, 0x6, 0xc, "ddff7f00000000ebe9d2f5d7"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000680)=ANY=[@ANYBLOB="0001b900000053"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.918277167s ago: executing program 5 (id=3789): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, r1, 0xf21, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000400), r0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x70}, 0x1, 0x0, 0x0, 0x4008011}, 0x40) 4.863898614s ago: executing program 5 (id=3790): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x121a03, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @vbi={0x6, 0x2, 0xc7a, 0x38414762, [0x3, 0x7], [0x2, 0x6], 0x2}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x0, 0x28}, 0x28) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f0000000380), 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRES32, @ANYBLOB="1000000000000000280012800b0001006272"], 0x48}}, 0x4084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0x0) syz_usb_connect$uac1(0x0, 0x0, 0x0, 0x0) r2 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x0) 4.819343189s ago: executing program 4 (id=3791): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) close(0xffffffffffffffff) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r4, &(0x7f0000001080)={&(0x7f0000000000)={0xa, 0x4e24, 0x9, @empty, 0x3}, 0x1c, 0x0, 0x0, &(0x7f0000000cc0)=[@pktinfo={{0x24, 0x29, 0x32, {@loopback={0xffff0000}}}}], 0x28}, 0x80c5) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r6, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004864}, 0x4c000) r7 = eventfd2(0xe5c, 0x80000) r8 = eventfd2(0x4, 0x0) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000140)={r8, 0x6, 0x2, r7}) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r9 = eventfd2(0xe5c, 0x80000) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000000)={r9, 0x7, 0x2, r7}) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, 0x0) 285.502548ms ago: executing program 7 (id=3792): r0 = inotify_init() r1 = epoll_create(0x800) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180)={0x1000}) epoll_pwait(r1, 0x0, 0x0, 0x6c, 0x0, 0x0) r2 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) inotify_add_watch(r0, &(0x7f00000001c0)='./file0\x00', 0x80000006) open(&(0x7f0000000080)='./file0\x00', 0x108242, 0x106) 151.848667ms ago: executing program 5 (id=3793): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, 0x0, 0x40814) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f727400"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='blkio.bfq.idle_time\x00', 0x0, 0x0) preadv2(r5, &(0x7f0000000280)=[{&(0x7f00000008c0)=""/211, 0xd3}], 0x1, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1e000000000000000a000000fbffff"], 0x50) 293.247µs ago: executing program 0 (id=3794): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) shutdown(r0, 0x1) 0s ago: executing program 3 (id=3795): setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e01, 0x5, @loopback, 0x9}}, 0x0, 0x0, 0x3d, 0x0, "bb02a3c364ca41d6357e544524474004000b42a21d7214bf92494925208a0e2f964e0000c534a6324d6193fcf19b2df3ee818afaa4ff1f56c54dc46d8b6d2ccd008aa0cc1dc2767bbe00"}, 0xd8) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500001000000000862dfde8000000"], 0x78) kernel console output (not intermixed with test programs): ss `syz.0.1788'. [ 690.624674][ T5884] usb 6-1: new low-speed USB device number 40 using dummy_hcd [ 690.786890][ T5884] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 690.786917][ T5884] usb 6-1: config 0 has no interface number 0 [ 690.786958][ T5884] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 690.786979][ T5884] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 690.787001][ T5884] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 690.787022][ T5884] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 690.787045][ T5884] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 690.787067][ T5884] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 690.787104][ T5884] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 690.787125][ T5884] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 690.855432][ T5884] usb 6-1: config 0 descriptor?? [ 690.929387][T12337] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 690.929584][T12337] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 691.139615][ T5884] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 691.296222][T12355] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048) [ 692.461867][T12358] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1790'. [ 692.550446][T12358] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 692.597350][T12358] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 692.794670][ T1692] usb 6-1: USB disconnect, device number 40 [ 692.815147][ T1692] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 693.591256][T12405] binder: 12404:12405 ioctl 4018620d 0 returned -22 [ 694.452657][T12423] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048) [ 695.343062][T12435] kAFS: unable to lookup cell '(,cľĚ' [ 697.462863][T12463] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048) [ 698.635050][T12473] binder: BINDER_SET_CONTEXT_MGR already set [ 698.635066][T12473] binder: 12472:12473 ioctl 4018620d 200000001000 returned -16 [ 699.818147][T12501] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1853'. [ 701.446059][T12535] kAFS: unable to lookup cell '(,cľĚ' [ 701.679196][ T5973] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 701.851611][ T5973] usb 7-1: config 0 has no interfaces? [ 701.853998][ T5973] usb 7-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 701.854025][ T5973] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 701.854045][ T5973] usb 7-1: Product: syz [ 701.854058][ T5973] usb 7-1: Manufacturer: syz [ 701.854072][ T5973] usb 7-1: SerialNumber: syz [ 701.897426][ T5973] usb 7-1: config 0 descriptor?? [ 702.406375][ T5973] usb 7-1: USB disconnect, device number 39 [ 703.576820][T12580] loop5: detected capacity change from 0 to 7 [ 703.588355][ T1692] usb 7-1: new full-speed USB device number 40 using dummy_hcd [ 703.616805][T12580] Dev loop5: unable to read RDB block 7 [ 703.616861][T12580] loop5: unable to read partition table [ 703.617077][T12580] loop5: partition table beyond EOD, truncated [ 703.617112][T12580] loop_reread_partitions: partition scan of loop5 (ţ被xü—źŃŕ– ) failed (rc=-5) [ 703.710384][T12401] Set syz1 is full, maxelem 65536 reached [ 703.760554][ T1692] usb 7-1: config index 0 descriptor too short (expected 35577, got 27) [ 703.760583][ T1692] usb 7-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 703.760602][ T1692] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 703.760620][ T1692] usb 7-1: config 1 has no interface number 0 [ 703.760664][ T1692] usb 7-1: config 1 interface 1 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 703.763870][ T1692] usb 7-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 703.763920][ T1692] usb 7-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 703.763942][ T1692] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 703.805182][ T1692] snd_usb_pod 7-1:1.1: Line 6 Pocket POD found [ 704.146121][ T1692] snd_usb_pod 7-1:1.1: endpoint not available, using fallback values [ 704.146528][ T1692] snd_usb_pod 7-1:1.1: invalid control EP [ 704.146542][ T1692] snd_usb_pod 7-1:1.1: cannot start listening: -22 [ 704.146825][ T1692] snd_usb_pod 7-1:1.1: Line 6 Pocket POD now disconnected [ 704.147343][ T1692] snd_usb_pod 7-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 704.372918][T12604] kAFS: unable to lookup cell '(,cľĚ' [ 705.867123][ T5884] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 706.029240][ T5884] usb 6-1: config 0 interface 0 altsetting 251 has an invalid descriptor for endpoint zero, skipping [ 706.029270][ T5884] usb 6-1: config 0 interface 0 has no altsetting 0 [ 706.029530][T12625] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1905'. [ 706.049304][ T5884] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 706.049333][ T5884] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 706.049353][ T5884] usb 6-1: Product: syz [ 706.049363][ T5884] usb 6-1: Manufacturer: syz [ 706.049370][ T5884] usb 6-1: SerialNumber: syz [ 706.108252][ T5884] usb 6-1: config 0 descriptor?? [ 706.281732][ T5884] snd-usb-audio 6-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 706.344450][ T1692] usb 6-1: USB disconnect, device number 41 [ 706.463941][T12536] udevd[12536]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 706.995594][ T1692] usb 7-1: USB disconnect, device number 40 [ 707.161076][T12647] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1916'. [ 707.330026][T12653] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1917'. [ 708.262598][ T5973] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 708.354899][T12683] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1930'. [ 708.449413][ T5973] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 708.449431][ T5973] usb 6-1: config 0 interface 0 has no altsetting 0 [ 708.452304][ T5973] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 708.452321][ T5973] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 708.452331][ T5973] usb 6-1: Product: syz [ 708.452338][ T5973] usb 6-1: Manufacturer: syz [ 708.452345][ T5973] usb 6-1: SerialNumber: syz [ 708.457393][ T5973] usb 6-1: config 0 descriptor?? [ 708.484011][ T5973] usb 6-1: selecting invalid altsetting 0 [ 708.731420][T12694] kAFS: unable to lookup cell '(,cľĚ' [ 708.896188][ T5973] usb 6-1: USB disconnect, device number 42 [ 709.175397][T12554] udevd[12554]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 709.615335][ T5967] usb 7-1: new full-speed USB device number 41 using dummy_hcd [ 709.766957][ T5967] usb 7-1: config index 0 descriptor too short (expected 35577, got 27) [ 709.766974][ T5967] usb 7-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 709.766985][ T5967] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 709.766995][ T5967] usb 7-1: config 1 has no interface number 0 [ 709.767020][ T5967] usb 7-1: config 1 interface 1 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 709.767031][ T5967] usb 7-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 709.767052][ T5967] usb 7-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 709.767063][ T5967] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 709.860738][ T5967] snd_usb_pod 7-1:1.1: Line 6 Pocket POD found [ 709.960932][T12714] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1942'. [ 710.233709][ T5967] snd_usb_pod 7-1:1.1: endpoint not available, using fallback values [ 710.233936][ T5967] snd_usb_pod 7-1:1.1: invalid control EP [ 710.233943][ T5967] snd_usb_pod 7-1:1.1: cannot start listening: -22 [ 710.234116][ T5967] snd_usb_pod 7-1:1.1: Line 6 Pocket POD now disconnected [ 710.234411][ T5967] snd_usb_pod 7-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 711.359906][T12735] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1949'. [ 711.410622][T12737] loop5: detected capacity change from 0 to 7 [ 711.412839][T12737] Dev loop5: unable to read RDB block 7 [ 711.412880][T12737] loop5: unable to read partition table [ 711.413083][T12737] loop5: partition table beyond EOD, truncated [ 711.480220][T12737] loop_reread_partitions: partition scan of loop5 (ţ被xü—źŃŕ– ) failed (rc=-5) [ 711.968844][ T5967] usb 7-1: USB disconnect, device number 41 [ 712.043958][ T5973] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 712.215510][ T5973] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 712.215542][ T5973] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 712.215563][ T5973] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 712.215604][ T5973] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 712.215626][ T5973] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 712.223669][ T5973] usb 6-1: config 0 descriptor?? [ 712.735340][ T5973] usbhid 6-1:0.0: can't add hid device: -71 [ 712.735465][ T5973] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 712.740293][ T5973] usb 6-1: USB disconnect, device number 43 [ 716.551870][T10897] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 716.571838][T10897] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 716.581933][T10897] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 716.599669][T10897] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 716.610608][T10897] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 717.015588][ T1228] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 717.364349][ T5815] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 717.378977][ T5815] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 717.380437][ T5815] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 717.388332][ T5815] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 717.389174][ T5815] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 718.393218][ T1228] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 718.701978][ T5815] Bluetooth: hci0: command tx timeout [ 718.813965][ T1228] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 719.141125][T12948] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2042'. [ 719.422057][ T5815] Bluetooth: hci2: command tx timeout [ 719.478870][T12987] loop7: detected capacity change from 0 to 16384 [ 719.993863][ C1] I/O error, dev loop7, sector 16 op 0x0:(READ) flags 0x880700 phys_seg 1 prio class 2 [ 720.000018][ C1] I/O error, dev loop7, sector 16 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 720.000057][ C1] Buffer I/O error on dev loop7, logical block 2, async page read [ 720.010403][T12995] loop7: detected capacity change from 16384 to 0 [ 720.327225][T12903] chnl_net:caif_netlink_parms(): no params data found [ 720.377711][T12930] chnl_net:caif_netlink_parms(): no params data found [ 720.565748][T13031] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2080'. [ 720.779577][ T5815] Bluetooth: hci0: command tx timeout [ 720.846467][ T1228] bridge_slave_1: left allmulticast mode [ 720.846494][ T1228] bridge_slave_1: left promiscuous mode [ 720.846720][ T1228] bridge0: port 2(bridge_slave_1) entered disabled state [ 720.917234][ T1228] bridge_slave_0: left allmulticast mode [ 720.917260][ T1228] bridge_slave_0: left promiscuous mode [ 720.917479][ T1228] bridge0: port 1(bridge_slave_0) entered disabled state [ 721.499295][ T5815] Bluetooth: hci2: command tx timeout [ 722.140058][ T1228] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 722.221524][ T1228] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 722.262747][ T1228] bond0 (unregistering): Released all slaves [ 722.859181][ T5815] Bluetooth: hci0: command tx timeout [ 723.052831][T12903] bridge0: port 1(bridge_slave_0) entered blocking state [ 723.052946][T12903] bridge0: port 1(bridge_slave_0) entered disabled state [ 723.053184][T12903] bridge_slave_0: entered allmulticast mode [ 723.069422][T12903] bridge_slave_0: entered promiscuous mode [ 723.192343][T12930] bridge0: port 1(bridge_slave_0) entered blocking state [ 723.192486][T12930] bridge0: port 1(bridge_slave_0) entered disabled state [ 723.192736][T12930] bridge_slave_0: entered allmulticast mode [ 723.197666][T12930] bridge_slave_0: entered promiscuous mode [ 723.206865][T12903] bridge0: port 2(bridge_slave_1) entered blocking state [ 723.209566][T12903] bridge0: port 2(bridge_slave_1) entered disabled state [ 723.209777][T12903] bridge_slave_1: entered allmulticast mode [ 723.219099][T12903] bridge_slave_1: entered promiscuous mode [ 723.305681][T12930] bridge0: port 2(bridge_slave_1) entered blocking state [ 723.305794][T12930] bridge0: port 2(bridge_slave_1) entered disabled state [ 723.306028][T12930] bridge_slave_1: entered allmulticast mode [ 723.343279][T12930] bridge_slave_1: entered promiscuous mode [ 723.578255][ T5815] Bluetooth: hci2: command tx timeout [ 724.042387][T12903] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 724.086045][T12930] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 724.110806][T12903] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 724.122775][T12930] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 724.397990][ T1228] hsr_slave_0: left promiscuous mode [ 724.447897][ T1228] hsr_slave_1: left promiscuous mode [ 724.448905][ T1228] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 724.448931][ T1228] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 724.510376][ T1228] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 724.510403][ T1228] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 724.613369][ T1228] veth1_macvtap: left promiscuous mode [ 724.613469][ T1228] veth0_macvtap: left promiscuous mode [ 724.613713][ T1228] veth1_vlan: left promiscuous mode [ 724.613877][ T1228] veth0_vlan: left promiscuous mode [ 724.938072][ T5815] Bluetooth: hci0: command tx timeout [ 725.661744][ T5815] Bluetooth: hci2: command tx timeout [ 725.818430][ T1228] team0 (unregistering): Port device team_slave_1 removed [ 725.898888][ T1228] team0 (unregistering): Port device team_slave_0 removed [ 726.574658][T12903] team0: Port device team_slave_0 added [ 726.584419][T12930] team0: Port device team_slave_0 added [ 726.593760][T12903] team0: Port device team_slave_1 added [ 726.675268][T12930] team0: Port device team_slave_1 added [ 726.831176][T12903] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 726.831194][T12903] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 726.831219][T12903] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 726.869497][T12903] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 726.869512][T12903] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 726.869537][T12903] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 726.896228][T12930] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 726.896245][T12930] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 726.896270][T12930] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 726.949762][T12930] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 726.949778][T12930] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 726.949804][T12930] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 727.126140][T12903] hsr_slave_0: entered promiscuous mode [ 727.133857][T12903] hsr_slave_1: entered promiscuous mode [ 727.134711][T12903] debugfs: 'hsr0' already exists in 'hsr' [ 727.134735][T12903] Cannot create hsr debugfs directory [ 727.223014][T12930] hsr_slave_0: entered promiscuous mode [ 727.224246][T12930] hsr_slave_1: entered promiscuous mode [ 727.225203][T12930] debugfs: 'hsr0' already exists in 'hsr' [ 727.225227][T12930] Cannot create hsr debugfs directory [ 728.626173][ T5813] Bluetooth: hci1: command 0x0406 tx timeout [ 728.626227][ T5813] Bluetooth: hci4: command 0x0406 tx timeout [ 729.611631][ T1228] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 730.214356][ T1228] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 730.693819][ T1228] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 732.691022][ T1228] bridge_slave_1: left allmulticast mode [ 732.691049][ T1228] bridge_slave_1: left promiscuous mode [ 732.691290][ T1228] bridge0: port 2(bridge_slave_1) entered disabled state [ 732.818065][ T1228] bridge_slave_0: left allmulticast mode [ 732.818094][ T1228] bridge_slave_0: left promiscuous mode [ 732.818318][ T1228] bridge0: port 1(bridge_slave_0) entered disabled state [ 733.736391][ T5815] Bluetooth: hci3: command 0x0406 tx timeout [ 734.455655][ T1228] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 734.533775][ T1228] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 734.580499][ T1228] bond0 (unregistering): Released all slaves [ 736.761662][ T1228] hsr_slave_0: left promiscuous mode [ 736.834611][ T1228] hsr_slave_1: left promiscuous mode [ 736.835603][ T1228] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 736.835628][ T1228] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 736.894253][ T1228] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 736.894279][ T1228] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 737.028000][ T1228] veth1_macvtap: left promiscuous mode [ 737.028104][ T1228] veth0_macvtap: left promiscuous mode [ 737.028361][ T1228] veth1_vlan: left promiscuous mode [ 737.028526][ T1228] veth0_vlan: left promiscuous mode [ 738.591556][ T1228] team0 (unregistering): Port device team_slave_1 removed [ 738.701374][ T1228] team0 (unregistering): Port device team_slave_0 removed [ 739.524987][T12903] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 739.574482][T12903] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 739.690804][T12903] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 739.900134][T12903] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 740.247183][T12930] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 740.343277][T12930] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 740.459843][T12930] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 740.519474][T12930] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 740.987577][T12903] 8021q: adding VLAN 0 to HW filter on device bond0 [ 741.073248][T12903] 8021q: adding VLAN 0 to HW filter on device team0 [ 741.094235][ T5970] bridge0: port 1(bridge_slave_0) entered blocking state [ 741.094376][ T5970] bridge0: port 1(bridge_slave_0) entered forwarding state [ 741.141069][ T72] bridge0: port 2(bridge_slave_1) entered blocking state [ 741.141158][ T72] bridge0: port 2(bridge_slave_1) entered forwarding state [ 741.374914][T12930] 8021q: adding VLAN 0 to HW filter on device bond0 [ 741.447039][T12930] 8021q: adding VLAN 0 to HW filter on device team0 [ 741.512706][ T6078] bridge0: port 1(bridge_slave_0) entered blocking state [ 741.512885][ T6078] bridge0: port 1(bridge_slave_0) entered forwarding state [ 741.568008][ T72] bridge0: port 2(bridge_slave_1) entered blocking state [ 741.568168][ T72] bridge0: port 2(bridge_slave_1) entered forwarding state [ 742.093627][T12903] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 742.210596][T12930] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 742.287382][T12930] veth0_vlan: entered promiscuous mode [ 742.355907][T12930] veth1_vlan: entered promiscuous mode [ 742.466098][T12930] veth0_macvtap: entered promiscuous mode [ 742.494293][T12930] veth1_macvtap: entered promiscuous mode [ 742.539203][T12930] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 742.572836][T12930] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 742.604890][ T103] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 742.612203][ T103] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 742.614128][ T103] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 742.637358][ T103] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 742.981020][ T5970] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 742.981040][ T5970] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 743.120749][ T72] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 743.120769][ T72] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 743.121306][T12903] veth0_vlan: entered promiscuous mode [ 743.189534][T12903] veth1_vlan: entered promiscuous mode [ 743.356995][T12903] veth0_macvtap: entered promiscuous mode [ 743.372326][T12903] veth1_macvtap: entered promiscuous mode [ 743.411360][T12903] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 743.460692][T12903] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 743.505398][ T1057] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 743.507875][ T1057] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 743.527997][ T1057] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 743.539703][ T1057] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 743.910877][ T1228] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 743.910906][ T1228] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 743.978607][ T5970] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 743.978635][ T5970] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 745.685582][ T72] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 745.744571][ T5815] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 745.759262][ T5815] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 745.766958][ T5815] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 745.788712][ T5815] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 745.789891][ T5815] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 746.416824][ T72] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 747.031954][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.033270][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.315641][ T72] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 747.760081][ T72] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 747.886813][ T5815] Bluetooth: hci2: command tx timeout [ 747.992105][T14020] chnl_net:caif_netlink_parms(): no params data found [ 748.432846][ T37] kauditd_printk_skb: 21 callbacks suppressed [ 748.432864][ T37] audit: type=1326 audit(1775152206.565:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14095 comm="syz.6.2551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcf43cc819 code=0x7ffc0000 [ 748.432915][ T37] audit: type=1326 audit(1775152206.565:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14095 comm="syz.6.2551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcf43cc819 code=0x7ffc0000 [ 748.432953][ T37] audit: type=1326 audit(1775152206.565:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14095 comm="syz.6.2551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7fbcf43cc819 code=0x7ffc0000 [ 748.432989][ T37] audit: type=1326 audit(1775152206.565:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14095 comm="syz.6.2551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcf43cc819 code=0x7ffc0000 [ 748.433030][ T37] audit: type=1326 audit(1775152206.565:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14095 comm="syz.6.2551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fbcf43cc819 code=0x7ffc0000 [ 748.433068][ T37] audit: type=1326 audit(1775152206.565:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14095 comm="syz.6.2551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fbcf43cc582 code=0x7ffc0000 [ 748.433105][ T37] audit: type=1326 audit(1775152206.565:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14095 comm="syz.6.2551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcf43cc819 code=0x7ffc0000 [ 748.433145][ T37] audit: type=1326 audit(1775152206.565:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14095 comm="syz.6.2551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7fbcf43cc819 code=0x7ffc0000 [ 748.433184][ T37] audit: type=1326 audit(1775152206.575:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14095 comm="syz.6.2551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcf43cc819 code=0x7ffc0000 [ 748.434951][ T37] audit: type=1326 audit(1775152206.575:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14095 comm="syz.6.2551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcf43cc819 code=0x7ffc0000 [ 748.838963][T14020] bridge0: port 1(bridge_slave_0) entered blocking state [ 748.839037][T14020] bridge0: port 1(bridge_slave_0) entered disabled state [ 748.839218][T14020] bridge_slave_0: entered allmulticast mode [ 748.848299][T14020] bridge_slave_0: entered promiscuous mode [ 748.998294][T14020] bridge0: port 2(bridge_slave_1) entered blocking state [ 748.998454][T14020] bridge0: port 2(bridge_slave_1) entered disabled state [ 748.998687][T14020] bridge_slave_1: entered allmulticast mode [ 749.029635][T14020] bridge_slave_1: entered promiscuous mode [ 749.207288][ T72] bridge_slave_1: left allmulticast mode [ 749.207305][ T72] bridge_slave_1: left promiscuous mode [ 749.207441][ T72] bridge0: port 2(bridge_slave_1) entered disabled state [ 749.313308][ T72] bridge_slave_0: left allmulticast mode [ 749.313336][ T72] bridge_slave_0: left promiscuous mode [ 749.313593][ T72] bridge0: port 1(bridge_slave_0) entered disabled state [ 749.965746][ T5815] Bluetooth: hci2: command tx timeout [ 750.403627][T14174] kAFS: unable to lookup cell '(,cľĚ' [ 751.449574][ T72] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 751.555134][ T72] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 751.620184][ T72] bond0 (unregistering): Released all slaves [ 751.686294][T14020] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 751.733018][T14020] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 751.960405][T14020] team0: Port device team_slave_0 added [ 751.962308][T14020] team0: Port device team_slave_1 added [ 752.059039][ T5815] Bluetooth: hci2: command tx timeout [ 752.119986][T14020] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 752.120003][T14020] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 752.120029][T14020] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 752.122179][T14020] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 752.122192][T14020] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 752.122217][T14020] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 753.998076][T14020] hsr_slave_0: entered promiscuous mode [ 754.000237][T14020] hsr_slave_1: entered promiscuous mode [ 754.002297][T14020] debugfs: 'hsr0' already exists in 'hsr' [ 754.002319][T14020] Cannot create hsr debugfs directory [ 754.122956][ T5815] Bluetooth: hci2: command tx timeout [ 754.562770][ T72] hsr_slave_0: left promiscuous mode [ 754.613149][ T72] hsr_slave_1: left promiscuous mode [ 754.614219][ T72] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 754.614244][ T72] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 754.653849][ T72] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 754.653876][ T72] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 754.766212][ T72] veth1_macvtap: left promiscuous mode [ 754.766313][ T72] veth0_macvtap: left promiscuous mode [ 754.766542][ T72] veth1_vlan: left promiscuous mode [ 754.766724][ T72] veth0_vlan: left promiscuous mode [ 755.132508][ T5973] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 755.285155][ T5973] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 755.285211][ T5973] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 755.285234][ T5973] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 755.322122][ T5973] usb 7-1: config 0 descriptor?? [ 755.363595][ T5973] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 755.543937][T14332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 755.544422][T14332] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 756.395045][ T72] team0 (unregistering): Port device team_slave_1 removed [ 756.498608][ T72] team0 (unregistering): Port device team_slave_0 removed [ 757.908581][ T5803] usb 7-1: USB disconnect, device number 42 [ 759.920049][ T5912] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 759.941666][T14020] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 759.978932][T14020] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 760.045183][T14020] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 760.076358][ T5912] usb 7-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 760.076388][ T5912] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 760.076407][ T5912] usb 7-1: Product: syz [ 760.076419][ T5912] usb 7-1: Manufacturer: syz [ 760.076432][ T5912] usb 7-1: SerialNumber: syz [ 760.114773][ T5912] usb 7-1: config 0 descriptor?? [ 760.145177][ T5912] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 760.149065][ T5912] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 760.149703][T14020] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 760.175393][ T5912] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 760.175453][ T5912] usb 7-1: media controller created [ 760.210859][ T5912] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 760.305199][ T5912] DVB: Unable to find symbol mt352_attach() [ 760.326361][T14504] dvb-usb: bulk message failed: -22 (7/0) [ 760.334262][T14504] kAFS: unable to lookup cell '(,' [ 760.408352][ T5912] DVB: Unable to find symbol nxt6000_attach() [ 760.408369][ T5912] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 760.432275][ T5912] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input37 [ 760.437228][ T5912] dvb-usb: schedule remote query interval to 1000 msecs. [ 760.437251][ T5912] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 760.437266][ T5912] dvb-usb: bulk message failed: -22 (7/0) [ 760.437281][ T5912] dvb-usb: bulk message failed: -22 (7/0) [ 760.484363][ T5912] usb 7-1: USB disconnect, device number 43 [ 760.749346][ T5912] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 760.879213][T14020] 8021q: adding VLAN 0 to HW filter on device bond0 [ 760.965875][T14020] 8021q: adding VLAN 0 to HW filter on device team0 [ 761.007764][ T72] bridge0: port 1(bridge_slave_0) entered blocking state [ 761.022827][ T72] bridge0: port 1(bridge_slave_0) entered forwarding state [ 761.051411][ T6079] bridge0: port 2(bridge_slave_1) entered blocking state [ 761.051597][ T6079] bridge0: port 2(bridge_slave_1) entered forwarding state [ 761.519704][ T5967] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 761.679300][ T5967] usb 7-1: Using ep0 maxpacket: 32 [ 761.684830][ T5967] usb 7-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 761.684892][ T5967] usb 7-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 761.684906][ T5967] usb 7-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 761.684921][ T5967] usb 7-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 761.740941][ T5967] usb 7-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 761.741000][ T5967] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 761.741019][ T5967] usb 7-1: Product: syz [ 761.741032][ T5967] usb 7-1: Manufacturer: syz [ 761.741044][ T5967] usb 7-1: SerialNumber: syz [ 761.841847][ C1] imon 7-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 761.927204][ T5967] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:155.0/input/input38 [ 761.999742][ T5967] imon 7-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 761.999761][ T5967] (id 0x00) [ 762.093854][T14020] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 762.292301][T14020] veth0_vlan: entered promiscuous mode [ 762.298900][ T5967] rc_core: IR keymap rc-imon-pad not found [ 762.298918][ T5967] Registered IR keymap rc-empty [ 762.299003][ T5967] imon 7-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 762.299021][ T5967] imon 7-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 762.325197][T14020] veth1_vlan: entered promiscuous mode [ 762.343695][ T5967] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:155.0/rc/rc0 [ 762.347835][ T5967] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:155.0/rc/rc0/input39 [ 762.401619][ T5967] imon 7-1:155.0: iMON device (15c2:ffdc, intf0) on usb<7:44> initialized [ 762.460282][T14020] veth0_macvtap: entered promiscuous mode [ 762.521102][T14020] veth1_macvtap: entered promiscuous mode [ 762.736173][T14020] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 762.976703][T14020] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 762.990007][ T5973] usb 7-1: USB disconnect, device number 44 [ 763.080981][ T72] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 763.097812][ T72] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 763.208974][ T72] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 763.288705][ T72] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 763.708175][ T5973] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 763.863478][ T5973] usb 7-1: Using ep0 maxpacket: 16 [ 763.864388][ T5973] usb 7-1: too many configurations: 123, using maximum allowed: 8 [ 763.865605][ T5973] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 763.866624][ T5973] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 763.867665][ T5973] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 763.927781][ T5973] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 763.955372][ T5973] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 763.977176][ T5973] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 763.979213][ T5973] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 763.980265][ T5973] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 763.981389][ T5973] usb 7-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 763.981413][ T5973] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 763.981432][ T5973] usb 7-1: SerialNumber: syz [ 764.037000][ T5973] usb 7-1: config 0 descriptor?? [ 764.057270][ T5973] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 764.176266][ T1057] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 764.176283][ T1057] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 764.275752][T14638] input: syz1 as /devices/virtual/input/input40 [ 764.415165][ T5967] usb 7-1: USB disconnect, device number 45 [ 764.627064][ T6078] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 764.627084][ T6078] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 765.217226][ T37] audit: type=1326 audit(1775152223.364:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14706 comm="syz.3.2798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff392d2c819 code=0x7ffc0000 [ 765.217405][ T37] audit: type=1326 audit(1775152223.364:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14706 comm="syz.3.2798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff392d2c819 code=0x7ffc0000 [ 765.219696][ T37] audit: type=1326 audit(1775152223.374:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14706 comm="syz.3.2798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7ff392d2c819 code=0x7ffc0000 [ 765.219733][ T37] audit: type=1326 audit(1775152223.374:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14706 comm="syz.3.2798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff392d2c819 code=0x7ffc0000 [ 765.221893][ T37] audit: type=1326 audit(1775152223.374:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14706 comm="syz.3.2798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff392d2c819 code=0x7ffc0000 [ 765.221927][ T37] audit: type=1326 audit(1775152223.374:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14706 comm="syz.3.2798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7ff392d2c819 code=0x7ffc0000 [ 765.221949][ T37] audit: type=1326 audit(1775152223.374:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14706 comm="syz.3.2798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff392d2c819 code=0x7ffc0000 [ 765.221973][ T37] audit: type=1326 audit(1775152223.374:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14706 comm="syz.3.2798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff392d2c819 code=0x7ffc0000 [ 765.221995][ T37] audit: type=1326 audit(1775152223.374:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14706 comm="syz.3.2798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7ff392d2c819 code=0x7ffc0000 [ 765.222015][ T37] audit: type=1326 audit(1775152223.374:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14706 comm="syz.3.2798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff392d2c582 code=0x7ffc0000 [ 766.330214][T10897] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 766.353401][T10897] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 766.357278][T10897] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 766.365189][T10897] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 766.366883][T10897] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 766.578863][T14730] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2804'. [ 766.706750][ T9694] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 766.856634][ T9694] usb 4-1: Using ep0 maxpacket: 32 [ 766.859958][ T9694] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 766.860063][ T9694] usb 4-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 766.860088][ T9694] usb 4-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 766.860111][ T9694] usb 4-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 766.863667][ T9694] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 766.863693][ T9694] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 766.863711][ T9694] usb 4-1: Product: syz [ 766.863768][ T9694] usb 4-1: Manufacturer: syz [ 766.863782][ T9694] usb 4-1: SerialNumber: syz [ 766.980674][ C0] imon 4-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 767.026870][ T9694] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/input/input41 [ 767.196444][ T9694] imon 4-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 767.196464][ T9694] (id 0x00) [ 767.316725][ T9694] rc_core: IR keymap rc-imon-pad not found [ 767.316745][ T9694] Registered IR keymap rc-empty [ 767.316823][ T9694] imon 4-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 767.316841][ T9694] imon 4-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 767.399688][ T9694] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0 [ 767.405021][ T9694] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0/input42 [ 767.448499][ T9694] imon 4-1:155.0: iMON device (15c2:ffdc, intf0) on usb<4:47> initialized [ 767.774239][ T6078] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 768.124878][ T6078] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 768.291341][T14788] imon:vfd_write: invalid payload size [ 768.410206][ T6078] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 768.446610][T10897] Bluetooth: hci5: command tx timeout [ 768.473271][T14717] chnl_net:caif_netlink_parms(): no params data found [ 768.920947][ T9641] usb 4-1: USB disconnect, device number 47 [ 769.279252][ T6078] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 770.313435][T14815] fuse: Unknown parameter 'group_i00000000000000000000' [ 770.514752][T10897] Bluetooth: hci5: command tx timeout [ 770.586946][T14824] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2846'. [ 770.785525][T14717] bridge0: port 1(bridge_slave_0) entered blocking state [ 770.785599][T14717] bridge0: port 1(bridge_slave_0) entered disabled state [ 770.785756][T14717] bridge_slave_0: entered allmulticast mode [ 770.792937][T14717] bridge_slave_0: entered promiscuous mode [ 770.834371][T14717] bridge0: port 2(bridge_slave_1) entered blocking state [ 770.851183][T14717] bridge0: port 2(bridge_slave_1) entered disabled state [ 770.851455][T14717] bridge_slave_1: entered allmulticast mode [ 770.880959][T14717] bridge_slave_1: entered promiscuous mode [ 771.633661][T14717] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 771.876182][T14717] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 772.135029][T14717] team0: Port device team_slave_0 added [ 772.149312][T14717] team0: Port device team_slave_1 added [ 772.311250][ T6078] bridge_slave_1: left allmulticast mode [ 772.311281][ T6078] bridge_slave_1: left promiscuous mode [ 772.311495][ T6078] bridge0: port 2(bridge_slave_1) entered disabled state [ 772.425428][ T6078] bridge_slave_0: left allmulticast mode [ 772.425456][ T6078] bridge_slave_0: left promiscuous mode [ 772.425714][ T6078] bridge0: port 1(bridge_slave_0) entered disabled state [ 772.598588][T10897] Bluetooth: hci5: command tx timeout [ 772.876711][T14872] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2866'. [ 774.682831][T10897] Bluetooth: hci5: command tx timeout [ 774.835669][ T6078] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 774.924894][ T6078] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 774.979592][ T6078] bond0 (unregistering): Released all slaves [ 775.083467][T14717] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 775.083483][T14717] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 775.083509][T14717] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 775.246732][T14717] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 775.246749][T14717] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 775.246775][T14717] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 775.590649][T14717] hsr_slave_0: entered promiscuous mode [ 775.592001][T14717] hsr_slave_1: entered promiscuous mode [ 775.607909][T14717] debugfs: 'hsr0' already exists in 'hsr' [ 775.607934][T14717] Cannot create hsr debugfs directory [ 776.228630][T14936] netlink: 108 bytes leftover after parsing attributes in process `syz.6.2892'. [ 776.868286][T14957] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2897'. [ 777.562156][ T6078] hsr_slave_0: left promiscuous mode [ 777.622165][ T6078] hsr_slave_1: left promiscuous mode [ 777.628264][ T6078] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 777.628293][ T6078] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 777.702216][ T6078] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 777.702243][ T6078] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 777.821542][ T6078] veth1_macvtap: left promiscuous mode [ 777.821606][ T6078] veth0_macvtap: left promiscuous mode [ 777.823811][ T6078] veth1_vlan: left promiscuous mode [ 777.823918][ T6078] veth0_vlan: left promiscuous mode [ 779.660253][ T1692] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 779.682442][ T6078] team0 (unregistering): Port device team_slave_1 removed [ 779.750860][ T6078] team0 (unregistering): Port device team_slave_0 removed [ 779.811071][ T1692] usb 4-1: Using ep0 maxpacket: 16 [ 779.812824][ T1692] usb 4-1: too many configurations: 123, using maximum allowed: 8 [ 779.813932][ T1692] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 779.814972][ T1692] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 779.816021][ T1692] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 779.817094][ T1692] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 779.840619][ T1692] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 779.841771][ T1692] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 779.842821][ T1692] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 779.843986][ T1692] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 779.845225][ T1692] usb 4-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 779.845248][ T1692] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 779.845267][ T1692] usb 4-1: SerialNumber: syz [ 779.855943][ T1692] usb 4-1: config 0 descriptor?? [ 779.888879][ T1692] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input43 [ 780.096053][T15011] input: syz1 as /devices/virtual/input/input44 [ 780.224962][ T5148] bcm5974 4-1:0.0: could not read from device [ 780.231576][ T1692] usb 4-1: USB disconnect, device number 48 [ 780.538605][T15024] syzkaller0: entered promiscuous mode [ 780.538631][T15024] syzkaller0: entered allmulticast mode [ 782.418891][ T1692] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 782.579447][ T1692] usb 4-1: Using ep0 maxpacket: 16 [ 782.580143][ T1692] usb 4-1: too many configurations: 123, using maximum allowed: 8 [ 782.616722][ T1692] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 782.617765][ T1692] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 782.641268][ T1692] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 782.642339][ T1692] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 782.643344][ T1692] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 782.644507][ T1692] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 782.645684][ T1692] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 782.646725][ T1692] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 782.647891][ T1692] usb 4-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 782.647912][ T1692] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 782.647923][ T1692] usb 4-1: SerialNumber: syz [ 782.660967][ T1692] usb 4-1: config 0 descriptor?? [ 782.695299][ T1692] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input45 [ 782.876260][T15108] input: syz1 as /devices/virtual/input/input46 [ 785.241090][ T5148] bcm5974 4-1:0.0: could not read from device [ 785.295716][ T1692] usb 4-1: USB disconnect, device number 49 [ 785.757127][ T1692] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 785.951111][ T1692] usb 4-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 785.951140][ T1692] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 785.951158][ T1692] usb 4-1: Product: syz [ 785.951172][ T1692] usb 4-1: Manufacturer: syz [ 785.951185][ T1692] usb 4-1: SerialNumber: syz [ 785.962966][ T1692] usb 4-1: config 0 descriptor?? [ 785.970958][ T1692] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 786.007422][ T1692] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 786.031987][ T1692] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 786.032044][ T1692] usb 4-1: media controller created [ 786.073876][ T1692] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 786.167115][ T1692] DVB: Unable to find symbol mt352_attach() [ 786.233525][ T1692] DVB: Unable to find symbol nxt6000_attach() [ 786.233535][ T1692] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 786.250529][ T1692] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input47 [ 786.256169][ T1692] dvb-usb: schedule remote query interval to 1000 msecs. [ 786.256208][ T1692] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 786.256237][ T1692] dvb-usb: bulk message failed: -22 (7/0) [ 786.256267][ T1692] dvb-usb: bulk message failed: -22 (7/0) [ 786.290121][T15234] dvb-usb: bulk message failed: -22 (7/0) [ 786.320152][T15234] kAFS: unable to lookup cell '(,' [ 787.438906][ T1692] dvb-usb: bulk message failed: -22 (7/0) [ 787.438960][ T1692] dvb-usb: error while querying for an remote control event. [ 788.508546][ T1692] dvb-usb: bulk message failed: -22 (7/0) [ 788.508575][ T1692] dvb-usb: error while querying for an remote control event. [ 789.545439][ T5973] dvb-usb: bulk message failed: -22 (7/0) [ 789.545463][ T5973] dvb-usb: error while querying for an remote control event. [ 790.584742][ T5973] dvb-usb: bulk message failed: -22 (7/0) [ 790.584765][ T5973] dvb-usb: error while querying for an remote control event. [ 791.624372][ T5973] dvb-usb: bulk message failed: -22 (7/0) [ 791.624395][ T5973] dvb-usb: error while querying for an remote control event. [ 792.663771][ T1692] dvb-usb: bulk message failed: -22 (7/0) [ 792.663792][ T1692] dvb-usb: error while querying for an remote control event. [ 793.703163][ T1692] dvb-usb: bulk message failed: -22 (7/0) [ 793.703184][ T1692] dvb-usb: error while querying for an remote control event. [ 794.690694][ T5815] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 794.723641][ T5815] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 794.724965][ T5815] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 794.725979][ T5815] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 794.727086][ T5815] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 794.742665][ T5912] dvb-usb: bulk message failed: -22 (7/0) [ 794.742683][ T5912] dvb-usb: error while querying for an remote control event. [ 795.782336][ T5973] dvb-usb: bulk message failed: -22 (7/0) [ 795.782358][ T5973] dvb-usb: error while querying for an remote control event. [ 796.821629][ T5973] dvb-usb: bulk message failed: -22 (7/0) [ 796.821651][ T5973] dvb-usb: error while querying for an remote control event. [ 796.823023][T10897] Bluetooth: hci1: command tx timeout [ 797.175798][ T5912] usb 4-1: USB disconnect, device number 50 [ 797.545465][ T5912] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 797.757916][ T37] kauditd_printk_skb: 20 callbacks suppressed [ 797.757933][ T37] audit: type=1326 audit(1775152255.920:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15703 comm="syz.3.3252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff392d2c819 code=0x7ffc0000 [ 797.757982][ T37] audit: type=1326 audit(1775152255.930:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15703 comm="syz.3.3252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff392d2c819 code=0x7ffc0000 [ 797.758023][ T37] audit: type=1326 audit(1775152255.930:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15703 comm="syz.3.3252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff392d2c819 code=0x7ffc0000 [ 797.758073][ T37] audit: type=1326 audit(1775152255.930:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15703 comm="syz.3.3252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff392d2c819 code=0x7ffc0000 [ 797.759047][ T37] audit: type=1326 audit(1775152255.930:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15703 comm="syz.3.3252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff392d2c819 code=0x7ffc0000 [ 797.759094][ T37] audit: type=1326 audit(1775152255.930:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15703 comm="syz.3.3252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff392d2c819 code=0x7ffc0000 [ 797.759140][ T37] audit: type=1326 audit(1775152255.930:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15703 comm="syz.3.3252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7ff392d2c819 code=0x7ffc0000 [ 797.759181][ T37] audit: type=1326 audit(1775152255.930:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15703 comm="syz.3.3252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff392d2c819 code=0x7ffc0000 [ 797.760616][ T37] audit: type=1326 audit(1775152255.930:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15703 comm="syz.3.3252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=296 compat=0 ip=0x7ff392d2c819 code=0x7ffc0000 [ 797.760658][ T37] audit: type=1326 audit(1775152255.930:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15703 comm="syz.3.3252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff392d2c819 code=0x7ffc0000 [ 798.900604][T10897] Bluetooth: hci1: command tx timeout [ 800.979615][T10897] Bluetooth: hci1: command tx timeout [ 801.968774][T15757] syzkaller0: entered promiscuous mode [ 803.041144][ T6078] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 803.058511][T10897] Bluetooth: hci1: command tx timeout [ 803.528363][ T5973] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 803.557862][ T6078] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 803.644689][T15579] chnl_net:caif_netlink_parms(): no params data found [ 803.684092][ T5973] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 803.684146][ T5973] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 803.685614][ T5973] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 803.685641][ T5973] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 803.685660][ T5973] usb 4-1: Manufacturer: syz [ 803.734121][ T5973] usb 4-1: config 0 descriptor?? [ 803.878024][ T5973] rc_core: IR keymap rc-hauppauge not found [ 803.878043][ T5973] Registered IR keymap rc-empty [ 803.879557][ T5973] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 803.925886][ T5973] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input48 [ 803.977182][ T5973] usb 4-1: USB disconnect, device number 51 [ 804.305090][ T6078] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 804.350961][T14717] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 804.419728][T14717] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 804.662770][ T6078] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 804.723827][T14717] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 804.855950][T14717] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 805.017736][T15869] syzkaller0: entered promiscuous mode [ 805.062041][T15579] bridge0: port 1(bridge_slave_0) entered blocking state [ 805.062225][T15579] bridge0: port 1(bridge_slave_0) entered disabled state [ 805.062476][T15579] bridge_slave_0: entered allmulticast mode [ 805.070298][T15579] bridge_slave_0: entered promiscuous mode [ 805.268269][T15579] bridge0: port 2(bridge_slave_1) entered blocking state [ 805.268383][T15579] bridge0: port 2(bridge_slave_1) entered disabled state [ 805.268617][T15579] bridge_slave_1: entered allmulticast mode [ 805.271066][T15579] bridge_slave_1: entered promiscuous mode [ 805.567991][T15579] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 805.623763][T15579] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 805.859745][T15579] team0: Port device team_slave_0 added [ 805.914358][T15579] team0: Port device team_slave_1 added [ 806.130744][T15579] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 806.130762][T15579] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 806.130787][T15579] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 806.135570][T15579] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 806.135586][T15579] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 806.135612][T15579] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 806.143618][ T6078] bridge_slave_1: left allmulticast mode [ 806.143646][ T6078] bridge_slave_1: left promiscuous mode [ 806.143862][ T6078] bridge0: port 2(bridge_slave_1) entered disabled state [ 806.298875][ T6078] bridge_slave_0: left allmulticast mode [ 806.298903][ T6078] bridge_slave_0: left promiscuous mode [ 806.299132][ T6078] bridge0: port 1(bridge_slave_0) entered disabled state [ 806.648949][T15942] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3337'. [ 807.657067][ T6078] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 807.740765][ T6078] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 807.784900][ T6078] bond0 (unregistering): Released all slaves [ 808.132507][T15579] hsr_slave_0: entered promiscuous mode [ 808.133902][T15579] hsr_slave_1: entered promiscuous mode [ 808.316370][ T37] kauditd_printk_skb: 3 callbacks suppressed [ 808.316386][ T37] audit: type=1326 audit(1775152266.485:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15986 comm="syz.0.3350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3ef5cc819 code=0x7ffc0000 [ 808.316630][ T37] audit: type=1326 audit(1775152266.495:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15986 comm="syz.0.3350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3ef5cc819 code=0x7ffc0000 [ 808.330679][ T37] audit: type=1326 audit(1775152266.495:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15986 comm="syz.0.3350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fe3ef5cc819 code=0x7ffc0000 [ 808.341933][ T37] audit: type=1326 audit(1775152266.515:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15986 comm="syz.0.3350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3ef5cc819 code=0x7ffc0000 [ 808.341988][ T37] audit: type=1326 audit(1775152266.515:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15986 comm="syz.0.3350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7fe3ef5cc819 code=0x7ffc0000 [ 808.342027][ T37] audit: type=1326 audit(1775152266.515:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15986 comm="syz.0.3350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3ef5cc819 code=0x7ffc0000 [ 808.342075][ T37] audit: type=1326 audit(1775152266.515:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15986 comm="syz.0.3350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fe3ef5cc819 code=0x7ffc0000 [ 808.342115][ T37] audit: type=1326 audit(1775152266.515:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15986 comm="syz.0.3350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe3ef5cc582 code=0x7ffc0000 [ 808.342159][ T37] audit: type=1326 audit(1775152266.515:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15986 comm="syz.0.3350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3ef5cc819 code=0x7ffc0000 [ 808.342198][ T37] audit: type=1326 audit(1775152266.515:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15986 comm="syz.0.3350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7fe3ef5cc819 code=0x7ffc0000 [ 808.430950][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.431018][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.969684][T16016] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3358'. [ 810.115916][T14717] 8021q: adding VLAN 0 to HW filter on device bond0 [ 810.309809][ T6078] hsr_slave_0: left promiscuous mode [ 810.346199][ T6078] hsr_slave_1: left promiscuous mode [ 810.347375][ T6078] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 810.347401][ T6078] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 810.400603][ T6078] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 810.400638][ T6078] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 810.523178][ T6078] veth1_macvtap: left promiscuous mode [ 810.523281][ T6078] veth0_macvtap: left promiscuous mode [ 810.537430][ T6078] veth1_vlan: left promiscuous mode [ 810.537816][ T6078] veth0_vlan: left promiscuous mode [ 810.605390][T16041] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3369'. [ 811.446308][ T6078] team0 (unregistering): Port device team_slave_1 removed [ 811.495247][ T6078] team0 (unregistering): Port device team_slave_0 removed [ 811.897887][T14717] 8021q: adding VLAN 0 to HW filter on device team0 [ 811.942581][ T103] bridge0: port 1(bridge_slave_0) entered blocking state [ 811.943360][ T103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 812.059231][ T1228] bridge0: port 2(bridge_slave_1) entered blocking state [ 812.059467][ T1228] bridge0: port 2(bridge_slave_1) entered forwarding state [ 812.439784][T15579] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 812.531589][T15579] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 812.575256][T16119] netlink: 108 bytes leftover after parsing attributes in process `syz.0.3405'. [ 812.599035][T15579] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 812.709960][T16122] kAFS: unable to lookup cell '˙' [ 812.793778][T15579] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 813.790620][T15579] 8021q: adding VLAN 0 to HW filter on device bond0 [ 813.898613][T15579] 8021q: adding VLAN 0 to HW filter on device team0 [ 813.937778][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 813.941334][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 813.962782][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 813.962990][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 814.339230][T14717] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 814.791892][T15579] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 815.259005][T14717] veth0_vlan: entered promiscuous mode [ 815.298870][T14717] veth1_vlan: entered promiscuous mode [ 815.401073][T14717] veth0_macvtap: entered promiscuous mode [ 815.427776][T14717] veth1_macvtap: entered promiscuous mode [ 815.519178][T14717] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 815.547840][T14717] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 815.590724][T14816] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 815.594230][T14816] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 815.620517][T14816] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 815.624576][T14816] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 815.647739][T15579] veth0_vlan: entered promiscuous mode [ 815.676381][T15579] veth1_vlan: entered promiscuous mode [ 815.702221][ T9641] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 815.866189][ T9641] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 815.866237][ T9641] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 815.866262][ T9641] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 815.866283][ T9641] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 815.867387][ T9641] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 815.867414][ T9641] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 815.867433][ T9641] usb 4-1: Manufacturer: syz [ 815.884531][ T9641] usb 4-1: config 0 descriptor?? [ 816.280299][T15579] veth0_macvtap: entered promiscuous mode [ 816.326424][ T6078] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 816.326446][ T6078] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 816.371432][ T9641] hid_parser_main: 8 callbacks suppressed [ 816.371453][ T9641] appleir 0003:05AC:8243.000D: unknown main item tag 0x0 [ 816.378999][T15579] veth1_macvtap: entered promiscuous mode [ 816.410247][ T9641] appleir 0003:05AC:8243.000D: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 816.589475][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 816.589495][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 816.607291][T15579] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 816.665452][T15579] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 816.707165][ T12] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 816.707537][ T12] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 816.707905][ T12] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 816.708242][ T12] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 817.170847][ T5967] usb 4-1: USB disconnect, device number 52 [ 817.270062][ T1113] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 817.270113][ T1113] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 820.134824][ T37] kauditd_printk_skb: 2 callbacks suppressed [ 820.134841][ T37] audit: type=1326 audit(1775152278.291:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16261 comm="syz.3.3442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff392d2c819 code=0x7ffc0000 [ 820.135048][ T37] audit: type=1326 audit(1775152278.291:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16261 comm="syz.3.3442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff392d2c819 code=0x7ffc0000 [ 820.135092][ T37] audit: type=1326 audit(1775152278.291:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16261 comm="syz.3.3442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7ff392d2c819 code=0x7ffc0000 [ 820.135169][ T37] audit: type=1326 audit(1775152278.291:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16261 comm="syz.3.3442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff392d2c819 code=0x7ffc0000 [ 820.135263][ T37] audit: type=1326 audit(1775152278.291:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16261 comm="syz.3.3442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff392d2c819 code=0x7ffc0000 [ 820.135372][ T37] audit: type=1326 audit(1775152278.291:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16261 comm="syz.3.3442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7ff392d2c819 code=0x7ffc0000 [ 820.135488][ T37] audit: type=1326 audit(1775152278.291:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16261 comm="syz.3.3442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff392d2c819 code=0x7ffc0000 [ 820.135600][ T37] audit: type=1326 audit(1775152278.301:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16261 comm="syz.3.3442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7ff392d2c819 code=0x7ffc0000 [ 820.135708][ T37] audit: type=1326 audit(1775152278.321:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16261 comm="syz.3.3442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff392d2c582 code=0x7ffc0000 [ 820.135821][ T37] audit: type=1326 audit(1775152278.321:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16261 comm="syz.3.3442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff392d2c819 code=0x7ffc0000 [ 821.256921][T16269] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3444'. [ 821.496739][ T1057] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 821.496760][ T1057] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 822.899289][ T5815] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 822.914929][ T5815] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 822.929894][ T5815] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 822.932098][ T5815] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 822.933092][ T5815] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 825.207536][ T5815] Bluetooth: hci0: command tx timeout [ 827.104150][T16323] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3459'. [ 827.297943][ T5815] Bluetooth: hci0: command tx timeout [ 827.896086][ T5803] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 828.048373][ T5803] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 828.048390][ T5803] usb 4-1: config 1 descriptor has 1 excess byte, ignoring [ 828.048400][ T5803] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 828.048426][ T5803] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 828.050062][ T5803] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 828.050081][ T5803] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 828.050091][ T5803] usb 4-1: Product: syz [ 828.050097][ T5803] usb 4-1: Manufacturer: syz [ 828.072672][ T5803] cdc_wdm 4-1:1.0: skipping garbage [ 828.072711][ T5803] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 828.351148][ T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 829.365414][ T5815] Bluetooth: hci0: command tx timeout [ 830.460484][ T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 830.540653][T16370] fuse: Bad value for 'fd' [ 831.444337][ T5815] Bluetooth: hci0: command tx timeout [ 831.581066][ T5803] usb 4-1: USB disconnect, device number 53 [ 831.960156][T16382] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3473'. [ 832.182078][ T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 832.301451][T16384] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 832.676865][ T12] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 832.860573][T16407] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 833.427970][T16306] chnl_net:caif_netlink_parms(): no params data found [ 833.735593][ T1692] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 833.885479][ T1692] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 833.885513][ T1692] usb 5-1: config 1 has an invalid descriptor of length 56, skipping remainder of the config [ 833.885532][ T1692] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 833.885578][ T1692] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 833.887572][ T1692] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 833.887599][ T1692] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 833.887618][ T1692] usb 5-1: Product: syz [ 833.887631][ T1692] usb 5-1: Manufacturer: syz [ 833.899658][ T1692] cdc_wdm 5-1:1.0: skipping garbage [ 833.899696][ T1692] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 834.160717][T16418] fuse: Bad value for 'fd' [ 834.177709][T16306] bridge0: port 1(bridge_slave_0) entered blocking state [ 834.177892][T16306] bridge0: port 1(bridge_slave_0) entered disabled state [ 834.178083][T16306] bridge_slave_0: entered allmulticast mode [ 834.181048][T16306] bridge_slave_0: entered promiscuous mode [ 834.244531][T16306] bridge0: port 2(bridge_slave_1) entered blocking state [ 834.244657][T16306] bridge0: port 2(bridge_slave_1) entered disabled state [ 834.244883][T16306] bridge_slave_1: entered allmulticast mode [ 834.247519][T16306] bridge_slave_1: entered promiscuous mode [ 834.326836][ T12] bridge_slave_1: left allmulticast mode [ 834.326864][ T12] bridge_slave_1: left promiscuous mode [ 834.327106][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 834.499012][ T12] bridge_slave_0: left allmulticast mode [ 834.499053][ T12] bridge_slave_0: left promiscuous mode [ 834.499656][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 834.552494][T16424] PKCS7: Unknown OID: [4] 5.25.287.112.81.102.117.87.150326315.2007.15776.1 [ 834.552514][T16424] PKCS7: Only support pkcs7_signedData type [ 837.408295][ T9675] usb 5-1: USB disconnect, device number 52 [ 837.813176][T16444] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3489'. [ 837.813211][T16444] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 837.813228][T16444] openvswitch: netlink: Message has 16 unknown bytes. [ 838.573457][ T37] kauditd_printk_skb: 1 callbacks suppressed [ 838.573471][ T37] audit: type=1326 audit(1775152296.760:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16451 comm="syz.3.3490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff392d2c819 code=0x7ffc0000 [ 838.573497][ T37] audit: type=1326 audit(1775152296.760:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16451 comm="syz.3.3490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff392d2c819 code=0x7ffc0000 [ 838.573520][ T37] audit: type=1326 audit(1775152296.760:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16451 comm="syz.3.3490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff392d2c819 code=0x7ffc0000 [ 838.573543][ T37] audit: type=1326 audit(1775152296.760:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16451 comm="syz.3.3490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff392d2c819 code=0x7ffc0000 [ 838.573564][ T37] audit: type=1326 audit(1775152296.760:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16451 comm="syz.3.3490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff392d2c819 code=0x7ffc0000 [ 838.573586][ T37] audit: type=1326 audit(1775152296.760:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16451 comm="syz.3.3490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff392d2c819 code=0x7ffc0000 [ 838.573607][ T37] audit: type=1326 audit(1775152296.760:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16451 comm="syz.3.3490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff392d2c819 code=0x7ffc0000 [ 838.573629][ T37] audit: type=1326 audit(1775152296.760:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16451 comm="syz.3.3490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff392d2c819 code=0x7ffc0000 [ 838.573650][ T37] audit: type=1326 audit(1775152296.760:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16451 comm="syz.3.3490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7ff392d2c819 code=0x7ffc0000 [ 838.573671][ T37] audit: type=1326 audit(1775152296.760:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16451 comm="syz.3.3490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff392d2c819 code=0x7ffc0000 [ 839.401594][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 839.460775][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 839.497037][T16454] fuse: Bad value for 'fd' [ 839.503283][ T12] bond0 (unregistering): Released all slaves [ 839.689832][T16306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 839.752945][T16458] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 839.772012][T16306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 839.963187][T16462] PKCS7: Unknown OID: [4] 5.25.287.112.81.102.117.87.150326315.2007.15776.1 [ 839.963207][T16462] PKCS7: Only support pkcs7_signedData type [ 841.446602][ T5803] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 841.831375][ T5803] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 841.831403][ T5803] usb 5-1: config 1 has an invalid descriptor of length 56, skipping remainder of the config [ 841.831421][ T5803] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 841.831537][ T5803] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 842.053240][ T5803] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 842.053298][ T5803] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 842.053318][ T5803] usb 5-1: Product: syz [ 842.053331][ T5803] usb 5-1: Manufacturer: syz [ 844.895462][ T5803] usb 5-1: can't set config #1, error -71 [ 844.919106][ T5803] usb 5-1: USB disconnect, device number 53 [ 845.012119][T16306] team0: Port device team_slave_0 added [ 845.051253][T16306] team0: Port device team_slave_1 added [ 845.337542][T16484] kAFS: unable to lookup cell '˙' [ 845.627267][ T5803] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 845.676743][T16306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 845.676761][T16306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 845.676784][T16306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 845.679397][T16306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 845.679421][T16306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 845.679446][T16306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 845.785031][ T5803] usb 8-1: config index 0 descriptor too short (expected 23569, got 27) [ 845.785065][ T5803] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 845.786566][ T5803] usb 8-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 845.786682][ T5803] usb 8-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 845.786702][ T5803] usb 8-1: Manufacturer: syz [ 845.844464][T16492] PKCS7: Unknown OID: [4] 5.25.287.112.81.102.117.87.150326315.2007.15776.1 [ 845.844476][T16492] PKCS7: Only support pkcs7_signedData type [ 845.856077][ T5803] usb 8-1: config 0 descriptor?? [ 846.137516][ T5803] rc_core: IR keymap rc-hauppauge not found [ 846.137535][ T5803] Registered IR keymap rc-empty [ 846.142438][ T5803] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0 [ 846.145659][ T5803] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input49 [ 846.197465][ C0] igorplugusb 8-1:0.0: Error: urb status = -32 [ 846.197684][ C0] raw-gadget.0 gadget.7: ignoring, device is not running [ 846.197728][ C0] igorplugusb 8-1:0.0: Error: urb status = -32 [ 846.256329][ T5803] usb 8-1: USB disconnect, device number 2 [ 846.327006][ T12] hsr_slave_0: left promiscuous mode [ 846.406880][ T12] hsr_slave_1: left promiscuous mode [ 846.407624][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 846.407641][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 846.461700][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 846.461723][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 846.600333][ T12] veth1_macvtap: left promiscuous mode [ 846.600403][ T12] veth0_macvtap: left promiscuous mode [ 846.600540][ T12] veth1_vlan: left promiscuous mode [ 846.600644][ T12] veth0_vlan: left promiscuous mode [ 846.686757][ T9641] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 846.857751][ T9641] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 846.857778][ T9641] usb 4-1: config 1 has an invalid descriptor of length 56, skipping remainder of the config [ 846.857795][ T9641] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 846.857825][ T9641] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 846.859452][ T9641] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 846.859469][ T9641] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 846.859479][ T9641] usb 4-1: Product: syz [ 846.859486][ T9641] usb 4-1: Manufacturer: syz [ 846.989195][ T9641] cdc_wdm 4-1:1.0: skipping garbage [ 846.989235][ T9641] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 850.594158][ T9675] usb 4-1: USB disconnect, device number 54 [ 851.103305][T16536] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 851.116936][T16533] PKCS7: Unknown OID: [4] 5.25.287.112.81.102.117.87.150326315.2007.15776.1 [ 851.116949][T16533] PKCS7: Only support pkcs7_signedData type [ 851.754444][ T9675] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 851.959146][ T9675] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 851.959201][ T9675] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 851.960303][ T9675] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 851.960328][ T9675] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 851.960339][ T9675] usb 5-1: Manufacturer: syz [ 851.979070][ T9675] usb 5-1: config 0 descriptor?? [ 852.013309][T16556] kAFS: unable to lookup cell '˙' [ 852.380108][ T9675] rc_core: IR keymap rc-hauppauge not found [ 852.380130][ T9675] Registered IR keymap rc-empty [ 852.396474][ T9675] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 852.400871][ T9675] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input50 [ 852.420395][ C1] igorplugusb 5-1:0.0: Error: urb status = -32 [ 852.449758][ T9675] usb 5-1: USB disconnect, device number 54 [ 852.834297][ T12] team0 (unregistering): Port device team_slave_1 removed [ 852.895711][ T12] team0 (unregistering): Port device team_slave_0 removed [ 853.146888][ T37] kauditd_printk_skb: 6 callbacks suppressed [ 853.146905][ T37] audit: type=1326 audit(1775152311.348:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16559 comm="syz.3.3523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff392d2c819 code=0x7ffc0000 [ 853.155341][ T37] audit: type=1326 audit(1775152311.348:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16559 comm="syz.3.3523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7ff392d2c819 code=0x7ffc0000 [ 853.155382][ T37] audit: type=1326 audit(1775152311.348:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16559 comm="syz.3.3523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff392d2c819 code=0x7ffc0000 [ 853.155415][ T37] audit: type=1326 audit(1775152311.348:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16559 comm="syz.3.3523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7ff392d2c819 code=0x7ffc0000 [ 853.155437][ T37] audit: type=1326 audit(1775152311.348:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16559 comm="syz.3.3523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff392d2c819 code=0x7ffc0000 [ 853.155458][ T37] audit: type=1326 audit(1775152311.348:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16559 comm="syz.3.3523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7ff392d2c819 code=0x7ffc0000 [ 853.155480][ T37] audit: type=1326 audit(1775152311.348:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16559 comm="syz.3.3523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff392d2c819 code=0x7ffc0000 [ 853.167082][ T37] audit: type=1326 audit(1775152311.358:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16559 comm="syz.3.3523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7ff392d2c819 code=0x7ffc0000 [ 853.168506][ T37] audit: type=1326 audit(1775152311.368:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16559 comm="syz.3.3523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff392d2c582 code=0x7ffc0000 [ 853.172688][ T37] audit: type=1326 audit(1775152311.368:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16559 comm="syz.3.3523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff392d2c819 code=0x7ffc0000 [ 853.253426][ T9675] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 853.449437][ T9675] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 853.449485][ T9675] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 853.450691][ T9675] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 853.450713][ T9675] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 853.450723][ T9675] usb 5-1: Manufacturer: syz [ 853.454464][ T9675] usb 5-1: config 0 descriptor?? [ 853.603297][ T9675] rc_core: IR keymap rc-hauppauge not found [ 853.603311][ T9675] Registered IR keymap rc-empty [ 853.604305][ T9675] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 853.606527][ T9675] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input51 [ 853.720323][ C1] igorplugusb 5-1:0.0: Error: urb status = -32 [ 853.904437][ T9675] usb 5-1: USB disconnect, device number 55 [ 853.970597][T16306] hsr_slave_0: entered promiscuous mode [ 853.971410][T16306] hsr_slave_1: entered promiscuous mode [ 853.971945][T16306] debugfs: 'hsr0' already exists in 'hsr' [ 853.971960][T16306] Cannot create hsr debugfs directory [ 857.605597][T16584] fuse: Bad value for 'fd' [ 857.660993][T16584] Invalid argument reading file caps for ./file0 [ 858.483671][T16592] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 858.483688][T16592] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 858.500794][T16592] vhci_hcd vhci_hcd.0: Device attached [ 858.627599][T16602] trusted_key: encrypted_key: master key parameter 'd=Čá' is invalid [ 858.631534][T16600] IPVS: set_ctl: invalid protocol: 43 100.1.1.1:20002 [ 858.780688][ T9] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 858.818762][T16596] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 858.828041][T16595] vhci_hcd: connection closed [ 858.836950][T16372] vhci_hcd vhci_hcd.0: stop threads [ 858.838095][T16372] vhci_hcd vhci_hcd.0: release socket [ 858.870494][T16372] vhci_hcd vhci_hcd.0: disconnect device [ 859.482219][ T1692] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 859.692433][ T1692] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 859.692489][ T1692] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 859.693548][ T1692] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 859.693573][ T1692] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 859.693590][ T1692] usb 4-1: Manufacturer: syz [ 859.696607][ T1692] usb 4-1: config 0 descriptor?? [ 859.951458][ T1692] rc_core: IR keymap rc-hauppauge not found [ 859.951477][ T1692] Registered IR keymap rc-empty [ 859.953081][ T1692] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 859.956143][ T1692] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input52 [ 860.126760][ T1692] usb 4-1: USB disconnect, device number 55 [ 860.144662][T16624] kAFS: unable to lookup cell '˙' [ 860.910961][T16630] tipc: Started in network mode [ 860.910981][T16630] tipc: Node identity 3628f6a61254, cluster identity 4711 [ 860.911728][T16630] tipc: Enabled bearer , priority 0 [ 861.102326][T16628] tipc: Resetting bearer [ 861.353530][T16631] syzkaller0: entered promiscuous mode [ 861.353555][T16631] syzkaller0: entered allmulticast mode [ 861.632162][T16627] tipc: Resetting bearer [ 862.156774][ T5912] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 862.219481][T16627] tipc: Disabling bearer [ 862.321122][ T5912] usb 8-1: config index 0 descriptor too short (expected 23569, got 27) [ 862.321185][ T5912] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 862.322576][ T5912] usb 8-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 862.322604][ T5912] usb 8-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 862.322622][ T5912] usb 8-1: Manufacturer: syz [ 862.395021][ T5912] usb 8-1: config 0 descriptor?? [ 862.438549][ T1692] tipc: Node number set to 612169382 [ 862.678715][ T5912] rc_core: IR keymap rc-hauppauge not found [ 862.678735][ T5912] Registered IR keymap rc-empty [ 862.680467][ T5912] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0 [ 862.683566][ T5912] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input53 [ 862.746968][T16306] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 862.760102][ C0] igorplugusb 8-1:0.0: Error: urb status = -32 [ 862.760317][ C0] raw-gadget.0 gadget.7: ignoring, device is not running [ 862.760361][ C0] igorplugusb 8-1:0.0: Error: urb status = -32 [ 862.788862][ T5912] usb 8-1: USB disconnect, device number 3 [ 862.852346][T16306] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 862.908182][T16306] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 864.439138][T16306] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 864.490881][ T9] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 866.182830][T16680] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 866.182849][T16680] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 866.238519][T16680] vhci_hcd vhci_hcd.0: Device attached [ 866.353477][T16306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 866.417440][T16687] trusted_key: encrypted_key: master key parameter 'd=Čá' is invalid [ 866.418568][T16687] IPVS: set_ctl: invalid protocol: 43 100.1.1.1:20002 [ 866.425595][T16682] vhci_hcd: connection closed [ 866.441645][T14816] vhci_hcd vhci_hcd.0: stop threads [ 866.441674][T14816] vhci_hcd vhci_hcd.0: release socket [ 866.441751][T14816] vhci_hcd vhci_hcd.0: disconnect device [ 866.446902][ T9] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 866.831629][T16306] 8021q: adding VLAN 0 to HW filter on device team0 [ 866.866401][T16368] bridge0: port 1(bridge_slave_0) entered blocking state [ 866.866762][T16368] bridge0: port 1(bridge_slave_0) entered forwarding state [ 866.893277][ T5970] bridge0: port 2(bridge_slave_1) entered blocking state [ 866.893395][ T5970] bridge0: port 2(bridge_slave_1) entered forwarding state [ 867.390431][T16704] tipc: Started in network mode [ 867.390457][T16704] tipc: Node identity 2e0d9bf57c1e, cluster identity 4711 [ 867.394236][T16704] tipc: Enabled bearer , priority 0 [ 867.396140][T16704] syzkaller0: entered promiscuous mode [ 867.427090][T16704] syzkaller0: entered allmulticast mode [ 867.482437][T16704] tipc: Resetting bearer [ 867.529294][T16707] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3548'. [ 867.567486][T16703] tipc: Resetting bearer [ 867.790634][T16703] tipc: Disabling bearer [ 868.036061][ T5967] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 868.198008][ T5967] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 868.198063][ T5967] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 868.199354][ T5967] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 868.199379][ T5967] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 868.199397][ T5967] usb 4-1: Manufacturer: syz [ 868.273285][ T5967] usb 4-1: config 0 descriptor?? [ 868.425751][ T5967] rc_core: IR keymap rc-hauppauge not found [ 868.425772][ T5967] Registered IR keymap rc-empty [ 868.433712][ T5967] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 868.464111][ T5967] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input54 [ 869.540577][T16306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 869.830461][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.830564][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.006044][ C1] igorplugusb 4-1:0.0: Error: urb status = -32 [ 871.528526][T16741] fuse: Unknown parameter 'use00000000000000000000' [ 871.564293][ T5967] usb 4-1: USB disconnect, device number 56 [ 872.143952][ T5815] Bluetooth: hci2: command 0x0406 tx timeout [ 872.432817][T16762] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 872.694587][T16766] fuse: Unknown parameter '0x0000000000000006' [ 873.888425][T16769] tipc: Enabled bearer , priority 0 [ 873.889256][T16769] syzkaller0: entered promiscuous mode [ 873.889278][T16769] syzkaller0: entered allmulticast mode [ 873.916959][T16769] tipc: Resetting bearer [ 873.923189][ T9675] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 874.033350][T16768] tipc: Resetting bearer [ 874.071077][ T9675] usb 8-1: device descriptor read/64, error -71 [ 874.243874][T16768] tipc: Disabling bearer [ 874.332904][ T9675] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 874.462927][ T9675] usb 8-1: device descriptor read/64, error -71 [ 874.583978][ T9675] usb usb8-port1: attempt power cycle [ 874.619240][T16306] veth0_vlan: entered promiscuous mode [ 874.676145][T16790] netlink: 'syz.3.3561': attribute type 4 has an invalid length. [ 874.768677][T16306] veth1_vlan: entered promiscuous mode [ 874.934359][ T9675] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 874.960227][ T9675] usb 8-1: device descriptor read/8, error -71 [ 874.983386][T16306] veth0_macvtap: entered promiscuous mode [ 874.997770][T16306] veth1_macvtap: entered promiscuous mode [ 875.118990][T16306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 875.202501][ T9675] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 875.223123][ T9675] usb 8-1: device descriptor read/8, error -71 [ 875.225027][T16306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 875.298909][ T5970] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 875.300857][ T5970] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 875.301112][ T5970] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 875.301148][ T5970] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 875.333460][ T9675] usb usb8-port1: unable to enumerate USB device [ 875.855016][ T1180] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 875.855038][ T1180] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 875.949741][T14816] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 875.949761][T14816] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 876.122462][T16818] tipc: Enabled bearer , priority 0 [ 876.123241][T16818] syzkaller0: entered promiscuous mode [ 876.123262][T16818] syzkaller0: entered allmulticast mode [ 876.564769][T16832] fuse: Unknown parameter '0x0000000000000006' [ 877.466674][T16816] tipc: Resetting bearer [ 878.275551][T16816] tipc: Disabling bearer [ 878.450060][T16851] netlink: 'syz.3.3572': attribute type 4 has an invalid length. [ 878.473940][ T9641] tipc: Node number set to 1377016821 [ 878.492155][T16841] syzkaller0: entered promiscuous mode [ 878.492182][T16841] syzkaller0: entered allmulticast mode [ 879.419836][ T9675] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 879.587528][T16880] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 879.595354][ T9675] usb 6-1: New USB device found, idVendor=05ac, idProduct=b301, bcdDevice=e4.00 [ 879.595382][ T9675] usb 6-1: New USB device strings: Mfr=9, Product=2, SerialNumber=3 [ 879.595401][ T9675] usb 6-1: Product: syz [ 879.595413][ T9675] usb 6-1: Manufacturer: syz [ 879.595434][ T9675] usb 6-1: SerialNumber: syz [ 879.627239][ T9675] usb 6-1: config 0 descriptor?? [ 879.887893][T16887] fuse: Unknown parameter '0x0000000000000006' [ 880.751019][ T9675] usb 6-1: USB disconnect, device number 44 [ 881.160668][ T5912] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 881.315677][T16894] tipc: Enabled bearer , priority 0 [ 881.316477][T16894] syzkaller0: entered promiscuous mode [ 881.316499][T16894] syzkaller0: entered allmulticast mode [ 881.393285][ T5912] usb 8-1: no configurations [ 881.393304][ T5912] usb 8-1: can't read configurations, error -22 [ 881.453581][T16902] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 881.529724][ T5912] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 881.597729][T16906] tipc: Enabled bearer , priority 0 [ 881.611999][T16907] syzkaller0: entered promiscuous mode [ 881.612023][T16907] syzkaller0: entered allmulticast mode [ 881.633903][T16899] tipc: Resetting bearer [ 881.690568][ T5912] usb 8-1: no configurations [ 881.690581][ T5912] usb 8-1: can't read configurations, error -22 [ 881.699897][ T5912] usb usb8-port1: attempt power cycle [ 881.722900][T16893] tipc: Resetting bearer [ 881.779140][ T9641] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 881.887876][T16893] tipc: Disabling bearer [ 881.954663][ T9641] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 881.954720][ T9641] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 881.955877][ T9641] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 881.955903][ T9641] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 881.955921][ T9641] usb 6-1: Manufacturer: syz [ 882.006750][ T9641] usb 6-1: config 0 descriptor?? [ 882.069080][ T5912] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 882.086610][ T9641] rc_core: IR keymap rc-hauppauge not found [ 882.086629][ T9641] Registered IR keymap rc-empty [ 882.091722][ T5912] usb 8-1: no configurations [ 882.091740][ T5912] usb 8-1: can't read configurations, error -22 [ 882.112211][ T9641] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 882.117636][ T9641] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input55 [ 882.162330][T16898] tipc: Resetting bearer [ 882.218938][ T5912] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 882.281391][ T5912] usb 8-1: no configurations [ 882.281409][ T5912] usb 8-1: can't read configurations, error -22 [ 882.290069][ T5912] usb usb8-port1: unable to enumerate USB device [ 882.309209][ T9641] usb 6-1: USB disconnect, device number 45 [ 882.340487][T16898] tipc: Disabling bearer [ 882.452641][ T37] kauditd_printk_skb: 11 callbacks suppressed [ 882.452660][ T37] audit: type=1326 audit(1775152340.662:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16910 comm="syz.3.3588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff392d2c819 code=0x7ffc0000 [ 882.452706][ T37] audit: type=1326 audit(1775152340.662:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16910 comm="syz.3.3588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff392d2c819 code=0x7ffc0000 [ 882.452747][ T37] audit: type=1326 audit(1775152340.662:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16910 comm="syz.3.3588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7ff392d2c819 code=0x7ffc0000 [ 882.452788][ T37] audit: type=1326 audit(1775152340.662:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16910 comm="syz.3.3588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff392d2c819 code=0x7ffc0000 [ 882.452829][ T37] audit: type=1326 audit(1775152340.662:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16910 comm="syz.3.3588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7ff392d2c819 code=0x7ffc0000 [ 882.452869][ T37] audit: type=1326 audit(1775152340.662:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16910 comm="syz.3.3588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff392d2c819 code=0x7ffc0000 [ 882.452909][ T37] audit: type=1326 audit(1775152340.662:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16910 comm="syz.3.3588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7ff392d2c819 code=0x7ffc0000 [ 882.453503][ T37] audit: type=1326 audit(1775152340.662:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16910 comm="syz.3.3588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff392d2c582 code=0x7ffc0000 [ 882.453549][ T37] audit: type=1326 audit(1775152340.662:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16910 comm="syz.3.3588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff392d2c819 code=0x7ffc0000 [ 882.453985][ T37] audit: type=1326 audit(1775152340.662:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16910 comm="syz.3.3588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff392d2c819 code=0x7ffc0000 [ 883.311238][T16801] Set syz1 is full, maxelem 65536 reached [ 883.428623][T16921] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3592'. [ 883.428738][T16921] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 883.428750][T16921] IPv6: NLM_F_CREATE should be set when creating new route [ 883.706686][T16928] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 883.706710][T16928] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 883.742059][T16928] vhci_hcd vhci_hcd.0: Device attached [ 883.850932][T16932] trusted_key: encrypted_key: master key parameter 'd=Čá' is invalid [ 883.883109][T16932] IPVS: set_ctl: invalid protocol: 43 100.1.1.1:20002 [ 884.008018][ T9675] usb 43-1: new low-speed USB device number 2 using vhci_hcd [ 884.155892][T16936] tipc: Started in network mode [ 884.155919][T16936] tipc: Node identity a6d0a4076487, cluster identity 4711 [ 884.156087][T16936] tipc: Enabled bearer , priority 0 [ 884.157025][T16936] syzkaller0: entered promiscuous mode [ 884.157046][T16936] syzkaller0: entered allmulticast mode [ 884.258335][T16938] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 884.389666][T16940] tipc: Started in network mode [ 884.389686][T16940] tipc: Node identity 527c7d81d1f1, cluster identity 4711 [ 884.389795][T16940] tipc: Enabled bearer , priority 0 [ 884.449026][T16940] syzkaller0: entered promiscuous mode [ 884.449049][T16940] syzkaller0: entered allmulticast mode [ 884.532853][T16929] vhci_hcd: connection reset by peer [ 884.535017][ T1180] vhci_hcd vhci_hcd.5: stop threads [ 884.535038][ T1180] vhci_hcd vhci_hcd.5: release socket [ 884.535087][ T1180] vhci_hcd vhci_hcd.5: disconnect device [ 884.727788][T16935] tipc: Resetting bearer [ 884.921739][T16935] tipc: Disabling bearer [ 885.128461][T16939] tipc: Resetting bearer [ 885.276652][T16952] fuse: Unknown parameter 'user_id00000000000000000000' [ 885.312729][T16939] tipc: Disabling bearer [ 885.591050][T16955] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3604'. [ 885.591114][T16955] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 885.591121][T16955] IPv6: NLM_F_CREATE should be set when creating new route [ 886.514644][T16970] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 886.683459][T16975] tipc: Started in network mode [ 886.683486][T16975] tipc: Node identity 5e38208c205b, cluster identity 4711 [ 886.683651][T16975] tipc: Enabled bearer , priority 0 [ 886.684627][T16975] syzkaller0: entered promiscuous mode [ 886.684647][T16975] syzkaller0: entered allmulticast mode [ 886.720817][T16978] fuse: Bad value for 'fd' [ 887.368685][T16974] tipc: Resetting bearer [ 887.523167][T16974] tipc: Disabling bearer [ 888.071418][T16998] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3623'. [ 888.071519][T16998] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 888.167151][T17005] kAFS: unable to lookup cell '˙' [ 889.095560][ T9675] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 889.405071][T17030] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3635'. [ 889.485481][ T31] usb 6-1: new full-speed USB device number 46 using dummy_hcd [ 889.647361][ T31] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 889.647387][ T31] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 889.647406][ T31] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 889.647425][ T31] usb 6-1: config 1 has no interface number 0 [ 889.647485][ T31] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 889.647506][ T31] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 889.647546][ T31] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 889.647568][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 889.750979][ T31] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 890.061947][ T31] snd_usb_pod 6-1:1.1: endpoint not available, using fallback values [ 890.063571][ T31] snd_usb_pod 6-1:1.1: invalid control EP [ 890.063583][ T31] snd_usb_pod 6-1:1.1: cannot start listening: -22 [ 890.063805][ T31] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 890.064111][ T31] snd_usb_pod 6-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 890.129495][ T37] kauditd_printk_skb: 17 callbacks suppressed [ 890.129512][ T37] audit: type=1326 audit(1775152348.346:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17035 comm="syz.7.3637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1cfdfc819 code=0x7ffc0000 [ 890.129548][ T37] audit: type=1326 audit(1775152348.346:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17035 comm="syz.7.3637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1cfdfc819 code=0x7ffc0000 [ 890.131905][ T37] audit: type=1326 audit(1775152348.346:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17035 comm="syz.7.3637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fc1cfdfc819 code=0x7ffc0000 [ 890.131951][ T37] audit: type=1326 audit(1775152348.346:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17035 comm="syz.7.3637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1cfdfc819 code=0x7ffc0000 [ 890.131991][ T37] audit: type=1326 audit(1775152348.346:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17035 comm="syz.7.3637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7fc1cfdfc819 code=0x7ffc0000 [ 890.132031][ T37] audit: type=1326 audit(1775152348.346:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17035 comm="syz.7.3637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1cfdfc819 code=0x7ffc0000 [ 890.132065][ T37] audit: type=1326 audit(1775152348.346:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17035 comm="syz.7.3637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fc1cfdfc819 code=0x7ffc0000 [ 890.155022][ T9] usb 6-1: USB disconnect, device number 46 [ 890.165084][ T37] audit: type=1326 audit(1775152348.366:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17035 comm="syz.7.3637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc1cfdfc582 code=0x7ffc0000 [ 890.299435][ T37] audit: type=1326 audit(1775152348.516:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17035 comm="syz.7.3637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1cfdfc819 code=0x7ffc0000 [ 890.299477][ T37] audit: type=1326 audit(1775152348.516:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17035 comm="syz.7.3637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1cfdfc819 code=0x7ffc0000 [ 890.679977][T17052] PKCS7: Unknown OID: [4] 5.25.287.112.81.102.117.87.150326315.2007.15776.1 [ 890.679990][T17052] PKCS7: Only support pkcs7_signedData type [ 890.895900][T17060] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3646'. [ 891.274439][ T9] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 891.344378][ T1692] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 891.428168][ T9] usb 8-1: config 0 has an invalid interface number: 120 but max is 0 [ 891.428185][ T9] usb 8-1: config 0 has no interface number 0 [ 891.428210][ T9] usb 8-1: config 0 interface 120 altsetting 0 has an endpoint descriptor with address 0xF1, changing to 0x81 [ 891.428223][ T9] usb 8-1: config 0 interface 120 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 891.428247][ T9] usb 8-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 891.428259][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 891.492218][ T9] usb 8-1: config 0 descriptor?? [ 891.506146][ T1692] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 891.506172][ T1692] usb 5-1: config 0 has no interfaces? [ 891.533107][ T1692] usb 5-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 891.533125][ T1692] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 891.533136][ T1692] usb 5-1: Product: syz [ 891.533143][ T1692] usb 5-1: Manufacturer: syz [ 891.533150][ T1692] usb 5-1: SerialNumber: syz [ 891.580570][ T9] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.120/input/input56 [ 891.614590][ T1692] usb 5-1: config 0 descriptor?? [ 891.842848][T17068] kAFS: unable to lookup cell '(,' [ 891.899828][ T9641] usb 5-1: USB disconnect, device number 56 [ 891.935345][ T1692] usb 8-1: USB disconnect, device number 12 [ 892.374019][ T5815] Bluetooth: hci5: command 0x0406 tx timeout [ 892.583509][T17100] fuse: Unknown parameter '0x0000000000000003' [ 893.001775][T17119] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3664'. [ 893.162409][T17113] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 893.853531][T17132] netlink: 88 bytes leftover after parsing attributes in process `syz.0.3671'. [ 893.903508][T17132] netlink: 23 bytes leftover after parsing attributes in process `syz.0.3671'. [ 893.903541][T17132] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3671'. [ 895.973783][ T5803] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 896.118991][T17160] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3680'. [ 896.232028][ T5803] usb 4-1: Using ep0 maxpacket: 16 [ 896.235823][ T5803] usb 4-1: config 0 has no interfaces? [ 896.236708][ T5803] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 896.236723][ T5803] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 896.236733][ T5803] usb 4-1: Manufacturer: syz [ 896.255675][ T5803] usb 4-1: config 0 descriptor?? [ 897.106379][T17171] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3684'. [ 897.296300][T17171] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 898.051557][ T5803] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 898.096101][T17171] bond1 (unregistering): Released all slaves [ 898.250913][ T5803] usb 8-1: device descriptor read/64, error -71 [ 898.490803][ T5803] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 898.610884][ T9641] usb 4-1: USB disconnect, device number 57 [ 898.620730][ T5803] usb 8-1: device descriptor read/64, error -71 [ 898.730985][ T5803] usb usb8-port1: attempt power cycle [ 898.768374][T17190] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 899.054123][T17194] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3692'. [ 899.105979][T17195] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3692'. [ 899.110738][ T5803] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 899.131039][ T5803] usb 8-1: device descriptor read/8, error -71 [ 899.380157][ T5803] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 899.411364][ T5803] usb 8-1: device descriptor read/8, error -71 [ 899.536374][ T5803] usb usb8-port1: unable to enumerate USB device [ 899.782576][T17204] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3695'. [ 899.920694][ T5803] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 900.071973][ T5803] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 900.072009][ T5803] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 900.072021][ T5803] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 900.074844][ T5803] usb 4-1: config 0 descriptor?? [ 900.120914][ T5803] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 900.283233][T17201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 900.284981][T17201] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 901.346699][T17226] netlink: 72 bytes leftover after parsing attributes in process `syz.5.3703'. [ 901.362507][T17226] netlink: 72 bytes leftover after parsing attributes in process `syz.5.3703'. [ 901.722442][T17241] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 901.767471][T17245] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3710'. [ 902.767928][ T5803] usb 4-1: USB disconnect, device number 58 [ 902.785436][T17251] fuse: Unknown parameter 'fd0x0000000000000003' [ 902.958555][ T1692] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 903.090327][ T1692] usb 5-1: device descriptor read/64, error -71 [ 903.328477][ T1692] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 903.459539][ T1692] usb 5-1: device descriptor read/64, error -71 [ 903.578616][ T1692] usb usb5-port1: attempt power cycle [ 904.008025][ T1692] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 904.028826][ T1692] usb 5-1: device descriptor read/8, error -71 [ 904.270036][ T1692] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 904.289288][ T1692] usb 5-1: device descriptor read/8, error -71 [ 904.365714][ T5912] usb 6-1: new full-speed USB device number 47 using dummy_hcd [ 904.399246][ T1692] usb usb5-port1: unable to enumerate USB device [ 904.532833][ T5912] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 904.532860][ T5912] usb 6-1: config 0 has no interfaces? [ 904.535800][ T5912] usb 6-1: New USB device found, idVendor=3344, idProduct=22f0, bcdDevice=ef.4d [ 904.535921][ T5912] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 904.535940][ T5912] usb 6-1: Product: syz [ 904.535954][ T5912] usb 6-1: Manufacturer: syz [ 904.535967][ T5912] usb 6-1: SerialNumber: syz [ 904.554767][ T5912] usb 6-1: config 0 descriptor?? [ 906.570568][T17307] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3732'. [ 906.786609][ T5912] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 906.938484][ T5912] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 906.938501][ T5912] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 906.941022][ T5912] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 906.941049][ T5912] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 906.941147][ T5912] usb 5-1: Product: syz [ 906.941155][ T5912] usb 5-1: Manufacturer: syz [ 906.941164][ T5912] usb 5-1: SerialNumber: syz [ 906.945376][ T5912] usb 5-1: config 0 descriptor?? [ 907.306738][T17314] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 907.497160][ T9] usb 6-1: USB disconnect, device number 47 [ 909.521862][ T36] usb 5-1: USB disconnect, device number 61 [ 909.779083][T17337] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3741'. [ 909.985281][T17339] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3743'. [ 910.491521][T17343] bridge0: port 3(veth0_to_bridge) entered blocking state [ 910.586816][T17343] bridge0: port 3(veth0_to_bridge) entered disabled state [ 910.587680][T17343] veth0_to_bridge: entered allmulticast mode [ 910.706314][T17343] veth0_to_bridge: entered promiscuous mode [ 910.706741][T17343] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 910.769064][T17343] bridge0: port 3(veth0_to_bridge) entered blocking state [ 910.769177][T17343] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 912.050899][T17372] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 912.945849][T17378] syzkaller0: entered promiscuous mode [ 913.223410][ T1692] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 913.598377][ T1692] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 913.598405][ T1692] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 913.598424][ T1692] usb 4-1: Product: syz [ 913.598437][ T1692] usb 4-1: Manufacturer: syz [ 913.598450][ T1692] usb 4-1: SerialNumber: syz [ 913.921000][T17394] netlink: 'syz.5.3765': attribute type 4 has an invalid length. [ 914.033066][ T1692] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 914.033127][ T1692] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 914.445820][ T1692] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 914.445864][ T1692] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 914.457163][ T1692] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 914.551728][ T1692] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -32 [ 917.564431][ T1692] usb 4-1: USB disconnect, device number 59 [ 917.968818][T10897] Bluetooth: hci1: command 0x0406 tx timeout [ 918.480872][ T5884] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 918.481063][ T1692] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 918.535353][T17442] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3783'. [ 918.611463][ T1692] usb 4-1: device descriptor read/64, error -71 [ 918.635987][ T5884] usb 8-1: New USB device found, idVendor=05ac, idProduct=b301, bcdDevice=e4.00 [ 918.636018][ T5884] usb 8-1: New USB device strings: Mfr=9, Product=2, SerialNumber=3 [ 918.636036][ T5884] usb 8-1: Product: syz [ 918.636051][ T5884] usb 8-1: Manufacturer: syz [ 918.636064][ T5884] usb 8-1: SerialNumber: syz [ 918.645104][ T5884] usb 8-1: config 0 descriptor?? [ 918.850656][ T1692] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 918.885738][ T9] usb 8-1: USB disconnect, device number 17 [ 918.990769][ T1692] usb 4-1: device descriptor read/64, error -71 [ 919.102276][ T1692] usb usb4-port1: attempt power cycle [ 919.483456][ T1692] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 919.514157][ T1692] usb 4-1: device descriptor read/8, error -71 [ 920.740191][ T1692] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 924.084661][ T1692] usb 4-1: device descriptor read/8, error -71 [ 924.189507][ T1692] usb usb4-port1: unable to enumerate USB device [ 924.190016][ T1692] ================================================================== [ 924.190026][ T1692] BUG: KASAN: vmalloc-out-of-bounds in __list_add_valid_or_report+0x4e/0x130 [ 924.190060][ T1692] Read of size 8 at addr ffffc9000dc99008 by task kworker/0:2/1692 [ 924.190076][ T1692] [ 924.190090][ T1692] CPU: 0 UID: 0 PID: 1692 Comm: kworker/0:2 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 924.190122][ T1692] Tainted: [L]=SOFTLOCKUP [ 924.190129][ T1692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 924.190142][ T1692] Workqueue: usb_hub_wq hub_event [ 924.190169][ T1692] Call Trace: [ 924.190177][ T1692] [ 924.190185][ T1692] dump_stack_lvl+0xe8/0x150 [ 924.190211][ T1692] print_report+0xba/0x230 [ 924.190233][ T1692] ? __list_add_valid_or_report+0x4e/0x130 [ 924.190254][ T1692] kasan_report+0x117/0x150 [ 924.190272][ T1692] ? __list_add_valid_or_report+0x4e/0x130 [ 924.190298][ T1692] __list_add_valid_or_report+0x4e/0x130 [ 924.190322][ T1692] kcov_remote_stop+0x457/0x680 [ 924.190347][ T1692] hub_event+0x49d8/0x4f60 [ 924.190385][ T1692] ? __pfx_hub_event+0x10/0x10 [ 924.190410][ T1692] ? process_scheduled_works+0xa8d/0x18c0 [ 924.190435][ T1692] ? process_scheduled_works+0xa8d/0x18c0 [ 924.190457][ T1692] process_scheduled_works+0xb6e/0x18c0 [ 924.190493][ T1692] ? __pfx_process_scheduled_works+0x10/0x10 [ 924.190521][ T1692] ? assign_work+0x3d5/0x5e0 [ 924.190547][ T1692] worker_thread+0xa53/0xfc0 [ 924.190582][ T1692] kthread+0x388/0x470 [ 924.190601][ T1692] ? __pfx_worker_thread+0x10/0x10 [ 924.190608][T17476] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3793'. [ 924.190625][ T1692] ? __pfx_kthread+0x10/0x10 [ 924.190653][ T1692] ret_from_fork+0x51e/0xb90 [ 924.190680][ T1692] ? __pfx_ret_from_fork+0x10/0x10 [ 924.190705][ T1692] ? __switch_to+0xc7d/0x1450 [ 924.190728][ T1692] ? __pfx_kthread+0x10/0x10 [ 924.190746][ T1692] ret_from_fork_asm+0x1a/0x30 [ 924.190768][ T1692] [ 924.190775][ T1692] [ 924.190779][ T1692] The buggy address belongs to a vmalloc virtual mapping [ 924.190795][ T1692] Memory state around the buggy address: [ 924.190803][ T1692] ffffc9000dc98f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 924.190814][ T1692] ffffc9000dc98f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 924.190826][ T1692] >ffffc9000dc99000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 924.190836][ T1692] ^ [ 924.190846][ T1692] ffffc9000dc99080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 924.190856][ T1692] ffffc9000dc99100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 924.190865][ T1692] ================================================================== [ 924.190891][ T1692] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 924.190905][ T1692] CPU: 0 UID: 0 PID: 1692 Comm: kworker/0:2 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 924.190929][ T1692] Tainted: [L]=SOFTLOCKUP [ 924.190936][ T1692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 924.190948][ T1692] Workqueue: usb_hub_wq hub_event [ 924.190970][ T1692] Call Trace: [ 924.190976][ T1692] [ 924.190984][ T1692] vpanic+0x56c/0xa60 [ 924.191011][ T1692] ? __pfx_vpanic+0x10/0x10 [ 924.191041][ T1692] panic+0xc5/0xd0 [ 924.191063][ T1692] ? __pfx_panic+0x10/0x10 [ 924.191090][ T1692] ? __list_add_valid_or_report+0x4e/0x130 [ 924.191112][ T1692] ? rcu_is_watching+0x15/0xb0 [ 924.191132][ T1692] ? __list_add_valid_or_report+0x4e/0x130 [ 924.191151][ T1692] check_panic_on_warn+0x89/0xb0 [ 924.191173][ T1692] ? __list_add_valid_or_report+0x4e/0x130 [ 924.191191][ T1692] end_report+0x73/0x180 [ 924.191208][ T1692] ? __list_add_valid_or_report+0x4e/0x130 [ 924.191228][ T1692] kasan_report+0x128/0x150 [ 924.191247][ T1692] ? __list_add_valid_or_report+0x4e/0x130 [ 924.191270][ T1692] __list_add_valid_or_report+0x4e/0x130 [ 924.191292][ T1692] kcov_remote_stop+0x457/0x680 [ 924.191317][ T1692] hub_event+0x49d8/0x4f60 [ 924.191355][ T1692] ? __pfx_hub_event+0x10/0x10 [ 924.191381][ T1692] ? process_scheduled_works+0xa8d/0x18c0 [ 924.191405][ T1692] ? process_scheduled_works+0xa8d/0x18c0 [ 924.191429][ T1692] process_scheduled_works+0xb6e/0x18c0 [ 924.191466][ T1692] ? __pfx_process_scheduled_works+0x10/0x10 [ 924.191493][ T1692] ? assign_work+0x3d5/0x5e0 [ 924.191517][ T1692] worker_thread+0xa53/0xfc0 [ 924.191552][ T1692] kthread+0x388/0x470 [ 924.191570][ T1692] ? __pfx_worker_thread+0x10/0x10 [ 924.191595][ T1692] ? __pfx_kthread+0x10/0x10 [ 924.191615][ T1692] ret_from_fork+0x51e/0xb90 [ 924.191648][ T1692] ? __pfx_ret_from_fork+0x10/0x10 [ 924.191673][ T1692] ? __switch_to+0xc7d/0x1450 [ 924.191698][ T1692] ? __pfx_kthread+0x10/0x10 [ 924.191717][ T1692] ret_from_fork_asm+0x1a/0x30 [ 924.191740][ T1692] [ 924.191877][ T1692] Kernel Offset: disabled