last executing test programs: 9.104586012s ago: executing program 4 (id=1364): socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)}, 0x4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x2a, &(0x7f0000000100), 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f0000000000)={0xa, 0x100, 0x1, {0x6, 0x1000, 0x2, 0x86b}}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x60}}, 0x0) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000180)={0x2, 0x0, [{0x8, 0x5, 0x0, 0x0, @irqchip={0x81c, 0x4}}, {0xfffffffb, 0x3, 0x1, 0x0, @irqchip={0x6, 0x7f}}]}) mmap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000040)='A', 0x1}], 0x1}, 0x400c0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000040)="2b1c52ac82e71ea05b0c5e43ede4", 0x0, 0xb20c, 0x0, 0x0, 0x90, 0x0, &(0x7f0000001200)="4c4228369f88e91870041ef4c8baa41449dc6ad5553764e898ddee1dfbb587ef4e6854a6bea12aecd99ac5dd4e39745d195df155a8628b7483b791d4de8609a893ccfbe9dc5c2ed555df193d92968b81da97fe3f0f220dd48b29c98152d9ecb2bb68cbf0bfe454a10e0adf453bd021ba3b502665c757d209f1fa9daa8979aa1fc22684d52bba1cd3c5946a6ea16b40f3", 0x4}, 0x50) syz_clone(0x4029000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x80000) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000180)={'\x00', 0x4, 0x3, 0x4009c, 0x4de2, 0x1}) ioctl$BLKTRACESTOP(r5, 0x1275, 0x0) write$sysctl(r4, &(0x7f0000000580)='1\x00', 0x2) syz_usb_connect$hid(0x2, 0x36, 0x0, 0x0) write$sysctl(r4, &(0x7f00000000c0)='2\x00', 0x2) 8.631249345s ago: executing program 0 (id=1366): socket(0x5, 0x3, 0x3d) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket(0x2b, 0x80801, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x308, 0x0, 0x5c, 0x160, 0x134, 0x3e0, 0x240, 0x228, 0x25a, 0x240, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev, [], [0x0, 0xffffff00], 'veth0_to_batadv\x00', 'wg1\x00', {}, {0x222cecdb0fb5a62a}, 0x3a}, 0x5002, 0xec, 0x134, 0x52020000, {0x0, 0x6802000000000000}, [@common=@icmp6={{0x24}, {0x0, "d176"}}, @common=@unspec=@state={{0x24}, {0xfffffffd}}]}, @unspec=@CT0={0x48}}, {{@ipv6={@local, @private2={0xfc, 0x2, '\x00', 0x4}, [0x0, 0x0, 0xff000000], [0xff], 'veth1_to_hsr\x00', 'dummy0\x00', {}, {}, 0x88}, 0x0, 0xa4, 0x10c}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x364) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r3 = socket$key(0xf, 0x3, 0x2) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="0c0100001600010000000000010000000a010100"/32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="01000000080024"], 0x10c}}, 0x0) sendmsg$key(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[], 0x33fe0}}, 0x40010) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r6, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xa8, &(0x7f0000000140)=ANY=[@ANYRES8=r3]) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2"], 0x0) syz_emit_ethernet(0x4a, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r5], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x47, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0xffffffffffffff24, &(0x7f0000000740)}}], 0x1, 0x4004) syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x20004040) write$binfmt_misc(r7, &(0x7f0000000040), 0xe09) 7.313688155s ago: executing program 2 (id=1368): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000100010ac05470200000000000109024300010000000009040000010300000009210000000122a00009058103"], 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000146000/0x4000)=nil) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000006940)="bd5b42b1cdd8978ab9a6d751175588136f1bc7ae56c467f380f0f67d5454ec17c8f3d0e6a97c24e2fc0a63148fcc2e01b340fa770ff4c6bf501d4267ce19ea5522b18bbbcc62a95117e731cfea5eea75c42f3e86283d8372fc886ebcfef5e5cbb42f40808e0e909b967a13b4c3c64db4b04e31fdc2c5edc1f2c63883782c98c5f153c6e655735f5e303b10", 0x8b}, {&(0x7f00000001c0)="4888", 0xffffff96}, {&(0x7f0000000440)="88325d41f049e68258482f5176c31ed01a3259a4d2521ad145d66456f5eb3d0d555d25fdad6ba33fa1dbd0444e2a921d0facce2dbbbda19b66389d09fd1f7689f599faf15ebe76a6f98a1cf9bf2575b81c49683f141da2d1b6ebc5c54cae792f11525f0b257b78c90de0d8c88a88820ad8a0", 0x72}, {&(0x7f0000006a00)="f1034d83c281267f8f9e49bcb3cd708c896972c4f1995d345ac400f2f89c9c5231629ec45883c1cda3cd6c982a2c76242a59e96e5d1cfe753a24a4b2db8ef1ceccc065b89a150cc3960b8e21269cd4a3130f32bb098bb6aa80f3473884e79b816546e78a96f3a1c548bdb3e41bdc583eb6f12b2afe7559f96b2c3f73f5cb520ac717825213ae9b6816e1776ca92256198d86e665de51fcfc0e43de55d10ab821a8cfd3bd194dc517", 0xa8}], 0x4) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/ip6_tables_matches\x00') r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@mpls_delroute={0x30, 0x18, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_VIA={0x14, 0x12, {0x11, "8f997fa6ce8400a0286048c10b6b"}}]}, 0x30}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x42, &(0x7f0000000440)=0x8, 0x29) getsockopt$inet6_buf(r3, 0x29, 0x6, &(0x7f0000000180)=""/29, &(0x7f00000000c0)=0x1d) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="0000d2"], 0x0, 0x0, 0x0, 0x0}, 0x0) 6.902090447s ago: executing program 0 (id=1369): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$TIOCSLCKTRMIOS(0xffffffffffffffff, 0x5457, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f00000002c0)={0x8400001e}, 0x10) (async) socket$packet(0x11, 0x2, 0x300) r4 = socket(0x22, 0x6, 0xcc) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[], 0x30}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="300000001a00011100ffffffff"], 0x30}}, 0x0) (async) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) r5 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') lseek(r5, 0xfff, 0x0) sendmsg$nl_route(r0, 0x0, 0x5b405ab9711654be) (async) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) (async) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r7, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x8, 0x44421c02, 0x8001, 0x80000001}, 0x5, 0xf251, &(0x7f0000000200)={{0x7, 0xfffffffa, 0x8, 0x7fff}}, 0x7c, 0x0, 0x1}}) (async) setsockopt$inet_tcp_int(r6, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) (async) add_key(&(0x7f0000000040)='pkcs7_test\x00', 0x0, &(0x7f0000000080)="305c061ce1821f7051667557c7d7982b8f57fb20a3adc9e3baa292ce8f0a861e64174d46de00a5a09fa80393d502b0cd490635d54cdf5bd046cc030000000000005e000000808ce41d86b9b949004fd8fe45b91e8fe7ec7c49750a1b0ade", 0x5e, 0xfffffffffffffffe) (async) connect$inet(r6, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) (async) syz_pidfd_open(0x0, 0x0) (async) wait4(0x0, &(0x7f0000000100), 0x1, &(0x7f0000000140)) sendmsg$inet(r6, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0xd007) (async) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x123e00, 0x0) 6.862798984s ago: executing program 3 (id=1370): r0 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x8) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="d4000000400007012bbd7000fedbdf25027c00150400c280b6000180b00010"], 0xd4}, 0x1, 0x0, 0x0, 0x4805}, 0xc000) mmap(&(0x7f000000a000/0x2000)=nil, 0x2000, 0x2, 0x80010, r0, 0xdc563000) r3 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) getdents(r3, &(0x7f0000001fc0)=""/184, 0xb8) getdents(r3, &(0x7f0000001fc0)=""/184, 0xb8) 6.645362331s ago: executing program 3 (id=1371): socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x28, 0x18000000, 0x0, 0xb45, 0xa, 0x8, 0x80000001, 0x6}, 0x0) syz_usb_connect(0x0, 0x4bc, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r3, 0x0, 0x0, 0x2090) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r3, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) syz_open_procfs$userns(r4, &(0x7f0000000580)) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x40000021, 0x0, 0x0) r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) write(r5, &(0x7f0000000fc0)="c62521e5ba9a21ad2f3cab7629bd5b4a7764e5850f0ec7e1a9b0f8eec5bf5991cae41893fffb8d05f78f380ac193e91680bc9c0ee2a5abd4e099710af57d8bdba38e0fa58f185a989b5f217944be9fc4c594612665e474b0c262e6309b48cf3c1327c765e85869b29157274185b4556e093269451ac35b2aec73847d0d84771aadcb4238a52110f6a906fc0f81a80e458c7de13d3ebcee882cba06d76c36e779338c23f8ff7c8f6db3b388819b4eb7f1e753962124242d51193dc4f0415f87f3f2dc1d391be02b2aea87096679a31bf899d17ada4a1dcfff30bed9f44de1adc3417e1e3811", 0xe5) execve(&(0x7f0000000040)='./file0\x00', &(0x7f00000005c0)={[&(0x7f0000000ec0)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94Xh[\xe9\xa9\x1702\x7f\x9e\xf0\x99\xad\xdc;p\x98R\a\xb1\x9d^\x0f\x121\xb3\xab7P\xd6\xcb\x06\xfe2~W\xd9\xad\x80\xd9!\x89%\xb80\xa3l;\x1eK\x90\x15\xc6\x11A\xfc\x7f\xc61\xe7\xa3\x9f\xb4\xce\"\xef\xa8\x86F\x15\xb9\rj\f\xafa\xb0}\xde\'\x01\x00\x00\x00O\xd2\xd4\x85F\xde1e\xe0\xf2\xa0/\xd3<\xda\xfe\x04,\xfa\x97\xb6\xf4\xcf\x0el\xf2\xbd\x18\x88\xd7\x02\xce\x99\x1f\xadj\x89\xd9\xb7\xae9\xb0\xb0{n.\xd7\x87C\x0eh|KZG\x108l\n\xcd\xe9\x04\xafM\xbf\x83#>\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01\x00\x00\x00\x00\x00', &(0x7f00000010c0)='\x7f\xbf\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000380)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000080)='\xf6\x98l_\xf5<\x1a_6:', &(0x7f0000000480)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f00000011c0)='\x7f\xb7\xc3\x7f\xa5a\xd6\xd3\x18\xd0\xe0\xd8R\xf02b\xefA|uiWb\x8f\xee\x1ch\x83\x94y\x89\xf1Y{\x87\xd5\xf7\xccMr\xc5\xbdT\x9e\xd4\x84\x06\xcd\x8b\xcd\t\x01\x11\xbd\x86<\x8b\xad\xc4\x80B\xce\x86\x86g\x92\x92w\x89\xfe\xba\xbeeC\x96Ad\t\xc2\xc8\xed\xf3\x1e\x84Ot\x12`=\x98r\x94[\xc8F\xa7O\xee3\xd6a\xca\x05\xd5\xec\xfd\xfa\xaa\xa1\xa7\xcc\x85\xf5D_\xb4$r\xca\x8f\xcf[T\xb9\x0f\xaf\x00\xbc\xa4\xba\xb6=]\x8a\xfb\xaa\xdc+\xbe\a\x06>\r\xf5,i\xa2\xa8\xa2M\xc7\xfb\x11\xd1U\xe5H\xd6\x1b\xf7\xf6B\xcbG\xe4\xe6\xc3{\xf5\xf9_F\x02\x8ah\x15G`+\xf9\xb9\x95V\xa3\xb0\x1b\x0e\xafle%/K\xbb\x9d\x17\xde0\xc2\xa41\x9aS\xe6M\x1e\xb9\xc9\xe8\xf7i\x02e\x8c\xce\xa9\xe7\xc9\x13\xa4\xe8\xf4\x1c\xff\x82\xe13\x89\xeex\xb5\xcf\xce\x108j#\xabH\xc3RU\x00M?\xca\x9c\xefT\xaaJ8*\xe0S\rV\x9c\xaf\xb3yh\x15\xa2\xce>>f\x16\x8d(\xeaot\x83\xe5\x13\xf2bA\xc1O\xbb~\xe5p\x83\xb3\x9d\x1c}\xe7\xd7\x811\x15\x9eP\xea\x00\x00\x00\x00\xff\x0f\x8c\x96\xebw\xde\'\"\xe4\xf6\xfc\x96N\xaf>!\xd9\xed\xdf\xca\x1bqk\xe2\xfdJO\xc8\xaf\x1be\xfa\xedJ\x02\xab\x18xK5?\xec\xa1\xc2<\xa8\xdbo\xb1l\nn\xdb#\x97\xbcd\x0e\x93\x9e\xea\xb9\x9d-\xb6u\x7f\xe0\xa6\xef\xb4#\x1b@N\x04\xa0s\xa0\xe1\x90k8\xc3\r\xd0\x1b70b\xda\xe5\xb0\xa8\x01\x14N\xcf\x8dJ\xad\xc69\v\xbc[\xec\x97\xe7\xb2\x90j\xbd\xb1GX\xf2\xed\x15\xceK\xac\x19`a\x1e\x15\x90\x8d\xf4r\xd4Q\xd5\xc19|\xf7\x99\xed\x0e\xaf\xf7\xefR\xa6\xd0:\xe2yB\xfdpG\xf5\xc5\x919\x0f\xfa\xd1R\xc7\x8b\xbc)l\x11\xa8h2V\xe8\x1a\xf7\x8e\x14\xcbF\r\xa7w\xd3\xd3\xb7\xa5\x88\"\xa8\xa4>\xf0*\xbeM\x02\xf0i\x10m(7\xb64\xf5\xa1aZ\x16^\xde\a\xfae\xae\xe7{1\xd0\xa2\t\f\x85\x98\xdaK4]Hi1J\x95\x0e\xa37\x86ch\xcb\xeb\xbfq\xc6\xd3\x98\xd3\x8c_R\xe4oN\xa7\xab\x03\x1c\xc5}\xf1\x92\x82\xe3\xa5~jy<\xf7T\xaf\xabYQ\x82EI\xf0P\x96E\x89O\x9f\x13\x8d\xd4\xa3&\xcdvq\xacf', 0x0, &(0x7f0000000ac0)='O\x99@\tB\x00\x95\xbf@\xbfe\x96\xd9{b\xec\xa2P!\xaf\x1e5\xc3\xb9\t\xf7&eX\xd0\xefQ\xab\xac\x99\v\xdc\xd0\xe1\x1c\x8c.\xf5\xa3\xff\xe7\x01\x18H\x8f\xb9 \xbb\xbd\x86#\xc7\x9c\xdd2\xfa&\x7f_Y!k\xb4T\x06\xc7\x85}\xa9\x88(\x9d\x05\x89\x99\xc532S\xff_\xb2\xd0e\x1f_\x80\xba\xe5\x0f\xce\x83(^\x91c}3\x1a\x03~\x8c\xbfT\x02\xec\xd6\v\xc9O\x13&4$\xbd\xbcFx\xff!\x9c\x19n\x05\x1f\x89\x8ev\xc4Stl\x98\xecJ\xba\x0e\"E\xf2\xd9o}\xbe\v9\xba\x90\xc9\xd7\xfbt\xc3\xbf\x86', &(0x7f0000000900)='\x01-\x00\xb6\xb7\xe1\x7fl\xd5\xf8G\xfdQ=\xc3\xd4\x02RP\xb2\xbf\x99\xfc\x10\" \x93)\xc5\x93\x98\x11\xe0\xd4\x14\x9a\f#LU\xda\xeb\f\x03\xa4\xf7\x85\xddYL\xf7\xf2\xc4\xff@+\x04^\xcc\xc8\xa1\x9f\xa7p\xd2\xaa\xa2^\xa6\xd1\v\xd1\xdd+o\x91\xc8\x90\xeebUCE\xdc=\x89\x86\x81S\x038', &(0x7f0000000840)='\x10!%{@{+\x00', &(0x7f0000000880)='.-\\:!\x00\x00\x00\x00\x00y\xa5\x91\x9d:)\x0f\x9d/\xf8\f\xad\xdb|\xcf\x1cHB\xc8\xa3Qo{\xc5|\xa5z\x0e\x0f\xdee\xc2>\xb6\xfe\xeaZ~\xa3\x15\x16l\x00', &(0x7f00000008c0)='-\xf3\x00', &(0x7f0000000980)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000780)='.-\\:!\x00\x00\x00\x00\x00y\xa5\x91\x9d:)\x0f\x9d/\xf8\f\xad\xdb|\xcf\x1cHB\xc8\xa3Qo{\xc5|\xa5z\x0e\x0f\xdee\xc2>\xb6\xfe\xeaZ~\xa3\x15\x16l\x00', &(0x7f0000000a80)='::-$[]#:{\x00']}, &(0x7f0000000b80)={[&(0x7f0000000800)='.-\\:!\x00\x00\x00\x00\x00y\xa5\x91\x9d:)\x0f\x9d/\xf8\f\xad\xdb|\xcf\x1cHB\xc8\xa3Qo{\xc5|\xa5z\x0e\x0f\xdee\xc2>\xb6\xfe\xeaZ~\xa3\x15\x16l\x00\x00\x00\x00\x00', &(0x7f00000000c0)='\x9af\xe3']}) ioctl$VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f0000000140)={0x0, 0x5, 0x1, {0xa, @pix_mp={0x9, 0x81, 0x0, 0x8, 0xa, [{0xd, 0x2}, {0x3, 0x8000}, {0xa64a80ed, 0x7fffffff}, {0x200, 0x3ff}, {0x5, 0x1}, {0x4ce, 0x8}, {0x7ff, 0x9}, {0x6, 0x1}], 0x7, 0xff, 0x6, 0x1, 0x5}}}) 6.644812878s ago: executing program 0 (id=1372): r0 = socket(0x11, 0x802, 0x0) setsockopt(r0, 0x107, 0xfffffffd, &(0x7f0000000200)="010000000000060000071a80010061cc", 0x10) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) pwrite64(r2, 0x0, 0x0, 0x3) set_mempolicy(0x2, &(0x7f0000000080)=0x3, 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x8080, 0x0) (async) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x40}) (async) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000140), &(0x7f0000000180)=0x4) (async) r4 = syz_usb_connect(0x3, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001517ee40f00a057a00f6000203010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r4, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000300)=ANY=[@ANYBLOB="200f11000000080d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e20, 0x6, @mcast1, 0x4}}, 0x4, 0x0, 0x0, 0x0, 0x44, 0xfff, 0x1}, &(0x7f0000000540)=0x9c) (async) syz_emit_ethernet(0x46, &(0x7f0000000080)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa86dd60f4adf700102c00fe800000000000000000000013000000ff0200000000000000000000000000013c010000000000008100907800000000"], 0x0) (async) r5 = syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="03010000ac0fce405d0500904431000000010902120001000080040904"], 0x0) syz_usb_disconnect(r5) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000011c0)=ANY=[], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) (async) syz_usb_connect$printer(0x6, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12d17721450000202505a8a440000102030109021b000101eba003094d0006020701011f090501020002047912"], 0x0) (async) syz_usb_control_io$hid(r6, 0x0, 0x0) (async) syz_usb_control_io(r6, 0x0, 0x0) (async) syz_usb_control_io$uac1(r5, 0x0, 0x0) (async) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) (async) syz_usb_control_io$hid(r6, 0x0, 0x0) (async) syz_usb_control_io(r6, 0x0, 0x0) (async) syz_usb_control_io(r6, 0x0, 0x0) (async) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f00000000c0)=0x1d) 5.378520024s ago: executing program 2 (id=1375): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = fsopen(&(0x7f0000000200)='mqueue\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x0, 0x2, 0x0, 0x0, @adapter={0xffffffffffffeffd, 0x7, 0xffff, 0x403, 0x3}}]}) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f00000002c0)={0x0, 0x1}) unshare(0x28040600) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x2, r3, 0x200000000000000}, 0x38) r4 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x39}, 0x800, 0x0, 0x2, 0x1, 0x80, 0x6}, 0x20) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x150, 0x0, 0x1, 0x801, 0x0, 0x0, {0x1}, [@CTA_LABELS={0x20, 0x16, 0x1, 0x0, [0x4, 0x8, 0xb, 0xce, 0xffff, 0x5, 0xc0]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x101}, @CTA_LABELS_MASK={0x1c, 0x17, [0x41f5, 0x2, 0x5, 0x7, 0x5, 0x8]}, @CTA_TUPLE_ORIG={0x58, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010100}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0xffffffffffffff2a, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}}}}]}, @CTA_NAT_DST={0x84, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @broadcast}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}]}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @private=0xa010102}, @CTA_NAT_PROTO={0x1c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}]}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @loopback}, @CTA_NAT_V4_MINIP={0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, @CTA_SYNPROXY={0x1c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0xaa1e}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x5}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x4048080}, 0x40044) 5.117528456s ago: executing program 4 (id=1376): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000240)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x9, 0x4, 0xb47e, 0xb, 0x3, 0xd, 0xf, 0x1ff}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x7, 0x265, 0xe29, 0x2, 0x3ff}, 0x1000, 0x0, 0x23, 0x2, 0x7, 0x12, 0x16, 0x19, 0x4, 0x7, {0xf66b, 0x8, 0x6, 0x5, 0x3, 0x400}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x88000, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x4207, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000010240)={0x0, 0x0, &(0x7f0000010200)={&(0x7f00000001c0)={0x10020, 0x3f7, 0x0, 0x0, 0x0, {0xffff, 0x7, './file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', './file0'}}, 0x10020}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0xa, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_SET_EXPRESSIONS={0x4}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14}}, 0x70}, 0x1, 0x0, 0x0, 0x60004054}, 0x2840) sendto$packet(r5, &(0x7f00000002c0)="05031400d3fc14a888004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x88a8, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="00000000005bc2"], 0x20) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x41, 0x0, 0x0) syz_kvm_setup_cpu$x86(r9, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000040)="f20f97bb2c000000c4e3f962468d000f005a8dc74424008000c0fec744240200800000c7442406000000000f01142436d8feb9170800000f32b8010000000f01c13e0fc7bae5c80000ea000001008100c4e3ad5d2e08", 0x56}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) 5.073311847s ago: executing program 0 (id=1377): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@can={{0x2, 0x0, 0x1, 0x1}, 0x8}, 0x10}}, 0xd209f6d81482fb57) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r2, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r2, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x1412, 0x0, 0x70bd2b, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x28}}, 0x4) 4.953517441s ago: executing program 2 (id=1378): syz_emit_ethernet(0x2a, &(0x7f0000000040)={@local, @empty, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x3, 0x7, 0x1c, 0x68, 0x0, 0xc, 0x2, 0x0, @private=0xa010100, @multicast1}, {0x11, 0x0, 0x0, @private=0xa010102}}}}}, 0x0) syz_usb_connect$cdc_ecm(0x3, 0x5c, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000102505a1a440000000010109024a00010100000009040000160202000005241b000a05240000000d240f010000000000000000000624070000000905810340000000000905820208000000000905", @ANYBLOB="24ea"], 0x0) (async) syz_usb_connect$cdc_ecm(0x3, 0x5c, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000102505a1a440000000010109024a00010100000009040000160202000005241b000a05240000000d240f010000000000000000000624070000000905810340000000000905820208000000000905", @ANYBLOB="24ea"], 0x0) 3.512336522s ago: executing program 2 (id=1379): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYRESOCT, @ANYRES16, @ANYRES8, @ANYRES32], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x3) (async, rerun: 32) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (rerun: 32) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x7, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) (rerun: 64) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x800, &(0x7f00000003c0)=ANY=[]) (async, rerun: 64) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') (rerun: 64) read$FUSE(r3, &(0x7f0000004100)={0x2020}, 0x2020) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="400000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="a7ffa88800000000200012800900010069706970000000fa0f000280040013000500090000000008f33a5798cb485f3a9776f093ab3e544599d87862ad961fa67f7215b55c42d37b9a100eb2ec063287898534c013c8f11d376156badd398f094e0e3b0cae09b813a27158392211de2312f2526854a5a004cb08dad59319ee0f21d26b"], 0x40}}, 0x0) (async) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000680)={'veth1_to_team\x00', 0x0}) socket(0x400000000010, 0x3, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002640)={0x2020}, 0x2020) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r1, 0x8983, &(0x7f0000000100)) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r6, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, 0x0, 0x10) (async, rerun: 32) socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 32) socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 32) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000016c0)=ANY=[@ANYBLOB="3801000010000100fefff7ff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb000004d46c0000007f000001000000000000eabd00000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff400000002abd700004350000020001002000000000000000480003006465666c61746500"/240], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) (async, rerun: 32) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(ecb-aes-aesni)\x00'}, 0x58) 3.331666537s ago: executing program 3 (id=1380): r0 = syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1b) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000000)={0x7}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r5, 0x4004ae99, &(0x7f0000000040)=0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r5, 0x0) ioctl$KVM_INTERRUPT(r5, 0x4004ae86, &(0x7f0000000240)=0x4) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000000c0)={[0x8, 0x100000f, 0x9, 0x0, 0x1, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x6, 0x1, 0x3], 0x0, 0x8340}) ioctl$KVM_RUN(r5, 0xae80, 0x0) write$binfmt_misc(r1, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc2604110, &(0x7f0000000040)={0x0, [[0x89ef8], [0x207], [0x7]], '\x00', [{}, {}, {}, {0x0, 0x0, 0x0, 0x1, 0x1}, {}, {}, {}, {}, {0xfffffc00}], '\x00', 0x1000}) 3.022811518s ago: executing program 0 (id=1381): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000500)={0x2, 0x0, @ioapic={0xfec00000, 0x1, 0x401, 0x1, 0x0, [{0x7, 0x10, 0x4, '\x00', 0x38}, {0x4, 0xfe, 0x83, '\x00', 0x2f}, {0x6, 0xb3, 0x1, '\x00', 0xd}, {0x5, 0x5, 0x1, '\x00', 0x9}, {0x3, 0x7f, 0x6, '\x00', 0x79}, {0x7, 0x80, 0x0, '\x00', 0x6}, {0x4, 0x8, 0x1, '\x00', 0x47}, {0x52, 0x9, 0x1, '\x00', 0x6}, {0x40, 0x10, 0x73, '\x00', 0xff}, {0x11, 0xb6, 0x89, '\x00', 0x80}, {0x16, 0x24, 0xa5, '\x00', 0x1}, {0x21, 0x1, 0x7, '\x00', 0x4}, {0x3, 0xc, 0x8, '\x00', 0x3}, {0xc, 0x10, 0x8e, '\x00', 0x4}, {0x6, 0xc0, 0x6, '\x00', 0x3}, {0xc, 0x2, 0xcb, '\x00', 0x5}, {0x7, 0x6, 0x8, '\x00', 0x5}, {0x9, 0x8, 0xfa, '\x00', 0x5}, {0x1, 0xe7, 0x60, '\x00', 0x6}, {0xf4, 0x7, 0x7, '\x00', 0xf8}, {0x4, 0x5, 0x35, '\x00', 0xf7}, {0x6, 0x7, 0xfe, '\x00', 0x6}, {0xff, 0x7d, 0x3, '\x00', 0x7}, {0x16, 0x83, 0x4, '\x00', 0x2}]}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x2, 0xb6, '\x00', 0x2}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.020103177s ago: executing program 1 (id=1382): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f00000001c0), 0x0, 0x40500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) gettid() r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d40)=@newqdisc={0x3a8, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x7}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x378, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x10, 0x2, 0x13}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x64, 0x2, 0x3, 0x17, 0xd, 0x8, 0x1}}, @TCA_CHOKE_MAX_P={0x38, 0x3, 0x2}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x10}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x3a8}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$int_in(r3, 0x5421, &(0x7f0000000000)=0xa96) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r9 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r10, {0x4}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0x1, 0x5, 0x9, 0x7, 0xc, 0x2, 0x4, 0x2, 0xf, 0x6, 0x0, 0xb, 0x2, 0x6, 0x1, 0x4], 0x3, [0x8b, 0x101, 0x200, 0x2002, 0xfffa, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x3, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x8, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f00000011c0)={'sit0\x00', &(0x7f0000001140)={'syztnl2\x00', 0x0, 0x20, 0x700, 0x49d, 0x1, {{0xc, 0x4, 0x3, 0x1a, 0x30, 0x64, 0x0, 0x4, 0x2f, 0x0, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp={0x44, 0x10, 0x1b, 0x0, 0x5, [0x9, 0x7, 0x7]}, @lsrr={0x83, 0xb, 0x99, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2]}]}}}}}) sendmmsg$inet(r4, &(0x7f00000026c0)=[{{&(0x7f0000000040)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000100)="2cfb105fe55c18dac3db1b6a76a22f3d4530c9fe", 0x14}, {&(0x7f00000001c0)="37df6d49a4813b24c50d5f1ca71af1b919da3a3ea860ceafca9a2dd5c0cb86e4dc326893dfd6bb30f15cbcfc10c586908b3c34e1526e0265c57bc8e4febcbd3b6ef9fd6ba461d251ea792cc33ba8d94c229f46", 0x53}, {&(0x7f0000000340)="833ace7779b1d1359b9f6b314a890df351b175382c155843dafd59c27c60e3d1ddd5be0b4a79bddca3ab35767930a518ec1e40f5074ffa628a31dfad9bc9f42067bf5b401c20fc13daf3c2945a47ea3405f06dac764a24b335aa4e8d4279a50bafdb4d543c7015fa83593e034d30ec9bcc9900c799fb80f0cffd69c1507d5418203b958493e302bf5869a9932947cb6f3d754d2ccc0a5593df8d40559ce1dac94f12829dd2ddf0e9e24bdd9f0b1d2a5d972d0a8066605792d5124f852503f5b704a6e7b9c615602006dc6e4b3c4931b47fe1", 0xd2}], 0x3}}, {{&(0x7f0000000480)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000000740)=[{&(0x7f00000004c0)="3a185e813ab9a7624dfeeefc58cff43e4221c2064b6b8dd962f0240654a3ff1d14b7ead36f195702e03c3e359392ecf18dcafa94aa7fc017a740a9b3a9f1fe2078cbf110a362c76fe1bdd4c295acb07bbb085173f83dd46b93f44a95447aefc00c4a7c61cf6cf7878c12349a7e0fe45e95d7664151bbc431149b3bf692d3ae6598fad591d157705c764d9660318cfc3ce948766b1644ef27e7f037f89397a2ea6aa27fed26da4a08692f6a67d77186fe2dea", 0xb2}, {&(0x7f0000000580)="8bc8f200ff35c23e02816b0f4c574e878cb83090d5322ebc5f2ef9c597b7f35316620142ce2aa6ab5cbeeafa976bcd9707281f140097a6353daefecaf6a997f6dd328e5cf28323401ce187eaf1c25a240b560915e465cbbc652c7cc767136fe11f16c03d10d90a67cf71237c87528b0458bee010425d6eaad5de23e32216067b8a0b101cbb777ddef4619bbc28f7cf547605a4f4daa83c927fac2e11d587ed2069e957fa1df1b61404af164136d03571b4fb0fda8cf1b639a54d40ab857740", 0xbf}, {&(0x7f0000000640)="44aa2c58e3d951921f2c0d5017128656649d46e5c404862460dad126ebea14316db539c9f6440369d1fbf492f028f3e79b5c5d6a679eab83c12a60aacfe789657ce817cb345c", 0x46}, {&(0x7f00000006c0)="596d06d819d366bbb494597cac730871d8bcc2a2723ac1627f1e18acd4c80f0a471ad327084d99bc3f451b5a92472858eac230674e87d72589d65015fa4e5de9944e8a8d9ab5", 0x46}], 0x4}}, {{&(0x7f0000000780)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000b80)=[{&(0x7f00000007c0)="b8ebe44a6a8046a586b43fff6439f060ca01619ddc1cf734c5669f2dfceeb2e3972dd1309667606462da850b9ce92c679b90e87f68f8c0ae9274428b763082c811725a0d914662322e32e6467057c2a6c8cc3656e81a4a850942f137033c1ba1fe8d5d00fe93455938c361f89559e659f47b2680e862ec75c54320e927a1fb97d29efea446f98eb502a69c2bcbe1ca4eb183122a89fb5ea3f57f25d94c678a2efd5e7a8fa7f2aee28e6c8f0ba7c27a3c", 0xb0}, {&(0x7f0000000880)="8e1cb14a4341566e1dbfae5894de047b56ef8bec505bd8a06bae4e94f9e29638b0157e4938d005f852be85ea6bf77580ac773eaff2353193fa6aaf5641988f4055f43e2886814c8ad44d6b491962a7369b6db25ace701b6aa32c64445a68e87bba7d983da5d47f79d6b6578d07c2cb4330c883c753f2af613698c985ba0bb641d1c73c9d9e1261a47bb534df099a29ecda038c38dd90195f334dd0548e1f1a883e725c02c75faaf94d59df38e1bc89094730f28119f72cbf798a8f41735fdf9e9f5d6d3e1b385ca6840e9cd470640498e2f86640e1d661ff48e1f6f6719c7792d84d828c0e6231b772b2b9023437097d301b", 0xf2}, {&(0x7f0000000980)="530bc05caa82d93e290d3807805e2c542fcf181582e75ff38223bb1ee7ff8b9bd660837c6dd7c1dfea42a1c23cb48f7274bbb271929939a82b4f4c72790cc34da1a200ede4afaedd5393d2de17dfdc5b75f65cf4a53996e0a714775820289a205fc7a6", 0x63}, {&(0x7f0000000a00)="851c7f1d5ccbf4ea5fced6e2f32766ced77f1bcb689ad2296c06b4dec793aade60dba17f0b", 0x25}, {&(0x7f0000000a40)="150e7c4a9a2366ff170c9131401822dd37ecfcfcf5f30542ce94403662dcf6cf7ae8", 0x22}, {&(0x7f0000000a80)="76f11b800c790464f2bfb801897b9fa95d874a4003e31e27e663272647809659bb673d72d8a1310f3407bed2a1f5bd67436d3b036f014d8400dab814d35619ec757964bf07e4f785231fafb5bb40497728c97460cb006e5f664b66c519a54443c498c523d8cc870d379bc5b8641791c7ae6f6941536ea9a4a481d47450def64aaa1e686e947de9e7e7bbcb6a921911e67e535de8ea2b3e79d66dd8b0b8ccc77b4c556fddab3cce227ad1c5c16bc8050203b6207576f199a394096b6bdb77cee466a733ba6421fb744b56e13abaa6764ea176fac8b916547b7d191c613d0bac318519944a5750222c82c8fb144b40", 0xee}], 0x6, &(0x7f0000000c00)=[@ip_retopts={{0x10}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_retopts={{0x48, 0x0, 0x7, {[@lsrr={0x83, 0x23, 0x1a, [@rand_addr=0x64010102, @multicast1, @remote, @private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102, @loopback]}, @end, @noop, @rr={0x7, 0x13, 0x3a, [@broadcast, @empty, @broadcast, @multicast1]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x10}}], 0xa0}}, {{&(0x7f0000000cc0)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000d00), 0x0, &(0x7f0000000d40)=[@ip_retopts={{0x58, 0x0, 0x7, {[@generic={0x88, 0xb, "7fbc4565becd53da39"}, @timestamp_addr={0x44, 0x2c, 0xac, 0x1, 0x4, [{@empty, 0x800000}, {@empty, 0x2}, {@multicast2, 0x3ff}, {@multicast1, 0x6}, {@rand_addr=0x64010101, 0xb9}]}, @lsrr={0x83, 0xf, 0x1c, [@dev={0xac, 0x14, 0x14, 0x10}, @private=0xa010102, @private=0xa010100]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}], 0x70}}, {{&(0x7f0000000dc0)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f00000010c0)=[{&(0x7f0000000e00)="62c6f58adc6903df", 0x8}, {&(0x7f0000000e40)="35c7729deb23004362a5568a419c03eb3e699de8c514", 0x16}, {&(0x7f0000000e80)="f06ac380df7fac68e56bdb4e9842c6b9ed1f73cef7caf1e9b2b591b55d8f900bf80213b4d089203e15eff382dab09a117f38f764900632f29df989afd0fb24b4a99259e1f88d3e5f46e185d4fbc91e5707fbcd8cdb2b3e55c7da6ce386", 0x5d}, {&(0x7f0000000f00)="82abf2b40f971e1b4804393c7bf018b7801400539f20250ac6b3dab4c69f2f2a777ad6ad280283114eb2dbf2dd0765541f940c649e54b88f611bbf029032e0e320031a153bf94c0e9920918e5310b9fcdb97e1480751bcebf2067a8ec6ab716890623182018f8aef2c6981a03e50395f08e6e53886a468bbacfc908d8eaa797b6a786dc15cd83b3d2399cf31823834ce3a9435ca5b58ef851273ae6c0d9dd10923101f8f44a0ba0bb3e08e8268a83412", 0xb0}, {&(0x7f0000000fc0)="91644527df22498dd6c2e498a7f4a7c6ea1c9940ecb26bcbe531dba8ac6c350dc0e656a2b5886c4015ae5c799526ca7807a995d9ef334d965b3605516f1862cbe1b13bec8dbb761efca6ca586ff5f3fe7017f60674cab1d062a168eaf10f58b4e82a704c326d4bd3608a6a5a4332990ae21f92a612024543bdb79d11d5875c7d70e6457ad057ec4bc91a659477eac481c1b1d89b8682403d2b3888b2025b356954ac0c014e65b6749b44e469877b98dd4606d5a5962576bee5b531514b498123ef98d8dacdc9d2c2882cdb5bfa155398c377b1467c95b8089f4fc215c155373c3e44", 0xe2}], 0x5, &(0x7f0000001200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @multicast2, @rand_addr=0x64010102}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r11, @multicast1, @empty}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xf1}}], 0x58}}, {{&(0x7f0000001280)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000002640)=[{&(0x7f00000012c0)="bbc5475874d820987a205c96923379230b45de6467245787c5e95d773c7ee992d60438f274d5712af0a913ce204dab7619d3920a5e05d851937570ee8e25a4f0594c8c8e3a466f9687119e14c4b24ed55874d6881bd94faa158a847a80663c71ee7c7b803b5f9df3f2c2cccd8b6465fa7be3b039b235addd2bc98b811934c550ff57ad8da2601e6ab3ecee55b0dcb7990fa38159f25a24227b41864ff01297980d574b4a753dc46d7b899081fcde32cc9a60fd5ceeb33da29d104b21d9c36135e575939034e3c9166dec1cea7b03377f382eda2c83f9afb07c192c081273edcdf2f87cab4c2c", 0xe6}, {&(0x7f00000013c0)="3f664389c276dd209ae0ce753bc502912d2ec797cfe966f76ef1f39dd8f4883fb2e314c400af3e7d8a2e7204b531ce4884853e0f05a3fad7844407e7b46e11f566f9e0cf736b72825a292ec998f5fc8921f5dbc5ec5df1091b59eb8808a9d8678b682efe5a72f398dea89477d95283", 0x6f}, {&(0x7f0000001440)="32232f46da04e83d2346abf915031fa3af248c788ab131a3a03efae5a8beefa9e1d2c3340e49701859a5cbf5cb82b8b0b83cd4dbd70ba4dda162bd67ae511940d1734de13f186840e70a66d7fdc56e1c23d709dc5df695dc01177cb204cb9a5c8305463d11500b2d80aa2b5adb17c97989a5394670f53c101751c2931130c5c6fb4ace7d46c5be6d0630e736a57df69e1f", 0x91}, {&(0x7f0000001500)="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", 0xfb}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000002600)}], 0x6}}], 0x6, 0x4000000) splice(r3, 0x0, r5, 0x0, 0xf3a, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$invalidate(0x15, r13) add_key$user(&(0x7f0000000000), 0x0, 0x0, 0x0, r13) sendmsg$nl_route(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="5c0000001000ffff27bd7000fadbdf2500000000", @ANYRES32=0x0, @ANYBLOB="387a06002b9205003c0012800b000100697036746e6c00002c0002801400020000000000000000000000ffff64010102140003"], 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) 2.966188676s ago: executing program 3 (id=1383): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="580000000001050000000000000000000a0000001c001865f04384400000467408000340000000050800b09d20a61f38555f843f02400000000c10001640000000040000000200000800164000000003080015400000000300"/98], 0x58}, 0x1, 0x0, 0x0, 0x8811}, 0x101) (async) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="580000000001050000000000000000000a0000001c001865f04384400000467408000340000000050800b09d20a61f38555f843f02400000000c10001640000000040000000200000800164000000003080015400000000300"/98], 0x58}, 0x1, 0x0, 0x0, 0x8811}, 0x101) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001680)=ANY=[@ANYRES64=r1], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4e23, 0xe9db8df3, @local, 0x2}, 0x1c) setsockopt$sock_linger(r4, 0x1, 0x3e, &(0x7f0000000180)={0x200000000000001}, 0x8) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000020ef0ec4720000000000010902"], 0x0) (async) r5 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000020ef0ec4720000000000010902"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) (async) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r5) syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e61b3a40fd080200"], 0x0) r6 = socket(0x2b, 0x1, 0x1) r7 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r7, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x9, &(0x7f0000000140)=0xfb78, 0x4) (async) setsockopt$inet_tcp_int(r6, 0x6, 0x9, &(0x7f0000000140)=0xfb78, 0x4) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a5c000000030a0fdb01000000000000000a0000050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000031c0008800c00010b00000000000001ff0c000240000000000000ae60148000001100010000000000000000000100000ae123b23f18d6682f3643cbd785"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a5c000000030a0fdb01000000000000000a0000050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000031c0008800c00010b00000000000001ff0c000240000000000000ae60148000001100010000000000000000000100000ae123b23f18d6682f3643cbd785"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) close(0x3) (async) close(0x3) fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f0000000100)=@v2={0x2000000, [{0xaa6d, 0x5}, {0x2, 0xfffffff9}]}, 0x14, 0x0) (async) fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f0000000100)=@v2={0x2000000, [{0xaa6d, 0x5}, {0x2, 0xfffffff9}]}, 0x14, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r9 = socket$nl_crypto(0x10, 0x3, 0x15) getsockopt$sock_int(r9, 0x1, 0x2a, 0x0, &(0x7f0000000340)) (async) getsockopt$sock_int(r9, 0x1, 0x2a, 0x0, &(0x7f0000000340)) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000100001082dbd7000fbdbff2500000000", @ANYRES32=0x0, @ANYBLOB="b1f2b8810000000000000000", @ANYRES32=r8, @ANYBLOB="08001b0000000000"], 0x30}, 0x1, 0x0, 0x0, 0x4008000}, 0x4) setsockopt$inet_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f00000002c0)=@gcm_256={{0x303}, "006896d30c9745d5", "63c439fea421f84862c7cb3b6f9bdf98f4e0156ef63a3c8f0862a3c57a7312f4", "1a8d0223", "93e1229b8b044cc3"}, 0x38) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x34) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x34) r10 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r10, 0x5452, &(0x7f0000000000)=0xfffffffffffffdf1) sendto$inet(r10, 0x0, 0x0, 0x20000090, 0x0, 0x0) setsockopt$sock_int(r10, 0x1, 0x7, &(0x7f0000000080)=0x4000004, 0x4) 2.964526766s ago: executing program 4 (id=1384): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000005c0)='fd', 0x0, 0xffffffffffffffff) io_uring_setup(0x5d2d, &(0x7f00000002c0)={0x0, 0x43d3, 0x400, 0x2, 0x235}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0xa0, 0x29, 0x4, {0x4, 0x10, '\x00', [@calipso={0x7, 0x8, {0x1, 0x0, 0x9, 0x9f}}, @generic={0xfe}, @generic={0x80, 0x14, "09e12e5f0b6bdcf72f2ec7008a15fa88b025e0ad"}, @calipso={0x7, 0x38, {0x1, 0xc, 0x7a, 0x8001, [0x5, 0x9, 0x4, 0x6, 0x4, 0xb]}}, @ra={0x5, 0x2, 0xa7e}, @hao={0xc9, 0x10, @private2}, @generic={0x93, 0x11, "e80ee304ecb784ec4655260cecea14e498"}]}}}, @hoplimit={{0x14}}, @hopopts={{0x40, 0x29, 0x36, {0x5e, 0x4, '\x00', [@pad1, @pad1, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x10, {0x0, 0x2, 0x7, 0x6, [0x7fff]}}, @generic={0x1, 0x2, "2bdb"}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}], 0x140}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = fsopen(&(0x7f0000000080)='binder\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) msgsnd(0x0, &(0x7f0000000000)={0x2}, 0x8, 0x0) msgsnd(0x0, &(0x7f0000000280)={0x2}, 0x8, 0x0) ioctl$FS_IOC_GETFSSYSFSPATH(r1, 0x80811501, &(0x7f00000001c0)={0x80}) msgrcv(0x0, 0x0, 0x0, 0x2, 0x2800) msgctl$IPC_RMID(0x0, 0x0) fsmount(r1, 0x1, 0x3) fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="020d000018000000000000000000000005000600000000000a00000000000000fc010000000000000000000000000000000000000000000005000500000000000a00000000000000ff01000000000000000000000000000100000000000000000200120002000200000000000000000006002b00000000000000000000100000fc010000000000000000000000000000fc01000000000000000000000000000004000400"/192], 0xc0}}, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = syz_open_dev$tty1(0xc, 0x4, 0x4) writev(r5, &(0x7f0000000100)=[{&(0x7f0000000280)="5a68ac6f611d765e6945c810ebfa0e81ceb3dc4c43c215ebd015af003afaf21393a2977cab52e35904000000a88ab75b175c12cf29c48c2d4b45c1dc73113beeb9b3a73cd0415b0436839a7b9b3f3668430e86897b662145659c78b24257c346d2b6b0c0e6a04f27f25fe956c74e6a5bd151eb4435ccce91425414c14a75acaaeac29b41", 0x84}], 0x1) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000500)="6636660f38035dda670f7840020f4480b797ad0f86008066b93b02000066b80900000066ba000000000f302e0f01d80f21a066b9b103000066b8ae00000066ba000000000f30f2af", 0x48}], 0x1, 0x26, 0x0, 0x0) 2.779466646s ago: executing program 1 (id=1385): prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000df2bfd404b0c0001cad7010203010902240001000000000b04450002c9cee40009050802ff03000000090582030004"], 0x0) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x404, &(0x7f0000000040)={[{0x19, 0x4e00, "28998aefd36fe3f9adfc8b9e6006bcaf27eccedb4037b2fcce"}, {0x3dd, 0x4e00, "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"}]}) 2.719673389s ago: executing program 0 (id=1386): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000600)=ANY=[@ANYBLOB="0201000000000010ac05418200000000000109022421000000012205000905810300"/49], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="200102000000d1b331e48d67919528d096d867a63ebc29472a97e49b27a808c69cc6f059b7f9d051c5c035be2e6df47f3c35a70549705ddeab3469657c806a08732f91001bf3530a7d9cc9b2c63e7d73f27edace8c913430ff686b5a83d86ee71b"], 0x0}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f0000000140)=@ethtool_cmd={0x0, 0x80000000, 0x0, 0xd, 0x11, 0x3, 0x3, 0xfc, 0x0, 0xff, 0x0, 0x0, 0x5, 0xff, 0x0, 0x5, [0xffffffff, 0x1]}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000340)={'tunl0\x00', 0x0}) 2.599927499s ago: executing program 4 (id=1387): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) set_mempolicy(0x3, &(0x7f0000000000)=0x9, 0x9) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x147c40, 0x0) preadv2(r2, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0xffe00}], 0x5, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) close(0xffffffffffffffff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 1.598289216s ago: executing program 4 (id=1388): socket$inet_udp(0x2, 0x2, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000580)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0xbc3d, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fsopen(&(0x7f00000002c0)='exfat\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000140)='\x133gq\xb8Q\x02gcd\x15Z\xadp\xd59l\xc8\xe7\ny\x14\x1c', &(0x7f0000000100)='\\\x00', 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0xfffd, 0xa) ioctl$SG_GET_REQUEST_TABLE(r2, 0x2286, &(0x7f0000000600)) r5 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) mq_notify(r5, &(0x7f0000000100)={0x0, 0x80000010, 0x1}) mq_notify(r5, 0x0) r6 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1802020, &(0x7f0000000340)=ANY=[]) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000440)=""/76, 0x0) unshare(0xe060400) unshare(0x2c060000) ioctl$IOCTL_STATUS_ACCEL_DEV(r6, 0x40046103, 0x0) r7 = syz_open_dev$sg(&(0x7f0000000040), 0x6, 0x8002) r8 = fcntl$dupfd(r7, 0x0, r7) write$uinput_user_dev(r8, &(0x7f0000000180)={'syz1\x00', {0x10, 0x0, 0xfffb}, 0x9, [0xb86, 0x7, 0x4, 0x7, 0x7ff, 0x3, 0x5, 0x100000, 0x5, 0x4, 0x2000008, 0x3, 0x20009, 0x1f, 0xc795, 0x6, 0x7fff, 0x10001, 0x4, 0x4, 0x1, 0x6, 0xa, 0x6, 0x1, 0x5, 0x0, 0xfb82, 0x10000003, 0x0, 0x0, 0x5, 0xd, 0x2, 0x0, 0x1, 0x0, 0xfffffffc, 0x400, 0x5, 0x9, 0x5, 0x4, 0x6, 0x0, 0x8, 0x7, 0x4, 0x1, 0xe8, 0x5, 0x7, 0x4, 0x2, 0x2f03132e, 0x0, 0x3, 0x9, 0x8003, 0x0, 0x0, 0x0, 0xdf, 0x287d], [0x101, 0x31, 0x6, 0x7, 0x23e, 0x80000001, 0x40a1, 0xe, 0x3, 0x8, 0x9, 0x7f, 0x75, 0x8, 0x7fff, 0x2, 0x7f, 0x5, 0x73, 0x8, 0xffffffff, 0x1, 0x7ff, 0x4, 0x2004d, 0x1, 0x9, 0x9, 0x0, 0x2, 0x8, 0xf, 0xd, 0x2, 0x20002a, 0x8, 0x7, 0x8, 0x1, 0x8, 0x2, 0xfffffff0, 0x6, 0x8, 0x7cd, 0x5, 0x7, 0x3, 0xc6, 0x7, 0x9, 0x7, 0x10000, 0x6, 0x5, 0x0, 0x3, 0x4, 0x8, 0x0, 0x2, 0x0, 0x6], [0x0, 0x2, 0x1, 0x3, 0x9, 0x3, 0x3, 0x3ea7, 0x6, 0xffff7ff8, 0x5, 0x1, 0x700, 0xffffffff, 0xfffffffa, 0xd, 0x7ff, 0x6, 0x80000, 0x7, 0x9, 0x48, 0x9, 0x6, 0x1, 0x9, 0x3, 0x709, 0x9, 0x9, 0x2, 0x7, 0xff, 0x7fffffff, 0x5, 0x6, 0x43cd, 0x3, 0xd, 0x8000, 0x4, 0x1ef, 0x7, 0x5, 0x8, 0x10001, 0x4, 0xffff89a3, 0x1000, 0x19, 0x9, 0xa59, 0x3ff, 0x1, 0x3, 0xfffffff5, 0x9, 0x81, 0x10000, 0x1d, 0x3, 0x4, 0x1, 0x1], [0x7, 0x8, 0x213, 0x80789c, 0x40, 0x6, 0x1000, 0x8000, 0x2, 0x3, 0x2, 0x5, 0x7fffffff, 0xd, 0x6, 0x7, 0x8, 0xd, 0x7fffffff, 0x2, 0x10001, 0x0, 0x6, 0x7, 0x0, 0xda43, 0x2, 0x5, 0x14ac3b3b, 0x2, 0xb, 0x0, 0x4, 0x1, 0x1, 0x40001000, 0x81, 0x7ffffffe, 0xb6, 0x3, 0xffff, 0x10, 0x6, 0x3, 0x6, 0x800, 0xffffff11, 0x40, 0xfffffffb, 0x4, 0x0, 0xfffffff3, 0x7, 0x800, 0x0, 0x4, 0x5, 0x3, 0x2, 0x6, 0xe, 0x9a6, 0x5, 0xffffffff]}, 0x45c) ioctl$SG_GET_REQUEST_TABLE(r8, 0x2275, &(0x7f00000018c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="9ed600001c"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x2}, 0x94) socket$netlink(0x10, 0x3, 0x0) 1.309843262s ago: executing program 1 (id=1389): socket$key(0xf, 0x3, 0x2) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket(0x2, 0x3, 0x6) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r1, &(0x7f0000000340)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0x9, 0x7, 0x0, 0x400000000000081, 0x2, 0x3e, 0xfffffff9, 0x3bf, 0x40, 0x103, 0xd35, 0x5, 0x38, 0x2, 0x78, 0x7}, [{0x6474e551, 0x5, 0x1, 0x8dbb, 0xc2d, 0xaf, 0x3, 0x8}, {0x1, 0xa1b8, 0x7, 0xc4, 0x2, 0x5, 0x0, 0x10001}]}, 0xb0) lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0) close(r1) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000017c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r0, @ANYBLOB="07b0cf7e2c89cc"], 0x0) socket$key(0xf, 0x3, 0x2) (async) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket(0x2, 0x3, 0x6) (async) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) (async) write$binfmt_elf64(r1, &(0x7f0000000340)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0x9, 0x7, 0x0, 0x400000000000081, 0x2, 0x3e, 0xfffffff9, 0x3bf, 0x40, 0x103, 0xd35, 0x5, 0x38, 0x2, 0x78, 0x7}, [{0x6474e551, 0x5, 0x1, 0x8dbb, 0xc2d, 0xaf, 0x3, 0x8}, {0x1, 0xa1b8, 0x7, 0xc4, 0x2, 0x5, 0x0, 0x10001}]}, 0xb0) (async) lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0) (async) close(r1) (async) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000017c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r0, @ANYBLOB="07b0cf7e2c89cc"], 0x0) (async) 729.691086ms ago: executing program 3 (id=1390): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10681, 0x20000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x20044002) r6 = socket(0x1, 0x803, 0x0) r7 = socket(0x10, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[], 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r2, @ANYBLOB="01"], 0x3c}}, 0x0) 649.010008ms ago: executing program 3 (id=1391): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x8c1c3, 0x0) getsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x5, &(0x7f0000000200), &(0x7f0000000380)=0x4) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x2400c0c1}, 0x8000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000480)}) io_uring_register$IORING_REGISTER_FILES(r3, 0x23, &(0x7f0000000540)=[r4], 0x1) syz_open_dev$I2C(0x0, 0x1, 0x402) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r6 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb09587", 0x4b}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1", 0x55}], 0x2}], 0x1, 0x8800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000240)=""/185, 0xb9}, {&(0x7f0000000300)=""/107, 0x6b}, {&(0x7f0000000440)=""/116, 0x74}, {&(0x7f0000000600)=""/255, 0xff}], 0x4}, 0x0) sendmsg$sock(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000740)="c2fcde59949cd17927eb874dc0dce82a8f07882a5d46736b73e268b6e35470d665531f0a65046f9b059b41142585ef1aba0385e74916a21579dae301d01e0a229bf06d55e098e7672b46cae88486de95d7afd84a9ee3d3f495b3dd6fdda5c509fc8eba538182c6f6290e9f2d202de626380f05e1699fb08bec8eb96abe889c4111ead15b2854e96e14123ecdba8de0f9290e83b5a7b3775fc5019e", 0x9b}, {&(0x7f0000000800)="a1ab845d3c15a4d573691182df322e8c0bed954d511a14ad37852c16526bf5e5a3d0cde334761a278ea9ac44514e10795c3b769fe4d892280ebd67e4a4c0cf0465b811c895d4f31b3d2c3bc232fdbe27467fcd726e496ce66c6c5a672e7a7f293dcd51121b0c42020bc910f3989625fba990d67753f53402d4ba4cae4af7904cc32f64d893f55a7475c8d2eb8612752a549b5ea9965ba884674bf8c220cf2cab2533773738703d097beacf3301a27960943e207680f6fdc98271300938667814cc1cd9f601005582af2712fc85e6802ee40d0c85102d0125f6c8696a4656786da6fe7ba4b0450943a98bbe85954d", 0xee}, {&(0x7f0000000900)="e81c7948af5ca60e9d7f3ab502332309d4668c8d7d4ceeb17aae4077530b224b4e66073e14c8b7941ebb1467ace02bb9d2a6d114ae949eb77a05202b40a893d0e922c31fe2eb00746a86f9caf9a9040dc90f0ac68f21a87210916201144981544ca15de83c4260bc77a2198d59b1ace41708c1944c7e8d848289b5c3dd78d74322f60fabb8954b12ce37dca11c5f101e16e368feff81", 0x96}, {&(0x7f00000009c0)="f3bcccc27c85b8f3bcb34f1277a6f064e09798ba569ffee2dcef9ccd9fb6c67060ece18b3d38d30b4f897dbbb63ea2c12962be463608fc563afecf1592ce42aa5cb757f842613e5b2461215f47c8ed220a7ab3693af00549612b8f76", 0x5c}], 0x4, &(0x7f0000000a80)=[@mark={{0x14, 0x1, 0x24, 0x10}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x9e}}], 0x60}, 0x4000000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD64(r7, 0x400454a4, &(0x7f0000000040)=0x1) 526.136576ms ago: executing program 4 (id=1392): r0 = openat$sysfs(0xffffff9c, &(0x7f0000000300)='/sys/power/freeze_filesystems', 0x42, 0x0) pwritev(r0, &(0x7f0000000500)=[{&(0x7f0000000100)='<', 0x1}], 0x1f, 0xffffff01, 0x2) semop(0xffffffffffffffff, &(0x7f0000000500)=[{0x2, 0x3ff, 0x800}], 0x41) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000880)=ANY=[@ANYRES32, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32, @ANYBLOB="99c7454f579f630171d84fe2123511ea5469348d21ab06035b6ad6a38d45faf16dce02fc607055465cb22b081e85b9eb2887ac82faabe51603f562f21b34ef3986a2026ecc547cba5e6642251541b11ba2b0b0bbf615db20999e5aac6be40ee2a9fa1f47de6d9a355dab420721348536c6bde257584f4abb88ef000000024200000000", @ANYRES32, @ANYBLOB="af5e6dd9716bd37ae7860eb9e6ac92aeee025af69aa0f81d6f347b006007364bd9efb0bc54f39dcfcea6fcbda0aba9464129ebfa9eda7e1df2f9a19afc0a8bc0010082c0918149d2d0d3232ae9bf0951c7264722cef2732e6b2f3adc15e38bf92dd9c9f6b1fab32c19b526b80bae88a6c9db842dfaa37eccb3e06e4f6517fb19ad5cb7f8dd3fffa20764e19dff10bee75c06ca4b50c1637b076dff1e554e9c075c2769a68a9f05fd51f4fd9661329a1b8432cb3ba0038096b166acccd253a8883d2ad064a5ed5408bf9e6475f1a63189d76a21fdf15ecdcdc14da58a38b376693ec23d4679c5363fa6dbba93adba23cd8a506e50be15b78f7cae9bab95f2965026f0c46f5e1d3124918813a111166ea4e9878e0f895629f7102b72353b7da60ad4c032a5d55017e37e90e000000013eedd9788d74e57dcbd1e949562370b313f8646638ac5f93e0c83fdab126da96ccb46a4bf71f2e6c8946ed043ea60a86c907423bb6bca0b7adb4108dee0e6670bd86e2b199767a5d25db646"], 0x20) r1 = memfd_create(&(0x7f0000000640)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\xfd\x89\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newqdisc={0x220, 0x24, 0x4ee4e6a52ff56441, 0x70b925, 0x80000, {0x0, 0x0, 0x0, r6, {}, {0x2, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x3, 0x9a1c}}]}}, @TCA_STAB={0x2c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0xd, 0x7, 0x6, 0x0, 0xffffffff, 0x7fc, 0x3}}, {0xa, 0x2, [0x8, 0x5824, 0x0]}}]}, @TCA_STAB={0x84, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xc, 0x9, 0xc1, 0x2bfb, 0x1, 0x6, 0x1d0, 0x8}}, {0x14, 0x2, [0xfff9, 0x1, 0x8, 0x4, 0xd, 0x1, 0x83e, 0x1]}}, {{0x1c, 0x1, {0x8, 0x1e, 0x7, 0xab5, 0x0, 0x1, 0xf480, 0x3}}, {0xa, 0x2, [0x6, 0x3, 0x2]}}, {{0x1c, 0x1, {0x10, 0x6, 0x9, 0xc, 0x1, 0xfffffff7, 0x413f, 0x3}}, {0xa, 0x2, [0x4, 0x3, 0x2]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x5}, @TCA_STAB={0x120, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0x0, 0x0, 0x10001, 0x0, 0x8, 0x8, 0x1}}, {0x6, 0x2, [0x40]}}, {{0x1c, 0x1, {0x2, 0x6, 0x7f, 0x0, 0x0, 0x0, 0x9, 0x4}}, {0xc, 0x2, [0x7, 0xe000, 0x3, 0x1]}}, {{0x1c, 0x1, {0x2, 0x7, 0x9ad4, 0x9, 0x2, 0x7, 0x3, 0x2}}, {0x8, 0x2, [0x4, 0x9e]}}, {{0x1c, 0x1, {0xff, 0x3, 0x2, 0xfffffff8, 0x4973b24c5f1a98b0, 0x5, 0x400, 0x7}}, {0x12, 0x2, [0x7, 0xad27, 0x9, 0x3, 0x200, 0x1, 0x7]}}, {{0x1c, 0x1, {0x4, 0x3, 0x401, 0x9, 0x1, 0xff, 0x3ff, 0x1}}, {0x6, 0x2, [0x9]}}, {{0x1c, 0x1, {0x6, 0x9, 0xe561, 0x2, 0x2, 0x9cd8, 0x3, 0xa}}, {0x18, 0x2, [0x2, 0x1000, 0x7, 0x8, 0x2, 0x9, 0xcbf5, 0x3, 0x2, 0x4]}}, {{0x1c, 0x1, {0xd2, 0x0, 0x7, 0x0, 0x0, 0xe, 0x7, 0x2}}, {0x8, 0x2, [0x2c4, 0x9]}}]}]}, 0x220}, 0x1, 0x0, 0x0, 0x2000c061}, 0x200c000) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 165.900031ms ago: executing program 1 (id=1395): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r1, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) socket$can_raw(0x1d, 0x3, 0x1) sendmmsg$inet(r1, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c844) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0xe22, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0x2, 0x4e23, 0x0, @mcast1, 0x4}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x8000000004) connect$inet6(r3, &(0x7f0000000800)={0xa, 0x4e24, 0xc0, @ipv4={'\x00', '\xff\xff', @loopback}, 0xc58e}, 0x1c) writev(r4, 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x40100) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x4) preadv(r5, &(0x7f0000000300)=[{&(0x7f00000000c0), 0x18}], 0x1, 0x0, 0x4ffff) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r2, 0x0, &(0x7f0000000640)=""/13, 0x2}, 0x20) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, 0x0, 0x0) sendto$inet(r1, &(0x7f00000000c0)="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", 0xffe3, 0x6000000000000000, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 21.461918ms ago: executing program 1 (id=1396): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) unshare(0x20000400) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r5, 0x5452, &(0x7f0000000040)=0x8001) r6 = getpgid(0x0) fcntl$setownex(r5, 0xf, &(0x7f0000000140)={0x2, r6}) sendmmsg$unix(r4, &(0x7f0000006c40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="11", 0x1}], 0x1}}], 0x1, 0x40015) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_DELCHAIN={0x80, 0x5, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_CHAIN_HANDLE={0x4c, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x30, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x57db7724}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_DEV={0x14, 0x3, 'bond_slave_1\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2e5ee0ec}]}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}]}], {0x14}}, 0xa8}, 0x1, 0x0, 0x0, 0x4001}, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x1, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0xffffffffffffffff, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f000000c000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000240)="b903080000b800500000ba000000000f30c48135e19d343490e3c7442400be000000c74424024e3c0000ff2c24c7442400aa000000c7442402f3000000ff1c24450fc7ad317378def3420f09c46281dc8b9b0300008fc940949a3934abd70f01b70b000000c483f5423780", 0x6b}], 0x1, 0x42, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"/2944], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x4a) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000001c0)="b9800000c00f3235000400000f30440f20c03508000000440f22c036646665f36526f20f22a5430f01c566ba4000edc4a39979250b00000008b9800000c00f3235010000000f30f245ab48b800000000000000800f23c00f21f83500000b000f23f8c481e57dcd", 0x67}], 0x1, 0x10, 0x0, 0x0) io_setup(0x8, &(0x7f00000000c0)=0x0) r9 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x1c7) io_submit(r8, 0x8, &(0x7f0000000140)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x2000, r9, 0x0, 0x51, 0x801000}, &(0x7f0000000080)={0x300000000000000, 0x0, 0x0, 0x0, 0x48f, r9, 0x0, 0x44, 0x0, 0x0, 0x0, r9}]) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) ioctl$KVM_RUN(r7, 0xae80, 0x0) 0s ago: executing program 2 (id=1397): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000240)={0x7fff, 0x4, 0x10000, {0xfdfd, 0xffffffff}, 0x100, 0x6}) kernel console output (not intermixed with test programs): 59.255915][ T994] usb 2-1: config 0 descriptor?? [ 259.285978][ T9187] fido_id[9187]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 259.502822][ T9183] bond3: (slave gretap1): making interface the new active one [ 259.521266][ T9183] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 259.654975][ T10] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 259.686530][ T994] bigben 0003:146B:0902.0019: unexpected rdesc, please submit for review [ 259.706446][ T994] bigben 0003:146B:0902.0019: unknown main item tag 0x0 [ 259.723490][ T994] bigben 0003:146B:0902.0019: unknown main item tag 0x0 [ 259.746932][ T994] bigben 0003:146B:0902.0019: unknown main item tag 0x0 [ 259.766305][ T994] bigben 0003:146B:0902.0019: unknown main item tag 0x0 [ 259.782595][ T994] bigben 0003:146B:0902.0019: unknown main item tag 0x0 [ 259.793153][ T994] bigben 0003:146B:0902.0019: hidraw0: USB HID v0.00 Device [HID 146b:0902] on usb-dummy_hcd.1-1/input0 [ 259.805440][ T994] bigben 0003:146B:0902.0019: missing HID_OUTPUT_REPORT 0 [ 259.812631][ T994] bigben 0003:146B:0902.0019: no output report found [ 259.816677][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 259.878148][ T10] usb 4-1: config 0 has no interfaces? [ 259.914164][ T10] usb 4-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 259.957744][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.999778][ T994] usb 2-1: USB disconnect, device number 58 [ 260.019738][ T10] usb 4-1: Product: syz [ 260.034502][ T10] usb 4-1: Manufacturer: syz [ 260.047691][ T10] usb 4-1: SerialNumber: syz [ 260.089845][ T10] usb 4-1: config 0 descriptor?? [ 260.105734][ T9199] fido_id[9199]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 260.378390][ T1168] bridge_slave_1: left allmulticast mode [ 260.412812][ T1168] bridge_slave_1: left promiscuous mode [ 260.456252][ T1168] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.500185][ T1168] bridge_slave_0: left allmulticast mode [ 260.523952][ T1168] bridge_slave_0: left promiscuous mode [ 260.541381][ T1168] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.845247][ T5624] Bluetooth: hci4: command tx timeout [ 261.632671][ T1168] gretap0 (unregistering): left promiscuous mode [ 261.688406][ T1168] bond4 (unregistering): (slave gretap1): Releasing active interface [ 261.757428][ T1168] bond2 (unregistering): (slave geneve3): Releasing active interface [ 261.774930][ T994] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 261.783347][ T1168] bond1 (unregistering): (slave geneve2): Releasing active interface [ 261.800659][ T1168] geneve2 (unregistering): left allmulticast mode [ 261.946548][ T994] usb 1-1: New USB device found, idVendor=046d, idProduct=08b3, bcdDevice=ca.8e [ 261.957643][ T994] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.987820][ T994] pwc: Logitech QuickCam Zoom USB webcam detected. [ 261.995541][ T5704] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 262.062282][ T1168] bond3 (unregistering): (slave bridge4): Releasing backup interface [ 262.121404][ T1168] bond5 (unregistering): (slave bridge5): Releasing backup interface [ 262.121485][ T1168] bridge5 (unregistering): left promiscuous mode [ 262.121590][ T1168] bridge5 (unregistering): left allmulticast mode [ 262.164917][ T5704] usb 2-1: Using ep0 maxpacket: 32 [ 262.173344][ T5704] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 262.182271][ T9217] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.187918][ T5704] usb 2-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 262.205863][ T5704] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.212764][ T9217] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.232047][ T1168] bond0 (unregistering): left promiscuous mode [ 262.239079][ T5704] usb 2-1: config 0 descriptor?? [ 262.239260][ T1168] bond_slave_0: left promiscuous mode [ 262.250904][ T1168] bond_slave_1: left promiscuous mode [ 262.256538][ T994] pwc: Failed to set LED on/off time (-71) [ 262.273070][ T994] pwc: send_video_command error -71 [ 262.287963][ T994] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 262.296004][ T994] Philips webcam 1-1:127.0: probe with driver Philips webcam failed with error -71 [ 262.311674][ T994] usb 1-1: USB disconnect, device number 66 [ 262.318753][ T1168] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 262.334522][ T1168] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 262.347697][ T1168] bond0 (unregistering): Released all slaves [ 262.367163][ T1168] bond1 (unregistering): Released all slaves [ 262.391024][ T1168] bond2 (unregistering): Released all slaves [ 262.409715][ T1168] bond3 (unregistering): Released all slaves [ 262.432723][ T1168] bond4 (unregistering): Released all slaves [ 262.449945][ T1168] bond5 (unregistering): Released all slaves [ 262.506919][ T5711] usb 4-1: USB disconnect, device number 54 [ 262.507390][ T5290] 8021q: adding VLAN 0 to HW filter on device eth1 [ 262.520834][ T5697] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 262.689793][ T5697] usb 5-1: Using ep0 maxpacket: 32 [ 262.712204][ T5697] usb 5-1: unable to get BOS descriptor or descriptor too short [ 262.748386][ T5704] input: HID 5543:0042 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:5543:0042.001A/input/input26 [ 262.748553][ T5697] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 34, changing to 7 [ 262.866779][ T5697] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 262.896752][ T5697] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.910671][ T5697] usb 5-1: Product: syz [ 262.925911][ T5624] Bluetooth: hci4: command tx timeout [ 262.941920][ T5697] usb 5-1: Manufacturer: syz [ 262.959414][ T5697] usb 5-1: SerialNumber: syz [ 263.003076][ T5704] input: HID 5543:0042 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:5543:0042.001A/input/input27 [ 263.018206][ T5711] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 263.117951][ T5704] uclogic 0003:5543:0042.001A: input,hidraw0: USB HID v7f.fd Mouse [HID 5543:0042] on usb-dummy_hcd.1-1/input0 [ 263.201168][ T5711] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 263.228734][ T5697] usb 5-1: 1:1 : no UAC_FORMAT_TYPE desc [ 263.258602][ T5697] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 263.281371][ T5711] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 263.308748][ T5704] usb 2-1: USB disconnect, device number 59 [ 263.334345][ T5711] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 263.401451][ T5711] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 263.415928][ T5711] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 263.428998][ T5711] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.516167][ T5711] usb 4-1: config 0 descriptor?? [ 263.541353][ T9240] fido_id[9240]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 263.722659][ T5697] usb 5-1: USB disconnect, device number 67 [ 263.774429][ T5711] hdpvr 4-1:0.0: firmware version 0xd dated jl;S11!vOp [ 263.774429][ T5711] 4(r [ 263.774429][ T5711] d2}d~٭^r [ 263.992994][ T5632] udevd[5632]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 263.998730][ T5711] hdpvr 4-1:0.0: device init failed [ 264.092921][ T5711] hdpvr 4-1:0.0: probe with driver hdpvr failed with error -12 [ 264.172394][ T5711] usb 4-1: USB disconnect, device number 55 [ 264.545702][ T5704] usb 2-1: new full-speed USB device number 60 using dummy_hcd [ 264.640132][ T9178] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.677012][ T9178] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.687001][ T9178] bridge_slave_0: entered allmulticast mode [ 264.724053][ T9178] bridge_slave_0: entered promiscuous mode [ 264.747009][ T5290] 8021q: adding VLAN 0 to HW filter on device eth2 [ 264.751837][ T5704] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 264.781502][ T5704] usb 2-1: config 0 has no interface number 0 [ 264.794913][ T5704] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 264.807431][ T5704] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 264.841036][ T9178] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.860484][ T9178] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.869653][ T5704] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 264.879008][ T5704] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 264.893925][ T9178] bridge_slave_1: entered allmulticast mode [ 264.902686][ T5704] usb 2-1: Product: syz [ 264.921097][ T5704] usb 2-1: SerialNumber: syz [ 264.951944][ T9178] bridge_slave_1: entered promiscuous mode [ 264.960940][ T5704] usb 2-1: config 0 descriptor?? [ 264.994647][ T5704] cm109 2-1:0.8: invalid payload size 0, expected 4 [ 265.002170][ T5624] Bluetooth: hci4: command tx timeout [ 265.009446][ T1168] hsr_slave_0: left promiscuous mode [ 265.019485][ T5704] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input28 [ 265.034692][ T1168] hsr_slave_1: left promiscuous mode [ 265.057071][ T1168] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 265.081770][ T1168] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 265.210784][ T1168] veth1_macvtap: left promiscuous mode [ 265.225671][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 265.246836][ T1168] veth0_macvtap: left promiscuous mode [ 265.258827][ T29] audit: type=1326 audit(1778643274.107:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9273 comm="syz.0.1028" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f70d079ce59 code=0x0 [ 265.425320][ T808] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 265.596301][ T1168] team0 (unregistering): Port device team_slave_1 removed [ 265.605096][ T808] usb 4-1: Using ep0 maxpacket: 8 [ 265.613973][ T808] usb 4-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 265.629317][ T1168] team0 (unregistering): Port device team_slave_0 removed [ 265.639251][ T808] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 265.657904][ T808] usb 4-1: config 168 interface 0 altsetting 188 has 0 endpoint descriptors, different from the interface descriptor's value: 100 [ 265.689732][ T808] usb 4-1: config 168 interface 0 has no altsetting 0 [ 265.707834][ T808] usb 4-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 265.719488][ T808] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 265.733733][ T808] usb 4-1: config 168 interface 0 altsetting 188 has 0 endpoint descriptors, different from the interface descriptor's value: 100 [ 265.750395][ T808] usb 4-1: config 168 interface 0 has no altsetting 0 [ 265.758715][ T808] usb 4-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 265.785583][ T808] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 265.812967][ T808] usb 4-1: config 168 interface 0 altsetting 188 has 0 endpoint descriptors, different from the interface descriptor's value: 100 [ 265.847034][ T808] usb 4-1: config 168 interface 0 has no altsetting 0 [ 265.868709][ T808] usb 4-1: string descriptor 0 read error: -22 [ 265.900330][ T808] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 265.922029][ T808] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.988261][ T808] adutux 4-1:168.0: interrupt endpoints not found [ 266.065112][ T9178] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 266.110570][ T9178] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 266.303860][ T9272] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 266.315616][ T9272] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 266.361483][ T9178] team0: Port device team_slave_0 added [ 266.397088][ T9178] team0: Port device team_slave_1 added [ 266.457114][ T5742] usb 4-1: USB disconnect, device number 56 [ 266.533998][ T29] audit: type=1326 audit(1778643275.377:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9282 comm="syz.0.1032" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f70d079ce59 code=0x0 [ 266.579470][ T9281] syzkaller1: entered promiscuous mode [ 266.590817][ T9281] syzkaller1: entered allmulticast mode [ 266.617904][ T9178] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 266.632941][ T9286] trusted_key: encrypted_key: master key parameter is missing [ 266.655416][ T9178] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 266.740061][ T9178] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 266.770630][ T9178] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 266.780361][ T9178] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 266.812802][ T9178] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 266.833033][ T1168] IPVS: stop unused estimator thread 0... [ 266.932970][ T9178] hsr_slave_0: entered promiscuous mode [ 266.939980][ T9178] hsr_slave_1: entered promiscuous mode [ 266.947004][ T9178] debugfs: 'hsr0' already exists in 'hsr' [ 266.952862][ T9178] Cannot create hsr debugfs directory [ 267.013531][ T5742] usb 2-1: USB disconnect, device number 60 [ 267.068080][ T5742] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 267.085262][ T5624] Bluetooth: hci4: command tx timeout [ 267.354952][ T5697] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 267.379586][ T5290] 8021q: adding VLAN 0 to HW filter on device eth3 [ 267.469333][ T9310] IPVS: set_ctl: invalid protocol: 8 224.0.0.1:20004 [ 267.516684][ T5697] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 267.541089][ T5697] usb 4-1: config 0 has no interface number 0 [ 267.556870][ T5697] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 267.609704][ T5697] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 267.632907][ T5697] usb 4-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 267.666616][ T5697] usb 4-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 267.681517][ T5697] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.726948][ T5697] usb 4-1: config 0 descriptor?? [ 267.999592][ T9323] ip6tnl1: entered promiscuous mode [ 268.392006][ T5697] uclogic 0003:28BD:0042.001B: failed retrieving string descriptor #100: -71 [ 268.439126][ T5697] uclogic 0003:28BD:0042.001B: failed retrieving pen parameters: -71 [ 268.475268][ T5697] uclogic 0003:28BD:0042.001B: pen probing failed: -71 [ 268.492351][ T5697] uclogic 0003:28BD:0042.001B: failed probing parameters: -71 [ 268.512946][ T5697] uclogic 0003:28BD:0042.001B: probe with driver uclogic failed with error -71 [ 268.570966][ T5697] usb 4-1: USB disconnect, device number 57 [ 268.651964][ T9344] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 268.679647][ T9344] netlink: 'syz.0.1042': attribute type 1 has an invalid length. [ 268.742764][ T9345] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1042'. [ 269.458866][ T9361] xt_hashlimit: size too large, truncated to 1048576 [ 269.893028][ T9366] 8021q: adding VLAN 0 to HW filter on device bond0 [ 269.911373][ T9366] 8021q: adding VLAN 0 to HW filter on device team0 [ 269.954439][ T9366] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 270.163813][ T9366] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 270.213432][ T9366] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 270.234617][ T9366] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 270.282835][ T9366] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 270.523645][ T9370] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 270.622577][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.629875][ T48] bridge0: port 1(bridge_slave_0) entered listening state [ 270.693726][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.701371][ T48] bridge0: port 2(bridge_slave_1) entered listening state [ 271.441994][ T9178] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 271.479258][ T9178] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 271.514670][ T9178] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 271.575814][ T9178] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 271.626512][ T9178] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 271.685693][ T9178] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 271.716533][ T9178] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 271.758331][ T9178] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 271.827328][ T5697] psmouse serio2: Failed to reset mouse on : -5 [ 271.866927][ T10] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 272.045541][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 272.071909][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 272.107135][ T10] usb 5-1: no configurations [ 272.133836][ T10] usb 5-1: can't read configurations, error -22 [ 272.295174][ T10] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 272.323973][ T9178] 8021q: adding VLAN 0 to HW filter on device bond0 [ 272.419449][ T9178] 8021q: adding VLAN 0 to HW filter on device team0 [ 272.464859][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 272.480700][ T1166] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.487942][ T1166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 272.488539][ T9418] netlink: 'syz.3.1052': attribute type 17 has an invalid length. [ 272.526174][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 272.530638][ T9418] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1052'. [ 272.540378][ T10] usb 5-1: no configurations [ 272.567466][ T10] usb 5-1: can't read configurations, error -22 [ 272.585143][ T9418] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1052'. [ 272.599919][ T10] usb usb5-port1: attempt power cycle [ 272.612136][ T1166] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.620814][ T1166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 272.650988][ T9418] gretap0: entered promiscuous mode [ 272.660843][ T9418] gretap0: left promiscuous mode [ 272.964940][ T10] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 273.013737][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 273.028736][ T9178] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 273.030323][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 273.063912][ T9431] input: syz1 as /devices/virtual/input/input30 [ 273.078237][ T10] usb 5-1: no configurations [ 273.100953][ T29] audit: type=1326 audit(1778643281.947:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9434 comm="syz.1.1056" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f715639ce59 code=0x7ffc0000 [ 273.129038][ T10] usb 5-1: can't read configurations, error -22 [ 273.177804][ T29] audit: type=1326 audit(1778643281.977:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9434 comm="syz.1.1056" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f715635d68e code=0x7ffc0000 [ 273.276546][ T10] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 273.295915][ T29] audit: type=1326 audit(1778643281.977:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9434 comm="syz.1.1056" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f715639caeb code=0x7ffc0000 [ 273.340492][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 273.353381][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 273.371535][ T10] usb 5-1: no configurations [ 273.379939][ T29] audit: type=1326 audit(1778643281.977:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9434 comm="syz.1.1056" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f715639caeb code=0x7ffc0000 [ 273.416146][ T10] usb 5-1: can't read configurations, error -22 [ 273.422625][ T809] usb 2-1: new full-speed USB device number 61 using dummy_hcd [ 273.434345][ T10] usb usb5-port1: unable to enumerate USB device [ 273.463101][ T29] audit: type=1326 audit(1778643281.987:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9434 comm="syz.1.1056" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f715639caeb code=0x7ffc0000 [ 273.533639][ T29] audit: type=1326 audit(1778643281.987:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9434 comm="syz.1.1056" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f715639caeb code=0x7ffc0000 [ 273.596681][ T29] audit: type=1326 audit(1778643282.107:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9434 comm="syz.1.1056" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f715639caeb code=0x7ffc0000 [ 273.640328][ T809] usb 2-1: unable to get BOS descriptor or descriptor too short [ 273.665357][ T809] usb 2-1: not running at top speed; connect to a high speed hub [ 273.702315][ T809] usb 2-1: config 4 has an invalid interface number: 147 but max is 0 [ 273.723038][ T29] audit: type=1326 audit(1778643282.187:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9434 comm="syz.1.1056" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f715639caeb code=0x7ffc0000 [ 273.745679][ T9178] veth0_vlan: entered promiscuous mode [ 273.756245][ T809] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 273.783222][ T809] usb 2-1: config 4 has no interface number 0 [ 273.808558][ T809] usb 2-1: string descriptor 0 read error: -22 [ 273.823826][ T9178] veth1_vlan: entered promiscuous mode [ 273.825010][ T29] audit: type=1326 audit(1778643282.287:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9434 comm="syz.1.1056" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f715639caeb code=0x7ffc0000 [ 273.856515][ T809] usb 2-1: Dual-Role OTG device on HNP port [ 273.862881][ T29] audit: type=1326 audit(1778643282.297:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9434 comm="syz.1.1056" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f715639caeb code=0x7ffc0000 [ 273.888400][ T809] usb 2-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 273.901837][ T809] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=38 [ 273.942013][ T809] uvcvideo 2-1:4.147: Found UVC 0.02 device (04f2:b746) [ 273.973832][ T809] uvcvideo 2-1:4.147: No valid video chain found. [ 274.003039][ T9178] veth0_macvtap: entered promiscuous mode [ 274.054351][ T9178] veth1_macvtap: entered promiscuous mode [ 274.105086][ T9178] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 274.134608][ T5711] usb 2-1: USB disconnect, device number 61 [ 274.153348][ T9178] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 274.213396][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.271873][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.301582][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.319748][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.691891][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 274.713947][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.961993][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 274.987022][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.665420][ T5697] misc userio: Buffer overflowed, userio client isn't keeping up [ 276.427820][ T5704] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 276.638834][ T5704] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 276.669883][ T5704] usb 4-1: config 0 has no interface number 0 [ 276.693678][ T5704] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 276.722051][ T5704] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.777599][ T5704] usb 4-1: config 0 descriptor?? [ 276.789821][ T5697] input: PS/2 Generic Mouse as /devices/serio2/input/input29 [ 276.846088][ T5704] cp210x 4-1:0.1: cp210x converter detected [ 277.023176][ T5711] IPVS: starting estimator thread 0... [ 277.031654][ T9505] IPVS: set_ctl: invalid protocol: 1 127.0.0.1:0 [ 277.039524][ T9514] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1069'. [ 277.070019][ T9514] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1069'. [ 277.098055][ T5697] psmouse serio2: Failed to enable mouse on [ 277.135110][ T9516] IPVS: using max 54 ests per chain, 129600 per kthread [ 277.208359][ T5704] cp210x 4-1:0.1: failed to get vendor val 0x000e size 3: -32 [ 277.294895][ T5711] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 277.445175][ T5711] usb 3-1: device descriptor read/64, error -71 [ 277.459488][ T5704] usb 4-1: cp210x converter now attached to ttyUSB0 [ 277.634060][ T5697] usb 4-1: USB disconnect, device number 58 [ 277.662739][ T5697] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 277.705071][ T5711] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 277.711819][ T5697] cp210x 4-1:0.1: device disconnected [ 277.864944][ T5711] usb 3-1: device descriptor read/64, error -71 [ 277.995340][ T5711] usb usb3-port1: attempt power cycle [ 278.301805][ T9540] netlink: 'syz.3.1077': attribute type 17 has an invalid length. [ 278.334942][ T9540] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1077'. [ 278.357199][ T5711] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 278.375652][ T9540] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1077'. [ 278.415621][ T5711] usb 3-1: device descriptor read/8, error -71 [ 278.427805][ T9542] usb usb8: usbfs: process 9542 (syz.1.1078) did not claim interface 0 before use [ 278.462621][ T9540] gretap0: entered promiscuous mode [ 278.489055][ T9540] gretap0: left promiscuous mode [ 278.675713][ T5711] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 278.690615][ T9552] netlink: 'syz.3.1081': attribute type 21 has an invalid length. [ 278.719478][ T9552] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1081'. [ 278.739348][ T5711] usb 3-1: device descriptor read/8, error -71 [ 278.855957][ T5711] usb usb3-port1: unable to enumerate USB device [ 278.982969][ T9561] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1083'. [ 279.078792][ T9561] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 279.274968][ T9] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 279.392651][ T9571] netlink: 'syz.4.1087': attribute type 5 has an invalid length. [ 279.402556][ T5711] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 279.432727][ T9] usb 1-1: config 0 has no interfaces? [ 279.445155][ T9] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 279.466922][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.485106][ T5704] usb 2-1: new full-speed USB device number 62 using dummy_hcd [ 279.508328][ T9] usb 1-1: config 0 descriptor?? [ 279.584865][ T5711] usb 4-1: Using ep0 maxpacket: 16 [ 279.594022][ T5711] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 279.629428][ T5711] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 279.658317][ T5704] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 279.668724][ T5711] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 279.687266][ T5704] usb 2-1: config 0 has no interface number 0 [ 279.694701][ T5704] usb 2-1: config 0 interface 41 has no altsetting 0 [ 279.703686][ T5711] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 279.719762][ T5704] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 279.743656][ T9561] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1083'. [ 279.755299][ T5711] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.764836][ T5704] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.801165][ T5704] usb 2-1: Product: syz [ 279.801925][ T5711] usb 4-1: config 0 descriptor?? [ 279.806891][ T9561] No such timeout policy "syz1" [ 279.821954][ T5704] usb 2-1: Manufacturer: syz [ 279.837523][ T5704] usb 2-1: SerialNumber: syz [ 279.851522][ T9] usb 1-1: string descriptor 0 read error: -71 [ 279.886409][ T5704] usb 2-1: config 0 descriptor?? [ 279.896815][ T9] usb 1-1: USB disconnect, device number 67 [ 279.934920][ T5683] usb 5-1: new full-speed USB device number 72 using dummy_hcd [ 280.127965][ T5683] usb 5-1: config index 0 descriptor too short (expected 8192, got 36) [ 280.153931][ T5683] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 280.205011][ T5683] usb 5-1: config 0 has no interfaces? [ 280.212711][ T5683] usb 5-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 280.253257][ T5683] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.286201][ T5683] usb 5-1: config 0 descriptor?? [ 280.358397][ T5711] usbhid 4-1:0.0: can't add hid device: -71 [ 280.370981][ T5711] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 280.412035][ T5711] usb 4-1: USB disconnect, device number 59 [ 280.985478][ T5697] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 281.154912][ T5697] usb 3-1: Using ep0 maxpacket: 16 [ 281.165146][ T5697] usb 3-1: unable to get BOS descriptor or descriptor too short [ 281.175620][ T5697] usb 3-1: config 1 has too many interfaces: 67, using maximum allowed: 32 [ 281.185065][ T5697] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 281.213414][ T5697] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 67 [ 281.243377][ T5697] usb 3-1: config 1 has no interface number 0 [ 281.262724][ T5697] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 281.277775][ T5697] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.296142][ T5697] usb 3-1: Product: syz [ 281.307508][ T5697] usb 3-1: Manufacturer: syz [ 281.314935][ T5697] usb 3-1: SerialNumber: syz [ 281.548048][ T5697] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 281.688443][ T5697] snd-usb-audio 3-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 281.755249][ T9583] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 281.769520][ T5632] udevd[5632]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 281.798904][ T9583] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 281.822992][ T5697] usb 3-1: USB disconnect, device number 58 [ 282.175873][ T9590] netlink: 'syz.3.1091': attribute type 17 has an invalid length. [ 282.187437][ T9590] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1091'. [ 282.229612][ T9590] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1091'. [ 282.287241][ T9590] gretap0: entered promiscuous mode [ 282.303727][ T9590] gretap0: left promiscuous mode [ 282.467823][ T809] usb 5-1: USB disconnect, device number 72 [ 282.517130][ T5711] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 282.605947][ T9596] vivid-004: disconnect [ 282.612156][ T9594] vivid-004: reconnect [ 282.707266][ T5711] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 282.717944][ T5711] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 282.740471][ T5711] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 282.763779][ T5711] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.781985][ T5711] usb 1-1: Product: syz [ 282.801706][ T5711] usb 1-1: Manufacturer: syz [ 282.812731][ T5711] usb 1-1: SerialNumber: syz [ 282.837657][ T5711] usb 1-1: config 0 descriptor?? [ 282.849936][ T9592] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 282.869402][ T9592] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 282.925624][ T5683] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 283.096501][ T5683] usb 4-1: Using ep0 maxpacket: 8 [ 283.104365][ T5683] usb 4-1: config 0 has an invalid interface number: 239 but max is 0 [ 283.113447][ T5683] usb 4-1: config 0 has no interface number 0 [ 283.120001][ T5683] usb 4-1: config 0 interface 239 altsetting 0 has an endpoint descriptor with address 0x64, changing to 0x4 [ 283.131922][ T9592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 283.133908][ T9592] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 283.143597][ T5683] usb 4-1: config 0 interface 239 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 8 [ 283.178527][ T5711] dm9601 1-1:0.0: probe with driver dm9601 failed with error -71 [ 283.197973][ T5683] usb 4-1: config 0 interface 239 altsetting 0 endpoint 0x3 has invalid maxpacket 53008, setting to 64 [ 283.218977][ T5711] usb 1-1: USB disconnect, device number 68 [ 283.239312][ T5683] usb 4-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=99.1a [ 283.250866][ T5683] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.259748][ T5683] usb 4-1: Product: syz [ 283.264565][ T5683] usb 4-1: Manufacturer: syz [ 283.269621][ T5683] usb 4-1: SerialNumber: syz [ 283.280028][ T5683] usb 4-1: config 0 descriptor?? [ 283.288004][ T9598] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 283.402570][ T9608] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1098'. [ 283.509545][ T9598] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 283.542309][ T9598] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 283.561192][ T5683] ath6kl: Failed to submit usb control message: -71 [ 283.574285][ T5683] ath6kl: unable to send the bmi data to the device: -71 [ 283.582206][ T5683] ath6kl: Unable to send get target info: -71 [ 283.607656][ T5683] ath6kl: Failed to init ath6kl core: -71 [ 283.617578][ T5683] ath6kl_usb 4-1:0.239: probe with driver ath6kl_usb failed with error -71 [ 283.656399][ T5683] usb 4-1: USB disconnect, device number 60 [ 283.943332][ T9624] loop2: detected capacity change from 0 to 7 [ 283.951205][ T9624] loop2: p1 [ 283.954696][ T9624] loop2: partition table partially beyond EOD, truncated [ 283.962991][ T9624] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 284.011278][ T5632] udevd[5632]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 284.184536][ T5704] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffb9 [ 284.210516][ T5704] CoreChips 2-1:0.41: probe with driver CoreChips failed with error -71 [ 284.248664][ T5704] usb 2-1: USB disconnect, device number 62 [ 284.297250][ T9632] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1105'. [ 284.393184][ T9614] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 284.401275][ T9614] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 284.436936][ C0] bridge0: port 3(netdevsim0) entered forwarding state [ 284.445450][ C0] bridge0: topology change detected, propagating [ 284.452041][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 284.459368][ C0] bridge0: topology change detected, propagating [ 284.467486][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 284.474720][ C0] bridge0: topology change detected, propagating [ 284.592101][ T9641] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1108'. [ 284.710320][ T9614] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 284.723900][ T9614] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 284.755132][ T9614] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 284.773564][ T9614] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 284.811429][ T9614] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 284.817950][ T9614] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 284.833904][ T9614] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 284.854124][ T9614] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 284.890685][ T9614] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 285.151185][ T9650] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1111'. [ 285.704314][ T9668] netlink: 'syz.2.1117': attribute type 4 has an invalid length. [ 285.716647][ T5638] Bluetooth: hci3: command 0x0406 tx timeout [ 286.186843][ T809] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 286.388645][ T809] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 286.408390][ T809] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 286.419676][ T809] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 286.454336][ T809] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 286.464895][ T809] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.473114][ T809] usb 2-1: Product: syz [ 286.477732][ T809] usb 2-1: Manufacturer: syz [ 286.483523][ T809] usb 2-1: SerialNumber: syz [ 286.504897][ T5697] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 286.680116][ T5697] usb 4-1: New USB device found, idVendor=0582, idProduct=002b, bcdDevice= 0.40 [ 286.695487][ T5697] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.738306][ T5697] usb 4-1: Product: syz [ 286.762250][ T5697] usb 4-1: Manufacturer: syz [ 286.764942][ T5638] Bluetooth: hci0: command 0x0406 tx timeout [ 286.778308][ T5697] usb 4-1: SerialNumber: syz [ 286.796281][ T29] kauditd_printk_skb: 26 callbacks suppressed [ 286.796297][ T29] audit: type=1326 audit(1778643295.637:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9677 comm="syz.1.1119" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f715639ce59 code=0x7ffc0000 [ 286.835475][ T5638] Bluetooth: hci4: command 0x0c1a tx timeout [ 286.836261][ T5624] Bluetooth: hci2: command 0x0406 tx timeout [ 286.848514][ T5631] Bluetooth: hci1: command 0x0406 tx timeout [ 286.931428][ T29] audit: type=1326 audit(1778643295.687:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9677 comm="syz.1.1119" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f715639ce59 code=0x7ffc0000 [ 287.030443][ T29] audit: type=1326 audit(1778643295.687:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9677 comm="syz.1.1119" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f715639ce59 code=0x7ffc0000 [ 287.070332][ T9685] netlink: 'syz.3.1121': attribute type 1 has an invalid length. [ 287.094566][ T29] audit: type=1326 audit(1778643295.687:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9677 comm="syz.1.1119" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f715639ce59 code=0x7ffc0000 [ 287.120722][ T29] audit: type=1326 audit(1778643295.687:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9677 comm="syz.1.1119" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f715639ce59 code=0x7ffc0000 [ 287.132782][ T9694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 287.145515][ T29] audit: type=1326 audit(1778643295.687:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9677 comm="syz.1.1119" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f715639ce59 code=0x7ffc0000 [ 287.178617][ T29] audit: type=1326 audit(1778643295.687:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9677 comm="syz.1.1119" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f715639ce59 code=0x7ffc0000 [ 287.204474][ T29] audit: type=1326 audit(1778643295.687:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9677 comm="syz.1.1119" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7f715639ce59 code=0x7ffc0000 [ 287.229323][ T29] audit: type=1326 audit(1778643295.687:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9677 comm="syz.1.1119" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f715639ce59 code=0x7ffc0000 [ 287.295000][ T9694] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 287.304166][ T29] audit: type=1326 audit(1778643295.697:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9677 comm="syz.1.1119" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f715639ce59 code=0x7ffc0000 [ 287.348250][ T9685] 8021q: adding VLAN 0 to HW filter on device bond1 [ 287.408046][ T9685] bond1: (slave veth0_to_bond): making interface the new active one [ 287.445313][ T9685] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 287.478234][ T9694] bond1: entered promiscuous mode [ 287.485594][ T9694] veth0_to_bond: entered promiscuous mode [ 287.496030][ T9694] bond1: entered allmulticast mode [ 287.508390][ T9685] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 287.520227][ T9685] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 287.563486][ T9694] veth0_to_bond: entered allmulticast mode [ 287.678364][ T5697] usb 4-1: Can't get UAC3 power state for id 10 [ 287.720061][ T5697] usb 4-1: BAAD HEADSET c_chmask mismatch [ 287.800453][ T5638] Bluetooth: hci3: command 0x0406 tx timeout [ 288.042957][ T9708] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1127'. [ 288.189610][ T5697] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 288.241368][ T5697] usb 4-1: USB disconnect, device number 61 [ 288.485673][ T5643] udevd[5643]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 288.557549][ T9718] netlink: 'syz.4.1130': attribute type 4 has an invalid length. [ 288.565003][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 288.835126][ T5638] Bluetooth: hci0: command 0x0406 tx timeout [ 288.915520][ T5638] Bluetooth: hci4: command 0x0c1a tx timeout [ 288.916228][ T5624] Bluetooth: hci2: command 0x0406 tx timeout [ 288.921893][ T5638] Bluetooth: hci1: command 0x0406 tx timeout [ 288.951049][ T809] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 289.010317][ T809] cdc_ncm 2-1:1.0: bind() failure [ 289.095068][ T809] usb 2-1: USB disconnect, device number 63 [ 289.391939][ T5638] Bluetooth: unknown link type 128 [ 289.569986][ T9744] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1140'. [ 289.603055][ T5638] Bluetooth: hci4: unexpected event for opcode 0x203d [ 289.634960][ T5711] usb 5-1: new full-speed USB device number 73 using dummy_hcd [ 289.879429][ T5711] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 289.909029][ T5711] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 289.948819][ T5711] usb 5-1: config 0 interface 0 has no altsetting 0 [ 289.975199][ T5711] usb 5-1: New USB device found, idVendor=28bd, idProduct=0078, bcdDevice= 0.00 [ 289.990948][ T9753] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1143'. [ 290.015414][ T5711] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.065748][ T5711] usb 5-1: config 0 descriptor?? [ 290.139379][ T9757] netlink: 'syz.1.1144': attribute type 4 has an invalid length. [ 290.183893][ T9754] bridge5: port 1(veth7) entered blocking state [ 290.213272][ T9754] bridge5: port 1(veth7) entered disabled state [ 290.230932][ T9754] veth7: entered allmulticast mode [ 290.248944][ T9754] veth7: entered promiscuous mode [ 290.277383][ T9753] bridge5: port 2(veth0_to_bond) entered blocking state [ 290.295117][ T9753] bridge5: port 2(veth0_to_bond) entered disabled state [ 290.312771][ T9753] veth0_to_bond: entered allmulticast mode [ 290.340623][ T9753] veth0_to_bond: entered promiscuous mode [ 290.416136][ T9759] bridge5: port 3(veth9) entered blocking state [ 290.423898][ T9759] bridge5: port 3(veth9) entered disabled state [ 290.431641][ T9759] veth9: entered allmulticast mode [ 290.450735][ T9759] veth9: entered promiscuous mode [ 290.489876][ T9762] syzkaller1: entered promiscuous mode [ 290.508564][ T9762] syzkaller1: entered allmulticast mode [ 290.524640][ T5711] uclogic 0003:28BD:0078.001C: interface is invalid, ignoring [ 290.773075][ T809] usb 5-1: USB disconnect, device number 73 [ 290.817886][ T9738] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 290.833962][ T9738] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 290.861425][ T9738] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 290.892039][ T9772] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 290.893465][ T9738] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 290.906381][ T9738] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 290.988908][ T9772] netlink: 'syz.0.1147': attribute type 1 has an invalid length. [ 291.041492][ T9777] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1147'. [ 291.070383][ T9777] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1147'. [ 291.269204][ T9787] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1151'. [ 291.619790][ T9795] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1155'. [ 291.735121][ T9797] netlink: 'syz.4.1156': attribute type 4 has an invalid length. [ 291.765219][ T5711] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 291.935026][ T5711] usb 4-1: device descriptor read/64, error -71 [ 292.185013][ T5711] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 292.325061][ T5711] usb 4-1: device descriptor read/64, error -71 [ 292.455173][ T5711] usb usb4-port1: attempt power cycle [ 292.750225][ T9818] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1162'. [ 292.835686][ T5711] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 292.837370][ T5638] Bluetooth: hci0: command 0x0406 tx timeout [ 292.843362][ T5624] Bluetooth: hci3: command 0x0406 tx timeout [ 292.901431][ T5711] usb 4-1: device descriptor read/8, error -71 [ 292.914964][ T5624] Bluetooth: hci4: command 0x0c1a tx timeout [ 292.915097][ T5638] Bluetooth: hci2: command 0x0406 tx timeout [ 292.922601][ T5631] Bluetooth: hci1: command 0x0406 tx timeout [ 292.988659][ T9820] vivid-003: disconnect [ 293.014283][ T9819] vivid-003: reconnect [ 293.174863][ T5711] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 293.206174][ T5711] usb 4-1: device descriptor read/8, error -71 [ 293.330283][ T5711] usb usb4-port1: unable to enumerate USB device [ 293.359284][ T9825] program syz.2.1165 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 293.894952][ T5697] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 294.051508][ T9842] netlink: 'syz.0.1169': attribute type 4 has an invalid length. [ 294.055636][ T9844] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1170'. [ 294.069825][ T5697] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 294.082000][ T5697] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.094979][ T5697] usb 5-1: Product: syz [ 294.100295][ T5697] usb 5-1: Manufacturer: syz [ 294.109527][ T5697] usb 5-1: SerialNumber: syz [ 294.613791][ T9853] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1173'. [ 294.709524][ T9832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 294.718386][ T5697] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 294.734316][ T9832] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 294.742570][ T5697] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 294.760261][ T5697] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 294.773160][ T5697] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 294.786905][ T5697] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 294.803602][ T5697] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -32 [ 294.935298][ T809] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 295.094877][ T809] usb 2-1: Using ep0 maxpacket: 8 [ 295.105854][ T809] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 295.115099][ T809] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 295.127450][ T809] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 295.161718][ T809] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.495619][ T9851] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 295.509206][ T9851] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 296.459770][ T9883] netlink: 'syz.0.1182': attribute type 4 has an invalid length. [ 296.683545][ T9891] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1184'. [ 296.712343][ T5704] usb 5-1: USB disconnect, device number 74 [ 297.132860][ T9902] netlink: 'syz.0.1188': attribute type 23 has an invalid length. [ 297.145336][ T5704] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 297.306033][ T5704] usb 5-1: Using ep0 maxpacket: 32 [ 297.340595][ T5704] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 297.359659][ T5683] usb 2-1: USB disconnect, device number 65 [ 297.387163][ T5704] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 297.432517][ T5704] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 297.469945][ T5704] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.494009][ T5704] usb 5-1: config 0 descriptor?? [ 297.872606][ T9916] netlink: 'syz.2.1192': attribute type 17 has an invalid length. [ 297.892985][ T9916] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1192'. [ 297.914356][ T9916] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1192'. [ 297.947416][ T5704] savu 0003:1E7D:2D5A.001D: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0 [ 297.983683][ T9916] gretap0: entered promiscuous mode [ 297.998131][ T9916] gretap0: left promiscuous mode [ 298.187093][ T9893] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 298.211154][ T9893] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 298.229593][ T9893] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 298.243891][ T9893] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 298.283616][ T5704] usb 5-1: USB disconnect, device number 75 [ 298.461320][ T9927] netlink: 'syz.0.1194': attribute type 4 has an invalid length. [ 298.544512][ T9932] vivid-002: disconnect [ 298.575547][ T9929] vivid-002: reconnect [ 298.854901][ T5704] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 298.996587][ T29] kauditd_printk_skb: 22 callbacks suppressed [ 298.996604][ T29] audit: type=1326 audit(1778643307.847:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9945 comm="syz.1.1200" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f715639ce59 code=0x7ffc0000 [ 299.029519][ T9946] netlink: 'syz.1.1200': attribute type 4 has an invalid length. [ 299.037468][ T5704] usb 1-1: Using ep0 maxpacket: 16 [ 299.040451][ T9946] netlink: 'syz.1.1200': attribute type 4 has an invalid length. [ 299.060976][ T5704] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 299.076485][ T29] audit: type=1326 audit(1778643307.847:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9945 comm="syz.1.1200" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f715639ce59 code=0x7ffc0000 [ 299.148200][ T5704] usb 1-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config [ 299.190424][ T5704] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 299.214516][ T29] audit: type=1326 audit(1778643307.877:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9945 comm="syz.1.1200" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f715639ce59 code=0x7ffc0000 [ 299.269793][ T5704] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= e.89 [ 299.290046][ T5704] usb 1-1: New USB device strings: Mfr=221, Product=0, SerialNumber=3 [ 299.300683][ T5704] usb 1-1: Manufacturer: syz [ 299.305931][ T5704] usb 1-1: SerialNumber: syz [ 299.315571][ T5704] usb 1-1: config 0 descriptor?? [ 299.338062][ T5704] usb 1-1: 0:2 : does not exist [ 299.346324][ T9953] netlink: 'syz.3.1203': attribute type 17 has an invalid length. [ 299.364611][ T29] audit: type=1326 audit(1778643307.877:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9945 comm="syz.1.1200" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f715639ce59 code=0x7ffc0000 [ 299.399714][ T9953] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1203'. [ 299.420016][ T9953] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1203'. [ 299.452357][ T29] audit: type=1326 audit(1778643307.877:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9945 comm="syz.1.1200" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f715639ce59 code=0x7ffc0000 [ 299.488415][ T9953] gretap0: entered promiscuous mode [ 299.509296][ T9953] gretap0: left promiscuous mode [ 299.548557][ T29] audit: type=1326 audit(1778643307.877:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9945 comm="syz.1.1200" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f715639ce59 code=0x7ffc0000 [ 299.583941][ T9937] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 299.604335][ T9937] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 299.663785][ T29] audit: type=1326 audit(1778643307.877:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9945 comm="syz.1.1200" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f715639ce59 code=0x7ffc0000 [ 299.729703][ T5704] usb 1-1: 5:0: failed to get current value for ch 1 (-22) [ 299.773391][ T5704] usb 1-1: 5:0: failed to get current value for ch 2 (-22) [ 299.802604][ T29] audit: type=1326 audit(1778643307.877:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9945 comm="syz.1.1200" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f715639ce59 code=0x7ffc0000 [ 299.854194][ T5704] usb 1-1: 5:0: failed to get current value for ch 3 (-22) [ 299.893366][ T5704] usb 1-1: 5:0: cannot get min/max values for control 5 (id 5) [ 299.917568][ T5704] usb 1-1: 5:0: cannot get min/max values for control 5 (id 5) [ 299.937652][ T29] audit: type=1326 audit(1778643307.877:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9945 comm="syz.1.1200" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f715639ce59 code=0x7ffc0000 [ 299.997081][ T5704] usb 1-1: 5:0: cannot get min/max values for control 5 (id 5) [ 300.054423][ T29] audit: type=1326 audit(1778643307.877:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9945 comm="syz.1.1200" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f715639ce59 code=0x7ffc0000 [ 300.136580][ T5704] usb 1-1: USB disconnect, device number 69 [ 300.165241][ T809] usb 4-1: new full-speed USB device number 66 using dummy_hcd [ 300.329145][ T809] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 300.341594][ T809] usb 4-1: config 0 has no interface number 0 [ 300.369174][ T809] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 300.402395][ T809] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.417390][ T9967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 300.453371][ T809] usb 4-1: Product: syz [ 300.470865][ T809] usb 4-1: Manufacturer: syz [ 300.485556][ T809] usb 4-1: SerialNumber: syz [ 300.513826][ T809] usb 4-1: config 0 descriptor?? [ 300.530121][ T9967] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 300.665329][ T5704] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 300.686745][ C1] raw-gadget.1 gadget.0: ignoring, device is not running [ 300.962698][ T9975] netlink: 'syz.1.1208': attribute type 4 has an invalid length. [ 301.077965][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 301.086084][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 301.329248][ T5704] usb 1-1: device descriptor read/64, error -32 [ 301.362237][ T809] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 301.438232][ T809] asix 4-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 301.494356][ T809] asix 4-1:0.251: probe with driver asix failed with error -71 [ 301.522264][ T809] usb 4-1: USB disconnect, device number 66 [ 301.595796][ T5704] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 301.704865][ T5711] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 301.767804][ T5704] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 301.779831][ T5704] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 301.786365][ T5718] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 301.791128][ T5704] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 301.806494][ T5704] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 301.815658][ T5704] usb 1-1: SerialNumber: syz [ 301.876755][ T5711] usb 5-1: Using ep0 maxpacket: 32 [ 301.887160][ T5711] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 301.899429][ T5711] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 301.911087][ T5711] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 301.921699][ T5711] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 301.934112][ T5711] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 301.965489][ T5718] usb 2-1: Using ep0 maxpacket: 16 [ 301.974445][ T5711] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 301.978254][ T5718] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 302.000364][ T5711] usb 5-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 302.011017][ T5711] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.021580][ T5711] usb 5-1: Product: syz [ 302.027868][ T5711] usb 5-1: Manufacturer: syz [ 302.032838][ T5718] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 302.053547][ T5718] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 302.079917][ T5718] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 302.094402][ T5718] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.097305][ T5704] usb 1-1: 0:2 : does not exist [ 302.111389][ T5718] usb 2-1: Product: syz [ 302.115701][ T5711] usb 5-1: SerialNumber: syz [ 302.123180][ T9996] netlink: 'syz.3.1215': attribute type 17 has an invalid length. [ 302.133349][ T9996] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1215'. [ 302.134261][ T5711] usb 5-1: config 0 descriptor?? [ 302.151637][ T5704] usb 1-1: unit 48 not found! [ 302.176216][ T5718] usb 2-1: Manufacturer: syz [ 302.191886][ T9996] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1215'. [ 302.207077][ T5704] usb 1-1: USB disconnect, device number 71 [ 302.211980][ T5718] usb 2-1: SerialNumber: syz [ 302.287096][ T9996] gretap0: entered promiscuous mode [ 302.303507][ T9996] gretap0: left promiscuous mode [ 302.315944][ T5718] usb 2-1: 0:2 : does not exist [ 302.513157][T10000] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1216'. [ 302.865829][ T5697] usb 4-1: new full-speed USB device number 67 using dummy_hcd [ 302.889526][ T5711] usb 5-1: USB disconnect, device number 76 [ 303.031397][ T5697] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 303.048833][ T5697] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.067095][ T5697] usb 4-1: Product: syz [ 303.076951][ T9989] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1213'. [ 303.087475][ T5697] usb 4-1: Manufacturer: syz [ 303.097007][ T5697] usb 4-1: SerialNumber: syz [ 303.122489][ T5718] usb 2-1: 1:0: failed to get current value for ch 0 (-22) [ 303.131609][ T5697] usb 4-1: config 0 descriptor?? [ 303.250324][ T5718] usb 2-1: USB disconnect, device number 66 [ 303.352594][ T6378] udevd[6378]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 303.358477][ T5697] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 304.867782][ T5718] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 304.871784][T10037] netlink: 'syz.4.1226': attribute type 17 has an invalid length. [ 304.900802][T10037] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1226'. [ 304.929609][T10037] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1226'. [ 304.961495][T10037] gretap0: entered promiscuous mode [ 304.974285][T10037] gretap0: left promiscuous mode [ 305.066619][ T5718] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 305.075510][ T5718] usb 3-1: config 0 has no interface number 0 [ 305.082040][ T5718] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 305.100423][ T5718] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 305.128465][ T5718] usb 3-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 305.165794][ T5718] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.206631][ T5718] usb 3-1: config 0 descriptor?? [ 305.360451][T10044] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 305.403612][ T5697] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 305.458060][ T5697] usb 4-1: USB disconnect, device number 67 [ 305.669008][T10048] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1229'. [ 305.739527][T10048] bond3: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 305.778882][T10048] bond3 (unregistering): Released all slaves [ 306.178298][T10056] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1230'. [ 306.385505][ T809] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 306.574914][ T809] usb 4-1: Using ep0 maxpacket: 32 [ 306.592891][ T809] usb 4-1: config 0 has an invalid interface number: 196 but max is 0 [ 306.625612][ T809] usb 4-1: config 0 has no interface number 0 [ 306.643381][ T809] usb 4-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 306.680702][T10060] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 306.711870][ T809] usb 4-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 306.745388][ T809] usb 4-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 306.763039][T10060] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 306.795032][ T5718] usbhid 3-1:0.1: can't add hid device: -71 [ 306.801240][ T809] usb 4-1: config 0 interface 196 has no altsetting 0 [ 306.817637][ T5718] usbhid 3-1:0.1: probe with driver usbhid failed with error -71 [ 306.833654][ T809] usb 4-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 306.857617][ T5718] usb 3-1: USB disconnect, device number 59 [ 306.867657][ T809] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.893864][ T809] usb 4-1: Product: syz [ 306.905111][ T10] usb 2-1: new full-speed USB device number 67 using dummy_hcd [ 306.921633][ T809] usb 4-1: Manufacturer: syz [ 306.934083][ T809] usb 4-1: SerialNumber: syz [ 306.959887][ T809] usb 4-1: config 0 descriptor?? [ 306.988557][T10057] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 307.088614][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 307.112382][ T10] usb 2-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 307.134381][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.167708][ T10] usb 2-1: config 0 descriptor?? [ 307.413631][ T5718] IPVS: starting estimator thread 0... [ 307.440937][T10057] tipc: Started in network mode [ 307.460618][T10057] tipc: Node identity ac1414aa, cluster identity 4711 [ 307.503561][T10057] tipc: Enabled bearer , priority 10 [ 307.539102][T10073] IPVS: using max 29 ests per chain, 69600 per kthread [ 307.579151][T10060] syzkaller0: entered promiscuous mode [ 307.595680][T10060] syzkaller0: entered allmulticast mode [ 307.702968][ T809] ipheth 4-1:0.196: ipheth_enable_ncm: usb_control_msg: 0 [ 307.776967][ T809] ipheth 4-1:0.196: Apple iPhone USB Ethernet device attached [ 308.028700][ T5704] usb 4-1: USB disconnect, device number 68 [ 308.069435][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 308.082407][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 308.154688][ T10] usb 2-1: USB disconnect, device number 67 [ 308.237198][ T5704] ipheth 4-1:0.196: Apple iPhone USB Ethernet now disconnected [ 308.451038][T10094] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 308.469099][T10094] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 308.521580][ T10] tipc: Node number set to 2886997162 [ 308.772649][T10101] vivid-002: disconnect [ 308.797302][T10099] vivid-002: reconnect [ 309.121315][T10118] netlink: 'syz.0.1242': attribute type 58 has an invalid length. [ 309.214868][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 309.236216][T10118] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1242'. [ 309.480460][T10129] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1245'. [ 309.551457][T10129] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1245'. [ 309.563954][ T5683] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 309.735060][ T5704] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 309.753302][ T5683] usb 2-1: Using ep0 maxpacket: 8 [ 309.771504][ T5683] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 309.796790][ T5683] usb 2-1: config 0 has no interface number 0 [ 309.815992][ T5683] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 309.856163][ T5683] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 309.905681][ T5683] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 309.926063][ T5704] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 309.942761][ T5683] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 309.960558][ T5704] usb 4-1: config 0 has no interface number 0 [ 309.976462][ T5704] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 309.996909][ T5683] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 310.011307][ T5704] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 310.029602][ T5683] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.044673][ T5704] usb 4-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 310.066033][ T5683] usb 2-1: config 0 descriptor?? [ 310.079496][ T5704] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.105850][ T5683] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 310.148866][ T5704] usb 4-1: config 0 descriptor?? [ 310.353855][ T5683] usb 2-1: USB disconnect, device number 68 [ 310.353994][ C0] ldusb 2-1:0.55: usb_submit_urb failed (-19) [ 310.464399][ T5683] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 310.894782][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 311.059477][T10149] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1248'. [ 311.186151][T10153] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1247'. [ 311.221425][T10153] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1247'. [ 311.590444][ T5704] usbhid 4-1:0.1: can't add hid device: -71 [ 311.618874][ T5704] usbhid 4-1:0.1: probe with driver usbhid failed with error -71 [ 311.636107][T10159] 8021q: adding VLAN 0 to HW filter on device bond0 [ 311.651534][ T5704] usb 4-1: USB disconnect, device number 69 [ 311.663012][T10159] 8021q: adding VLAN 0 to HW filter on device team0 [ 311.684664][T10159] 0X: left allmulticast mode [ 311.704997][ T5683] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 311.781990][T10159] batman_adv: 60X: Interface activated: batadv_slave_0 [ 311.820115][T10159] batman_adv: 60X: Interface activated: batadv_slave_1 [ 311.827567][T10166] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1251'. [ 311.873663][T10159] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 311.890621][ T5683] usb 5-1: Using ep0 maxpacket: 32 [ 311.904095][T10159] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 311.925442][ T10] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 311.946924][ T5683] usb 5-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 311.952416][T10159] veth1_vlan: left promiscuous mode [ 311.963532][ T5683] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.971522][T10159] veth0_vlan: left promiscuous mode [ 311.978107][ T5683] usb 5-1: Product: syz [ 311.979888][T10159] veth0_vlan: entered promiscuous mode [ 311.990283][ T5683] usb 5-1: Manufacturer: syz [ 311.999053][ T5683] usb 5-1: SerialNumber: syz [ 312.009402][T10159] veth1_vlan: entered promiscuous mode [ 312.012044][ T5683] usb 5-1: config 0 descriptor?? [ 312.042187][T10159] veth1_macvtap: left promiscuous mode [ 312.051046][T10159] veth0_macvtap: left promiscuous mode [ 312.062457][T10159] veth0_macvtap: entered promiscuous mode [ 312.074508][T10159] veth1_macvtap: entered promiscuous mode [ 312.086824][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 312.095262][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 312.104503][ T10] usb 1-1: config index 0 descriptor too short (expected 89, got 58) [ 312.116918][ T10] usb 1-1: config 13 has an invalid interface number: 50 but max is 0 [ 312.130729][T10159] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 312.139759][ T10] usb 1-1: config 13 has an invalid descriptor of length 231, skipping remainder of the config [ 312.151683][T10159] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 312.159341][ T10] usb 1-1: config 13 has no interface number 0 [ 312.167237][T10159] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 312.175038][ T10] usb 1-1: config 13 interface 50 altsetting 167 bulk endpoint 0x88 has invalid maxpacket 16 [ 312.188237][T10159] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 312.196988][ T10] usb 1-1: config 13 interface 50 altsetting 167 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 312.227479][T10159] 8021q: adding VLAN 0 to HW filter on device bond1 [ 312.240970][ T10] usb 1-1: config 13 interface 50 has no altsetting 0 [ 312.262722][ T10] usb 1-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32 [ 312.278487][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.301138][T10159] geneve2: left promiscuous mode [ 312.308749][ T10] usb 1-1: Product: syz [ 312.316746][ T10] usb 1-1: Manufacturer: syz [ 312.323910][T10159] geneve2: left allmulticast mode [ 312.333018][ T10] usb 1-1: SerialNumber: syz [ 312.360832][T10164] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 312.376861][T10159] mac80211_hwsim hwsim11 syzkaller0: left promiscuous mode [ 312.409759][T10159] mac80211_hwsim hwsim11 syzkaller0: left allmulticast mode [ 312.481524][T10159] geneve3: left promiscuous mode [ 312.502732][T10159] 8021q: adding VLAN 0 to HW filter on device bond3 [ 312.553846][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.561261][ T12] bridge0: port 1(bridge_slave_0) entered listening state [ 312.605800][ T10] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 312.624727][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.631968][ T12] bridge0: port 2(bridge_slave_1) entered listening state [ 312.641922][ T10] usb 1-1: MIDIStreaming interface descriptor not found [ 312.667058][ T5683] RobotFuzz Open Source InterFace, OSIF 5-1:0.0: failure sending bit rate [ 312.711770][ T5683] RobotFuzz Open Source InterFace, OSIF 5-1:0.0: probe with driver RobotFuzz Open Source InterFace, OSIF failed with error -71 [ 312.802478][ T5683] usb 5-1: USB disconnect, device number 77 [ 312.898219][ T10] usb 1-1: USB disconnect, device number 72 [ 312.991651][ T13] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 313.006697][ T13] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 313.024920][ T5711] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 313.156895][ T5683] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 313.224480][T10181] netlink: 'syz.3.1254': attribute type 15 has an invalid length. [ 313.240420][ T13] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 313.262753][T10181] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 313.289957][ T13] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 313.316536][ T5683] usb 5-1: Using ep0 maxpacket: 32 [ 313.325107][ T5683] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 313.334262][ T5683] usb 5-1: config 0 has no interface number 0 [ 313.341133][ T5683] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 313.354121][T10186] fuse: Bad value for 'group_id' [ 313.360110][T10186] fuse: Bad value for 'group_id' [ 313.367135][ T5683] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 313.378317][ T5683] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.387184][ T5683] usb 5-1: Product: syz [ 313.391647][ T5683] usb 5-1: Manufacturer: syz [ 313.396884][ T5683] usb 5-1: SerialNumber: syz [ 313.413008][ T5683] usb 5-1: config 0 descriptor?? [ 313.421569][T10174] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 313.632614][T10174] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 313.872401][T10192] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1258'. [ 314.324844][ T809] usb 1-1: new full-speed USB device number 73 using dummy_hcd [ 314.374918][ T10] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 314.449623][T10217] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1266'. [ 314.487673][ T809] usb 1-1: unable to get BOS descriptor or descriptor too short [ 314.497331][ T809] usb 1-1: not running at top speed; connect to a high speed hub [ 314.507260][ T809] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 314.518256][ T809] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 314.531900][ T809] usb 1-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 314.542774][ T809] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.552437][ T809] usb 1-1: Product: syz [ 314.552450][T10218] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1266'. [ 314.566774][ T10] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 314.575228][ T10] usb 3-1: config 0 has no interface number 0 [ 314.581848][ T809] usb 1-1: Manufacturer: syz [ 314.587283][ T10] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 314.598918][ T809] usb 1-1: SerialNumber: syz [ 314.609343][ T10] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 314.624008][ T10] usb 3-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 314.636965][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.650855][ T10] usb 3-1: config 0 descriptor?? [ 314.832840][ T809] usb 1-1: USB disconnect, device number 73 [ 314.839388][ T5683] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 314.839653][ T5683] asix 5-1:0.188: probe with driver asix failed with error -71 [ 314.858581][ T5683] usb 5-1: USB disconnect, device number 78 [ 315.155360][ T5697] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 315.249168][T10229] kvm: emulating exchange as write [ 315.255200][T10229] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 315.331683][ T5697] usb 4-1: Using ep0 maxpacket: 8 [ 315.356102][ T5697] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 315.372409][ T5697] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b1, bcdDevice= 0.40 [ 315.388369][ T5697] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.405132][ T5711] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 315.412050][ T5697] usb 4-1: Product: syz [ 315.417770][ T5697] usb 4-1: Manufacturer: syz [ 315.427904][ T5697] usb 4-1: SerialNumber: syz [ 315.485054][ T5624] Bluetooth: hci0: unexpected event for opcode 0x1009 [ 315.575775][T10237] netdevsim netdevsim0: Direct firmware load for . [ 315.575775][T10237] failed with error -2 [ 315.595025][ T5711] usb 2-1: Using ep0 maxpacket: 32 [ 315.604134][ T5711] usb 2-1: config 3 has an invalid interface number: 171 but max is 29 [ 315.615045][ T5711] usb 2-1: config 3 has 1 interface, different from the descriptor's value: 30 [ 315.634228][ T5711] usb 2-1: config 3 has no interface number 0 [ 315.635322][T10237] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 315.635322][T10237] [ 315.644865][ T5711] usb 2-1: config 3 interface 171 altsetting 108 endpoint 0x1 has invalid wMaxPacketSize 0 [ 315.669755][ T5711] usb 2-1: config 3 interface 171 has no altsetting 0 [ 315.684130][ T5711] usb 2-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice= c.e5 [ 315.696854][ T5711] usb 2-1: New USB device strings: Mfr=1, Product=10, SerialNumber=3 [ 315.705066][T10221] loop5: detected capacity change from 0 to 7 [ 315.710495][T10221] Dev loop5: unable to read RDB block 7 [ 315.723060][ T5711] usb 2-1: Product: syz [ 315.729007][T10221] loop5: unable to read partition table [ 315.735051][ T5711] usb 2-1: Manufacturer: syz [ 315.735072][ T5711] usb 2-1: SerialNumber: syz [ 315.766151][T10221] loop5: partition table beyond EOD, truncated [ 315.792890][T10221] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 315.808106][ T10] usbhid 3-1:0.1: can't add hid device: -71 [ 315.820628][ T10] usbhid 3-1:0.1: probe with driver usbhid failed with error -71 [ 315.844493][ T10] usb 3-1: USB disconnect, device number 60 [ 315.896659][ T5697] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 315.930166][ T5697] usb 4-1: USB disconnect, device number 71 [ 316.176917][ T5711] as10x_usb: device has been detected [ 316.191005][ T5711] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 316.220638][ T5711] usb 2-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 316.304114][ T5711] as10x_usb: error during firmware upload part1 [ 316.321699][ T5711] Registered device Sky IT Digital Key (green led) [ 316.326459][ T5711] usb 2-1: USB disconnect, device number 69 [ 316.490033][ T5711] Unregistered device Sky IT Digital Key (green led) [ 316.498191][ T5711] as10x_usb: device has been disconnected [ 316.793354][T10255] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 316.797764][T10256] netlink: 'syz.2.1279': attribute type 1 has an invalid length. [ 316.800282][T10255] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 316.822870][T10255] vhci_hcd vhci_hcd.0: Device attached [ 316.840879][T10256] netlink: 'syz.2.1279': attribute type 3 has an invalid length. [ 316.857536][T10256] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1279'. [ 316.964993][ T5711] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 317.064961][ T5697] usb 35-1: new high-speed USB device number 2 using vhci_hcd [ 317.078276][ T10] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 317.080367][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.103149][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.127571][ T5711] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 317.139743][ T5711] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 317.150447][ T5711] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 317.159961][ T809] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 317.175067][ T5711] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 317.183336][ T5711] usb 4-1: SerialNumber: syz [ 317.216387][ T10] usb 2-1: device descriptor read/64, error -71 [ 317.255202][ T5718] usb 3-1: new full-speed USB device number 61 using dummy_hcd [ 317.304881][ T809] usb 5-1: Using ep0 maxpacket: 16 [ 317.312214][ T809] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 317.326997][ T809] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 317.339257][ T809] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 317.351823][ T809] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 317.362399][ T809] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.371104][ T809] usb 5-1: Product: syz [ 317.376055][ T809] usb 5-1: Manufacturer: syz [ 317.380717][ T809] usb 5-1: SerialNumber: syz [ 317.395762][ T809] usb 5-1: 0:2 : does not exist [ 317.414665][ T5718] usb 3-1: unable to get BOS descriptor or descriptor too short [ 317.424690][ T5718] usb 3-1: not running at top speed; connect to a high speed hub [ 317.435657][ T5718] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 317.443021][T10273] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1283'. [ 317.446901][ T5718] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 317.465013][ T10] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 317.474667][ T5718] usb 3-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 317.484213][ T5718] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.492466][ T5718] usb 3-1: Product: syz [ 317.496808][ T5718] usb 3-1: Manufacturer: syz [ 317.501438][ T5718] usb 3-1: SerialNumber: syz [ 317.514514][T10274] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1283'. [ 317.523791][T10274] hsr_slave_0: left promiscuous mode [ 317.530050][T10274] hsr_slave_1: left promiscuous mode [ 317.604937][ T10] usb 2-1: device descriptor read/64, error -71 [ 317.725315][ T10] usb usb2-port1: attempt power cycle [ 317.732034][ T5718] usb 3-1: USB disconnect, device number 61 [ 318.031581][ T5711] usb 4-1: 0:2 : does not exist [ 318.087171][ T10] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 318.096716][ T5711] usb 4-1: USB disconnect, device number 72 [ 318.118337][ T10] usb 2-1: device descriptor read/8, error -71 [ 318.141512][ T5632] udevd[5632]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 318.209551][ T809] usb 5-1: USB disconnect, device number 79 [ 318.365116][ T10] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 318.405908][T10283] xt_TCPMSS: Only works on TCP SYN packets [ 318.412250][ T10] usb 2-1: device descriptor read/8, error -71 [ 318.525753][ T10] usb usb2-port1: unable to enumerate USB device [ 318.816358][T10299] program syz.4.1291 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 318.861311][T10299] loop9: detected capacity change from 0 to 7 [ 318.900103][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 318.909387][ C1] buffer_io_error: 323 callbacks suppressed [ 318.909403][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 318.940405][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 318.949720][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 318.967807][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 318.981258][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 318.990493][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 319.000340][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 319.009499][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 319.030109][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 319.039348][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 319.052151][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 319.061380][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 319.071013][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 319.080243][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 319.092882][T10299] ldm_validate_partition_table(): Disk read failed. [ 319.129809][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 319.139713][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 319.150289][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 319.159469][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 319.168607][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 319.178960][T10299] Dev loop9: unable to read RDB block 0 [ 319.189275][T10299] loop9: unable to read partition table [ 319.195705][T10299] loop9: partition table beyond EOD, truncated [ 319.205449][T10299] loop_reread_partitions: partition scan of loop9 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 319.271422][T10309] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 319.585846][T10309] ipvlan2: entered allmulticast mode [ 319.611640][T10309] syz_tun: entered allmulticast mode [ 319.783247][T10257] vhci_hcd: connection reset by peer [ 319.829664][ T1166] vhci_hcd vhci_hcd.1: stop threads [ 319.846497][ T1166] vhci_hcd vhci_hcd.1: release socket [ 319.870156][ T1166] vhci_hcd vhci_hcd.1: disconnect device [ 319.906301][T10312] kvm: MONITOR instruction emulated as NOP! [ 319.978948][ T10] usb 4-1: new full-speed USB device number 73 using dummy_hcd [ 320.182195][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 320.214211][ T10] usb 4-1: not running at top speed; connect to a high speed hub [ 320.258643][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 320.310339][ T10] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 320.344107][ T10] usb 4-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 320.369680][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.401600][ T10] usb 4-1: Product: syz [ 320.413207][ T10] usb 4-1: Manufacturer: syz [ 320.432010][ T10] usb 4-1: SerialNumber: syz [ 320.473032][T10336] loop2: detected capacity change from 0 to 7 [ 320.493092][T10336] Dev loop2: unable to read RDB block 7 [ 320.503829][T10336] loop2: AHDI p1 p2 [ 320.509535][T10336] loop2: partition table partially beyond EOD, truncated [ 320.517686][T10336] loop2: p1 start 809055541 is beyond EOD, truncated [ 320.682147][ T10] usb 4-1: USB disconnect, device number 73 [ 320.892987][T10341] IPVS: set_ctl: invalid protocol: 103 172.20.20.170:20002 [ 320.975186][ T809] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 321.135134][ T809] usb 2-1: Using ep0 maxpacket: 16 [ 321.144915][ T808] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 321.145368][ T809] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 255 [ 321.171055][ T809] usb 2-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 321.184605][ T809] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.199516][ T809] usb 2-1: Product: syz [ 321.209712][ T809] usb 2-1: Manufacturer: syz [ 321.224677][ T809] usb 2-1: SerialNumber: syz [ 321.240226][ T809] usb 2-1: config 0 descriptor?? [ 321.258705][T10331] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 321.306830][ T9] usb 5-1: new full-speed USB device number 80 using dummy_hcd [ 321.316182][ T808] usb 3-1: Using ep0 maxpacket: 32 [ 321.335797][ T808] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 321.361127][ T808] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 321.389302][ T809] mcba_usb 2-1:0.0: Microchip CAN BUS Analyzer connected [ 321.401220][ T808] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 321.438490][ T808] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.473966][ T808] usb 3-1: config 0 descriptor?? [ 321.489732][ T9] usb 5-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 321.518514][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.543854][ T9] usb 5-1: Product: syz [ 321.563365][ T9] usb 5-1: Manufacturer: syz [ 321.575059][ T9] usb 5-1: SerialNumber: syz [ 321.891934][ T808] usbhid 3-1:0.0: can't add hid device: -71 [ 321.910784][ T808] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 321.950739][ T808] usb 3-1: USB disconnect, device number 62 [ 322.012235][ T9] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 80 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 322.054933][ T5704] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 322.188488][ T5697] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 322.235261][ T5704] usb 4-1: Using ep0 maxpacket: 16 [ 322.253758][ T5704] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 322.279199][ T5704] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.327340][ T5704] usb 4-1: config 0 descriptor?? [ 322.357454][ C0] mcba_usb 2-1:0.0 can0: Tx URB aborted (-71) [ 322.357842][ T5711] usb 2-1: USB disconnect, device number 74 [ 322.363664][ C0] mcba_usb 2-1:0.0 can0: Tx URB aborted (-71) [ 322.372621][ T5704] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 322.387522][ T5711] mcba_usb 2-1:0.0 can0: device disconnected [ 322.654292][T10381] loop2: detected capacity change from 0 to 7 [ 322.674124][T10381] Dev loop2: unable to read RDB block 7 [ 322.686275][T10381] loop2: AHDI p1 p2 [ 322.690371][T10381] loop2: partition table partially beyond EOD, truncated [ 322.702717][T10381] loop2: p1 start 809055541 is beyond EOD, truncated [ 323.215352][T10385] : entered promiscuous mode [ 323.371318][ T5704] gspca_sonixj: reg_w1 err -71 [ 323.405057][ T5704] sonixj 4-1:0.0: probe with driver sonixj failed with error -71 [ 323.429849][ T5704] usb 4-1: USB disconnect, device number 74 [ 323.868587][ T5697] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 324.000198][T10416] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1319'. [ 324.028875][T10416] vlan2: entered allmulticast mode [ 324.034236][T10416] erspan0: entered allmulticast mode [ 324.045159][ T5697] usb 2-1: Using ep0 maxpacket: 32 [ 324.060356][ T5697] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 324.077657][ C0] usblp0: nonzero write bulk status received: -71 [ 324.115608][ T9] usb 5-1: USB disconnect, device number 80 [ 324.129591][ T5697] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 324.163196][ T5697] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 324.184068][ T5697] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.207364][ T5697] usb 2-1: config 0 descriptor?? [ 324.217742][T10351] usblp0: removed [ 324.491059][ T5624] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11 [ 324.566455][ T5704] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 324.687295][ T5697] savu 0003:1E7D:2D5A.001E: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 324.737176][ T5704] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 324.779098][ T5704] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 324.817449][ T5704] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 324.848264][ T5704] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.883476][T10430] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 324.899562][T10404] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 324.905721][ T5704] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 324.941595][T10404] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 324.979117][T10404] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 325.015340][T10404] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 325.048970][ T5697] usb 2-1: USB disconnect, device number 75 [ 325.105245][ T5711] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 325.231242][ T5704] usb 5-1: USB disconnect, device number 81 [ 325.251760][T10447] fuse: Bad value for 'user_id' [ 325.264971][ T5711] usb 3-1: Using ep0 maxpacket: 8 [ 325.276096][T10447] fuse: Bad value for 'user_id' [ 325.290399][ T5711] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 325.337591][ T5711] usb 3-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 325.366629][ T5711] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.404033][ T5711] usb 3-1: config 0 descriptor?? [ 325.638991][ T5697] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 325.835395][ T5697] usb 1-1: Using ep0 maxpacket: 8 [ 325.843367][ T5697] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 325.859723][ T5697] usb 1-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 325.873064][ T5697] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.890761][ T5697] usb 1-1: config 0 descriptor?? [ 325.917098][ T9] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 326.055279][ T809] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 326.095173][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 326.104608][ T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 326.132913][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 326.154571][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 326.177072][ T9] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 326.205552][ T9] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 326.224964][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.235105][ T809] usb 5-1: Using ep0 maxpacket: 16 [ 326.247625][ T809] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 326.280111][ T809] usb 5-1: config 0 interface 0 has no altsetting 0 [ 326.295155][ T809] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 326.315062][ T809] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.336105][ T809] usb 5-1: config 0 descriptor?? [ 326.470848][ T9] usb 2-1: GET_CAPABILITIES returned 0 [ 326.478711][ T9] usbtmc 2-1:16.0: can't read capabilities [ 326.522369][ T5704] usb 2-1: USB disconnect, device number 76 [ 326.685081][ T5718] usb 4-1: new full-speed USB device number 75 using dummy_hcd [ 326.862957][ T5718] usb 4-1: config 8 has an invalid interface number: 223 but max is 0 [ 326.887153][ T5718] usb 4-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 326.908863][ T5718] usb 4-1: config 8 has an invalid descriptor of length 48, skipping remainder of the config [ 326.927828][ T5718] usb 4-1: config 8 has no interface number 0 [ 326.936034][ T5718] usb 4-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid maxpacket 15872, setting to 64 [ 326.956228][ T5718] usb 4-1: config 8 interface 223 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 326.971207][T10479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 326.986649][T10479] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 327.006330][ T5718] usb 4-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 327.018205][ T5718] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.040887][ T5718] usb 4-1: Product: syz [ 327.052164][ T5718] usb 4-1: Manufacturer: syz [ 327.066514][ T5718] usb 4-1: SerialNumber: syz [ 327.120547][ T809] usbhid 5-1:0.0: can't add hid device: -71 [ 327.143489][ T809] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 327.184651][ T809] usb 5-1: USB disconnect, device number 82 [ 327.256390][T10490] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 327.273067][T10490] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 327.342802][ T5718] usb 4-1: USB disconnect, device number 75 [ 327.604877][ T10] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 327.623536][ T5697] usbhid 1-1:0.0: can't add hid device: -71 [ 327.637062][ T5697] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 327.652679][ T5697] usb 1-1: USB disconnect, device number 74 [ 327.774943][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 327.784872][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 327.801588][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 327.822361][ T10] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 327.848241][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.898563][ T10] usb 2-1: config 0 descriptor?? [ 327.927170][ T5711] usbhid 3-1:0.0: can't add hid device: -71 [ 327.945513][ T5711] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 328.022973][ T5711] usb 3-1: USB disconnect, device number 63 [ 328.099654][T10504] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1341'. [ 328.110576][T10505] netlink: 236 bytes leftover after parsing attributes in process `syz.2.1343'. [ 328.376922][ T10] savu 0003:1E7D:2D5A.001F: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 328.589540][T10492] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 328.635683][T10492] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 328.694560][T10492] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 328.739259][T10492] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 328.780968][ T5711] usb 2-1: USB disconnect, device number 77 [ 328.805230][ T10] usb 1-1: new full-speed USB device number 75 using dummy_hcd [ 328.979182][ T10] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 329.008043][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.036666][ T10] usb 1-1: Product: syz [ 329.042364][ T10] usb 1-1: Manufacturer: syz [ 329.050977][ T10] usb 1-1: SerialNumber: syz [ 329.057046][T10518] netlink: 'syz.2.1347': attribute type 13 has an invalid length. [ 329.071074][ T10] usb 1-1: config 0 descriptor?? [ 329.280558][ T10] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 329.899448][ T10] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 329.946807][T10528] loop9: detected capacity change from 0 to 54207 [ 329.956252][T10528] buffer_io_error: 10 callbacks suppressed [ 329.956268][T10528] Buffer I/O error on dev loop9, logical block 0, async page read [ 329.972587][T10528] Buffer I/O error on dev loop9, logical block 0, async page read [ 329.982415][T10528] Buffer I/O error on dev loop9, logical block 0, async page read [ 329.992965][T10528] Buffer I/O error on dev loop9, logical block 0, async page read [ 330.005383][T10528] Buffer I/O error on dev loop9, logical block 0, async page read [ 330.024147][T10528] Buffer I/O error on dev loop9, logical block 0, async page read [ 330.032641][T10528] Buffer I/O error on dev loop9, logical block 0, async page read [ 330.041123][T10528] Buffer I/O error on dev loop9, logical block 0, async page read [ 330.051194][T10528] ldm_validate_partition_table(): Disk read failed. [ 330.060245][T10528] Buffer I/O error on dev loop9, logical block 0, async page read [ 330.070569][T10528] Buffer I/O error on dev loop9, logical block 0, async page read [ 330.074965][ T5683] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 330.079507][T10528] Dev loop9: unable to read RDB block 0 [ 330.096755][ T5711] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 330.121393][T10528] loop9: unable to read partition table [ 330.137671][T10528] loop_reread_partitions: partition scan of loop9 (3 ) failed (rc=-5) [ 330.285503][ T5711] usb 5-1: Using ep0 maxpacket: 8 [ 330.294168][ T5683] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 330.320167][ T5711] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 330.342157][ T5683] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 330.378503][ T5711] usb 5-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 330.398845][ T5683] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 330.412005][ T5711] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.421662][ T5683] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.432051][ T5683] usb 4-1: Product: syz [ 330.442720][ T5711] usb 5-1: config 0 descriptor?? [ 330.448938][ T5683] usb 4-1: Manufacturer: syz [ 330.454302][ T5683] usb 4-1: SerialNumber: syz [ 330.499190][ T5683] cdc_mbim 4-1:1.0: skipping garbage [ 330.502723][T10542] netlink: 'syz.1.1355': attribute type 3 has an invalid length. [ 330.527491][T10542] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1355'. [ 330.698423][T10535] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 330.825022][ T5704] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 330.937402][T10558] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 331.005015][ T5704] usb 2-1: Using ep0 maxpacket: 8 [ 331.015348][ T5704] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 331.032427][ T5704] usb 2-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 331.051138][ T5704] usb 2-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 331.064204][ T5704] usb 2-1: Product: syz [ 331.068678][ T5704] usb 2-1: Manufacturer: syz [ 331.074596][ T5704] usb 2-1: SerialNumber: syz [ 331.154842][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 331.162153][ C1] bridge0: topology change detected, propagating [ 331.168828][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 331.176073][ C1] bridge0: topology change detected, propagating [ 331.298745][ T5704] usb 2-1: Handspring Visor / Palm OS: No valid connect info available [ 331.307332][ T5704] usb 2-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 331.316789][T10535] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 331.326461][ T5704] usb 2-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 331.342539][ T5683] cdc_mbim 4-1:1.0: setting tx_max = 16384 [ 331.348605][ T5704] usb 2-1: Handspring Visor / Palm OS: Number of ports: 2 [ 331.368805][ T5683] cdc_mbim 4-1:1.0: cdc-wdm0: USB WDM device [ 331.415973][ T5683] wwan wwan0: port wwan0mbim0 attached [ 331.451833][ T5683] cdc_mbim 4-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.3-1, CDC MBIM, 76:98:c4:08:84:f1 [ 331.509788][ T5704] visor 2-1:1.0: Handspring Visor / Palm OS converter detected [ 331.584275][ T5704] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 331.620198][ T5697] usb 1-1: USB disconnect, device number 75 [ 331.636493][ T5704] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 331.732707][ T5704] usb 2-1: USB disconnect, device number 78 [ 331.770493][T10535] fuse: Bad value for 'fd' [ 331.799614][ T5704] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 331.848155][ T5697] usb 4-1: USB disconnect, device number 76 [ 331.859318][ T5704] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 331.880812][ T5697] cdc_mbim 4-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.3-1, CDC MBIM [ 331.929713][ T5704] visor 2-1:1.0: device disconnected [ 331.957456][ T5697] wwan wwan0: port wwan0mbim0 disconnected [ 332.600984][T10582] lo: Caught tx_queue_len zero misconfig [ 332.734911][ T5697] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 332.875538][ T5697] usb 2-1: device descriptor read/64, error -71 [ 332.902385][ T5711] usbhid 5-1:0.0: can't add hid device: -71 [ 332.925238][ T5711] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 332.965290][ T5711] usb 5-1: USB disconnect, device number 83 [ 333.135815][ T5697] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 333.235246][ T5683] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 333.285075][ T5697] usb 2-1: device descriptor read/64, error -71 [ 333.349077][T10599] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1364'. [ 333.413782][ T5683] usb 3-1: Using ep0 maxpacket: 8 [ 333.442531][ T5697] usb usb2-port1: attempt power cycle [ 333.457328][ T5683] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 333.486434][ T5683] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 333.532495][ T5683] usb 3-1: New USB device found, idVendor=04fa, idProduct=4201, bcdDevice= 0.40 [ 333.551229][ T5683] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.560048][ T5711] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 333.605792][ T5683] usb 3-1: Product: syz [ 333.617138][ T5683] usb 3-1: Manufacturer: 崦䙃ྕ䌊녵鶪篬ꊳ誂ᵳ㶪ⴃ웻䵱햒棉䲮魺戠峼瘶憒ꌘ䱘쇇埐䐋镢㴧Ꝛ􌴮衾넷⒦㏕糥ꍁ瑅圐﷨ [ 333.650131][T10612] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1366'. [ 333.667139][ T5683] usb 3-1: SerialNumber: syz [ 333.769860][ T5711] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 333.805292][ T5697] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 333.830058][ T5711] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 333.845131][ T5697] usb 2-1: device descriptor read/8, error -71 [ 333.879903][ T5711] usb 4-1: New USB device found, idVendor=1c4f, idProduct=0059, bcdDevice= 0.00 [ 333.891466][ T5711] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.962790][ T5683] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 333.973125][ T5711] usb 4-1: config 0 descriptor?? [ 333.988636][T10603] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 333.999078][ T5683] usb 3-1: 0:2 : does not exist [ 334.072297][ T5683] usb 3-1: USB disconnect, device number 64 [ 334.096645][ T5697] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 334.137489][ T5697] usb 2-1: device descriptor read/8, error -71 [ 334.168161][ T5632] udevd[5632]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 334.266949][ T5697] usb usb2-port1: unable to enumerate USB device [ 334.419474][ T5711] sigmamicro 0003:1C4F:0059.0020: unknown main item tag 0x0 [ 334.439264][ T5711] sigmamicro 0003:1C4F:0059.0020: unknown main item tag 0x0 [ 334.463836][ T5711] sigmamicro 0003:1C4F:0059.0020: unknown main item tag 0x0 [ 334.479835][ T5711] sigmamicro 0003:1C4F:0059.0020: unknown main item tag 0x0 [ 334.490036][ T5711] sigmamicro 0003:1C4F:0059.0020: unknown main item tag 0x0 [ 334.498289][ T5711] sigmamicro 0003:1C4F:0059.0020: unknown main item tag 0x0 [ 334.507369][ T5711] sigmamicro 0003:1C4F:0059.0020: unknown main item tag 0x0 [ 334.515154][ T5711] sigmamicro 0003:1C4F:0059.0020: unknown main item tag 0x0 [ 334.523618][ T5711] sigmamicro 0003:1C4F:0059.0020: unknown main item tag 0x0 [ 334.560305][ T5711] sigmamicro 0003:1C4F:0059.0020: unknown main item tag 0x0 [ 334.593787][ T5711] sigmamicro 0003:1C4F:0059.0020: hidraw0: USB HID v7f.fd Device [HID 1c4f:0059] on usb-dummy_hcd.3-1/input0 [ 334.642621][ T5711] usb 4-1: USB disconnect, device number 77 [ 334.777792][T10622] fido_id[10622]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 334.984999][ T5683] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 335.158729][ T5683] usb 3-1: Using ep0 maxpacket: 16 [ 335.177228][ T5683] usb 3-1: config index 0 descriptor too short (expected 67, got 36) [ 335.204393][ T5683] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 335.236683][ T5683] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 335.254202][T10626] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1369'. [ 335.279191][ T5683] usb 3-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00 [ 335.299207][ T5683] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.337599][ T5683] usb 3-1: config 0 descriptor?? [ 335.684891][ T5711] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 335.795181][ T5718] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 335.839813][ T5711] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 335.863167][ T5711] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 335.887605][ T5711] usb 1-1: Product: syz [ 335.901529][ T5711] usb 1-1: SerialNumber: syz [ 335.954883][ T5711] usb 1-1: config 0 descriptor?? [ 335.964878][ T5718] usb 4-1: Using ep0 maxpacket: 8 [ 335.982731][ T5718] usb 4-1: config 0 has an invalid interface number: 122 but max is 0 [ 336.007461][ T5683] usbhid 3-1:0.0: can't add hid device: -71 [ 336.010646][ T5718] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 336.045596][ T5718] usb 4-1: config 0 has no interface number 0 [ 336.057384][ T5683] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 336.061714][ T5718] usb 4-1: config 0 interface 122 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 336.118456][ T5718] usb 4-1: config 0 interface 122 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 8 [ 336.143287][ T5718] usb 4-1: config 0 interface 122 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 1023 [ 336.167522][ T5697] usb 2-1: new full-speed USB device number 83 using dummy_hcd [ 336.177906][ T5683] usb 3-1: USB disconnect, device number 65 [ 336.181251][ T5718] usb 4-1: config 0 interface 122 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 336.219433][ T5711] hso 1-1:0.0: Failed to find INT IN ep [ 336.237262][ T5718] usb 4-1: config 0 interface 122 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 336.265640][ T5718] usb 4-1: config 0 interface 122 altsetting 0 has 6 endpoint descriptors, different from the interface descriptor's value: 8 [ 336.310075][ T5718] usb 4-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 5.b7 [ 336.328531][ T5718] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.328653][ T5697] usb 2-1: unable to get BOS descriptor or descriptor too short [ 336.345367][ T5718] usb 4-1: Product: syz [ 336.357593][ T5718] usb 4-1: Manufacturer: syz [ 336.369119][ T5718] usb 4-1: SerialNumber: syz [ 336.380692][ T5697] usb 2-1: not running at top speed; connect to a high speed hub [ 336.402106][T10636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 336.418473][ T5718] usb 4-1: config 0 descriptor?? [ 336.435631][T10636] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 336.446876][ T5697] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 336.467787][T10640] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 336.495312][ T5697] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 336.511121][T10640] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 336.547473][ T5697] usb 2-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 336.577641][ T5697] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.629954][ T5697] usb 2-1: Product: syz [ 336.665344][ T5697] usb 2-1: Manufacturer: syz [ 336.670934][T10636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 336.686753][T10636] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 336.691039][ T5697] usb 2-1: SerialNumber: syz [ 336.833442][ T809] usb 1-1: USB disconnect, device number 76 [ 337.109143][T10659] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 337.150677][T10659] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 337.335253][ T10] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 337.494959][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 337.510392][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 337.537042][ T10] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 337.562885][ T10] usb 3-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x24, changing to 0x4 [ 337.580502][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 49922, setting to 1024 [ 337.606270][ T10] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 337.629483][ T10] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 337.660888][ T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 337.680599][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 337.697479][ T10] usb 3-1: SerialNumber: syz [ 337.726814][T10661] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 337.734659][T10661] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 337.981105][ T10] cdc_acm 3-1:1.0: ttyACM0: USB ACM device [ 338.018154][ T10] usb 3-1: USB disconnect, device number 66 [ 338.672645][ T5718] usb 4-1: NFC: intf ffff88806316e000 id ffffffff8f3e3e80 [ 338.756315][ T5718] nfcmrvl 4-1:0.122: NFC: registered with nci successfully [ 338.786143][ T5718] usb 4-1: USB disconnect, device number 78 [ 338.822310][ T5718] usb 4-1: NFC: intf ffff88806316e000 [ 338.829437][T10676] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 338.858763][ T5704] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 338.974255][ T5697] usb 2-1: USB disconnect, device number 83 [ 339.036225][ T5704] usb 3-1: device descriptor read/64, error -71 [ 339.112910][T10680] netlink: 'syz.1.1382': attribute type 3 has an invalid length. [ 339.123390][T10680] netlink: 788 bytes leftover after parsing attributes in process `syz.1.1382'. [ 339.144318][T10684] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 339.157388][T10684] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 339.192001][T10680] ip6tnl1: entered allmulticast mode [ 339.295161][ T5704] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 339.375125][ T5718] usb 4-1: new full-speed USB device number 79 using dummy_hcd [ 339.455811][ T5704] usb 3-1: device descriptor read/64, error -71 [ 339.514959][ T5683] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 339.526938][ T5718] usb 4-1: config 0 has no interfaces? [ 339.534104][ T5718] usb 4-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 339.550063][ T5718] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.565761][ T5704] usb usb3-port1: attempt power cycle [ 339.573892][ T5718] usb 4-1: config 0 descriptor?? [ 339.584928][ T46] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 339.676650][ T5683] usb 2-1: config 0 has an invalid interface number: 69 but max is 0 [ 339.686066][T10695] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1387'. [ 339.695025][ T5683] usb 2-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 339.703871][ T5683] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 339.714484][T10695] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1387'. [ 339.723770][ T5683] usb 2-1: config 0 has no interface number 0 [ 339.731417][ T5683] usb 2-1: config 0 interface 69 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 339.752603][ T5683] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 339.764944][ T46] usb 1-1: Using ep0 maxpacket: 16 [ 339.770509][ T5683] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.781655][T10686] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 339.791734][T10684] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 339.803691][ T46] usb 1-1: config index 0 descriptor too short (expected 8484, got 36) [ 339.814010][T10686] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 339.814892][ T5683] usb 2-1: Product: syz [ 339.827968][ T46] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 339.828903][T10684] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 339.845161][ T5683] usb 2-1: Manufacturer: syz [ 339.852523][ T5718] usb 4-1: USB disconnect, device number 79 [ 339.860424][ T46] usb 1-1: config 0 has no interfaces? [ 339.867481][ T5683] usb 2-1: SerialNumber: syz [ 339.876901][ T46] usb 1-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 339.899136][ T5683] usb 2-1: config 0 descriptor?? [ 339.907083][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.917569][ T5683] cyberjack 2-1:0.69: required endpoints missing [ 339.934470][ T46] usb 1-1: config 0 descriptor?? [ 339.955063][ T5704] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 339.987812][ T5704] usb 3-1: device descriptor read/8, error -71 [ 340.128119][ T5697] usb 2-1: USB disconnect, device number 84 [ 340.244827][ T5704] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 340.276577][ T5704] usb 3-1: device descriptor read/8, error -71 [ 340.325037][ T5718] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 340.386599][ T5704] usb usb3-port1: unable to enumerate USB device [ 340.486838][ T5718] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 340.498058][ T5718] usb 4-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice= 0.40 [ 340.507739][ T5718] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.520766][ T5718] usb 4-1: config 0 descriptor?? [ 340.558751][ T5624] Bluetooth: hci5: urb ffff888022fdb100 submission failed (2) [ 340.610644][T10701] QAT: failed to copy from user. [ 340.716591][T10703] Invalid argument reading file caps for ./file0 [ 340.742366][ T5718] usb 4-1: USB disconnect, device number 80 [ 340.987026][ T5704] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 341.155103][ T5704] usb 2-1: Using ep0 maxpacket: 16 [ 341.168131][ T5704] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 341.180918][ T5704] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 341.197875][ T5704] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 341.212892][ T5704] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.233174][ T5704] usb 2-1: Product: syz [ 341.241303][ T5704] usb 2-1: Manufacturer: syz [ 341.248596][ T5704] usb 2-1: SerialNumber: syz [ 341.275956][ T5704] usb 2-1: 0:2 : does not exist [ 341.332650][T10707] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1390'. [ 341.532383][ T5704] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 341.600850][T10715] binder: 10713:10715 ioctl c0306201 2000000003c0 returned -22 [ 341.663604][ T5704] usb 2-1: USB disconnect, device number 85 [ 341.709006][T10721] tipc: Started in network mode [ 341.713966][T10721] tipc: Node identity 968e2d72622c, cluster identity 4711 [ 341.727878][T10721] tipc: Enabled bearer , priority 0 [ 341.746937][T10721] syzkaller0: entered promiscuous mode [ 341.752805][T10721] syzkaller0: entered allmulticast mode [ 341.765970][ T5632] udevd[5632]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 341.839004][T10721] tipc: Resetting bearer [ 341.870212][T10720] tipc: Resetting bearer [ 341.876165][ T809] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 341.937412][T10720] tipc: Disabling bearer [ 342.015241][ T809] usb 5-1: device descriptor read/64, error -71 [ 342.128116][T10729] [ 342.130496][T10729] ===================================================== [ 342.137521][T10729] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 342.145111][T10729] syzkaller #0 Tainted: G L [ 342.151092][T10729] ----------------------------------------------------- [ 342.158208][T10729] syz.1.1396/10729 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 342.165941][T10729] ffffffff8e60a058 (tasklist_lock){.+.+}-{3:3}, at: send_sigurg+0x12b/0x420 [ 342.174688][T10729] [ 342.174688][T10729] and this task is already holding: [ 342.182058][T10729] ffff888025cefda0 (&f_owner->lock){....}-{3:3}, at: send_sigurg+0x55/0x420 [ 342.190799][T10729] which would create a new lock dependency: [ 342.196782][T10729] (&f_owner->lock){....}-{3:3} -> (tasklist_lock){.+.+}-{3:3} [ 342.204484][T10729] [ 342.204484][T10729] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 342.214027][T10729] (&dev->event_lock#2){..-.}-{3:3} [ 342.214072][T10729] [ 342.214072][T10729] ... which became SOFTIRQ-irq-safe at: [ 342.227136][T10729] lock_acquire+0x106/0x350 [ 342.231748][T10729] _raw_spin_lock_irqsave+0x40/0x60 [ 342.237134][T10729] input_event+0x71/0xc0 [ 342.241482][T10729] atp_complete_geyser_3_4+0x114e/0x1d90 [ 342.247216][T10729] __usb_hcd_giveback_urb+0x376/0x540 [ 342.252697][T10729] dummy_timer+0xbc0/0x4650 [ 342.257313][T10729] __hrtimer_run_queues+0x3c0/0xa20 [ 342.262619][T10729] hrtimer_run_softirq+0x17a/0x240 [ 342.267843][T10729] handle_softirqs+0x22a/0x840 [ 342.272710][T10729] __irq_exit_rcu+0xca/0x220 [ 342.277409][T10729] irq_exit_rcu+0x9/0x30 [ 342.281745][T10729] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 342.287573][T10729] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 342.294008][T10729] _raw_spin_unlock_irqrestore+0x47/0x80 [ 342.299748][T10729] dummy_urb_enqueue+0x58a/0x780 [ 342.304795][T10729] usb_hcd_submit_urb+0x328/0x1b70 [ 342.310007][T10729] atp_open+0x60/0x90 [ 342.314096][T10729] input_open_device+0x1f8/0x3b0 [ 342.319143][T10729] mousedev_open_device+0xcc/0x150 [ 342.324363][T10729] mousedev_open+0x2ef/0x4a0 [ 342.329033][T10729] chrdev_open+0x4cd/0x5e0 [ 342.333522][T10729] do_dentry_open+0x785/0x14e0 [ 342.338365][T10729] vfs_open+0x3b/0x340 [ 342.342618][T10729] path_openat+0x2e08/0x3860 [ 342.347299][T10729] do_file_open+0x23e/0x4a0 [ 342.351887][T10729] do_sys_openat2+0x113/0x200 [ 342.356800][T10729] __x64_sys_openat+0x138/0x170 [ 342.361740][T10729] do_syscall_64+0x15f/0xf80 [ 342.366512][T10729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.372611][T10729] [ 342.372611][T10729] to a SOFTIRQ-irq-unsafe lock: [ 342.379620][T10729] (tasklist_lock){.+.+}-{3:3} [ 342.379644][T10729] [ 342.379644][T10729] ... which became SOFTIRQ-irq-unsafe at: [ 342.392307][T10729] ... [ 342.392316][T10729] lock_acquire+0x106/0x350 [ 342.399464][T10729] _raw_read_lock+0x36/0x50 [ 342.404046][T10729] __do_wait+0xde/0x740 [ 342.408289][T10729] do_wait+0x1e7/0x510 [ 342.412538][T10729] kernel_wait+0xd6/0x1c0 [ 342.416944][T10729] call_usermodehelper_exec_work+0xbe/0x230 [ 342.422910][T10729] process_scheduled_works+0xb5d/0x1860 [ 342.428534][T10729] worker_thread+0xa53/0xfc0 [ 342.433205][T10729] kthread+0x388/0x470 [ 342.437356][T10729] ret_from_fork+0x514/0xb70 [ 342.442021][T10729] ret_from_fork_asm+0x1a/0x30 [ 342.446858][T10729] [ 342.446858][T10729] other info that might help us debug this: [ 342.446858][T10729] [ 342.457074][T10729] Chain exists of: [ 342.457074][T10729] &dev->event_lock#2 --> &f_owner->lock --> tasklist_lock [ 342.457074][T10729] [ 342.470111][T10729] Possible interrupt unsafe locking scenario: [ 342.470111][T10729] [ 342.478429][T10729] CPU0 CPU1 [ 342.483869][T10729] ---- ---- [ 342.489302][T10729] lock(tasklist_lock); [ 342.493532][T10729] local_irq_disable(); [ 342.500273][T10729] lock(&dev->event_lock#2); [ 342.507555][T10729] lock(&f_owner->lock); [ 342.514385][T10729] [ 342.517905][T10729] lock(&dev->event_lock#2); [ 342.522829][T10729] [ 342.522829][T10729] *** DEADLOCK *** [ 342.522829][T10729] [ 342.531069][T10729] 2 locks held by syz.1.1396/10729: [ 342.536246][T10729] #0: ffff88807c2ec250 (&u->lock){+.+.}-{3:3}, at: queue_oob+0x1b6/0x4f0 [ 342.544763][T10729] #1: ffff888025cefda0 (&f_owner->lock){....}-{3:3}, at: send_sigurg+0x55/0x420 [ 342.554013][T10729] [ 342.554013][T10729] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 342.564399][T10729] -> (&dev->event_lock#2){..-.}-{3:3} { [ 342.570296][T10729] IN-SOFTIRQ-W at: [ 342.574521][T10729] lock_acquire+0x106/0x350 [ 342.581279][T10729] _raw_spin_lock_irqsave+0x40/0x60 [ 342.588637][T10729] input_event+0x71/0xc0 [ 342.595044][T10729] atp_complete_geyser_3_4+0x114e/0x1d90 [ 342.602925][T10729] __usb_hcd_giveback_urb+0x376/0x540 [ 342.610463][T10729] dummy_timer+0xbc0/0x4650 [ 342.617215][T10729] __hrtimer_run_queues+0x3c0/0xa20 [ 342.624572][T10729] hrtimer_run_softirq+0x17a/0x240 [ 342.632632][T10729] handle_softirqs+0x22a/0x840 [ 342.639564][T10729] __irq_exit_rcu+0xca/0x220 [ 342.646337][T10729] irq_exit_rcu+0x9/0x30 [ 342.652820][T10729] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 342.660639][T10729] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 342.668775][T10729] _raw_spin_unlock_irqrestore+0x47/0x80 [ 342.676686][T10729] dummy_urb_enqueue+0x58a/0x780 [ 342.683905][T10729] usb_hcd_submit_urb+0x328/0x1b70 [ 342.691285][T10729] atp_open+0x60/0x90 [ 342.697526][T10729] input_open_device+0x1f8/0x3b0 [ 342.704710][T10729] mousedev_open_device+0xcc/0x150 [ 342.712296][T10729] mousedev_open+0x2ef/0x4a0 [ 342.719326][T10729] chrdev_open+0x4cd/0x5e0 [ 342.725910][T10729] do_dentry_open+0x785/0x14e0 [ 342.732953][T10729] vfs_open+0x3b/0x340 [ 342.739193][T10729] path_openat+0x2e08/0x3860 [ 342.746039][T10729] do_file_open+0x23e/0x4a0 [ 342.752720][T10729] do_sys_openat2+0x113/0x200 [ 342.759564][T10729] __x64_sys_openat+0x138/0x170 [ 342.766571][T10729] do_syscall_64+0x15f/0xf80 [ 342.773334][T10729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.781914][T10729] INITIAL USE at: [ 342.786057][T10729] lock_acquire+0x106/0x350 [ 342.792646][T10729] _raw_spin_lock_irqsave+0x40/0x60 [ 342.800001][T10729] input_inject_event+0xa4/0x330 [ 342.807009][T10729] kbd_led_trigger_activate+0xbc/0x100 [ 342.814801][T10729] led_trigger_set+0x535/0x960 [ 342.821627][T10729] led_trigger_set_default+0x260/0x2a0 [ 342.829171][T10729] led_classdev_register_ext+0x787/0x9c0 [ 342.836874][T10729] input_leds_connect+0x517/0x790 [ 342.843966][T10729] input_register_device+0xce0/0x1140 [ 342.851429][T10729] atkbd_connect+0x71e/0xa10 [ 342.858087][T10729] serio_driver_probe+0x82/0xb0 [ 342.865012][T10729] really_probe+0x267/0xaf0 [ 342.871668][T10729] __driver_probe_device+0x1ef/0x380 [ 342.879022][T10729] driver_probe_device+0x4f/0x240 [ 342.886112][T10729] __driver_attach+0x34c/0x640 [ 342.893115][T10729] bus_for_each_dev+0x23b/0x2c0 [ 342.900040][T10729] serio_handle_event+0x1af/0xf80 [ 342.907150][T10729] process_scheduled_works+0xb5d/0x1860 [ 342.914768][T10729] worker_thread+0xa53/0xfc0 [ 342.921525][T10729] kthread+0x388/0x470 [ 342.927681][T10729] ret_from_fork+0x514/0xb70 [ 342.934387][T10729] ret_from_fork_asm+0x1a/0x30 [ 342.941229][T10729] } [ 342.943983][T10729] ... key at: [] input_allocate_device.__key.7+0x0/0x20 [ 342.953263][T10729] -> (&client->buffer_lock){....}-{3:3} { [ 342.959167][T10729] INITIAL USE at: [ 342.963240][T10729] lock_acquire+0x106/0x350 [ 342.969682][T10729] _raw_spin_lock+0x2e/0x40 [ 342.976091][T10729] evdev_pass_values+0xb9/0xbd0 [ 342.982852][T10729] evdev_events+0x1e6/0x340 [ 342.989364][T10729] input_pass_values+0x288/0x890 [ 342.996205][T10729] input_event_dispose+0x330/0x6b0 [ 343.003210][T10729] input_inject_event+0x1dc/0x330 [ 343.010223][T10729] evdev_write+0x325/0x4c0 [ 343.016537][T10729] vfs_write+0x29a/0xb90 [ 343.022682][T10729] ksys_write+0x150/0x270 [ 343.029368][T10729] do_syscall_64+0x15f/0xf80 [ 343.035966][T10729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.043756][T10729] } [ 343.046410][T10729] ... key at: [] evdev_open.__key.27+0x0/0x20 [ 343.054727][T10729] ... acquired at: [ 343.058718][T10729] _raw_spin_lock+0x2e/0x40 [ 343.063726][T10729] evdev_pass_values+0xb9/0xbd0 [ 343.068745][T10729] evdev_events+0x1e6/0x340 [ 343.073414][T10729] input_pass_values+0x288/0x890 [ 343.078515][T10729] input_event_dispose+0x330/0x6b0 [ 343.086589][T10729] input_inject_event+0x1dc/0x330 [ 343.092236][T10729] evdev_write+0x325/0x4c0 [ 343.096822][T10729] vfs_write+0x29a/0xb90 [ 343.101230][T10729] ksys_write+0x150/0x270 [ 343.105725][T10729] do_syscall_64+0x15f/0xf80 [ 343.110487][T10729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.116641][T10729] [ 343.118950][T10729] -> (&new->fa_lock){....}-{3:3} { [ 343.124142][T10729] INITIAL USE at: [ 343.128103][T10729] lock_acquire+0x106/0x350 [ 343.134331][T10729] _raw_write_lock_irq+0x3d/0x50 [ 343.140995][T10729] fasync_remove_entry+0xf1/0x1c0 [ 343.147748][T10729] lease_modify+0x4f7/0x6c0 [ 343.154012][T10729] locks_remove_file+0x5f0/0xf70 [ 343.160694][T10729] __fput+0x3ae/0xa60 [ 343.166399][T10729] task_work_run+0x1d9/0x270 [ 343.172720][T10729] exit_to_user_mode_loop+0xf3/0x4d0 [ 343.179832][T10729] do_syscall_64+0x33e/0xf80 [ 343.186159][T10729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.193778][T10729] INITIAL READ USE at: [ 343.198445][T10729] lock_acquire+0x106/0x350 [ 343.205316][T10729] _raw_read_lock_irqsave+0x48/0x60 [ 343.212683][T10729] kill_fasync+0x199/0x4d0 [ 343.219272][T10729] evdev_pass_values+0x627/0xbd0 [ 343.226385][T10729] evdev_events+0x1e6/0x340 [ 343.233070][T10729] input_pass_values+0x288/0x890 [ 343.240169][T10729] input_event_dispose+0x330/0x6b0 [ 343.247442][T10729] input_inject_event+0x1dc/0x330 [ 343.254643][T10729] evdev_write+0x325/0x4c0 [ 343.261224][T10729] vfs_write+0x29a/0xb90 [ 343.267737][T10729] ksys_write+0x150/0x270 [ 343.274317][T10729] do_syscall_64+0x15f/0xf80 [ 343.281165][T10729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.289218][T10729] } [ 343.291790][T10729] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 343.300547][T10729] ... acquired at: [ 343.304422][T10729] _raw_read_lock_irqsave+0x48/0x60 [ 343.309783][T10729] kill_fasync+0x199/0x4d0 [ 343.314365][T10729] evdev_pass_values+0x627/0xbd0 [ 343.319472][T10729] evdev_events+0x1e6/0x340 [ 343.324148][T10729] input_pass_values+0x288/0x890 [ 343.329254][T10729] input_event_dispose+0x330/0x6b0 [ 343.334530][T10729] input_inject_event+0x1dc/0x330 [ 343.339745][T10729] evdev_write+0x325/0x4c0 [ 343.344317][T10729] vfs_write+0x29a/0xb90 [ 343.348716][T10729] ksys_write+0x150/0x270 [ 343.353201][T10729] do_syscall_64+0x15f/0xf80 [ 343.357951][T10729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.364002][T10729] [ 343.366308][T10729] -> (&f_owner->lock){....}-{3:3} { [ 343.371499][T10729] INITIAL USE at: [ 343.375385][T10729] lock_acquire+0x106/0x350 [ 343.381435][T10729] _raw_write_lock_irq+0x3d/0x50 [ 343.387920][T10729] __f_setown+0x67/0x370 [ 343.393716][T10729] generic_setlease+0xacf/0xfd0 [ 343.400114][T10729] do_fcntl_add_lease+0x35e/0x470 [ 343.406693][T10729] fcntl_setlease+0x123/0x180 [ 343.412934][T10729] do_fcntl+0x8b3/0x1a20 [ 343.418729][T10729] __se_sys_fcntl+0xc8/0x150 [ 343.424868][T10729] do_syscall_64+0x15f/0xf80 [ 343.431019][T10729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.438471][T10729] INITIAL READ USE at: [ 343.442783][T10729] lock_acquire+0x106/0x350 [ 343.449355][T10729] _raw_read_lock_irqsave+0x48/0x60 [ 343.456537][T10729] send_sigio+0x38/0x370 [ 343.462853][T10729] kill_fasync+0x24d/0x4d0 [ 343.469264][T10729] lease_break_callback+0x26/0x30 [ 343.476283][T10729] __break_lease+0x81f/0x1ea0 [ 343.482951][T10729] __vfs_setxattr_locked+0x204/0x2c0 [ 343.490391][T10729] vfs_setxattr+0x163/0x360 [ 343.496875][T10729] file_setxattr+0x1d9/0x2b0 [ 343.503443][T10729] path_setxattrat+0x3b0/0x440 [ 343.510193][T10729] __x64_sys_fsetxattr+0xbc/0xe0 [ 343.517111][T10729] do_syscall_64+0x15f/0xf80 [ 343.523691][T10729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.531565][T10729] } [ 343.534044][T10729] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 343.542965][T10729] ... acquired at: [ 343.546749][T10729] _raw_read_lock_irqsave+0x48/0x60 [ 343.552126][T10729] send_sigio+0x38/0x370 [ 343.556530][T10729] kill_fasync+0x24d/0x4d0 [ 343.561116][T10729] lease_break_callback+0x26/0x30 [ 343.566410][T10729] __break_lease+0x81f/0x1ea0 [ 343.571246][T10729] __vfs_setxattr_locked+0x204/0x2c0 [ 343.576688][T10729] vfs_setxattr+0x163/0x360 [ 343.581352][T10729] file_setxattr+0x1d9/0x2b0 [ 343.586098][T10729] path_setxattrat+0x3b0/0x440 [ 343.591022][T10729] __x64_sys_fsetxattr+0xbc/0xe0 [ 343.596116][T10729] do_syscall_64+0x15f/0xf80 [ 343.600864][T10729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.606999][T10729] [ 343.609324][T10729] [ 343.609324][T10729] the dependencies between the lock to be acquired [ 343.609330][T10729] and SOFTIRQ-irq-unsafe lock: [ 343.622895][T10729] -> (tasklist_lock){.+.+}-{3:3} { [ 343.628002][T10729] HARDIRQ-ON-R at: [ 343.631969][T10729] lock_acquire+0x106/0x350 [ 343.638104][T10729] _raw_read_lock+0x36/0x50 [ 343.644253][T10729] __do_wait+0xde/0x740 [ 343.650056][T10729] do_wait+0x1e7/0x510 [ 343.655765][T10729] kernel_wait+0xd6/0x1c0 [ 343.661738][T10729] call_usermodehelper_exec_work+0xbe/0x230 [ 343.669287][T10729] process_scheduled_works+0xb5d/0x1860 [ 343.676471][T10729] worker_thread+0xa53/0xfc0 [ 343.682782][T10729] kthread+0x388/0x470 [ 343.688489][T10729] ret_from_fork+0x514/0xb70 [ 343.694715][T10729] ret_from_fork_asm+0x1a/0x30 [ 343.701211][T10729] SOFTIRQ-ON-R at: [ 343.705183][T10729] lock_acquire+0x106/0x350 [ 343.711320][T10729] _raw_read_lock+0x36/0x50 [ 343.717553][T10729] __do_wait+0xde/0x740 [ 343.723355][T10729] do_wait+0x1e7/0x510 [ 343.729079][T10729] kernel_wait+0xd6/0x1c0 [ 343.735054][T10729] call_usermodehelper_exec_work+0xbe/0x230 [ 343.742585][T10729] process_scheduled_works+0xb5d/0x1860 [ 343.749868][T10729] worker_thread+0xa53/0xfc0 [ 343.756104][T10729] kthread+0x388/0x470 [ 343.761909][T10729] ret_from_fork+0x514/0xb70 [ 343.768143][T10729] ret_from_fork_asm+0x1a/0x30 [ 343.774557][T10729] INITIAL USE at: [ 343.778436][T10729] lock_acquire+0x106/0x350 [ 343.784486][T10729] _raw_write_lock_irq+0x3d/0x50 [ 343.791007][T10729] copy_process+0x2b4c/0x4440 [ 343.797338][T10729] kernel_clone+0x284/0x8f0 [ 343.803390][T10729] user_mode_thread+0x110/0x180 [ 343.809792][T10729] rest_init+0x23/0x300 [ 343.815495][T10729] start_kernel+0x38a/0x3e0 [ 343.821545][T10729] x86_64_start_reservations+0x24/0x30 [ 343.828578][T10729] x86_64_start_kernel+0x143/0x1c0 [ 343.835242][T10729] common_startup_64+0x13e/0x147 [ 343.841731][T10729] INITIAL READ USE at: [ 343.846045][T10729] lock_acquire+0x106/0x350 [ 343.852534][T10729] _raw_read_lock+0x36/0x50 [ 343.859019][T10729] __do_wait+0xde/0x740 [ 343.865243][T10729] do_wait+0x1e7/0x510 [ 343.871298][T10729] kernel_wait+0xd6/0x1c0 [ 343.877638][T10729] call_usermodehelper_exec_work+0xbe/0x230 [ 343.885510][T10729] process_scheduled_works+0xb5d/0x1860 [ 343.893039][T10729] worker_thread+0xa53/0xfc0 [ 343.899713][T10729] kthread+0x388/0x470 [ 343.905764][T10729] ret_from_fork+0x514/0xb70 [ 343.912333][T10729] ret_from_fork_asm+0x1a/0x30 [ 343.919074][T10729] } [ 343.921554][T10729] ... key at: [] tasklist_lock+0x18/0x40 [ 343.929257][T10729] ... acquired at: [ 343.933043][T10729] _raw_read_lock+0x36/0x50 [ 343.937703][T10729] send_sigurg+0x12b/0x420 [ 343.942278][T10729] sk_send_sigurg+0x6c/0x2e0 [ 343.947023][T10729] queue_oob+0x42c/0x4f0 [ 343.951428][T10729] unix_stream_sendmsg+0xcb1/0xe80 [ 343.956693][T10729] ____sys_sendmsg+0x972/0x9f0 [ 343.961619][T10729] ___sys_sendmsg+0x2a5/0x360 [ 343.966452][T10729] __sys_sendmmsg+0x27c/0x4e0 [ 343.971303][T10729] __x64_sys_sendmmsg+0xa0/0xc0 [ 343.976312][T10729] do_syscall_64+0x15f/0xf80 [ 343.981068][T10729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.987121][T10729] [ 343.989445][T10729] [ 343.989445][T10729] stack backtrace: [ 343.995320][T10729] CPU: 0 UID: 0 PID: 10729 Comm: syz.1.1396 Tainted: G L syzkaller #0 PREEMPT(full) [ 343.995336][T10729] Tainted: [L]=SOFTLOCKUP [ 343.995340][T10729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 343.995360][T10729] Call Trace: [ 343.995366][T10729] [ 343.995372][T10729] dump_stack_lvl+0xe8/0x150 [ 343.995387][T10729] __lock_acquire+0x2a94/0x2cf0 [ 343.995409][T10729] ? send_sigurg+0x12b/0x420 [ 343.995423][T10729] lock_acquire+0x106/0x350 [ 343.995433][T10729] ? send_sigurg+0x12b/0x420 [ 343.995450][T10729] _raw_read_lock+0x36/0x50 [ 343.995464][T10729] ? send_sigurg+0x12b/0x420 [ 343.995477][T10729] send_sigurg+0x12b/0x420 [ 343.995492][T10729] sk_send_sigurg+0x6c/0x2e0 [ 343.995504][T10729] queue_oob+0x42c/0x4f0 [ 343.995517][T10729] ? __pfx_queue_oob+0x10/0x10 [ 343.995528][T10729] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 343.995544][T10729] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 343.995562][T10729] unix_stream_sendmsg+0xcb1/0xe80 [ 343.995575][T10729] ? irqentry_exit+0x218/0x760 [ 343.995589][T10729] ? lockdep_hardirqs_on+0x7a/0x110 [ 343.995603][T10729] ? irqentry_exit+0x218/0x760 [ 343.995616][T10729] ? rcu_is_watching+0x15/0xb0 [ 343.995630][T10729] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 343.995642][T10729] ? aa_sock_msg_perm+0xda/0x1b0 [ 343.995658][T10729] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 343.995673][T10729] ____sys_sendmsg+0x972/0x9f0 [ 343.995688][T10729] ? __might_fault+0xaf/0x130 [ 343.995704][T10729] ? __pfx_____sys_sendmsg+0x10/0x10 [ 343.995719][T10729] ? import_iovec+0x73/0xa0 [ 343.995737][T10729] ___sys_sendmsg+0x2a5/0x360 [ 343.995752][T10729] ? __pfx____sys_sendmsg+0x10/0x10 [ 343.995766][T10729] ? preempt_schedule_common+0x82/0xd0 [ 343.995780][T10729] ? preempt_schedule_thunk+0x16/0x30 [ 343.995800][T10729] ? __pfx_futex_wake+0x10/0x10 [ 343.995816][T10729] __sys_sendmmsg+0x27c/0x4e0 [ 343.995832][T10729] ? __pfx___sys_sendmmsg+0x10/0x10 [ 343.995845][T10729] ? do_futex+0x395/0x420 [ 343.995859][T10729] ? __pfx_do_fcntl+0x10/0x10 [ 343.995876][T10729] ? rcu_is_watching+0x15/0xb0 [ 343.995889][T10729] __x64_sys_sendmmsg+0xa0/0xc0 [ 343.995903][T10729] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.995914][T10729] do_syscall_64+0x15f/0xf80 [ 343.995929][T10729] ? trace_irq_disable+0x3b/0x140 [ 343.995945][T10729] ? clear_bhb_loop+0x40/0x90 [ 343.995957][T10729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.995967][T10729] RIP: 0033:0x7f715639ce59 [ 343.995979][T10729] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 343.995989][T10729] RSP: 002b:00007f7157321028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 343.996005][T10729] RAX: ffffffffffffffda RBX: 00007f7156615fa0 RCX: 00007f715639ce59 [ 343.996013][T10729] RDX: 0000000000000001 RSI: 0000200000006c40 RDI: 0000000000000009 [ 343.996020][T10729] RBP: 00007f7156432d6f R08: 0000000000000000 R09: 0000000000000000 [ 343.996027][T10729] R10: 0000000000040015 R11: 0000000000000246 R12: 0000000000000000 [ 343.996033][T10729] R13: 00007f7156616038 R14: 00007f7156615fa0 R15: 00007f715673fa48 [ 343.996044][T10729] [ 344.309127][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 344.316350][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 344.373706][ T5718] usb 1-1: USB disconnect, device number 77 [ 344.515002][ T809] usb 5-1: new high-speed USB device number 85 using dummy_hcd