last executing test programs: 5m48.093056834s ago: executing program 3 (id=2611): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000280)=[{0x20, 0x6, 0xff}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x29) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b7020000000d0000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00fe0000000085000000bd000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000fd60000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd80450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e3179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r2, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2000002, 0x4082172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000006000/0x2000)=nil) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) msgrcv(0x0, 0x0, 0x0, 0x3, 0x2000) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0x0, 0x0, 0x80, 0x1}, 0x0, 0x0, 0x7ff, 0xfff, 0x1ed4, 0x0, 0x7, 0x1, 0xe, 0x3fd}) msgctl$MSG_STAT(0x0, 0xb, 0x0) msgsnd(0x0, &(0x7f0000001180)={0x0, "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"}, 0x1008, 0x0) migrate_pages(0x0, 0x5294, &(0x7f0000000080)=0xfffffffffffffffb, 0x0) io_setup(0x20, &(0x7f0000001140)) io_uring_setup(0x5509, &(0x7f0000000100)={0x0, 0x2881, 0x10, 0x0, 0x59}) r4 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r5, 0x8000000000000003, {}, 0x2}, 0x18) 5m46.372776702s ago: executing program 3 (id=2618): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) unshare(0x40200) r0 = semget(0x3, 0x4, 0x39c) semop(r0, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}], 0x1) semop(r0, &(0x7f0000000000)=[{0x2, 0xbbdd, 0x1000}], 0x1) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000280)=[0x6, 0x7fff]) unshare(0x0) ppoll(0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) unshare(0x40400) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x403, 0x70b52c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xa1, 0x8013}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}, 0x1, 0xba01, 0x0, 0x4004}, 0x810) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="2400000040000701feffffff00000100047c0000040042800c01018006000600800a00006c18258875892e20ab1aea3ddf1a49e2abf57b1ec878b1b78cea466424b5188b037ad10789412f875ba3da03aa73289d585846d0f8e599cc42cfe9ba2932da716185bded9940c356ee553b65ee69afaf8f342b88f1f0611dd0b0d3053f3bab4cb390f1968b3bf3b8751bac118791edb41a05343c12d59c8ed66dc6cdcd562b587010030b9a75a1fb2602e16803cf70eb8783f08957a86ac42a15d44d1b905e46"], 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) rseq(&(0x7f0000000300), 0x20, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22, 0x2000000, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendto$inet6(r3, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x604ab000) 5m44.77556754s ago: executing program 3 (id=2624): unshare(0x22020600) clock_adjtime(0x0, &(0x7f0000000280)={0x1000000000066fb, 0x800000000002, 0x2000000d, 0xfffffffffffffffe, 0x0, 0x51, 0x0, 0x4, 0x0, 0x0, 0x99, 0x240b, 0x8, 0x9, 0x0, 0x2000000000000, 0xffffeffffffffffd, 0x1fff, 0xfffffffffffffffc, 0x4, 0x0, 0x0, 0x0, 0x100000000003f89, 0x0, 0x18ab}) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000002400)={0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x4, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, [@generic={0x63, 0x1, 0x0, 0xf}]}, &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x80000) r0 = mmap$IORING_OFF_CQ_RING(0x7fffffffb000, 0x7, 0x1000002, 0xbd4c341840b03bf2, 0xffffffffffffffff, 0x8000000) munmap$IORING_OFF_CQ_RING(r0, 0x9) munmap$IORING_OFF_SQ_RING(r0, 0x3) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c"], 0x1c}, 0x1, 0x0, 0x0, 0x6055}, 0x4000) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b0000000800000004000000ff03000001000000", @ANYRES32, @ANYBLOB="c843a46d00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r1}, 0x20) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000240)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) sendmsg$tipc(r4, &(0x7f0000000540)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10, 0x0}, 0x10) 5m42.033089009s ago: executing program 3 (id=2631): fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000080)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x224031, 0xffffffffffffffff, 0x42795000) r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x230000) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)=0x3) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) sendmmsg(r1, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f0000001c80)=[{&(0x7f0000000340)="36da", 0x2}], 0x1}}], 0x1, 0x20000000) syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x14b000) syz_open_dev$sndpcmp(&(0x7f0000000440), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x78, 0x30, 0xb, 0x0, 0xfffffffc, {}, [{0x64, 0x1, [@m_ct={0x60, 0x1, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xfdb, 0x0, 0x5, 0xffffffff}}, @TCA_CT_MARK={0x8, 0x10, 0x7fffffff}, @TCA_CT_LABELS={0x14, 0x7, "62f7f43ad3b1dfe97cc613f6e1cfcd72"}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x2000c804}, 0x10008010) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000100)) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r2, 0x84, 0x2, 0xffffffffffffffff, &(0x7f0000000000)=0xc) syz_open_dev$sndctrl(0x0, 0x2, 0xc8081) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x8000) write$sndseq(r3, &(0x7f0000000180)=[{0x2, 0xfa, 0x4, 0xb8, @time={0x7, 0x3}, {0x6, 0xc}, {0x5, 0xa}, @raw32={[0x400, 0x200, 0x1]}}], 0x1c) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x10, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x0) 5m40.302033223s ago: executing program 3 (id=2634): r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000280)=@caif=@dgm={0x25, 0x6, 0x9}, 0x80, 0x0}, 0x8045) 5m39.99698897s ago: executing program 3 (id=2636): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x0, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) syz_emit_ethernet(0xfdef, 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r1, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r2, &(0x7f0000019080)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000006300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0x94) openat(0xffffffffffffffff, &(0x7f000000c380)='./file0\x00', 0x40, 0xb4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000080)=ANY=[], 0x10448) 5m23.774284912s ago: executing program 32 (id=2636): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x0, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) syz_emit_ethernet(0xfdef, 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r1, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r2, &(0x7f0000019080)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000006300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0x94) openat(0xffffffffffffffff, &(0x7f000000c380)='./file0\x00', 0x40, 0xb4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000080)=ANY=[], 0x10448) 16.317325541s ago: executing program 1 (id=3304): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) ioctl$AUTOFS_IOC_READY(0xffffffffffffffff, 0x400442c9, 0x7ff) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1000002, 0x42031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) move_pages(0x0, 0x0, 0x0, 0x0, &(0x7f0000001a40)=[0x0, 0x0], 0x4) getpgrp(0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x41}, 0x3}}, 0x10) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x4) accept4(r1, 0x0, &(0x7f00000001c0), 0x80800) 13.835100445s ago: executing program 1 (id=3306): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0xa74a, 0x80000000, 0x10) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f0000000280)) syz_usb_control_io(r0, &(0x7f00000005c0)={0x2c, &(0x7f0000000040)={0x0, 0x6, 0x2, {0x2, 0x22}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x404}}, &(0x7f0000000440)={0x0, 0xf, 0x10a, {0x5, 0xf, 0x10a, 0x5, [@ptm_cap={0x3}, @generic={0x10, 0x10, 0xa, "48c70b99719cabd81d6798911c"}, @generic={0x63, 0x10, 0x1, "974d6697de3a6a0fe02dee2f52727c75928e7008cdeb8dbcb8602386fc473b152eec13038e8bc82879ed729560ad0885b14e73fa34b1ddb81e366009f2657c00e9240a7c0952b930eb7f9dd119dab520567e2bb588f8d04cc77ba969de3e6870"}, @ssp_cap={0x10, 0x10, 0xa, 0x0, 0x1, 0x3, 0x0, 0x8, [0x3f00]}, @generic={0x7f, 0x10, 0x2, "056c48e653b726f02a9fd4e27791b46c9f17c7645766a489102ac1938871a87f3ee0e09d24909b86a3477f3e71ce0066bec663361f1491777c0db9dcd391e3e0e44c748caf39a892b31646f8ce8450ab65b2cb3f5f7728b44039fd2b5c5ba1c9da4e41369dac2f2df4a6cbdbea35f4cba00bd82971ec01b966c5e9a1"}]}}, &(0x7f0000000580)={0x20, 0x29, 0xf, {0xf, 0x29, 0xe, 0x3, 0x7f, 0x48, "e020c84f", "0608b8c7"}}, 0xfffffffffffffffd}, &(0x7f0000000d00)={0x84, &(0x7f00000006c0)={0x0, 0x31, 0xaf, "60f51a36da7aa2f79d43e47b4f8807bb262eb3db66e68f1c6229935aaa52353ad47f1af6a76696ce354681f7f3f3a340169dd7cecab2372242da30c19cbf654cfb7cba3a91a376942f0ce0d6f085fba7ec5d2c4b2bdfaf59695e04e6c5600b232c822ded3617a80c74f6785c29b6c90c1de7aaa3e8d79c698c099570156dbfade7ed4337e72c2796167ebe0e075104bce7b72d86ac4170e5a8dad4eb84a3d6058dfb3e45a7c9db334680a5b52d493a"}, &(0x7f0000000780)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000008c0)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000900)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000000940)={0x20, 0x0, 0x8, {0x920, 0x40, [0xf00]}}, &(0x7f0000000980)={0x40, 0x7, 0x2, 0x9}, &(0x7f0000000a00)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000a40)={0x40, 0xb, 0x2, "5aa8"}, &(0x7f0000000a80)={0x40, 0xf, 0x2, 0x3}, &(0x7f0000000ac0)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, &(0x7f0000000b00)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}}, &(0x7f0000000b40)={0x40, 0x19, 0x2, "abf0"}, &(0x7f0000000c00)={0x40, 0x1a, 0x2, 0x106}, &(0x7f0000000c40)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000c80)={0x40, 0x1e, 0x1, 0x6}, &(0x7f0000000cc0)={0x40, 0x21, 0x1, 0x7}}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), 0xffffffffffffffff) 10.297079507s ago: executing program 0 (id=3312): socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x1000000000a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x80, 0xa) r1 = syz_open_dev$admmidi(&(0x7f0000000140), 0x2, 0x2002) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f0000000040)={0x1, 0x100000008a, 0x3, 0x1, 0x10001000}) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) read$midi(r1, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0xd, 0x8204, 0x8000, 0x100, 0x0}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000300)={r3, 0x4, 0xe8, "f526aaa795ca6b8ea4a9fa0736c943703124a33185f9a0778a2958c22a3dfec09d440eac4342088b684a7ebaaf6a965f5e0d3ff5540faa7638307ed142f222ac75ea3fd6051e9ae5cac73552bdcbbfa44bbe0a3793d0465a3ccb890ecdba212a2cdd9e5d182b299c5042163ccca26d2f243f1d71a075475d1e0b05dcd10288803fc9c25f5d10791b665e430caab16d01e823d89adecff7285f4e5c40da96321e3e4cd870bf48fc86bdd4fdba29d92a915954d5fb0034b69a34f3b75a9bf77aa2c8b5720ce0c8a0d944a3c5cf96be44ee54c10c32d5b21eab8b340c9b0dff463c75eb704fcd1c47f5"}, 0xf0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x14e203, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r4, 0x28, 0x1, &(0x7f0000000040)=0x7, 0x8) ioctl$SNDCTL_SEQ_PANIC(r2, 0x5111) 10.161845905s ago: executing program 0 (id=3313): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000004, 0x1}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x13, 0x8, 0x8}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x673}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0xaa}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41}, 0x94) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={r0, 0xffffffffffffffff, 0x0}, 0x20) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) prlimit64(0x0, 0xc, &(0x7f0000000600)={0xff, 0x5}, &(0x7f0000000640)) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x14, 0x18, 0x229, 0x0, 0x0, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x20000050}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'macvlan0\x00', 0x0}) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xfffbffff, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xff}]}]}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040010) connect$tipc(r5, &(0x7f0000000340)=@name={0x1e, 0x2, 0x2, {{0x40, 0x4}, 0x4}}, 0x10) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003173610ef171e7206de010203010902f3c8010000000009040000000206"], 0x0) syz_usb_control_io$rtl8150(r6, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="4030040000002e101dce"], 0x0, 0x0, 0x0, 0x0}) 9.854298652s ago: executing program 1 (id=3316): syz_clone3(&(0x7f0000001880)={0x0, 0x0, 0x0, 0x0, {0x800400}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1000002, 0x42031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, &(0x7f0000001a40)=[0x0, 0x0], 0x4) getpgrp(0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x41}, 0x3}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x4) accept4(r2, 0x0, &(0x7f00000001c0), 0x80800) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000080)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @ib={0x1b, 0x8, 0x889, {}, 0x1119dff, 0xffffffff7fffffff, 0xcd41}}}, 0x90) futex(&(0x7f0000000000), 0x9, 0x1, &(0x7f0000000140)={0x77359400}, &(0x7f0000000180)=0x1, 0x0) 9.759847469s ago: executing program 2 (id=3317): bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)="2703020059fe", 0x6}], 0x1}, 0x0) socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in=@rand_addr=0x64010102, 0x0, 0x2, 0x0, 0x0, 0xa, 0x10}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, 0x0, 0x6e6bb5, 0x2}}, 0xb8}}, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, &(0x7f0000000080)=ANY=[@ANYRESOCT=r4], 0x0, 0x42, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5b}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800"], 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa067707"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="1201000000000040d90455a000000000000109022400010000100009040000c403000200092100105c0122070009058103"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x7, 0x0, 0x0, 0x0, 0x63, 0x11, 0x5f}, [@ldst={0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}]}, &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) syz_usb_control_io$hid(r6, 0x0, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c) connect$inet6(r7, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) recvmmsg(r7, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000040)=""/47, 0x2f}, {&(0x7f0000001e40)=""/99, 0x63}], 0x2}, 0x2}], 0x1, 0x100, 0x0) sendmmsg$inet6(r7, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)="b458b09a7bc6afad62c3f97125bc54bad5b9f64492fb3237f80678f40515a15a9bc7f8f9c9244e7fe0c328f6457f6d457effb6e3090aec26ddb480ffdd53c94d4d0ca124cd", 0x45}], 0x1}}], 0x1, 0x20e8086) 7.177430574s ago: executing program 4 (id=3318): socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x1000000000a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000000)={0x2, 'veth1_macvtap\x00', {}, 0x3}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0xa9}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x80) read$msr(r1, &(0x7f0000025300)=""/102392, 0x18ff8) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x80, 0xa) r2 = syz_open_dev$admmidi(&(0x7f0000000140), 0x2, 0x2002) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r2, 0xc0305710, &(0x7f0000000040)={0x1, 0x8e, 0x7, 0x1, 0x10001000}) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000094c0)=ANY=[@ANYBLOB="8c45000043000701feff416ec366166e0314000004004580744501"], 0x458c}, 0x1, 0x0, 0x0, 0xc095}, 0xc810) openat$sequencer(0xffffffffffffff9c, 0x0, 0x14e203, 0x0) ioctl$SNDCTL_SEQ_PANIC(r3, 0x5111) 6.176561963s ago: executing program 1 (id=3319): syz_usb_connect$midi(0x5, 0x40, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7ffffffa}]}) r1 = dup(r0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x8, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) r4 = socket(0x40000000015, 0x5, 0x0) connect$inet(r4, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg(0xffffffffffffffff, 0x0, 0x44004) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x260, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x234, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_PARMS={0x14, 0x1, {0x3f26, 0x7, 0x81, 0x89, 0xb, 0x14}}, @TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0x1ff}, @TCA_RED_FLAGS={0xc, 0x4, {0x8}}, @TCA_RED_STAB={0x104, 0x2, "ec0a933721b570d7dfeeb893f5affe36922faa46dc892b39b8e04ab09dc74794414f046070b9c9ff60eaefef9d8905c614e43cf2207aa83f03624d318d3f8ff817291dd3bd822a874a56eaf59b96c9a5a83f06ee30ae535db4f138fba367354a72e5dc804e4a8530fc0fda22da8e5262c68d45722d262e1ba2f1afac0789f0cc5e5d3f6c4e3ce136be0d7974da67817cbd431f5c56be347ed51fc65002712ecb808ca92f7a0b4b30bc94e79b206d93056750196e839cf384e525f20d02a48c8b90c93dcf4a217b53caa0b38d6e16d8deb5b229f95665285af96e53aa17b2c3f52dabfca7a092769c7e4a8da989b7b340889e307838cb784f240bd49323c4bdcb"}]}}]}, 0x260}, 0x1, 0x0, 0x0, 0x8800}, 0x4000010) bind$packet(r1, &(0x7f0000000000)={0x11, 0x2c, r6, 0x1, 0xfd, 0x6, @link_local}, 0x14) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x32600) 5.889364184s ago: executing program 4 (id=3320): openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x8200, 0x0) ioctl$COMEDI_INSN(r1, 0x8028640c, &(0x7f0000000080)={0xc000003, 0xf, &(0x7f0000000040)=[0x1, 0x2, 0x40005002, 0xffff32eb, 0x2, 0xffffdff9, 0x2d7b, 0x2, 0x0, 0x3, 0x0, 0x3, 0xfe09, 0xd2, 0x80000002], 0x1, 0x4000003}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r2, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0xc0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000180)={0x2, 0x4e24, @multicast2}, 0x10) 5.113093416s ago: executing program 2 (id=3321): r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x8200, 0x0) ioctl$COMEDI_INSN(r2, 0x8028640c, &(0x7f0000000080)={0xc000003, 0xf, &(0x7f0000000040)=[0x1, 0x2, 0x40005002, 0xffff32eb, 0x2, 0xffffdff9, 0x2d7b, 0x2, 0x0, 0x3, 0x0, 0x3, 0xfe09, 0xd2, 0x80000002], 0x1, 0x4000003}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r3, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) socket$nl_route(0x10, 0x3, 0x0) mount$9p_rdma(0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',']) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0xc0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000180)={0x2, 0x4e24, @multicast2}, 0x10) setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000100)={0x1, 0x80000001}, 0x8) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x30}}, 0x10) close(r4) socket(0x15, 0x5, 0x1) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000540)={0x8, 0x8001, 0x3, {0x2, @meta={0x50314b52, 0x287500a2, 0x6659, 0xfdef, 0x30762313}}, 0xc0}) unshare(0x28020480) ioctl$SNDRV_TIMER_IOCTL_STATUS64(0xffffffffffffffff, 0x80605414, &(0x7f0000000240)) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r5, &(0x7f0000000200), 0x12) fgetxattr(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], &(0x7f0000000080)=""/165, 0x4b) 5.033279187s ago: executing program 0 (id=3322): socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x1000000000a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x80, 0xa) r1 = syz_open_dev$admmidi(&(0x7f0000000140), 0x2, 0x2002) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f0000000040)={0x1, 0x100000008a, 0x3, 0x1, 0x10001000}) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) read$midi(r1, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0xd, 0x8204, 0x8000, 0x100, 0x0}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000300)={r3, 0x4, 0xe8, "f526aaa795ca6b8ea4a9fa0736c943703124a33185f9a0778a2958c22a3dfec09d440eac4342088b684a7ebaaf6a965f5e0d3ff5540faa7638307ed142f222ac75ea3fd6051e9ae5cac73552bdcbbfa44bbe0a3793d0465a3ccb890ecdba212a2cdd9e5d182b299c5042163ccca26d2f243f1d71a075475d1e0b05dcd10288803fc9c25f5d10791b665e430caab16d01e823d89adecff7285f4e5c40da96321e3e4cd870bf48fc86bdd4fdba29d92a915954d5fb0034b69a34f3b75a9bf77aa2c8b5720ce0c8a0d944a3c5cf96be44ee54c10c32d5b21eab8b340c9b0dff463c75eb704fcd1c47f5"}, 0xf0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x14e203, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r4, 0x28, 0x1, &(0x7f0000000040)=0x7, 0x8) ioctl$SNDCTL_SEQ_PANIC(r2, 0x5111) 4.049312072s ago: executing program 0 (id=3323): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000004, 0x1}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x13, 0x8, 0x8}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41}, 0x94) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={r0, 0xffffffffffffffff, 0x0}, 0x20) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) prlimit64(0x0, 0xc, &(0x7f0000000600)={0xff, 0x5}, &(0x7f0000000640)) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x14, 0x18, 0x229, 0x0, 0x0, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x20000050}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'macvlan0\x00', 0x0}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xfffbffff, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xff}]}]}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040010) connect$tipc(r4, &(0x7f0000000340)=@name={0x1e, 0x2, 0x2, {{0x40, 0x4}, 0x4}}, 0x10) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003173610ef171e7206de010203010902f3c8010000000009040000000206"], 0x0) syz_usb_control_io$rtl8150(r5, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="4030040000002e101dce"], 0x0, 0x0, 0x0, 0x0}) 3.837061899s ago: executing program 4 (id=3324): r0 = syz_clone3(&(0x7f0000001880)={0x0, 0x0, 0x0, 0x0, {0x800400}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) ioctl$AUTOFS_IOC_READY(r2, 0x400442c9, 0x7ff) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1000002, 0x42031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, &(0x7f0000001a40)=[0x0, 0x0], 0x4) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x41}, 0x3}}, 0x10) listen(r4, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r5, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x4) accept4(r4, 0x0, &(0x7f00000001c0), 0x80800) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000080)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @ib={0x1b, 0x8, 0x889, {}, 0x1119dff, 0xffffffff7fffffff, 0xcd41}}}, 0x90) tgkill(r0, r0, 0x21) 3.751397314s ago: executing program 2 (id=3325): unshare(0x40200) r0 = semget(0x3, 0x4, 0x39c) semop(r0, &(0x7f0000000000)=[{0x2, 0xbbdd, 0x1000}], 0x1) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000280)) ppoll(0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) unshare(0x40400) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x403, 0x70b52c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xa1, 0x8013}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}, 0x1, 0xba01, 0x0, 0x4004}, 0x810) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="2400000040000701feffffff00000100047c0000040042800c01018006000600800a00006c18258875892e20ab1aea3ddf1a49e2abf57b1ec878b1b78cea466424b5188b037ad10789412f875ba3da03aa73289d585846d0f8e599cc42cfe9ba2932da716185bded9940c356ee553b65ee69afaf8f342b88f1f0611dd0b0d3053f3bab4cb390f1968b3bf3b8751bac118791edb41a05343c12d59c8ed66dc6cdcd562b587010030b9a75a1fb2602e16803cf70eb8783f08957a86ac42a15d44d1b905e46"], 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x604ab000) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, r3, 0x1, 0x70bd23, 0x25dfdbfd, {{}, {}, {0x5, 0x17, {0x12, 0x10001, @udp='udp:syz1\x00'}}}}, 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x404c000) 3.738451256s ago: executing program 4 (id=3326): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, 0x0, 0x0) recvmmsg(r1, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0xc8}], 0x1, 0x0, 0x0, 0x2000000}}], 0x1, 0xcb, 0x0) 3.602703997s ago: executing program 1 (id=3327): sendmsg$key(0xffffffffffffffff, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000280), 0xb00000, &(0x7f0000000600)=ANY=[@ANYRES8, @ANYRES8]) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="b800000000d983fd49e32f4399000000a0000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee"], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968", 0x79}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e385", 0x1c}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418f", 0x30}], 0x3, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$loop(&(0x7f0000000500), 0x6, 0x1000) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000002200)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a) sendmsg$inet(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000006c0)={0x2, 0x4e21, @multicast2=0xe0000001}, 0x10, &(0x7f0000000ec0)=[{&(0x7f0000000140)="9745edff0000000001008cc5ffffffff", 0x10}, {&(0x7f0000000000)="74145fdae5ca0070777c079c", 0xc}], 0x2, &(0x7f0000000840)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xf}, @rand_addr=0x64010101}}}], 0x20}, 0x4044040) unshare(0x80) 3.513141951s ago: executing program 4 (id=3328): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000280)=[{0x20, 0x6, 0xff}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x29) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r2, 0x2000000, 0xfe7f, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2000002, 0x4082172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000006000/0x2000)=nil) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) msgrcv(0x0, 0x0, 0x0, 0x3, 0x2000) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0x0, 0x0, 0x80, 0x1}, 0x0, 0x0, 0x7ff, 0xfff, 0x1ed4, 0x0, 0x7, 0x1, 0xe, 0x3fd}) msgctl$MSG_STAT(0x0, 0xb, 0x0) msgsnd(0x0, &(0x7f0000001180)={0x0, "3f646235410c6a09e6bcb4e226526d7db69c814533f8c936d24e41ab8d5af231556d88843b4e48f0dc3aea4f5085b90986cf0062e655059a108aa455d2e88b7066117c02b14ba0e460acd2f3316cb754242a8be6cfcac83a90f71493c8150798fbdd95725f009035dc019983b3ca4737dd5bf79a3b6c3aa85473d67c938102cc6ec00bb86bd86219263eed16179eac7fcf9f92a314d8214a7c00e892dcbd44c960863dc34d544bd7c29f58ff81ae24d721040d77424d4877d7a2e3f5500a51681f2583056b9cab9257473bae21ff99c05c940f900bf11a815685f4d43071bc3eab1a25d92321d4469314d23ad62a288a70b83b32ca9979b08d74feebf34d23ff3fcda7d225cec5dd0d384b5148e8033ea1317e4ea12ff43b491e431eae96eaf1d943560ca7015073a91f9e4045552ac1be0d47b4b784790c9b648a686ab1dd4767d2b9c25ab24f60ab24ba73dea782044ae0376b79a1f140f31d5ad1354f856293b7c1cb7149def32ebdbab5f4b850b5ced46009fabf60452b60cf3e259e878f129090163571c0159fee4db1f00a8c95b0d0bef366f05901e4fd2e28126f839d2a3ac9a7fea7a019a0c1992865995a67047b04afd8e6e2351d94670541fc357969cf2bedb9d4f45f6f3e25b9fcbcef779c33afb6f7b99642598c6a45338286f814af8a15c8d9845fd1b1faf5c46b1a174cb306657f26a59ee143232730bf83702a846dea1c94dbda21d6db4f896e8c164a28206361b676b8c82a348a009890a77f45887baf08785cb022ede7542747a670c0cdd4e3f583d0e3d424fa1dccb2399d5a2b6217a51e33ed25912ee01064fd04940aefc4bac65800a6ae2d33917fc268ac157877e3aad8fca7ff8124a3cc3cfe15fcf5c43b7fb1417068480fe7e9a62257599c5742b03d7f16af20c4dea80d5f12f3776c3a0cd09f43431f9a7c7bf3a62dd36f3e07d5b9adb6f16094cac4a7c8b6209871c7e23011b555613e6c3156449aee63b0681bbf37b6171bd0893412d561696759f47d48d345bab83bfe895e38a8eb1a8f5ad2bd8146a381e3df015697a7539feeea230060ba44d7b208347a9e8a7753bacbfd683d3943a4d65496a57538fcb037640bb27d05cc2b5adbd6ac3ccd2d8c000c48cd0004d856899a58ed3c8fd6946cca8acee2a4f71e591166f3c19699f1f5b73b17e4b60efb24455623f2d98df5fb9155aba8eb10857b040fa3cbab6630be8a98d4904cf7f61637cf21f3e7fbb7a86b1ff4f63fc5ae180e94a5805422a4f615ae28d0e0b0ae9d3aa8a8b36a0b1121d14e4ba20a7f19d1a1260fdf18d44d2abc9ab8f55ab722c71c80c5d3de994c103047c8d7088826af1a2c575e8a8191e150ba10eecb6a4a1a8f21002ba5a3e82311ad471f07f53db9571946a366779ed81a0a1c3720f7abc2c7943a2ef69b510be85bb6baaf6eb6f1667d2c90614e52478e03c4c2f9e3a9700d7039f5a23a4f3a9c011bfda53f84a00bce0074a126b6852cc47af0a2bfc8e84a5373dfeb842545964ea25a6b490cd810926d9cc7a49e6df0295b7fdc9abc8a7329b3a6c8fc19179b561d5a07dd3fbaa8b681a860c3a989d66b7782833b99f3081b5accec0fc7e6344361fec5d6f88ea7df4e677c63aac020c8d017e4271ad65fb504664d2906997ae691fdf5dacd7a50744602decd23b63f053b7133385f2a359f2aa4ea089808f1149a5ea388eab346dee972e9571130bb09436fd78aacc97c562b6d5a7f46cd6101fb8157137a31033544578442fb2ad44e2d5ece27b91c6265795896dde3d8e5eaa9607a4091273eba3a670266da58e0a1086dab0f0380b50e46e2b0fac01929bf1579175b2115a163b5d3e406ebb8555b38d115c00f0ed51ea361dd0880aa037597c0ab5afac771a88b1ccb06137f1854cfe9fdec2debda662a14f066928891f18915c4b44cc4beedc73e1e1cb6e4150493569dacb393514e2bb9a410fb0e9489e87d4eaf9674cab55727fa780fd42f024365d71b6093e7941bde3e10cf744aeeaa740e03802c3c52769b003e1fbed491cb480bf0ff13d073661f8fd3c8b40cebae2781b9b4643ad86ad60b1ac723a0c5a5e6569a9e228268d2d16da1ff7d50b000823585a2bb5d22d77f8ffe765b7b89d2dc3105b1b5d9ace9af639564cd7920f038dde8f85b427245922de407a0739ddf04179c07aea8038e19004f770b9fa87911f6d2be1ead0c6cd06442dc11d33aade0e36175b137a28e5b77cc2afc669d7b3fc7527a67281bc209d97ce19ab420acb7b7561dc25bacd782b81d11fbdacf0e7f58b4dd946906f68c6242ad218c55b483f86d245a35f7e369786d5652e630013996224cbf6151c2ccdf5b9627d20f7a8a3c1697e0c83e9543ac20bea623d15cafafe3f370265431e282dc7ec09ea56e870eca8df456f0f93e971a56ba14f2ecd3264aaba7c9511cc7e3395c9f20846e31631aadbd7f94a557e6d300fc6601c46abd4f294501d1d04e3418611f4520c7e5aa505b0270628824a89597f1410d87c8b6ff8001291faec77c874ca3d3b59124703d122dfb6d162f9ac6ecf8b40dfc838c024f4e8d9176777012803214e318509ca29b3a75d87ac750aa0f3d13cfbb05f35d9279e77bf9139d72f7fe4b94fb4967816fdccca17459e7bd55c6855e8026f7497e5c7d9613dae89275f19de33cba8e5b3593a2afe9a786235bd6e0a1cecbde1a82c6beeacac7706326abae1e0216f9a63122de05b2a0d45f05999d69d025e537dd0989535a6149c09fd7faf3bb5a9bddcfcdd75168214915650fb227bb323b5b8f4ce11d2e175a4dff6bbfa8498a7fd9defdf5f40bc1d7de47f1290901bce0f98f7773d7bc9fcff5a730ffaa679b861ee310da1daf0e5f048cab0ef095d6e82a7d9855e7fd8963c7546c830d5692b8b5135075903f3e9b453b598f81dc12dd25a14d066544214962e98cbe59f4531d2a24d2b65f62e3186f8fd0e314664dd53f5ef95c4c5809c5c6068ac7e5abed0aa5126c25d02b5da90140701e3ccdd8315fdcb14e1233a13def5dc863656298c3fef7265f0baf1429609d159917f5328c4c7ae29f0e7f4de962342f118e82b22d54ccba684d4542949a608d49295ec969740d593ea00f8c1db5f9bab94921877c03f939b561d5127e5bbc7aa60972130f797139d4ceddcb63f737f26566aab4a060b5c443c487a685b09fe59bc1e1dfaccc99404eb8c0ea1c6e061901a3933dd378d958b5081a69bf8e9bca025c59177e798f09640b0032eadec42b507d78a3a0761ed3884f2694a3b982685f6fe07cdd645ddca292572277f8e45cddfdb2402d8ae220e1abbd2af44a5e4f8e82c4b2a2467026a386ae97fc798fd4f1aafa109e3141cf5be571019f5db848984ead62ec8aa73c8cd498a7e4f6a51326af603d16448dd71f6541cd6829e811d65fe8ee9b134c84b8d6831f26a993b2f8b16791d52887efbb1ad6d0f8f9a047fecc937610c0cdb3366260e3b48b98ab224473c54ad851dafab2faf749727b7e193a7019d1fb5f77cfc93bbea5f34c5a5ee3c3006f440c13e8be7564efbfce1894333189cf232674af0e8cf70aac5c4e039dd7db85ddee77450158954a2108a483d1c87975b18263ab106964295f6696bebdb6f4f44e47665bcd2c494850ed76520cb0b3ff30c200f0b66680e1a2244210a8f95f56bb6153d0ae532f01bfe90d65deba9339bd0255f89d4b8c209b7b5df9f61e4ad086564a4353940d9b89249dc58680e23a1bc997b6586ed4c8f3ca3b55eee16617ffdb1dcdcb1233ec204f359403c13e62b791933d63868b3051b6a66bcab20619bfe503e41bba9b8fb57a76c65eff3dd13421e33c13239b97ff83672daaba9e1b222cf38461c00ae4f5fcb7e8ef1da525278a9fec2d5437e6a63adee37cd33318c921bf837fde651e4209e6715416504de927ac22680c5fc723eedfa616e65fdd9bdd8fc1f45020916b3aa5776267414f93372c18558d754a44dcc2eda559457c6fea38c48122e7bfe6da0c9f30d0c66e66871c3539988f417f4352dcfdc05014b5f506c5785dec318187c003f287a62beffcb00b91986f9e08d9ebb1f91c8d0c1315b85e12070b1bbc667db9520d9cc46090bb5543857feb5fb4751b3d2a215959ef51e7ddec118e4b5c29aa356abecb75dc7eaf25ee8a2bd17c2c334743efc945d8733ffa8e7ad68ea04529307d554c89e6898a92b2b6151e8a6c20c06e9e6f13037cc9ad14c2f94f471cb6db0ca629c25fb8c71c08a4008a082366482d33e9b2ffa9052efbbc61ceb7113ecc6a6e47654eda95069f050fb1f40197d9e6ec78d4d9e2c6f8380458676bedac3a8df61faa4f13f221d705ac2a165ceaea28b219a06e31df124cd6e8c5c2f6fc5dbe2b40dce6ba01ff40c7db0b4038ef6231400a7a7a70daaa9d884f0f97d8860e8690733b29a414516f68988ecf8b5edbcd0d84196642b26426e391a6ac5cbd7973923e8e76c0c8c876306a8152253a704702eb0cc6eb88828dcdd0d9d60681cbf12a521c5ae0084e5dceb3b28d6cd2a495c07a2cc8ad2c0255ef4915dfe20bedda7caccc9bd0118a87ae1651ec993b477b4edba3d42adc1e9f4d3f3abc50f3a1a3a9ba38aabad53781ddb6c48a9d0a974124a604e02d84da4ff4c44fc09d26288790eb7b463d0c8bba2b0e187523dcf1d2842e2d6832f54fa22ebb8928bb609717b7209ab815f5e994cf04dcce999766d9a8194c9dd374b22cbcfaa9e1fe4c078f4ddaa4405a5f344a327d22a4a672cf91d7f4629b6a39df645e0ae4f2b28c06b37f2931269dd8e60a64ac3def3eef6d6d632c50caea99647201d3d23447edc51c1ca1bb467f973fda71276e68990216bff00128c63a42ebb03616448ef1550b36b5687229fc242112cf4c142cb304421c05df47221f58653a8f4f3b73905f5a4ac1b076ddd43ec572f3f8220090db287ae690c184f9e31896a36a7dcea6ec49e43fae6b5e2a6d619e8badf3afd78e1dc3fd03a98a9298c2480f2812ed35d375560c9983828f5272647ac5417bf3e4691750d6c4ee85379b0690baae5d9e5359461e0e14b6f3c4a806b74d46f6497ccf3587ca241681c20aac8e1f4bf88574a40d026b790465ef7c572c4702cc4847793b79ffd94d45895af0ab013433e373dc3ed83c423d3170d8e47310ffe68a8c72f22b530313ed9511eb62cb182a9b797c638d0e7b64bd0c70691f2bea2f1e32167836bd0fed2591e416c236ea6465f7c14100cce8e3c73a82b38b42577d7e54874b412fe2e203a7c1a961dee3ecb3c18ad38f4008ec3670c7ced31d1fc6d16b2c67cfdb17b88f3865a80399a47fbd0a4fbab87506824dc25a490125bda30817334bcf4c7557e6acfb2f6f6584fa31a27f4715195d8993e0f590fcc2b67fc0d96835d0396230af92a762ae90a42386e0bee6c41d71950010bf491de1a74899e5cfa722c2e23e921164f645f10996e9ea2079f0bf75dfecb944e76352a9e9031cb6c8b4064ba6893f3e711c7b07a0f270cf0a27f446165ad14386ffc476580fd445616c05a57532811307a0fd38ba4721a32a12c50c1809d72ae1ef3e9ab1c10152247dd9ac4ed870382d64c80ce97b26c16352dafd694c59db1693e5db90d6358898366368521ca79ee0be70340a0a8408067572567fbbeab126559ecd22db202feeffe00bf3859be2c9a1a65266b4978849088a219650cf13d6cf71023e82d4c93fbbe13b41c43972906046b3aef9144de8b44175717b08becb7b839137fe74be85275d3b7ce1f91a85e0373647de1a242ae54717366e74049a"}, 0x1008, 0x0) migrate_pages(0x0, 0x5294, &(0x7f0000000080)=0xfffffffffffffffb, 0x0) io_setup(0x20, &(0x7f0000001140)) io_uring_setup(0x5509, &(0x7f0000000100)={0x0, 0x2881, 0x10, 0x0, 0x59}) r4 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, 0x0) bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, 0x0, 0x8000000000000003, {}, 0x2}, 0x18) 2.679448778s ago: executing program 2 (id=3329): syz_clone3(&(0x7f0000001880)={0x0, 0x0, 0x0, 0x0, {0x800400}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x40000, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) ioctl$AUTOFS_IOC_READY(r1, 0x400442c9, 0x7ff) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1000002, 0x42031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, &(0x7f0000001a40)=[0x0, 0x0], 0x4) getpgrp(0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x41}, 0x3}}, 0x10) listen(r3, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r4, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x4) accept4(r3, 0x0, &(0x7f00000001c0), 0x80800) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000080)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @ib={0x1b, 0x8, 0x889, {}, 0x1119dff, 0xffffffff7fffffff, 0xcd41}}}, 0x90) futex(&(0x7f0000000000), 0x9, 0x1, &(0x7f0000000140)={0x77359400}, &(0x7f0000000180)=0x1, 0x0) 1.38173027s ago: executing program 4 (id=3330): openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x8200, 0x0) ioctl$COMEDI_INSN(r1, 0x8028640c, &(0x7f0000000080)={0xc000003, 0xf, &(0x7f0000000040)=[0x1, 0x2, 0x40005002, 0xffff32eb, 0x2, 0xffffdff9, 0x2d7b, 0x2, 0x0, 0x3, 0x0, 0x3, 0xfe09, 0xd2, 0x80000002], 0x1, 0x4000003}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r2, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) mount$9p_rdma(0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',']) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0xc0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000180)={0x2, 0x4e24, @multicast2}, 0x10) 1.188321811s ago: executing program 0 (id=3331): socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x1000000000a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000000)={0x2, 'veth1_macvtap\x00', {}, 0x3}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0xa9}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x80) read$msr(r1, &(0x7f0000025300)=""/102392, 0x18ff8) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x80, 0xa) r2 = syz_open_dev$admmidi(&(0x7f0000000140), 0x2, 0x2002) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r2, 0xc0305710, &(0x7f0000000040)={0x1, 0x8e, 0x7, 0x1, 0x10001000}) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000094c0)=ANY=[@ANYBLOB="8c45000043000701feff416ec366166e0314000004004580744501"], 0x458c}, 0x1, 0x0, 0x0, 0xc095}, 0xc810) read$midi(r2, 0x0, 0x0) ioctl$SNDCTL_SEQ_PANIC(r3, 0x5111) 516.293571ms ago: executing program 2 (id=3332): socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x1000000000a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x80, 0xa) r1 = syz_open_dev$admmidi(&(0x7f0000000140), 0x2, 0x2002) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f0000000040)={0x1, 0x100000008a, 0x3, 0x1, 0x10001000}) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) read$midi(r1, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0xd, 0x8204, 0x8000, 0x100, 0x0}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000300)={r3, 0x4, 0xe8, "f526aaa795ca6b8ea4a9fa0736c943703124a33185f9a0778a2958c22a3dfec09d440eac4342088b684a7ebaaf6a965f5e0d3ff5540faa7638307ed142f222ac75ea3fd6051e9ae5cac73552bdcbbfa44bbe0a3793d0465a3ccb890ecdba212a2cdd9e5d182b299c5042163ccca26d2f243f1d71a075475d1e0b05dcd10288803fc9c25f5d10791b665e430caab16d01e823d89adecff7285f4e5c40da96321e3e4cd870bf48fc86bdd4fdba29d92a915954d5fb0034b69a34f3b75a9bf77aa2c8b5720ce0c8a0d944a3c5cf96be44ee54c10c32d5b21eab8b340c9b0dff463c75eb704fcd1c47f5"}, 0xf0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x14e203, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r4, 0x28, 0x1, &(0x7f0000000040)=0x7, 0x8) ioctl$SNDCTL_SEQ_PANIC(r2, 0x5111) 452.035909ms ago: executing program 1 (id=3333): r0 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x40, 0x8000828, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000240)=@newtaction={0x18, 0x30, 0x53b, 0xfffffffd, 0x25dfdbff, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4060040}, 0x10) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') bind$unix(r6, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) bind$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x224031, 0xffffffffffffffff, 0x42795000) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) syz_open_dev$sndpcmp(0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/shm\x00', 0x0, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x2, &(0x7f0000000180)=[{0x6, 0x24, 0x0, 0x7fff7ffc}, {0x1, 0x0, 0x2, 0xd66}]}) close_range(r7, 0xffffffffffffffff, 0x0) 12.568657ms ago: executing program 2 (id=3334): r0 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x40, 0x8000828, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000240)=@newtaction={0x18, 0x30, 0x53b, 0xfffffffd, 0x25dfdbff, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4060040}, 0x10) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') bind$unix(r6, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) bind$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x224031, 0xffffffffffffffff, 0x42795000) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) syz_open_dev$sndpcmp(0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/shm\x00', 0x0, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x2, &(0x7f0000000180)=[{0x6, 0x24, 0x0, 0x7fff7ffc}, {0x1, 0x0, 0x2, 0xd66}]}) close_range(r7, 0xffffffffffffffff, 0x0) 0s ago: executing program 0 (id=3335): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000600), 0xfec8) recvmmsg(r1, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0xc8}], 0x1, 0x0, 0x0, 0x2000000}}], 0x1, 0xcb, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r2) r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000f2303920422c021240850102030109022400010000100009040c0202c17f0c00090502020002020000090582020002"], 0x0) syz_usb_control_io$lan78xx(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000340)={0x20, 0x31, 0x1, 'D'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r3, 0x0, &(0x7f0000000b80)={0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) kernel console output (not intermixed with test programs): VLAN 0 to HW filter on device eth3 [ 998.555373][T15254] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2790'. [ 998.769152][ T5604] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 998.777782][T12484] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 998.929380][ T5844] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 999.419173][T12484] usb 5-1: Using ep0 maxpacket: 32 [ 999.469927][T12484] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 999.469951][T12484] usb 5-1: config 0 has no interface number 0 [ 999.469978][T12484] usb 5-1: config 0 interface 12 has no altsetting 0 [ 999.509750][ T5604] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 999.528395][ T5604] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 999.529068][T12484] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 999.529095][T12484] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 999.529116][T12484] usb 5-1: Product: syz [ 999.529130][T12484] usb 5-1: Manufacturer: syz [ 999.529144][T12484] usb 5-1: SerialNumber: syz [ 999.553111][ T5604] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 999.555462][ T5604] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 999.720187][ T5844] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 999.720233][ T5844] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 999.720258][ T5844] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 999.720281][ T5844] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 999.720323][ T5844] usb 1-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 999.720345][ T5844] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 999.886837][T12484] usb 5-1: config 0 descriptor?? [ 999.945862][ T5844] usb 1-1: config 0 descriptor?? [ 1001.648512][ T5844] usbhid 1-1:0.0: can't add hid device: -71 [ 1001.658818][ T5844] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1001.675321][T12484] f81534 5-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 1001.675352][T12484] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 1001.675361][T12484] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1001.675418][T12484] f81534 5-1:0.12: probe with driver f81534 failed with error -71 [ 1001.768920][ T5256] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1001.807248][T12484] usb 5-1: USB disconnect, device number 78 [ 1001.840459][ T5844] usb 1-1: USB disconnect, device number 71 [ 1002.231132][T11682] Bluetooth: hci4: command tx timeout [ 1002.406367][ T5844] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 1002.564916][ T7242] IPVS: stop unused estimator thread 0... [ 1002.610243][ T5844] usb 1-1: Using ep0 maxpacket: 32 [ 1002.612021][ T5844] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 1002.612047][ T5844] usb 1-1: config 0 has no interface number 0 [ 1002.612093][ T5844] usb 1-1: config 0 interface 12 has no altsetting 0 [ 1002.614424][ T5844] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1002.614452][ T5844] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1002.614473][ T5844] usb 1-1: Product: syz [ 1002.614488][ T5844] usb 1-1: Manufacturer: syz [ 1002.614503][ T5844] usb 1-1: SerialNumber: syz [ 1002.704168][ T5844] usb 1-1: config 0 descriptor?? [ 1002.897472][T15296] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2796'. [ 1003.261949][ T822] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 1003.494344][ T822] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 1003.494953][ T822] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1003.495174][ T822] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1003.495370][ T822] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 1003.495990][ T822] usb 5-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 1003.496285][ T822] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1003.713242][ T822] usb 5-1: config 0 descriptor?? [ 1004.492993][T11682] Bluetooth: hci4: command tx timeout [ 1004.697517][ T5844] f81534 1-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 1004.697628][ T5844] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 1004.697647][ T5844] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1004.697788][ T5844] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 1004.752793][ T5844] usb 1-1: USB disconnect, device number 72 [ 1005.689449][T12468] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 1005.925844][T12468] usb 2-1: Using ep0 maxpacket: 32 [ 1005.935899][T12468] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1005.938192][T12468] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1005.940605][T12468] usb 2-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 1005.940631][T12468] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1005.940657][T12468] usb 2-1: Product: syz [ 1005.940671][T12468] usb 2-1: Manufacturer: syz [ 1005.940685][T12468] usb 2-1: SerialNumber: syz [ 1006.024490][ T822] usbhid 5-1:0.0: can't add hid device: -71 [ 1006.024602][ T822] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1006.052368][ T822] usb 5-1: USB disconnect, device number 79 [ 1006.056496][T15352] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2805'. [ 1006.194569][ T36] audit: type=1326 audit(1783683360.906:2097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15333 comm="syz.1.2802" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5467c2de59 code=0x0 [ 1006.748010][T11682] Bluetooth: hci4: command tx timeout [ 1008.483881][T15371] netlink: 'syz.0.2808': attribute type 2 has an invalid length. [ 1008.957965][ T822] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 1009.001406][T11682] Bluetooth: hci4: command tx timeout [ 1009.079067][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 1009.079151][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 1009.131256][ T822] usb 1-1: Using ep0 maxpacket: 16 [ 1009.184928][ T822] usb 1-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 1009.184957][ T822] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1009.184978][ T822] usb 1-1: Product: syz [ 1009.186816][ T822] usb 1-1: Manufacturer: syz [ 1009.186836][ T822] usb 1-1: SerialNumber: syz [ 1009.312327][ T822] usb 1-1: config 0 descriptor?? [ 1009.395858][ T822] ssu100 1-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 1009.853215][ T822] ssu100 1-1:0.0: probe with driver ssu100 failed with error -110 [ 1009.972129][T12468] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1009.972185][T12468] usb 2-1: MIDIStreaming interface descriptor not found [ 1011.117733][T15415] sg_write: data in/out 28/14 bytes for SCSI command 0x0-- guessing data in; [ 1011.117733][T15415] program syz.1.2812 not setting count and/or reply_len properly [ 1011.279002][T10186] usb 1-1: USB disconnect, device number 73 [ 1011.429675][T12468] usb 2-1: USB disconnect, device number 70 [ 1013.173209][T10186] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 1013.321732][T10186] usb 3-1: device descriptor read/64, error -71 [ 1018.153414][T15457] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2823'. [ 1019.250567][T15452] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2823'. [ 1019.250591][T15452] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2823'. [ 1019.327888][T15238] bridge0: port 1(bridge_slave_0) entered blocking state [ 1019.328011][T15238] bridge0: port 1(bridge_slave_0) entered disabled state [ 1019.328248][T15238] bridge_slave_0: entered allmulticast mode [ 1019.372230][T15238] bridge_slave_0: entered promiscuous mode [ 1019.529521][ T5736] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 1019.530914][T15457] ip6gre1: entered promiscuous mode [ 1019.530939][T15457] ip6gre1: entered allmulticast mode [ 1019.531907][T15477] futex_wake_op: syz.4.2826 tries to shift op by 32; fix this program [ 1019.681740][T15238] bridge0: port 2(bridge_slave_1) entered blocking state [ 1019.681947][T15238] bridge0: port 2(bridge_slave_1) entered disabled state [ 1019.682168][T15238] bridge_slave_1: entered allmulticast mode [ 1019.688001][T15238] bridge_slave_1: entered promiscuous mode [ 1019.691983][ T5736] usb 1-1: Using ep0 maxpacket: 16 [ 1019.733054][ T5736] usb 1-1: config index 0 descriptor too short (expected 51443, got 18) [ 1019.753216][ T5736] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1019.753247][ T5736] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1019.753267][ T5736] usb 1-1: Product: syz [ 1019.753282][ T5736] usb 1-1: Manufacturer: syz [ 1019.753296][ T5736] usb 1-1: SerialNumber: syz [ 1019.776488][ T5736] r8152-cfgselector 1-1: Unknown version 0x0000 [ 1019.776515][ T5736] r8152-cfgselector 1-1: config 0 descriptor?? [ 1019.882465][T15238] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1019.885831][T15238] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1020.261625][ T5844] r8152-cfgselector 1-1: USB disconnect, device number 74 [ 1020.529688][T15238] team0: Port device team_slave_0 added [ 1020.533001][T15238] team0: Port device team_slave_1 added [ 1021.263493][T15238] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1021.263511][T15238] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1021.263541][T15238] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1021.326799][T15238] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1021.326816][T15238] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1021.326838][T15238] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1021.517301][ T5844] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 1021.685898][ T5844] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1021.685947][ T5844] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1021.688182][ T5844] usb 3-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 1021.688210][ T5844] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1021.688230][ T5844] usb 3-1: Product: syz [ 1021.688245][ T5844] usb 3-1: Manufacturer: syz [ 1021.688261][ T5844] usb 3-1: SerialNumber: syz [ 1021.757402][ T5844] usb 3-1: config 0 descriptor?? [ 1021.798021][ T5844] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 1021.937786][T15238] hsr_slave_0: entered promiscuous mode [ 1021.955016][ T5844] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1021.956514][ T5844] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 1021.956618][ T5844] usb 3-1: media controller created [ 1021.961639][T15238] hsr_slave_1: entered promiscuous mode [ 1021.964595][T15238] debugfs: 'hsr0' already exists in 'hsr' [ 1021.964621][T15238] Cannot create hsr debugfs directory [ 1022.070652][ T5844] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1022.220979][ T5844] DVB: Unable to find symbol tda10046_attach() [ 1022.220996][ T5844] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 1022.221112][ T5844] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 1022.993139][ T5844] dvb_usb_m920x 3-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 1023.421444][ T5844] usb 3-1: USB disconnect, device number 69 [ 1024.478407][ T5844] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 1024.612668][ T5844] usb 1-1: device descriptor read/64, error -71 [ 1024.861948][ T5844] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 1024.999040][ T5844] usb 1-1: device descriptor read/64, error -71 [ 1025.119186][ T5844] usb usb1-port1: attempt power cycle [ 1026.347616][ T7242] bridge_slave_1: left allmulticast mode [ 1026.347645][ T7242] bridge_slave_1: left promiscuous mode [ 1026.347850][ T7242] bridge0: port 2(bridge_slave_1) entered disabled state [ 1026.399209][ T5844] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 1026.420929][ T5844] usb 1-1: device descriptor read/8, error -71 [ 1026.451146][T15570] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2848'. [ 1026.451163][T15570] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2848'. [ 1026.703194][ T5844] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 1026.739806][ T5844] usb 1-1: device descriptor read/8, error -71 [ 1026.865374][T12484] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 1026.866617][ T5844] usb usb1-port1: unable to enumerate USB device [ 1027.078840][T12484] usb 5-1: Using ep0 maxpacket: 8 [ 1027.178827][T12484] usb 5-1: config 6 has an invalid interface number: 238 but max is 2 [ 1027.179556][T12484] usb 5-1: config 6 has an invalid interface number: 222 but max is 2 [ 1027.180040][T12484] usb 5-1: config 6 has an invalid interface number: 240 but max is 2 [ 1027.180910][T12484] usb 5-1: config 6 has no interface number 0 [ 1027.181182][T12484] usb 5-1: config 6 has no interface number 1 [ 1027.181245][T12484] usb 5-1: config 6 has no interface number 2 [ 1027.242671][T12484] usb 5-1: config 6 interface 238 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 1027.242800][T12484] usb 5-1: config 6 interface 240 altsetting 8 has a duplicate endpoint with address 0x87, skipping [ 1027.242848][T12484] usb 5-1: config 6 interface 238 has no altsetting 0 [ 1027.242899][T12484] usb 5-1: config 6 interface 222 has no altsetting 0 [ 1027.242951][T12484] usb 5-1: config 6 interface 240 has no altsetting 0 [ 1027.391086][T12484] usb 5-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=b1.1b [ 1027.391127][T12484] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1027.391181][T12484] usb 5-1: Product: ␁ [ 1027.391197][T12484] usb 5-1: Manufacturer: 뛅戗种㈺섳셰闵锠¥㈎蒬ǦꙒ㋦㮠勇삎徖㤞梒ѩꅝܫ窺䑽骍鰁椘 [ 1027.391253][T12484] usb 5-1: SerialNumber: 䐊 [ 1027.525173][ T7242] bridge_slave_0: left allmulticast mode [ 1027.525209][ T7242] bridge_slave_0: left promiscuous mode [ 1027.525449][ T7242] bridge0: port 1(bridge_slave_0) entered disabled state [ 1027.859216][T12484] usb 5-1: No union descriptors [ 1027.910910][T12484] usb 5-1: USB disconnect, device number 80 [ 1028.095246][T12824] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 1028.307720][T12824] usb 1-1: Using ep0 maxpacket: 16 [ 1028.309995][T12824] usb 1-1: config index 0 descriptor too short (expected 51443, got 18) [ 1028.315179][T12824] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1028.315209][T12824] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1028.315221][T12824] usb 1-1: Product: syz [ 1028.315228][T12824] usb 1-1: Manufacturer: syz [ 1028.315236][T12824] usb 1-1: SerialNumber: syz [ 1028.368100][T12824] r8152-cfgselector 1-1: Unknown version 0x0000 [ 1028.368126][T12824] r8152-cfgselector 1-1: config 0 descriptor?? [ 1028.601716][T15585] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2853'. [ 1028.918928][T15589] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2854'. [ 1029.408142][ T7242] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1029.472054][ T7242] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1029.516347][ T7242] bond0 (unregistering): Released all slaves [ 1029.553656][T15584] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 1029.559409][T12824] r8152-cfgselector 1-1: USB disconnect, device number 79 [ 1030.220478][T15600] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2855'. [ 1030.612269][T15600] ip6gre0: Master is either lo or non-ether device [ 1033.667098][T15626] FAULT_INJECTION: forcing a failure. [ 1033.667098][T15626] name failslab, interval 1, probability 0, space 0, times 0 [ 1033.667175][T15626] CPU: 0 UID: 0 PID: 15626 Comm: syz.4.2865 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1033.667204][T15626] Tainted: [L]=SOFTLOCKUP [ 1033.667211][T15626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1033.667223][T15626] Call Trace: [ 1033.667231][T15626] [ 1033.667241][T15626] dump_stack_lvl+0xe8/0x150 [ 1033.667280][T15626] should_fail_ex+0x467/0x600 [ 1033.667312][T15626] should_failslab+0xa8/0x100 [ 1033.667336][T15626] kmem_cache_alloc_noprof+0xa4/0x650 [ 1033.667359][T15626] ? vm_area_alloc+0x24/0x140 [ 1033.667376][T15626] ? vm_area_alloc+0x24/0x140 [ 1033.667402][T15626] vm_area_alloc+0x24/0x140 [ 1033.667424][T15626] create_init_stack_vma+0x1bd/0x9b0 [ 1033.667542][T15626] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1033.667580][T15626] ? __pfx_create_init_stack_vma+0x10/0x10 [ 1033.667610][T15626] ? rt_spin_unlock+0x157/0x200 [ 1033.667635][T15626] ? rt_spin_unlock+0x163/0x200 [ 1033.667658][T15626] alloc_bprm+0x50c/0x640 [ 1033.667683][T15626] do_execveat_common+0x172/0x670 [ 1033.667712][T15626] __x64_sys_execveat+0xc7/0xf0 [ 1033.667734][T15626] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1033.667756][T15626] do_syscall_64+0x174/0x580 [ 1033.667782][T15626] ? clear_bhb_loop+0x40/0x90 [ 1033.667802][T15626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1033.667819][T15626] RIP: 0033:0x7f7c3f4ade59 [ 1033.667847][T15626] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1033.667862][T15626] RSP: 002b:00007f7c3d706028 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 1033.667883][T15626] RAX: ffffffffffffffda RBX: 00007f7c3f735fa0 RCX: 00007f7c3f4ade59 [ 1033.667897][T15626] RDX: 0000000000000000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 1033.667910][T15626] RBP: 00007f7c3d706090 R08: 0000000000000000 R09: 0000000000000000 [ 1033.667922][T15626] R10: 0000200000000440 R11: 0000000000000246 R12: 0000000000000001 [ 1033.667934][T15626] R13: 00007f7c3f736038 R14: 00007f7c3f735fa0 R15: 00007fffcd0223f8 [ 1033.667964][T15626] [ 1034.259707][T15638] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2867'. [ 1036.512472][T15663] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2871'. [ 1036.986051][ T822] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 1037.216862][ T822] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 1037.216943][ T822] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1037.217021][ T822] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1037.217100][ T822] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 1037.217334][ T822] usb 1-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 1037.217406][ T822] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1037.937356][ T822] usb 1-1: config 0 descriptor?? [ 1038.074632][ T7242] hsr_slave_0: left promiscuous mode [ 1038.133110][ T7242] hsr_slave_1: left promiscuous mode [ 1038.134619][ T7242] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1038.167582][ T7242] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1038.522458][T15681] futex_wake_op: syz.2.2875 tries to shift op by 32; fix this program [ 1038.541834][T15680] FAULT_INJECTION: forcing a failure. [ 1038.541834][T15680] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1038.541869][T15680] CPU: 0 UID: 0 PID: 15680 Comm: syz.4.2877 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1038.541896][T15680] Tainted: [L]=SOFTLOCKUP [ 1038.541902][T15680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1038.541914][T15680] Call Trace: [ 1038.541922][T15680] [ 1038.541930][T15680] dump_stack_lvl+0xe8/0x150 [ 1038.541963][T15680] should_fail_ex+0x467/0x600 [ 1038.541997][T15680] _copy_from_iter+0x1d3/0x1660 [ 1038.542113][T15680] ? __pfx__copy_from_iter+0x10/0x10 [ 1038.542139][T15680] ? smack_socket_sendmsg+0x1a9/0x590 [ 1038.542163][T15680] ? __pfx_smack_socket_sendmsg+0x10/0x10 [ 1038.542186][T15680] ? skb_put+0x112/0x210 [ 1038.542217][T15680] hci_sock_sendmsg+0x42a/0xf50 [ 1038.542312][T15680] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 1038.542338][T15680] ? get_pid_task+0x20/0x1f0 [ 1038.542397][T15680] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 1038.542414][T15680] sock_sendmsg_nosec+0x13a/0x180 [ 1038.542435][T15680] sock_write_iter+0x2e4/0x3f0 [ 1038.542453][T15680] ? __pfx_sock_write_iter+0x10/0x10 [ 1038.542475][T15680] ? bpf_lsm_file_permission+0x9/0x20 [ 1038.542497][T15680] ? security_file_permission+0x75/0x260 [ 1038.542519][T15680] vfs_write+0x61e/0xbb0 [ 1038.542545][T15680] ? __pfx_vfs_write+0x10/0x10 [ 1038.542568][T15680] ? __fget_files+0x2a/0x420 [ 1038.542588][T15680] ksys_write+0x156/0x270 [ 1038.542604][T15680] ? __pfx_ksys_write+0x10/0x10 [ 1038.542625][T15680] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1038.542640][T15680] do_syscall_64+0x174/0x580 [ 1038.542659][T15680] ? trace_irq_disable+0x3b/0x140 [ 1038.542680][T15680] ? clear_bhb_loop+0x40/0x90 [ 1038.542700][T15680] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1038.542715][T15680] RIP: 0033:0x7f7c3f4ade59 [ 1038.542730][T15680] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1038.542743][T15680] RSP: 002b:00007f7c3d706028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1038.542760][T15680] RAX: ffffffffffffffda RBX: 00007f7c3f735fa0 RCX: 00007f7c3f4ade59 [ 1038.542771][T15680] RDX: 000000000000000d RSI: 0000200000000000 RDI: 0000000000000004 [ 1038.542780][T15680] RBP: 00007f7c3d706090 R08: 0000000000000000 R09: 0000000000000000 [ 1038.542789][T15680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1038.542799][T15680] R13: 00007f7c3f736038 R14: 00007f7c3f735fa0 R15: 00007fffcd0223f8 [ 1038.542826][T15680] [ 1038.750840][T15690] dlm: no locking on control device [ 1039.716721][ T822] usbhid 1-1:0.0: can't add hid device: -71 [ 1039.717185][ T822] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1039.948871][ T822] usb 1-1: USB disconnect, device number 80 [ 1041.407620][ T5736] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 1041.424196][T15710] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2884'. [ 1041.569903][ T5736] usb 3-1: Using ep0 maxpacket: 8 [ 1041.587546][ T5736] usb 3-1: config 6 has an invalid interface number: 238 but max is 2 [ 1041.587575][ T5736] usb 3-1: config 6 has an invalid interface number: 222 but max is 2 [ 1041.587598][ T5736] usb 3-1: config 6 has an invalid interface number: 240 but max is 2 [ 1041.587668][ T5736] usb 3-1: config 6 has no interface number 0 [ 1041.587686][ T5736] usb 3-1: config 6 has no interface number 1 [ 1041.587718][ T5736] usb 3-1: config 6 has no interface number 2 [ 1041.587760][ T5736] usb 3-1: config 6 interface 238 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 1041.587789][ T5736] usb 3-1: config 6 interface 240 altsetting 8 has a duplicate endpoint with address 0x87, skipping [ 1041.587802][ T5736] usb 3-1: config 6 interface 238 has no altsetting 0 [ 1041.587812][ T5736] usb 3-1: config 6 interface 222 has no altsetting 0 [ 1041.587822][ T5736] usb 3-1: config 6 interface 240 has no altsetting 0 [ 1041.590392][ T5736] usb 3-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=b1.1b [ 1041.590419][ T5736] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1041.590440][ T5736] usb 3-1: Product: ␁ [ 1041.590453][ T5736] usb 3-1: Manufacturer: 뛅戗种㈺섳셰闵锠¥㈎蒬ǦꙒ㋦㮠勇삎徖㤞梒ѩꅝܫ窺䑽骍鰁椘 [ 1041.590466][ T5736] usb 3-1: SerialNumber: 䐊 [ 1041.733646][ T7242] team0 (unregistering): Port device team_slave_1 removed [ 1041.788295][ T7242] team0 (unregistering): Port device team_slave_0 removed [ 1041.931030][ T5736] usb 3-1: No union descriptors [ 1041.946242][ T5736] usb 3-1: USB disconnect, device number 70 [ 1042.128375][ T5256] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1042.641926][T10186] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 1042.890288][T10186] usb 1-1: device descriptor read/64, error -71 [ 1042.890400][ T5736] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 1043.152802][T10186] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 1043.313266][T10186] usb 1-1: device descriptor read/64, error -71 [ 1043.433429][T10186] usb usb1-port1: attempt power cycle [ 1044.105358][T10186] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 1044.142307][T10186] usb 1-1: device descriptor read/8, error -71 [ 1044.143455][ T5736] usb 3-1: Using ep0 maxpacket: 32 [ 1044.401036][ T5736] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 1044.401113][ T5736] usb 3-1: config 0 has no interface number 0 [ 1044.401436][ T5736] usb 3-1: config 0 interface 12 has no altsetting 0 [ 1044.523374][ T5736] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1044.523405][ T5736] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1044.523428][ T5736] usb 3-1: Product: syz [ 1044.523443][ T5736] usb 3-1: Manufacturer: syz [ 1044.523458][ T5736] usb 3-1: SerialNumber: syz [ 1044.547728][T10186] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 1044.570366][T10186] usb 1-1: device descriptor read/8, error -71 [ 1044.608349][ T5736] usb 3-1: config 0 descriptor?? [ 1044.690966][T10186] usb usb1-port1: unable to enumerate USB device [ 1046.001281][T10186] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 1046.136839][ T5736] f81534 3-1:0.12: f81534_set_register: reg: 1003 data: 40 failed: -71 [ 1046.136895][ T5736] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 1046.136913][ T5736] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1046.136997][ T5736] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 1046.193937][T10186] usb 5-1: Using ep0 maxpacket: 32 [ 1046.196074][T10186] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 1046.196101][T10186] usb 5-1: config 0 has no interface number 0 [ 1046.196161][T10186] usb 5-1: config 0 interface 12 has no altsetting 0 [ 1046.297907][T10186] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1046.297939][T10186] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1046.297960][T10186] usb 5-1: Product: syz [ 1046.297975][T10186] usb 5-1: Manufacturer: syz [ 1046.297989][T10186] usb 5-1: SerialNumber: syz [ 1046.387600][T10186] usb 5-1: config 0 descriptor?? [ 1046.407008][ T5736] usb 3-1: USB disconnect, device number 71 [ 1046.976081][ T5736] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 1047.136051][ T5736] usb 2-1: Using ep0 maxpacket: 8 [ 1047.146103][ T5736] usb 2-1: config 6 has an invalid interface number: 238 but max is 2 [ 1047.146131][ T5736] usb 2-1: config 6 has an invalid interface number: 222 but max is 2 [ 1047.146153][ T5736] usb 2-1: config 6 has an invalid interface number: 240 but max is 2 [ 1047.146173][ T5736] usb 2-1: config 6 has no interface number 0 [ 1047.146190][ T5736] usb 2-1: config 6 has no interface number 1 [ 1047.146207][ T5736] usb 2-1: config 6 has no interface number 2 [ 1047.146272][ T5736] usb 2-1: config 6 interface 238 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 1047.146323][ T5736] usb 2-1: config 6 interface 240 altsetting 8 has a duplicate endpoint with address 0x87, skipping [ 1047.146347][ T5736] usb 2-1: config 6 interface 238 has no altsetting 0 [ 1047.146365][ T5736] usb 2-1: config 6 interface 222 has no altsetting 0 [ 1047.146384][ T5736] usb 2-1: config 6 interface 240 has no altsetting 0 [ 1047.162863][ T5736] usb 2-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=b1.1b [ 1047.162893][ T5736] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1047.162913][ T5736] usb 2-1: Product: ␁ [ 1047.162927][ T5736] usb 2-1: Manufacturer: 뛅戗种㈺섳셰闵锠¥㈎蒬ǦꙒ㋦㮠勇삎徖㤞梒ѩꅝܫ窺䑽骍鰁椘 [ 1047.162945][ T5736] usb 2-1: SerialNumber: 䐊 [ 1047.600543][ T5736] usb 2-1: No union descriptors [ 1047.639797][ T5736] usb 2-1: USB disconnect, device number 71 [ 1047.787306][T10186] f81534 5-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 1047.787357][T10186] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 1047.787375][T10186] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1047.787468][T10186] f81534 5-1:0.12: probe with driver f81534 failed with error -71 [ 1047.842031][T10186] usb 5-1: USB disconnect, device number 81 [ 1047.975267][T15238] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1048.022155][T15238] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1048.023124][T15238] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1048.088257][T15238] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1048.099576][T15238] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1048.350014][T15238] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1048.351556][T15238] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1050.650654][T15238] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1050.832022][T15822] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2904'. [ 1051.978341][ T822] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 1052.041323][T15238] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1052.111057][T15238] 8021q: adding VLAN 0 to HW filter on device team0 [ 1052.129513][T12824] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 1052.136320][ T5994] bridge0: port 1(bridge_slave_0) entered blocking state [ 1052.136526][ T5994] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1052.161831][ T822] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 1052.161878][ T822] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1052.161908][ T822] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1052.161932][ T822] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 1052.161972][ T822] usb 5-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 1052.161993][ T822] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1052.244176][ T822] usb 5-1: config 0 descriptor?? [ 1052.281004][T12824] usb 2-1: device descriptor read/64, error -71 [ 1052.282579][ T5994] bridge0: port 2(bridge_slave_1) entered blocking state [ 1052.284192][ T5994] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1052.574688][T12824] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 1052.736721][T12824] usb 2-1: device descriptor read/64, error -71 [ 1052.855724][T12824] usb usb2-port1: attempt power cycle [ 1054.173045][T12824] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 1054.461424][ T822] usbhid 5-1:0.0: can't add hid device: -71 [ 1054.551855][ T822] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1054.579769][ T822] usb 5-1: USB disconnect, device number 82 [ 1054.685664][T12824] usb 2-1: device not accepting address 74, error -71 [ 1055.118614][T15891] futex_wake_op: syz.0.2920 tries to shift op by 32; fix this program [ 1055.172997][ T822] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 1055.195245][T12484] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 1055.262715][T15238] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1055.348506][ T822] usb 5-1: Using ep0 maxpacket: 16 [ 1055.351105][ T822] usb 5-1: config index 0 descriptor too short (expected 51443, got 18) [ 1055.355319][ T822] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1055.355349][ T822] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1055.355369][ T822] usb 5-1: Product: syz [ 1055.355384][ T822] usb 5-1: Manufacturer: syz [ 1055.355397][ T822] usb 5-1: SerialNumber: syz [ 1055.389531][T12484] usb 3-1: Using ep0 maxpacket: 16 [ 1055.415390][T12484] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 1055.415421][T12484] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1055.415442][T12484] usb 3-1: Product: syz [ 1055.415456][T12484] usb 3-1: Manufacturer: syz [ 1055.415471][T12484] usb 3-1: SerialNumber: syz [ 1055.456042][ T822] r8152-cfgselector 5-1: Unknown version 0x0000 [ 1055.456066][ T822] r8152-cfgselector 5-1: config 0 descriptor?? [ 1055.464820][T12484] usb 3-1: config 0 descriptor?? [ 1055.506591][T12484] ssu100 3-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 1055.862073][T12484] ssu100 3-1:0.0: probe with driver ssu100 failed with error -110 [ 1055.979342][T12484] r8152-cfgselector 5-1: USB disconnect, device number 83 [ 1056.198645][T15238] veth0_vlan: entered promiscuous mode [ 1056.217520][T15238] veth1_vlan: entered promiscuous mode [ 1056.325688][T15238] veth0_macvtap: entered promiscuous mode [ 1056.364208][T15238] veth1_macvtap: entered promiscuous mode [ 1056.410898][T15238] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1056.425125][T15238] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1056.440387][ T5736] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 1056.467102][ T14] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1056.468154][ T14] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1056.468395][ T14] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1056.468434][ T14] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1056.641608][ T5736] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1056.642734][ T5736] usb 1-1: config 1 has an invalid interface descriptor of length 5, skipping [ 1056.642759][ T5736] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1056.642781][ T5736] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1056.642825][ T5736] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1056.668998][ T5736] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1056.669030][ T5736] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1056.669051][ T5736] usb 1-1: Product: syz [ 1056.669063][ T5736] usb 1-1: Manufacturer: syz [ 1056.669077][ T5736] usb 1-1: SerialNumber: syz [ 1057.121683][ T5736] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 1057.121730][ T5736] cdc_ncm 1-1:1.0: bind() failure [ 1057.225800][ T5736] usb 1-1: USB disconnect, device number 85 [ 1057.550569][T15929] sg_write: data in/out 28/14 bytes for SCSI command 0x0-- guessing data in; [ 1057.550569][T15929] program syz.1.2924 not setting count and/or reply_len properly [ 1058.423911][T12437] usb 3-1: USB disconnect, device number 72 [ 1059.519407][T15947] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1059.729663][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1059.729684][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1062.497672][ T5604] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1062.554764][ T5604] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1062.577744][ T5604] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1062.623106][ T5604] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1062.651156][ T5604] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1064.528097][T15976] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1065.040844][T12484] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 1065.269706][T12484] usb 5-1: Using ep0 maxpacket: 16 [ 1065.491798][T12484] usb 5-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 1065.491864][T12484] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1065.492338][T12484] usb 5-1: Product: syz [ 1065.492389][T12484] usb 5-1: Manufacturer: syz [ 1065.492438][T12484] usb 5-1: SerialNumber: syz [ 1065.831219][T12484] usb 5-1: config 0 descriptor?? [ 1065.896719][T11682] Bluetooth: hci5: command tx timeout [ 1065.968154][T12484] ssu100 5-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 1066.243260][T16008] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2940'. [ 1066.523304][T12484] ssu100 5-1:0.0: probe with driver ssu100 failed with error -110 [ 1067.506717][T12824] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 1067.838774][T12824] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 1067.844437][T12824] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1067.844532][T12824] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1067.844645][T12824] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 1067.844936][T12824] usb 2-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 1067.845021][T12824] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1067.967927][T12824] usb 2-1: config 0 descriptor?? [ 1068.100640][ T5736] usb 5-1: USB disconnect, device number 84 [ 1068.176999][T11682] Bluetooth: hci5: command tx timeout [ 1068.887344][ T5736] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 1069.049159][ T5736] usb 1-1: Using ep0 maxpacket: 32 [ 1069.051652][ T5736] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 1069.051678][ T5736] usb 1-1: config 0 has no interface number 0 [ 1069.051722][ T5736] usb 1-1: config 0 interface 12 has no altsetting 0 [ 1069.054749][ T5736] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1069.054777][ T5736] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1069.054808][ T5736] usb 1-1: Product: syz [ 1069.054831][ T5736] usb 1-1: Manufacturer: syz [ 1069.054846][ T5736] usb 1-1: SerialNumber: syz [ 1069.134157][ T5736] usb 1-1: config 0 descriptor?? [ 1069.428800][T16042] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2948'. [ 1069.600090][T12824] usbhid 2-1:0.0: can't add hid device: -71 [ 1069.600209][T12824] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1069.698322][T12824] usb 2-1: USB disconnect, device number 76 [ 1071.000347][ T5604] Bluetooth: hci5: command tx timeout [ 1071.290574][ T5736] f81534 1-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 1071.290624][ T5736] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 1071.291027][ T5736] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1071.291118][ T5736] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 1071.347377][ T5736] usb 1-1: USB disconnect, device number 86 [ 1071.590724][ T7666] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1071.665481][T16041] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 1071.734955][T12824] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 1071.886655][T12437] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 1071.908173][T12824] usb 2-1: Using ep0 maxpacket: 16 [ 1071.914084][T12824] usb 2-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 1071.914101][T12824] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1071.914112][T12824] usb 2-1: Product: syz [ 1071.914120][T12824] usb 2-1: Manufacturer: syz [ 1071.914128][T12824] usb 2-1: SerialNumber: syz [ 1071.918116][T12824] usb 2-1: config 0 descriptor?? [ 1071.924679][T12824] ssu100 2-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 1072.060519][T12437] usb 3-1: Using ep0 maxpacket: 16 [ 1072.067934][T12437] usb 3-1: config index 0 descriptor too short (expected 51443, got 18) [ 1072.075283][T12437] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1072.075313][T12437] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1072.075333][T12437] usb 3-1: Product: syz [ 1072.075395][T12437] usb 3-1: Manufacturer: syz [ 1072.075409][T12437] usb 3-1: SerialNumber: syz [ 1072.098627][T12437] r8152-cfgselector 3-1: Unknown version 0x0000 [ 1072.098658][T12437] r8152-cfgselector 3-1: config 0 descriptor?? [ 1072.266018][T12824] ssu100 2-1:0.0: probe with driver ssu100 failed with error -110 [ 1072.501891][ T7666] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1072.574097][T12437] r8152-cfgselector 3-1: USB disconnect, device number 73 [ 1072.836771][T16085] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2958'. [ 1073.041235][ T7666] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1073.175559][ T5604] Bluetooth: hci5: command tx timeout [ 1074.682173][T16100] sg_write: data in/out 28/14 bytes for SCSI command 0x0-- guessing data in; [ 1074.682173][T16100] program syz.0.2960 not setting count and/or reply_len properly [ 1075.390259][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 1075.390326][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 1075.475804][T10186] usb 2-1: USB disconnect, device number 77 [ 1076.536246][T16112] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2963'. [ 1076.625716][ T7666] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1077.164372][T16106] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 1077.884966][T16137] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2970'. [ 1078.130874][T12437] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 1078.863038][T16136] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2969'. [ 1078.916461][T12437] usb 5-1: Using ep0 maxpacket: 16 [ 1078.918521][T12437] usb 5-1: config index 0 descriptor too short (expected 51443, got 18) [ 1078.922228][T12437] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1078.922247][T12437] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1078.922257][T12437] usb 5-1: Product: syz [ 1078.922265][T12437] usb 5-1: Manufacturer: syz [ 1078.922273][T12437] usb 5-1: SerialNumber: syz [ 1078.975660][T15962] bridge0: port 1(bridge_slave_0) entered blocking state [ 1078.975800][T15962] bridge0: port 1(bridge_slave_0) entered disabled state [ 1078.976014][T15962] bridge_slave_0: entered allmulticast mode [ 1079.002192][T12437] r8152-cfgselector 5-1: Unknown version 0x0000 [ 1079.002207][T12437] r8152-cfgselector 5-1: config 0 descriptor?? [ 1079.024804][T12484] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 1079.044172][T15962] bridge_slave_0: entered promiscuous mode [ 1079.094709][T16134] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 1079.289334][T12484] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 1079.289384][T12484] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1079.289409][T12484] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1079.289431][T12484] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 1079.289473][T12484] usb 2-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 1079.289494][T12484] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1079.302281][T12484] usb 2-1: config 0 descriptor?? [ 1079.428293][T15962] bridge0: port 2(bridge_slave_1) entered blocking state [ 1079.428435][T15962] bridge0: port 2(bridge_slave_1) entered disabled state [ 1079.428661][T15962] bridge_slave_1: entered allmulticast mode [ 1079.444685][T15962] bridge_slave_1: entered promiscuous mode [ 1079.515729][T10186] r8152-cfgselector 5-1: USB disconnect, device number 85 [ 1080.589723][T16152] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1080.596432][T16152] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1080.758813][T15962] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1080.785709][T15962] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1081.156591][T12484] usbhid 2-1:0.0: can't add hid device: -71 [ 1081.156713][T12484] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1081.174748][T12484] usb 2-1: USB disconnect, device number 78 [ 1081.342192][T15962] team0: Port device team_slave_0 added [ 1081.461707][T15962] team0: Port device team_slave_1 added [ 1082.325162][T12484] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 1082.775010][T15962] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1082.775022][T15962] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1082.775038][T15962] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1083.043332][T12484] usb 2-1: Using ep0 maxpacket: 16 [ 1083.045395][T12484] usb 2-1: config index 0 descriptor too short (expected 51443, got 18) [ 1083.049577][T12484] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1083.049606][T12484] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1083.049627][T12484] usb 2-1: Product: syz [ 1083.049640][T12484] usb 2-1: Manufacturer: syz [ 1083.049648][T12484] usb 2-1: SerialNumber: syz [ 1083.057684][T15962] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1083.057698][T15962] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1083.057725][T15962] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1083.150218][T16195] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2982'. [ 1083.163056][T12484] r8152-cfgselector 2-1: Unknown version 0x0000 [ 1083.163165][T12484] r8152-cfgselector 2-1: config 0 descriptor?? [ 1083.402086][ T7666] bridge_slave_1: left allmulticast mode [ 1083.402118][ T7666] bridge_slave_1: left promiscuous mode [ 1083.402343][ T7666] bridge0: port 2(bridge_slave_1) entered disabled state [ 1083.707569][T10186] r8152-cfgselector 2-1: USB disconnect, device number 79 [ 1083.721476][ T7666] bridge_slave_0: left allmulticast mode [ 1083.721508][ T7666] bridge_slave_0: left promiscuous mode [ 1083.721745][ T7666] bridge0: port 1(bridge_slave_0) entered disabled state [ 1086.198102][T16215] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2988'. [ 1087.187938][T12824] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 1087.197129][T16217] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2986'. [ 1087.257012][ T822] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 1087.387002][T12824] usb 5-1: Using ep0 maxpacket: 32 [ 1087.392964][T12824] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 1087.393000][T12824] usb 5-1: config 0 has no interface number 0 [ 1087.393047][T12824] usb 5-1: config 0 interface 12 has no altsetting 0 [ 1087.426221][T12824] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1087.426251][T12824] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1087.426272][T12824] usb 5-1: Product: syz [ 1087.426287][T12824] usb 5-1: Manufacturer: syz [ 1087.426302][T12824] usb 5-1: SerialNumber: syz [ 1087.468028][ T822] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 1087.468075][ T822] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1087.468101][ T822] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1087.468123][ T822] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 1087.468166][ T822] usb 3-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 1087.468189][ T822] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1087.561717][ T822] usb 3-1: config 0 descriptor?? [ 1087.564302][T12824] usb 5-1: config 0 descriptor?? [ 1088.857383][T12824] f81534 5-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 1088.857415][T12824] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 1088.857425][T12824] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1088.857522][T12824] f81534 5-1:0.12: probe with driver f81534 failed with error -71 [ 1088.902395][T12824] usb 5-1: USB disconnect, device number 86 [ 1088.941516][T16221] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2989'. [ 1089.003511][ T7666] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1089.067076][ T7666] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1089.128698][ T7666] bond0 (unregistering): Released all slaves [ 1089.332956][ T5256] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1089.346126][T16216] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 1089.399206][ T822] usbhid 3-1:0.0: can't add hid device: -71 [ 1089.399317][ T822] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1089.402784][ T822] usb 3-1: USB disconnect, device number 74 [ 1089.615506][T16227] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1089.615563][T16227] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1089.806355][T15962] hsr_slave_0: entered promiscuous mode [ 1089.807496][T15962] hsr_slave_1: entered promiscuous mode [ 1089.808690][T15962] debugfs: 'hsr0' already exists in 'hsr' [ 1089.808714][T15962] Cannot create hsr debugfs directory [ 1089.946404][T16238] netlink: 144 bytes leftover after parsing attributes in process `syz.4.2995'. [ 1092.998713][T12824] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 1093.245177][T12824] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 959 [ 1093.245210][T12824] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1093.245232][T12824] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1093.247824][T12824] usb 5-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=e5.38 [ 1093.247852][T12824] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1093.247872][T12824] usb 5-1: Product: syz [ 1093.247886][T12824] usb 5-1: Manufacturer: syz [ 1093.247899][T12824] usb 5-1: SerialNumber: syz [ 1093.257511][T12824] usb 5-1: config 0 descriptor?? [ 1093.320460][T16282] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1093.364898][T16295] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3007'. [ 1093.392496][ T5256] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1094.567185][T12468] usb 5-1: USB disconnect, device number 87 [ 1094.785200][ T7666] hsr_slave_0: left promiscuous mode [ 1094.806977][ T7666] hsr_slave_1: left promiscuous mode [ 1094.808018][ T7666] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1094.808042][ T7666] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1094.901845][ T7666] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1094.901862][ T7666] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1095.636866][T16317] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3015'. [ 1097.119395][ T7666] veth1_macvtap: left promiscuous mode [ 1097.119463][ T7666] veth0_macvtap: left promiscuous mode [ 1097.119645][ T7666] veth1_vlan: left promiscuous mode [ 1097.119750][ T7666] veth0_vlan: left promiscuous mode [ 1097.135693][ T5856] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 1097.280791][T16323] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3018'. [ 1097.634365][ T822] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 1097.829418][ T822] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 1097.829680][ T822] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1097.829740][ T822] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1097.829810][ T822] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 1097.830043][ T822] usb 5-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 1097.830115][ T822] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1098.096479][ T822] usb 5-1: config 0 descriptor?? [ 1098.123191][ T5856] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 1098.123249][ T5856] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1098.123276][ T5856] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1098.123296][ T5856] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 1098.123337][ T5856] usb 3-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 1098.123359][ T5856] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1098.128491][ T5856] usb 3-1: config 0 descriptor?? [ 1099.755150][ T5856] usbhid 3-1:0.0: can't add hid device: -71 [ 1099.755255][ T5856] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1099.784218][ T5856] usb 3-1: USB disconnect, device number 75 [ 1100.366452][T16337] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3021'. [ 1100.438597][ T822] usbhid 5-1:0.0: can't add hid device: -71 [ 1100.438716][ T822] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1100.472820][ T822] usb 5-1: USB disconnect, device number 88 [ 1101.702102][T16350] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3027'. [ 1102.973203][T16354] netlink: 'syz.2.3029': attribute type 2 has an invalid length. [ 1103.176565][T16358] sg_write: data in/out 28/14 bytes for SCSI command 0x0-- guessing data in; [ 1103.176565][T16358] program syz.0.3028 not setting count and/or reply_len properly [ 1104.281342][ T822] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 1104.761380][ T822] usb 3-1: Using ep0 maxpacket: 16 [ 1104.768963][ T822] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 1104.768992][ T822] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1104.769013][ T822] usb 3-1: Product: syz [ 1104.769027][ T822] usb 3-1: Manufacturer: syz [ 1104.769041][ T822] usb 3-1: SerialNumber: syz [ 1104.817455][ T822] usb 3-1: config 0 descriptor?? [ 1104.833559][ T822] ssu100 3-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 1104.989417][ T7666] team0 (unregistering): Port device team_slave_1 removed [ 1105.055099][ T7666] team0 (unregistering): Port device team_slave_0 removed [ 1105.163810][ T822] ssu100 3-1:0.0: probe with driver ssu100 failed with error -110 [ 1106.653707][T12484] usb 3-1: USB disconnect, device number 76 [ 1107.342609][T16376] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3033'. [ 1107.363576][T16332] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 1107.853387][T16391] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3037'. [ 1108.745247][ T5856] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 1108.872633][T16392] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3039'. [ 1108.964118][ T5856] usb 5-1: Using ep0 maxpacket: 8 [ 1108.966084][ T5856] usb 5-1: config 6 has an invalid interface number: 238 but max is 2 [ 1108.966110][ T5856] usb 5-1: config 6 has an invalid interface number: 222 but max is 2 [ 1108.966131][ T5856] usb 5-1: config 6 has an invalid interface number: 240 but max is 2 [ 1108.966160][ T5856] usb 5-1: config 6 has no interface number 0 [ 1108.966176][ T5856] usb 5-1: config 6 has no interface number 1 [ 1108.966192][ T5856] usb 5-1: config 6 has no interface number 2 [ 1108.966260][ T5856] usb 5-1: config 6 interface 238 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 1108.966293][ T5856] usb 5-1: config 6 interface 240 altsetting 8 has a duplicate endpoint with address 0x87, skipping [ 1108.966306][ T5856] usb 5-1: config 6 interface 238 has no altsetting 0 [ 1108.966316][ T5856] usb 5-1: config 6 interface 222 has no altsetting 0 [ 1108.966325][ T5856] usb 5-1: config 6 interface 240 has no altsetting 0 [ 1108.971952][ T5856] usb 5-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=b1.1b [ 1108.971982][ T5856] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1108.972003][ T5856] usb 5-1: Product: ␁ [ 1108.972017][ T5856] usb 5-1: Manufacturer: 뛅戗种㈺섳셰闵锠¥㈎蒬ǦꙒ㋦㮠勇삎徖㤞梒ѩꅝܫ窺䑽骍鰁椘 [ 1108.972039][ T5856] usb 5-1: SerialNumber: 䐊 [ 1109.007415][ T5736] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 1109.175610][ T5736] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 1109.175658][ T5736] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1109.175739][ T5736] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1109.175762][ T5736] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 1109.175804][ T5736] usb 2-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 1109.175827][ T5736] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1109.226480][ T5736] usb 2-1: config 0 descriptor?? [ 1109.804886][ T5856] usb 5-1: No union descriptors [ 1109.826444][ T5856] usb 5-1: USB disconnect, device number 89 [ 1110.546026][T12824] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 1110.719214][T12824] usb 1-1: Using ep0 maxpacket: 16 [ 1110.767180][T12824] usb 1-1: config index 0 descriptor too short (expected 51443, got 18) [ 1110.954260][ T5736] usbhid 2-1:0.0: can't add hid device: -71 [ 1110.954382][ T5736] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1111.074344][T12824] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1111.074363][T12824] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1111.074375][T12824] usb 1-1: Product: syz [ 1111.074382][T12824] usb 1-1: Manufacturer: syz [ 1111.074390][T12824] usb 1-1: SerialNumber: syz [ 1111.265990][T16420] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1111.266045][T16420] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1111.310041][T12824] r8152-cfgselector 1-1: Unknown version 0x0000 [ 1111.310067][T12824] r8152-cfgselector 1-1: config 0 descriptor?? [ 1111.311353][ T5736] usb 2-1: USB disconnect, device number 80 [ 1112.326762][ T5856] r8152-cfgselector 1-1: USB disconnect, device number 87 [ 1112.762633][T12484] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 1112.929052][T12484] usb 5-1: Using ep0 maxpacket: 16 [ 1113.073487][T12484] usb 5-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 1113.073578][T12484] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1113.073885][T12484] usb 5-1: Product: syz [ 1113.073962][T12484] usb 5-1: Manufacturer: syz [ 1113.074036][T12484] usb 5-1: SerialNumber: syz [ 1113.356998][T12484] usb 5-1: config 0 descriptor?? [ 1113.361621][T12484] ssu100 5-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 1113.700512][T12484] ssu100 5-1:0.0: probe with driver ssu100 failed with error -110 [ 1113.781200][T16458] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3050'. [ 1117.417759][ T5736] usb 5-1: USB disconnect, device number 90 [ 1117.864007][T15962] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1117.941347][T15962] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1117.943050][T15962] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1118.099672][T12484] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 1118.123590][T15962] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1118.124994][T15962] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1118.281641][T12484] usb 5-1: Using ep0 maxpacket: 8 [ 1118.286082][T12484] usb 5-1: config 6 has an invalid interface number: 238 but max is 2 [ 1118.286112][T12484] usb 5-1: config 6 has an invalid interface number: 222 but max is 2 [ 1118.286135][T12484] usb 5-1: config 6 has an invalid interface number: 240 but max is 2 [ 1118.286157][T12484] usb 5-1: config 6 has no interface number 0 [ 1118.286174][T12484] usb 5-1: config 6 has no interface number 1 [ 1118.286190][T12484] usb 5-1: config 6 has no interface number 2 [ 1118.286253][T12484] usb 5-1: config 6 interface 238 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 1118.286305][T12484] usb 5-1: config 6 interface 240 altsetting 8 has a duplicate endpoint with address 0x87, skipping [ 1118.286331][T12484] usb 5-1: config 6 interface 238 has no altsetting 0 [ 1118.286350][T12484] usb 5-1: config 6 interface 222 has no altsetting 0 [ 1118.286368][T12484] usb 5-1: config 6 interface 240 has no altsetting 0 [ 1118.351258][T12484] usb 5-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=b1.1b [ 1118.351289][T12484] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1118.351310][T12484] usb 5-1: Product: ␁ [ 1118.351323][T12484] usb 5-1: Manufacturer: 뛅戗种㈺섳셰闵锠¥㈎蒬ǦꙒ㋦㮠勇삎徖㤞梒ѩꅝܫ窺䑽骍鰁椘 [ 1118.351342][T12484] usb 5-1: SerialNumber: 䐊 [ 1118.534689][T15962] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1118.553997][T15962] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1118.606346][T15962] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1118.859222][T12484] usb 5-1: No union descriptors [ 1118.932594][T12484] usb 5-1: USB disconnect, device number 91 [ 1119.048786][T16519] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3060'. [ 1120.331535][T16518] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3061'. [ 1120.873942][T16549] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3065'. [ 1121.419430][T15962] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1121.658794][T16562] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3067'. [ 1122.238281][ T822] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 1122.530136][ T822] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 1122.530184][ T822] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1122.530209][ T822] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1122.530232][ T822] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 1122.530273][ T822] usb 3-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 1122.530294][ T822] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1122.570276][ T822] usb 3-1: config 0 descriptor?? [ 1123.689257][T16575] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3069'. [ 1123.958919][T15962] 8021q: adding VLAN 0 to HW filter on device team0 [ 1124.002968][ T5994] bridge0: port 1(bridge_slave_0) entered blocking state [ 1124.003348][ T5994] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1124.252175][ T5994] bridge0: port 2(bridge_slave_1) entered blocking state [ 1124.289290][ T5994] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1124.473038][T16594] futex_wake_op: syz.1.3074 tries to shift op by 32; fix this program [ 1124.906649][ T822] usbhid 3-1:0.0: can't add hid device: -71 [ 1124.907382][ T822] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1125.128332][ T822] usb 3-1: USB disconnect, device number 77 [ 1125.328450][T16596] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1125.328525][T16596] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1126.508337][T16608] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3077'. [ 1128.064080][T11682] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1128.131333][T11682] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1128.159667][T11682] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1128.173816][T11682] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1128.183851][T11682] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1129.522256][T16641] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3083'. [ 1130.133417][T16659] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3086'. [ 1131.804919][T11682] Bluetooth: hci4: command tx timeout [ 1132.197336][T12468] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 1132.309249][T16672] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1132.309284][T16672] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1132.362683][T12468] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 1132.362739][T12468] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1132.362766][T12468] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1132.362789][T12468] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 1132.362831][T12468] usb 2-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 1132.362855][T12468] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1132.369028][T12468] usb 2-1: config 0 descriptor?? [ 1132.446658][T12484] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 1132.500886][ T5856] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 1132.674267][ T5856] usb 3-1: Using ep0 maxpacket: 8 [ 1132.676895][ T5856] usb 3-1: config 6 has an invalid interface number: 238 but max is 1 [ 1132.676924][ T5856] usb 3-1: config 6 has an invalid interface number: 222 but max is 1 [ 1132.676947][ T5856] usb 3-1: config 6 has no interface number 0 [ 1132.676964][ T5856] usb 3-1: config 6 has no interface number 1 [ 1132.677071][ T5856] usb 3-1: config 6 interface 238 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 1132.677114][ T5856] usb 3-1: config 6 interface 238 has no altsetting 0 [ 1132.677132][ T5856] usb 3-1: config 6 interface 222 has no altsetting 0 [ 1132.680320][ T5856] usb 3-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=b1.1b [ 1132.680349][ T5856] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1132.680370][ T5856] usb 3-1: Product: ␁ [ 1132.680436][ T5856] usb 3-1: Manufacturer: 뛅戗种㈺섳셰闵锠¥㈎蒬ǦꙒ㋦㮠勇삎徖㤞梒ѩꅝܫ窺䑽骍鰁椘 [ 1132.680457][ T5856] usb 3-1: SerialNumber: 䐊 [ 1132.807910][T12484] usb 5-1: Using ep0 maxpacket: 16 [ 1132.938729][T16678] sg_write: data in/out 28/14 bytes for SCSI command 0x0-- guessing data in; [ 1132.938729][T16678] program syz.0.3092 not setting count and/or reply_len properly [ 1133.963581][T12484] usb 5-1: config index 0 descriptor too short (expected 51443, got 18) [ 1133.967019][T12484] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1133.967047][T12484] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1133.967068][T12484] usb 5-1: Product: syz [ 1133.967082][T12484] usb 5-1: Manufacturer: syz [ 1133.967096][T12484] usb 5-1: SerialNumber: syz [ 1133.973139][T12484] r8152-cfgselector 5-1: Unknown version 0x0000 [ 1133.973163][T12484] r8152-cfgselector 5-1: config 0 descriptor?? [ 1134.027152][ T5604] Bluetooth: hci4: command tx timeout [ 1134.118422][ T5856] usb 3-1: USB disconnect, device number 78 [ 1134.476108][T16685] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3094'. [ 1135.362776][T12468] usbhid 2-1:0.0: can't add hid device: -71 [ 1135.362890][T12468] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1135.420187][T12468] usb 2-1: USB disconnect, device number 81 [ 1135.433234][ T5856] r8152-cfgselector 5-1: USB disconnect, device number 92 [ 1136.294148][ T5604] Bluetooth: hci4: command tx timeout [ 1138.300179][T12484] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 1138.540466][ T5604] Bluetooth: hci4: command tx timeout [ 1138.733663][T12484] usb 2-1: Using ep0 maxpacket: 32 [ 1138.736778][T12484] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 1138.736805][T12484] usb 2-1: config 0 has no interface number 0 [ 1138.736851][T12484] usb 2-1: config 0 interface 12 has no altsetting 0 [ 1138.739467][T12484] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1138.739496][T12484] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1138.739514][T12484] usb 2-1: Product: syz [ 1138.739521][T12484] usb 2-1: Manufacturer: syz [ 1138.739529][T12484] usb 2-1: SerialNumber: syz [ 1138.742487][T12484] usb 2-1: config 0 descriptor?? [ 1140.465392][T12468] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 1140.494644][T12484] f81534 2-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 1140.494695][T12484] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 1140.494712][T12484] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1140.494797][T12484] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 1140.576348][T12484] usb 2-1: USB disconnect, device number 82 [ 1140.642140][T12468] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 959 [ 1140.642173][T12468] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1140.642196][T12468] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1140.644490][T12468] usb 5-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=e5.38 [ 1140.644516][T12468] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1140.644537][T12468] usb 5-1: Product: syz [ 1140.644551][T12468] usb 5-1: Manufacturer: syz [ 1140.644566][T12468] usb 5-1: SerialNumber: syz [ 1141.650751][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 1141.650818][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 1141.848502][T12468] usb 5-1: config 0 descriptor?? [ 1141.849582][T16723] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1142.311426][T12468] usb 5-1: USB disconnect, device number 93 [ 1146.424600][T16780] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3126'. [ 1147.862782][T16793] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1147.862846][T16793] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1151.673163][T16622] bridge0: port 1(bridge_slave_0) entered blocking state [ 1151.673286][T16622] bridge0: port 1(bridge_slave_0) entered disabled state [ 1151.673867][T16622] bridge_slave_0: entered allmulticast mode [ 1151.874616][T16622] bridge_slave_0: entered promiscuous mode [ 1151.909220][T16622] bridge0: port 2(bridge_slave_1) entered blocking state [ 1151.929891][T16622] bridge0: port 2(bridge_slave_1) entered disabled state [ 1151.930145][T16622] bridge_slave_1: entered allmulticast mode [ 1152.365782][T16622] bridge_slave_1: entered promiscuous mode [ 1152.492606][T16840] netlink: 'syz.4.3138': attribute type 2 has an invalid length. [ 1154.035511][ T5853] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 1154.306399][ T5853] usb 5-1: Using ep0 maxpacket: 16 [ 1154.594094][ T5853] usb 5-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 1154.594125][ T5853] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1154.594143][ T5853] usb 5-1: Product: syz [ 1154.594157][ T5853] usb 5-1: Manufacturer: syz [ 1154.594172][ T5853] usb 5-1: SerialNumber: syz [ 1154.772821][ T5853] usb 5-1: config 0 descriptor?? [ 1154.782623][ T5853] ssu100 5-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 1155.676680][ T5853] ssu100 5-1:0.0: probe with driver ssu100 failed with error -110 [ 1155.901782][ T5612] usb 5-1: USB disconnect, device number 94 [ 1157.110896][T16866] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3144'. [ 1157.124899][T16867] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3143'. [ 1157.256255][T16622] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1157.275393][T16622] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1158.066608][T16622] team0: Port device team_slave_0 added [ 1158.101679][T16622] team0: Port device team_slave_1 added [ 1158.427736][T16898] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3150'. [ 1158.826609][ T5853] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 1159.356865][ T5612] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 1159.470013][ T5853] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 1159.470060][ T5853] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1159.470089][ T5853] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1159.470111][ T5853] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 1159.470153][ T5853] usb 5-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 1159.470176][ T5853] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1159.521406][ T5612] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 959 [ 1159.521437][ T5612] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1159.521467][ T5612] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1159.863815][ T5853] usb 5-1: config 0 descriptor?? [ 1159.872364][ T5612] usb 3-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=e5.38 [ 1159.872399][ T5612] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1159.872416][ T5612] usb 3-1: Product: syz [ 1159.872429][ T5612] usb 3-1: Manufacturer: syz [ 1159.872443][ T5612] usb 3-1: SerialNumber: syz [ 1159.902209][ T5612] usb 3-1: config 0 descriptor?? [ 1159.903221][T16889] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1159.954133][ T7241] bridge_slave_1: left allmulticast mode [ 1159.954215][ T7241] bridge_slave_1: left promiscuous mode [ 1159.978001][ T7241] bridge0: port 2(bridge_slave_1) entered disabled state [ 1160.218690][ T5612] usb 3-1: USB disconnect, device number 79 [ 1160.292876][ T7241] bridge_slave_0: left allmulticast mode [ 1160.292909][ T7241] bridge_slave_0: left promiscuous mode [ 1160.293140][ T7241] bridge0: port 1(bridge_slave_0) entered disabled state [ 1162.357448][T16910] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3152'. [ 1164.355846][ T5853] usbhid 5-1:0.0: can't add hid device: -71 [ 1164.355969][ T5853] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1164.368240][ T5853] usb 5-1: USB disconnect, device number 95 [ 1164.905702][ T5736] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 1165.220132][T12468] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 1165.244153][ T5736] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 959 [ 1165.244192][ T5736] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1165.244215][ T5736] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1165.247593][ T5736] usb 1-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=e5.38 [ 1165.247622][ T5736] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1165.247643][ T5736] usb 1-1: Product: syz [ 1165.247657][ T5736] usb 1-1: Manufacturer: syz [ 1165.247670][ T5736] usb 1-1: SerialNumber: syz [ 1165.319832][ T5736] usb 1-1: config 0 descriptor?? [ 1165.374141][T16926] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1165.383341][T12468] usb 2-1: Using ep0 maxpacket: 16 [ 1165.386104][T12468] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1165.386141][T12468] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1165.392152][T12468] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1165.392179][T12468] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1165.392199][T12468] usb 2-1: Product: syz [ 1165.392213][T12468] usb 2-1: Manufacturer: syz [ 1165.392227][T12468] usb 2-1: SerialNumber: syz [ 1165.423747][T12468] usb 2-1: config 0 descriptor?? [ 1165.440872][T12468] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1165.440906][T12468] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 1165.467374][ T5853] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 1165.613470][ T5736] usb 1-1: USB disconnect, device number 88 [ 1165.707686][ T5853] usb 5-1: Using ep0 maxpacket: 16 [ 1165.709756][ T5853] usb 5-1: config 0 has an invalid interface number: 34 but max is 0 [ 1165.709783][ T5853] usb 5-1: config 0 has no interface number 0 [ 1165.709827][ T5853] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 1165.709852][ T5853] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 1165.712452][ T5853] usb 5-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 1165.712480][ T5853] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1165.712501][ T5853] usb 5-1: Product: syz [ 1165.712515][ T5853] usb 5-1: Manufacturer: syz [ 1165.712529][ T5853] usb 5-1: SerialNumber: syz [ 1165.803054][ T5853] usb 5-1: config 0 descriptor?? [ 1165.804453][T16922] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1165.804710][T16922] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1165.992491][ T7241] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1166.030740][T16922] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1166.030910][T16922] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1166.077285][ T7241] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1166.095056][T12468] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 1166.095739][T12468] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 1166.096508][T12468] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 1166.096525][T12468] em28xx 2-1:0.0: No AC97 audio processor [ 1166.137848][ T7241] bond0 (unregistering): Released all slaves [ 1166.187267][T16622] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1166.187331][T16622] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1166.187357][T16622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1166.240840][T16622] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1166.240857][T16622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1166.240884][T16622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1166.300963][ T5853] asix 5-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 1166.651710][T16922] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1166.751004][T16922] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1166.756650][ T5853] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 1166.756748][ T5853] asix 5-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 1166.821041][ T5853] asix 5-1:0.34: probe with driver asix failed with error -61 [ 1166.870650][T12468] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 1167.099721][T16622] hsr_slave_0: entered promiscuous mode [ 1167.101113][T16622] hsr_slave_1: entered promiscuous mode [ 1167.103830][T16622] debugfs: 'hsr0' already exists in 'hsr' [ 1167.103855][T16622] Cannot create hsr debugfs directory [ 1167.203302][T12468] usb 3-1: Using ep0 maxpacket: 32 [ 1167.207054][T12468] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 1167.207080][T12468] usb 3-1: config 0 has no interface number 0 [ 1167.207124][T12468] usb 3-1: config 0 interface 12 has no altsetting 0 [ 1167.211583][T12468] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1167.211610][T12468] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1167.211629][T12468] usb 3-1: Product: syz [ 1167.211643][T12468] usb 3-1: Manufacturer: syz [ 1167.211657][T12468] usb 3-1: SerialNumber: syz [ 1167.238151][T12468] usb 3-1: config 0 descriptor?? [ 1167.701866][ T7241] hsr_slave_0: left promiscuous mode [ 1167.745534][ T7241] hsr_slave_1: left promiscuous mode [ 1167.759824][ T7241] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1167.804368][ T7241] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1168.160834][ T5853] usb 2-1: USB disconnect, device number 83 [ 1168.163420][ T5853] em28xx 2-1:0.0: Disconnecting em28xx [ 1168.234594][ T5853] em28xx 2-1:0.0: Freeing device [ 1168.255698][ T5612] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 1168.419872][ T5612] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 959 [ 1168.419905][ T5612] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1168.419979][ T5612] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1168.426299][ T5612] usb 1-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=e5.38 [ 1168.426329][ T5612] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1168.426349][ T5612] usb 1-1: Product: syz [ 1168.426363][ T5612] usb 1-1: Manufacturer: syz [ 1168.426378][ T5612] usb 1-1: SerialNumber: syz [ 1168.483438][ T5612] usb 1-1: config 0 descriptor?? [ 1168.485680][T16957] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 1168.531040][T12468] f81534 3-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 1168.531095][T12468] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 1168.531113][T12468] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1168.531202][T12468] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 1168.566748][T12468] usb 3-1: USB disconnect, device number 80 [ 1168.690920][ T7241] team0 (unregistering): Port device team_slave_1 removed [ 1168.752754][ T5612] usb 1-1: USB disconnect, device number 89 [ 1168.772222][ T7241] team0 (unregistering): Port device team_slave_0 removed [ 1168.919581][ T822] usb 5-1: USB disconnect, device number 96 [ 1169.220852][ T5256] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1171.095083][ T5853] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 1171.207100][T16984] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3170'. [ 1171.380622][ T5853] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 959 [ 1171.380707][ T5853] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1171.380778][ T5853] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1171.412357][ T5853] usb 1-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=e5.38 [ 1171.412438][ T5853] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1171.412509][ T5853] usb 1-1: Product: syz [ 1171.412581][ T5853] usb 1-1: Manufacturer: syz [ 1171.412619][ T5853] usb 1-1: SerialNumber: syz [ 1171.850910][ T5853] usb 1-1: config 0 descriptor?? [ 1171.861004][T16970] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1172.236407][T12484] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 1172.257434][ T5853] usb 1-1: USB disconnect, device number 90 [ 1172.427383][T12484] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 1172.427424][T12484] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1172.427449][T12484] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1172.427470][T12484] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 1172.427508][T12484] usb 3-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 1172.427531][T12484] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1172.431976][T12484] usb 3-1: config 0 descriptor?? [ 1174.198046][T17006] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3174'. [ 1174.355027][T12484] usbhid 3-1:0.0: can't add hid device: -71 [ 1174.355156][T12484] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1174.417567][T12484] usb 3-1: USB disconnect, device number 81 [ 1174.670663][ T5853] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 1174.845093][ T5853] usb 5-1: Using ep0 maxpacket: 32 [ 1174.851930][ T5853] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 1174.851957][ T5853] usb 5-1: config 0 has no interface number 0 [ 1174.852001][ T5853] usb 5-1: config 0 interface 12 has no altsetting 0 [ 1174.860021][ T5853] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1174.860052][ T5853] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1174.860127][ T5853] usb 5-1: Product: syz [ 1174.860142][ T5853] usb 5-1: Manufacturer: syz [ 1174.860156][ T5853] usb 5-1: SerialNumber: syz [ 1175.056774][ T5853] usb 5-1: config 0 descriptor?? [ 1176.469096][ T5853] f81534 5-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 1176.469150][ T5853] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 1176.469168][ T5853] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1176.469249][ T5853] f81534 5-1:0.12: probe with driver f81534 failed with error -71 [ 1176.846100][ T5853] usb 5-1: USB disconnect, device number 97 [ 1183.806894][ T5853] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 1183.926014][T12484] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 1183.969918][ T5853] usb 2-1: Using ep0 maxpacket: 32 [ 1183.984790][ T5853] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 1183.984819][ T5853] usb 2-1: config 0 has no interface number 0 [ 1183.984866][ T5853] usb 2-1: config 0 interface 12 has no altsetting 0 [ 1183.988473][ T5853] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1183.988502][ T5853] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1183.988521][ T5853] usb 2-1: Product: syz [ 1183.988535][ T5853] usb 2-1: Manufacturer: syz [ 1183.988550][ T5853] usb 2-1: SerialNumber: syz [ 1184.022721][ T5853] usb 2-1: config 0 descriptor?? [ 1184.099401][T12484] usb 3-1: Using ep0 maxpacket: 16 [ 1184.106175][T12484] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 1184.106214][T12484] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1184.106235][T12484] usb 3-1: Product: syz [ 1184.106308][T12484] usb 3-1: Manufacturer: syz [ 1184.106322][T12484] usb 3-1: SerialNumber: syz [ 1184.147810][T12484] usb 3-1: config 0 descriptor?? [ 1184.243376][T12484] ssu100 3-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 1184.576886][T12484] ssu100 3-1:0.0: probe with driver ssu100 failed with error -110 [ 1184.587143][T12437] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 1184.702350][T16622] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1184.755843][T12437] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 959 [ 1184.755874][T12437] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1184.755896][T12437] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1184.801056][T12437] usb 1-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=e5.38 [ 1184.801087][T12437] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1184.801106][T12437] usb 1-1: Product: syz [ 1184.801287][T12437] usb 1-1: Manufacturer: syz [ 1184.801304][T12437] usb 1-1: SerialNumber: syz [ 1184.842493][T12437] usb 1-1: config 0 descriptor?? [ 1184.890216][T17109] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 1185.036241][T16622] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1185.063179][T16622] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1185.128041][ T822] usb 1-1: USB disconnect, device number 91 [ 1185.272830][ T5853] f81534 2-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 1185.272885][ T5853] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 1185.272903][ T5853] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1185.272990][ T5853] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 1185.464603][T16622] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1185.468567][ T5853] usb 2-1: USB disconnect, device number 84 [ 1185.475809][T16622] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1185.567399][T16622] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1185.574725][T16622] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1185.664867][T16622] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1186.376545][T16622] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1186.409688][T16622] 8021q: adding VLAN 0 to HW filter on device team0 [ 1186.423345][ T5994] bridge0: port 1(bridge_slave_0) entered blocking state [ 1186.423553][ T5994] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1186.436380][ T5994] bridge0: port 2(bridge_slave_1) entered blocking state [ 1186.436572][ T5994] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1186.559564][ T5612] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 1186.587548][ T5853] usb 3-1: USB disconnect, device number 82 [ 1186.722199][ T5612] usb 5-1: Using ep0 maxpacket: 16 [ 1186.726665][ T5612] usb 5-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 1186.726692][ T5612] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1186.726711][ T5612] usb 5-1: Product: syz [ 1186.726723][ T5612] usb 5-1: Manufacturer: syz [ 1186.726736][ T5612] usb 5-1: SerialNumber: syz [ 1186.771237][ T5612] usb 5-1: config 0 descriptor?? [ 1186.796796][ T5612] ssu100 5-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 1187.351305][ T5612] ssu100 5-1:0.0: probe with driver ssu100 failed with error -110 [ 1190.055870][ T822] usb 5-1: USB disconnect, device number 98 [ 1190.206714][T16622] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1191.559776][T12468] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 1191.562260][ T5853] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 1191.731558][ T5853] usb 1-1: Using ep0 maxpacket: 8 [ 1191.740467][ T5853] usb 1-1: config 6 has an invalid interface number: 238 but max is 2 [ 1191.740495][ T5853] usb 1-1: config 6 has an invalid interface number: 222 but max is 2 [ 1191.740515][ T5853] usb 1-1: config 6 has an invalid interface number: 240 but max is 2 [ 1191.740534][ T5853] usb 1-1: config 6 has no interface number 0 [ 1191.740551][ T5853] usb 1-1: config 6 has no interface number 1 [ 1191.740567][ T5853] usb 1-1: config 6 has no interface number 2 [ 1191.740629][ T5853] usb 1-1: config 6 interface 238 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 1191.740679][ T5853] usb 1-1: config 6 interface 240 altsetting 8 has a duplicate endpoint with address 0x87, skipping [ 1191.740702][ T5853] usb 1-1: config 6 interface 238 has no altsetting 0 [ 1191.740720][ T5853] usb 1-1: config 6 interface 222 has no altsetting 0 [ 1191.740738][ T5853] usb 1-1: config 6 interface 240 has no altsetting 0 [ 1191.755598][ T5853] usb 1-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=b1.1b [ 1191.755673][ T5853] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1191.755695][ T5853] usb 1-1: Product: ␁ [ 1191.755709][ T5853] usb 1-1: Manufacturer: 뛅戗种㈺섳셰闵锠¥㈎蒬ǦꙒ㋦㮠勇삎徖㤞梒ѩꅝܫ窺䑽骍鰁椘 [ 1191.755727][ T5853] usb 1-1: SerialNumber: 䐊 [ 1191.804526][T12468] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 959 [ 1191.804559][T12468] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1191.804581][T12468] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1192.418405][T12468] usb 3-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=e5.38 [ 1192.418424][T12468] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1192.418435][T12468] usb 3-1: Product: syz [ 1192.418443][T12468] usb 3-1: Manufacturer: syz [ 1192.418450][T12468] usb 3-1: SerialNumber: syz [ 1194.445893][T12468] usb 3-1: config 0 descriptor?? [ 1194.446501][T12468] usb 3-1: can't set config #0, error -71 [ 1194.448925][T12468] usb 3-1: USB disconnect, device number 83 [ 1194.513855][T11682] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1194.553400][T11682] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1194.575418][T11682] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1194.691814][T11682] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1194.713479][T11682] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1194.761363][T17251] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1194.761423][T17251] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1194.807805][ T5853] usb 1-1: No union descriptors [ 1194.873864][ T5853] usb 1-1: USB disconnect, device number 92 [ 1195.880027][ T5853] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 1196.243049][ T5853] usb 1-1: Using ep0 maxpacket: 32 [ 1196.253393][ T5853] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 1196.253420][ T5853] usb 1-1: config 0 has no interface number 0 [ 1196.253467][ T5853] usb 1-1: config 0 interface 12 has no altsetting 0 [ 1196.263392][ T5853] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1196.263422][ T5853] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1196.263441][ T5853] usb 1-1: Product: syz [ 1196.263454][ T5853] usb 1-1: Manufacturer: syz [ 1196.263469][ T5853] usb 1-1: SerialNumber: syz [ 1196.274550][ T5853] usb 1-1: config 0 descriptor?? [ 1197.101143][ T5604] Bluetooth: hci5: command tx timeout [ 1197.685824][ T5853] f81534 1-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 1197.686492][ T5853] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 1197.686601][ T5853] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1197.687897][ T5853] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 1197.931239][T17277] netlink: 'syz.1.3223': attribute type 1 has an invalid length. [ 1198.148836][ T5853] usb 1-1: USB disconnect, device number 93 [ 1199.305326][ T5604] Bluetooth: hci5: command tx timeout [ 1199.803325][T12468] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 1199.956108][T17302] sg_write: data in/out 28/14 bytes for SCSI command 0x0-- guessing data in; [ 1199.956108][T17302] program syz.1.3229 not setting count and/or reply_len properly [ 1201.158198][T12468] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 959 [ 1201.158230][T12468] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1201.158253][T12468] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1201.205185][T12468] usb 3-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=e5.38 [ 1201.205214][T12468] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1201.205233][T12468] usb 3-1: Product: syz [ 1201.205247][T12468] usb 3-1: Manufacturer: syz [ 1201.205262][T12468] usb 3-1: SerialNumber: syz [ 1201.631433][T12468] usb 3-1: config 0 descriptor?? [ 1201.633452][ T5604] Bluetooth: hci5: command tx timeout [ 1201.633983][T17292] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1202.059429][T12468] usb 3-1: USB disconnect, device number 84 [ 1204.082788][ T5604] Bluetooth: hci5: command tx timeout [ 1206.154418][T12484] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 1206.544341][T12484] usb 5-1: Using ep0 maxpacket: 32 [ 1206.545834][T12484] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 1206.545850][T12484] usb 5-1: config 0 has no interface number 0 [ 1206.545875][T12484] usb 5-1: config 0 interface 12 has no altsetting 0 [ 1206.547882][T12484] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1206.547918][T12484] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1206.547935][T12484] usb 5-1: Product: syz [ 1206.547947][T12484] usb 5-1: Manufacturer: syz [ 1206.547959][T12484] usb 5-1: SerialNumber: syz [ 1206.642067][T12484] usb 5-1: config 0 descriptor?? [ 1207.433726][ T5853] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 1207.442315][T12484] f81534 5-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 1207.442368][T12484] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 1207.442385][T12484] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1207.442476][T12484] f81534 5-1:0.12: probe with driver f81534 failed with error -71 [ 1207.663288][T12484] usb 5-1: USB disconnect, device number 99 [ 1207.736491][ T5853] usb 2-1: Using ep0 maxpacket: 32 [ 1207.760355][ T5853] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 1207.760381][ T5853] usb 2-1: config 0 has no interface number 0 [ 1207.760425][ T5853] usb 2-1: config 0 interface 12 has no altsetting 0 [ 1207.833825][ T5853] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1207.833855][ T5853] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1207.833875][ T5853] usb 2-1: Product: syz [ 1207.833890][ T5853] usb 2-1: Manufacturer: syz [ 1207.862592][ T5853] usb 2-1: SerialNumber: syz [ 1207.865572][ T5853] usb 2-1: config 0 descriptor?? [ 1208.339547][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 1208.339615][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 1209.919597][T17364] sg_write: data in/out 28/14 bytes for SCSI command 0x0-- guessing data in; [ 1209.919597][T17364] program syz.4.3244 not setting count and/or reply_len properly [ 1211.024376][ T5853] f81534 2-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 1211.024425][ T5853] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 1211.024443][ T5853] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1211.024520][ T5853] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 1211.085657][ T5853] usb 2-1: USB disconnect, device number 85 [ 1211.150388][ T822] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 1211.315391][ T822] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 959 [ 1211.315425][ T822] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1211.315448][ T822] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1211.317728][ T822] usb 5-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=e5.38 [ 1211.317755][ T822] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1211.317776][ T822] usb 5-1: Product: syz [ 1211.317791][ T822] usb 5-1: Manufacturer: syz [ 1211.317806][ T822] usb 5-1: SerialNumber: syz [ 1211.322689][ T822] usb 5-1: config 0 descriptor?? [ 1211.323592][T17370] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1211.664659][T12468] usb 5-1: USB disconnect, device number 100 [ 1211.988073][T17241] bridge0: port 1(bridge_slave_0) entered blocking state [ 1211.988203][T17241] bridge0: port 1(bridge_slave_0) entered disabled state [ 1211.988411][T17241] bridge_slave_0: entered allmulticast mode [ 1212.019883][T17241] bridge_slave_0: entered promiscuous mode [ 1212.042412][T17241] bridge0: port 2(bridge_slave_1) entered blocking state [ 1212.042520][T17241] bridge0: port 2(bridge_slave_1) entered disabled state [ 1212.042764][T17241] bridge_slave_1: entered allmulticast mode [ 1212.048584][T17241] bridge_slave_1: entered promiscuous mode [ 1214.803621][ T5856] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 1214.838528][T17241] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1214.965636][ T5856] usb 2-1: Using ep0 maxpacket: 16 [ 1214.968084][ T5856] usb 2-1: config index 0 descriptor too short (expected 51443, got 18) [ 1214.970408][ T5856] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1214.970435][ T5856] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1214.970457][ T5856] usb 2-1: Product: syz [ 1214.970471][ T5856] usb 2-1: Manufacturer: syz [ 1214.970486][ T5856] usb 2-1: SerialNumber: syz [ 1215.055711][ T5856] r8152-cfgselector 2-1: Unknown version 0x0000 [ 1215.055736][ T5856] r8152-cfgselector 2-1: config 0 descriptor?? [ 1215.507329][T12468] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 1215.543232][T17241] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1215.699591][T17427] netlink: 'syz.0.3248': attribute type 1 has an invalid length. [ 1215.715731][T12468] usb 3-1: Using ep0 maxpacket: 32 [ 1215.715930][ T5856] r8152-cfgselector 2-1: USB disconnect, device number 86 [ 1215.718641][T12468] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 1215.718658][T12468] usb 3-1: config 0 has no interface number 0 [ 1215.718685][T12468] usb 3-1: config 0 interface 12 has no altsetting 0 [ 1215.722844][T12468] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1215.722860][T12468] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1215.722871][T12468] usb 3-1: Product: syz [ 1215.722878][T12468] usb 3-1: Manufacturer: syz [ 1215.722886][T12468] usb 3-1: SerialNumber: syz [ 1215.851207][T12468] usb 3-1: config 0 descriptor?? [ 1216.098913][T17438] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3257'. [ 1217.147657][T12437] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 1217.305429][T12468] f81534 3-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 1217.305467][T12468] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 1217.305476][T12468] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1217.305533][T12468] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 1217.314531][T12437] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 1217.314577][T12437] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1217.314603][T12437] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1217.314625][T12437] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 1217.314667][T12437] usb 5-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 1217.314689][T12437] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1217.527087][T17441] netlink: 'syz.1.3258': attribute type 1 has an invalid length. [ 1217.871296][T12468] usb 3-1: USB disconnect, device number 85 [ 1217.907371][T12437] usb 5-1: config 0 descriptor?? [ 1218.145810][T17241] team0: Port device team_slave_0 added [ 1218.158681][T17241] team0: Port device team_slave_1 added [ 1219.451967][T17241] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1219.452080][T17241] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1219.452103][T17241] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1219.514611][T12437] usbhid 5-1:0.0: can't add hid device: -71 [ 1219.514795][T12437] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1219.542441][T12437] usb 5-1: USB disconnect, device number 101 [ 1220.366036][T17241] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1220.366052][T17241] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1220.366075][T17241] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1221.275430][T17241] hsr_slave_0: entered promiscuous mode [ 1221.278421][T17241] hsr_slave_1: entered promiscuous mode [ 1221.287637][T17241] debugfs: 'hsr0' already exists in 'hsr' [ 1221.287665][T17241] Cannot create hsr debugfs directory [ 1221.637539][ T67] bridge_slave_1: left allmulticast mode [ 1221.637568][ T67] bridge_slave_1: left promiscuous mode [ 1221.638064][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 1221.771453][T12437] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 1221.834258][ T67] bridge_slave_0: left allmulticast mode [ 1221.834292][ T67] bridge_slave_0: left promiscuous mode [ 1221.834530][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 1221.944815][T12437] usb 3-1: Using ep0 maxpacket: 16 [ 1221.951057][T12437] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 1221.951087][T12437] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1221.951107][T12437] usb 3-1: Product: syz [ 1221.951121][T12437] usb 3-1: Manufacturer: syz [ 1221.951136][T12437] usb 3-1: SerialNumber: syz [ 1221.955300][T12437] usb 3-1: config 0 descriptor?? [ 1222.003182][T12437] ssu100 3-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 1222.053390][ T5856] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 1222.139933][ T5853] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 1222.248935][ T5856] usb 5-1: Using ep0 maxpacket: 16 [ 1222.252364][ T5856] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1222.252399][ T5856] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1222.267051][ T5856] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1222.267083][ T5856] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1222.267103][ T5856] usb 5-1: Product: syz [ 1222.267116][ T5856] usb 5-1: Manufacturer: syz [ 1222.267131][ T5856] usb 5-1: SerialNumber: syz [ 1222.292563][ T5856] usb 5-1: config 0 descriptor?? [ 1222.302504][ T5853] usb 2-1: Using ep0 maxpacket: 16 [ 1222.317404][ T5853] usb 2-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 1222.317434][ T5853] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1222.331548][ T5856] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1222.331581][ T5856] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 1222.332791][ T5853] usb 2-1: Product: syz [ 1222.332809][ T5853] usb 2-1: Manufacturer: syz [ 1222.332823][ T5853] usb 2-1: SerialNumber: syz [ 1222.386590][T12437] ssu100 3-1:0.0: probe with driver ssu100 failed with error -110 [ 1222.403148][ T5853] usb 2-1: config 0 descriptor?? [ 1222.407858][ T5853] ssu100 2-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 1222.738002][ T5853] ssu100 2-1:0.0: probe with driver ssu100 failed with error -110 [ 1222.790627][ T5853] usb 2-1: USB disconnect, device number 87 [ 1222.952790][ T5856] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 1222.955085][ T5856] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 1223.322206][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1223.403263][ T5856] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 1223.403285][ T5856] em28xx 5-1:0.0: No AC97 audio processor [ 1223.430138][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1223.443317][ T5856] usb 5-1: USB disconnect, device number 102 [ 1223.445884][ T5856] em28xx 5-1:0.0: Disconnecting em28xx [ 1223.451798][ T5856] em28xx 5-1:0.0: Freeing device [ 1223.491679][ T67] bond0 (unregistering): Released all slaves [ 1223.812739][T17497] netlink: 'syz.1.3270': attribute type 1 has an invalid length. [ 1224.117222][ T5256] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1224.392499][T17500] netlink: 'syz.4.3271': attribute type 2 has an invalid length. [ 1224.576462][ T822] usb 3-1: USB disconnect, device number 86 [ 1224.974897][ T67] hsr_slave_0: left promiscuous mode [ 1225.004144][T12484] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 1225.128713][T17522] sg_write: data in/out 28/14 bytes for SCSI command 0x0-- guessing data in; [ 1225.128713][T17522] program syz.2.3276 not setting count and/or reply_len properly [ 1225.413861][T12484] usb 5-1: Using ep0 maxpacket: 16 [ 1225.926925][T12484] usb 5-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 1225.926944][T12484] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1225.926955][T12484] usb 5-1: Product: syz [ 1225.926962][T12484] usb 5-1: Manufacturer: syz [ 1225.926970][T12484] usb 5-1: SerialNumber: syz [ 1225.941694][T12484] usb 5-1: config 0 descriptor?? [ 1225.974608][ T67] hsr_slave_1: left promiscuous mode [ 1225.975603][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1225.981396][T12484] ssu100 5-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 1226.031586][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1226.320165][T12484] ssu100 5-1:0.0: probe with driver ssu100 failed with error -110 [ 1227.613004][T12484] usb 5-1: USB disconnect, device number 103 [ 1227.851616][ T5856] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 1228.025305][ T5856] usb 1-1: Using ep0 maxpacket: 16 [ 1228.072673][ T5856] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1228.072715][ T5856] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1228.122328][T12484] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 1228.188105][ T5856] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1228.188169][ T5856] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1228.188230][ T5856] usb 1-1: Product: syz [ 1228.188280][ T5856] usb 1-1: Manufacturer: syz [ 1228.188330][ T5856] usb 1-1: SerialNumber: syz [ 1228.284883][T12484] usb 5-1: Using ep0 maxpacket: 32 [ 1228.289713][T12484] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 1228.289740][T12484] usb 5-1: config 0 has no interface number 0 [ 1228.289786][T12484] usb 5-1: config 0 interface 12 has no altsetting 0 [ 1228.327700][T12484] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1228.327729][T12484] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1228.327749][T12484] usb 5-1: Product: syz [ 1228.327760][T12484] usb 5-1: Manufacturer: syz [ 1228.327768][T12484] usb 5-1: SerialNumber: syz [ 1228.426899][ T5856] usb 1-1: config 0 descriptor?? [ 1228.531759][ T5856] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1228.531802][ T5856] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 1228.787699][T12484] usb 5-1: config 0 descriptor?? [ 1229.223678][ T5856] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 1229.224347][ T5856] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 1229.227946][ T822] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 1229.253405][ T67] team0 (unregistering): Port device team_slave_1 removed [ 1229.315379][ T67] team0 (unregistering): Port device team_slave_0 removed [ 1229.397784][ T822] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 959 [ 1229.397817][ T822] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1229.397892][ T822] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1229.414262][ T822] usb 2-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=e5.38 [ 1229.414292][ T822] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1229.414312][ T822] usb 2-1: Product: syz [ 1229.414597][ T822] usb 2-1: Manufacturer: syz [ 1229.414612][ T822] usb 2-1: SerialNumber: syz [ 1229.427084][ T822] usb 2-1: config 0 descriptor?? [ 1229.430350][T17545] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1229.655428][ T5612] usb 2-1: USB disconnect, device number 88 [ 1229.683257][ T5856] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 1229.683280][ T5856] em28xx 1-1:0.0: No AC97 audio processor [ 1229.733368][ T5856] usb 1-1: USB disconnect, device number 94 [ 1229.757861][ T5856] em28xx 1-1:0.0: Disconnecting em28xx [ 1229.784467][ T5856] em28xx 1-1:0.0: Freeing device [ 1229.992403][T12484] f81534 5-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 1229.992453][T12484] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 1229.992469][T12484] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1229.992552][T12484] f81534 5-1:0.12: probe with driver f81534 failed with error -71 [ 1230.049708][T12484] usb 5-1: USB disconnect, device number 104 [ 1230.611506][ T5612] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 1231.030760][ T5612] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 959 [ 1231.030793][ T5612] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1231.030817][ T5612] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1231.311699][ T5612] usb 2-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=e5.38 [ 1231.311730][ T5612] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1231.311750][ T5612] usb 2-1: Product: syz [ 1231.311765][ T5612] usb 2-1: Manufacturer: syz [ 1231.311779][ T5612] usb 2-1: SerialNumber: syz [ 1231.383466][ T5612] usb 2-1: config 0 descriptor?? [ 1231.385122][T17553] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1231.448708][T17571] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3288'. [ 1231.893225][T12437] usb 2-1: USB disconnect, device number 89 [ 1232.254134][ T5256] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1233.013503][ T5612] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 1233.291970][ T5612] usb 5-1: Using ep0 maxpacket: 16 [ 1233.708412][ T5612] usb 5-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 1233.708442][ T5612] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1233.708462][ T5612] usb 5-1: Product: syz [ 1233.708476][ T5612] usb 5-1: Manufacturer: syz [ 1233.708491][ T5612] usb 5-1: SerialNumber: syz [ 1233.809387][ T5612] usb 5-1: config 0 descriptor?? [ 1233.826662][ T5612] ssu100 5-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 1234.170439][ T5612] ssu100 5-1:0.0: probe with driver ssu100 failed with error -110 [ 1235.357050][ T5612] usb 5-1: USB disconnect, device number 105 [ 1235.394923][T12484] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 1235.477373][T17610] sg_write: data in/out 28/14 bytes for SCSI command 0x0-- guessing data in; [ 1235.477373][T17610] program syz.2.3297 not setting count and/or reply_len properly [ 1235.531243][T17610] fuse: Unknown parameter '0x0000000000000006' [ 1235.929853][T12484] usb 2-1: Using ep0 maxpacket: 16 [ 1236.221313][T12484] usb 2-1: config index 0 descriptor too short (expected 51443, got 18) [ 1236.237665][T12484] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1236.237695][T12484] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1236.237715][T12484] usb 2-1: Product: syz [ 1236.237731][T12484] usb 2-1: Manufacturer: syz [ 1236.237745][T12484] usb 2-1: SerialNumber: syz [ 1236.290120][T12484] r8152-cfgselector 2-1: Unknown version 0x0000 [ 1236.290156][T12484] r8152-cfgselector 2-1: config 0 descriptor?? [ 1237.467345][T17627] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3302'. [ 1238.746993][ T822] r8152-cfgselector 2-1: USB disconnect, device number 90 [ 1238.978086][T17636] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3303'. [ 1239.004451][T12484] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 1239.872566][T12484] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 1239.872612][T12484] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1239.872626][T12484] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1239.872639][T12484] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 1239.872662][T12484] usb 3-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 1239.872675][T12484] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1239.878966][T12484] usb 3-1: config 0 descriptor?? [ 1240.011587][ T822] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 1240.176876][ T822] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 1240.176921][ T822] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1240.177000][ T822] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1240.177024][ T822] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 1240.177063][ T822] usb 5-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 1240.177076][ T822] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1241.053246][ T822] usb 5-1: config 0 descriptor?? [ 1242.189839][T12824] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 1242.362984][T12484] usbhid 3-1:0.0: can't add hid device: -71 [ 1242.363348][T12484] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1242.374324][T12824] usb 2-1: Using ep0 maxpacket: 16 [ 1242.377269][T12824] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1242.377297][T12824] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1242.678025][T12824] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1242.678056][T12824] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1242.678128][T12824] usb 2-1: Product: syz [ 1242.678145][T12824] usb 2-1: Manufacturer: syz [ 1242.678159][T12824] usb 2-1: SerialNumber: syz [ 1242.737882][T12484] usb 3-1: USB disconnect, device number 87 [ 1242.772405][T12824] usb 2-1: config 0 descriptor?? [ 1242.848177][T12824] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1242.848214][T12824] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 1243.389795][ T822] usbhid 5-1:0.0: can't add hid device: -71 [ 1243.389971][ T822] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1243.656887][ T822] usb 5-1: USB disconnect, device number 106 [ 1244.175980][T17666] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1244.176033][T17666] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1244.177068][T12824] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 1244.177736][T12824] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 1244.623788][T12824] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 1244.623812][T12824] em28xx 2-1:0.0: No AC97 audio processor [ 1244.648973][T12824] usb 2-1: USB disconnect, device number 91 [ 1244.654318][T12824] em28xx 2-1:0.0: Disconnecting em28xx [ 1244.702764][T12824] em28xx 2-1:0.0: Freeing device [ 1245.333899][T17685] tipc: Started in network mode [ 1245.333928][T17685] tipc: Node identity ac14140f, cluster identity 4711 [ 1245.386927][T12824] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 1245.387517][T17685] tipc: New replicast peer: 255.255.255.255 [ 1245.388610][T17685] tipc: Enabled bearer , priority 10 [ 1245.540843][T17694] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3317'. [ 1245.976648][T12824] usb 1-1: Using ep0 maxpacket: 16 [ 1246.634052][T12484] tipc: Node number set to 2886997007 [ 1247.331452][T12824] usb 1-1: config index 0 descriptor too short (expected 51443, got 18) [ 1247.729648][ T822] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 1247.729855][T12824] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1247.729881][T12824] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1247.730016][T12824] usb 1-1: Product: syz [ 1247.730028][T12824] usb 1-1: Manufacturer: syz [ 1247.730041][T12824] usb 1-1: SerialNumber: syz [ 1247.915346][T12824] r8152-cfgselector 1-1: Unknown version 0x0000 [ 1247.915374][T12824] r8152-cfgselector 1-1: config 0 descriptor?? [ 1248.048079][ T822] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 1248.048125][ T822] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1248.048208][ T822] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1248.048231][ T822] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 1248.048271][ T822] usb 3-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 1248.048292][ T822] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1248.135542][T17241] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1248.157569][ T822] usb 3-1: config 0 descriptor?? [ 1248.212930][T17241] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1248.304406][T17700] netlink: 'syz.4.3318': attribute type 1 has an invalid length. [ 1248.625791][ T5856] r8152-cfgselector 1-1: USB disconnect, device number 95 [ 1248.938619][T17241] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1249.242951][T17241] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1249.960242][ T822] usbhid 3-1:0.0: can't add hid device: -71 [ 1249.960511][ T822] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1249.980433][T17241] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1249.984057][ T822] usb 3-1: USB disconnect, device number 88 [ 1250.044749][T17241] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1250.056715][T17241] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1250.127057][T17241] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1251.453070][T17241] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1251.456139][T12484] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 1251.591693][T17738] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3325'. [ 1251.618622][T12484] usb 1-1: Using ep0 maxpacket: 16 [ 1251.621080][T12484] usb 1-1: config index 0 descriptor too short (expected 51443, got 18) [ 1251.623741][T12484] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1251.623771][T12484] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1251.623791][T12484] usb 1-1: Product: syz [ 1251.623804][T12484] usb 1-1: Manufacturer: syz [ 1251.623818][T12484] usb 1-1: SerialNumber: syz [ 1251.645208][T12484] r8152-cfgselector 1-1: Unknown version 0x0000 [ 1251.645234][T12484] r8152-cfgselector 1-1: config 0 descriptor?? [ 1251.713798][T17241] 8021q: adding VLAN 0 to HW filter on device team0 [ 1251.738159][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 1251.743397][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1251.769192][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 1251.769396][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1252.186011][T12468] r8152-cfgselector 1-1: USB disconnect, device number 96 [ 1254.087239][T17771] netlink: 'syz.0.3331': attribute type 1 has an invalid length. [ 1256.562566][T16812] ------------[ cut here ]------------ [ 1256.562582][T16812] kcov->remote [ 1256.562599][T16812] WARNING: kernel/kcov.c:475 at kcov_task_exit+0x17b/0x240, CPU#0: udevd/16812 [ 1256.562716][T16812] Modules linked in: [ 1256.562745][T16812] CPU: 0 UID: 0 PID: 16812 Comm: udevd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1256.562775][T16812] Tainted: [L]=SOFTLOCKUP [ 1256.562783][T16812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1256.562797][T16812] RIP: 0010:kcov_task_exit+0x17b/0x240 [ 1256.562827][T16812] Code: 10 00 00 49 8b be 90 00 00 00 e8 50 cb 57 00 4c 89 f7 5b 41 5e 41 5f e9 f3 8b 5d 00 7c 40 5b 41 5e 41 5f e9 87 4c 80 09 cc 90 <0f> 0b 90 eb 10 90 0f 0b 90 eb 0a 90 0f 0b 90 eb 04 90 0f 0b 90 4c [ 1256.562846][T16812] RSP: 0018:ffffc90004f67d20 EFLAGS: 00010246 [ 1256.562865][T16812] RAX: 90bf7066a6010100 RBX: ffff88803fd83e00 RCX: 0000000000000000 [ 1256.562881][T16812] RDX: 00000000e8f3d702 RSI: ffffffff8bca5f60 RDI: 00000000ffffffff [ 1256.562897][T16812] RBP: ffffc90004f67e80 R08: ffffffff8b4419a0 R09: 0000000000000000 [ 1256.562912][T16812] R10: 0000000000000000 R11: ffffffff8e1c3000 R12: 0000000000000000 [ 1256.562925][T16812] R13: ffff88803fd83e00 R14: ffff888025ef4200 R15: ffff888025ef4208 [ 1256.562940][T16812] FS: 00007f3bb9f9f880(0000) GS:ffff888125c49000(0000) knlGS:0000000000000000 [ 1256.562959][T16812] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1256.562974][T16812] CR2: 0000562bbd6d7a38 CR3: 00000000b3334000 CR4: 00000000003526f0 [ 1256.562994][T16812] Call Trace: [ 1256.563003][T16812] [ 1256.563016][T16812] do_exit+0x159/0x2360 [ 1256.563049][T16812] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1256.563085][T16812] ? rt_mutex_slowunlock+0x4ee/0xa20 [ 1256.563113][T16812] ? reacquire_held_locks+0x104/0x190 [ 1256.563142][T16812] ? __pfx_do_exit+0x10/0x10 [ 1256.563187][T16812] ? rt_spin_unlock+0x157/0x200 [ 1256.563212][T16812] ? rt_spin_unlock+0x163/0x200 [ 1256.563238][T16812] do_group_exit+0x22d/0x2f0 [ 1256.563269][T16812] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1256.563293][T16812] __x64_sys_exit_group+0x3f/0x40 [ 1256.563321][T16812] x64_sys_call+0x221a/0x2240 [ 1256.563342][T16812] do_syscall_64+0x174/0x580 [ 1256.563372][T16812] ? trace_irq_disable+0x3b/0x140 [ 1256.563404][T16812] ? clear_bhb_loop+0x40/0x90 [ 1256.563429][T16812] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1256.563449][T16812] RIP: 0033:0x7f3bba0d76c5 [ 1256.563467][T16812] Code: ff ff ff 64 89 02 eb d2 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 35 21 f7 0f 00 ba e7 00 00 00 eb 03 66 90 f4 89 d0 0f 05 <48> 3d 00 f0 ff ff 76 f3 f7 d8 64 89 06 eb ec 66 2e 0f 1f 84 00 00 [ 1256.563483][T16812] RSP: 002b:00007ffd1d0ceed8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 1256.563503][T16812] RAX: ffffffffffffffda RBX: 0000562bbd6f0040 RCX: 00007f3bba0d76c5 [ 1256.563519][T16812] RDX: 00000000000000e7 RSI: fffffffffffffe68 RDI: 0000000000000000 [ 1256.563533][T16812] RBP: 0000562bbd6ce910 R08: 0000000000000000 R09: 0000000000000000 [ 1256.563547][T16812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1256.563560][T16812] R13: 00007ffd1d0cef20 R14: 0000000000000000 R15: 0000000000000000 [ 1256.563592][T16812] [ 1256.563602][T16812] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1256.563621][T16812] CPU: 0 UID: 0 PID: 16812 Comm: udevd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1256.563648][T16812] Tainted: [L]=SOFTLOCKUP [ 1256.563656][T16812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1256.563668][T16812] Call Trace: [ 1256.563677][T16812] [ 1256.563686][T16812] vpanic+0x56c/0xa60 [ 1256.563719][T16812] ? __pfx__printk+0x10/0x10 [ 1256.563745][T16812] ? __pfx_vpanic+0x10/0x10 [ 1256.563764][T16812] ? is_bpf_text_address+0x292/0x2b0 [ 1256.563829][T16812] ? is_bpf_text_address+0x26/0x2b0 [ 1256.563860][T16812] panic+0xc5/0xd0 [ 1256.563878][T16812] ? __pfx_panic+0x10/0x10 [ 1256.563915][T16812] __warn+0x315/0x4c0 [ 1256.563934][T16812] ? kcov_task_exit+0x17b/0x240 [ 1256.563962][T16812] ? kcov_task_exit+0x17b/0x240 [ 1256.563991][T16812] __report_bug+0x331/0x530 [ 1256.564102][T16812] ? kcov_task_exit+0x17b/0x240 [ 1256.564135][T16812] ? __pfx___report_bug+0x10/0x10 [ 1256.564165][T16812] ? __pfx_rtlock_slowlock_locked+0x10/0x10 [ 1256.564193][T16812] ? rt_spin_lock+0x1e0/0x400 [ 1256.564215][T16812] ? rt_spin_lock+0x1e0/0x400 [ 1256.564341][T16812] ? kcov_task_exit+0x17b/0x240 [ 1256.564370][T16812] report_bug+0x16a/0x220 [ 1256.564687][T16812] ? kcov_task_exit+0x17b/0x240 [ 1256.564717][T16812] ? kcov_task_exit+0x17d/0x240 [ 1256.564739][T16812] handle_bug+0x9c/0x200 [ 1256.564758][T16812] exc_invalid_op+0x1a/0x50 [ 1256.564775][T16812] asm_exc_invalid_op+0x1a/0x20 [ 1256.564792][T16812] RIP: 0010:kcov_task_exit+0x17b/0x240 [ 1256.564818][T16812] Code: 10 00 00 49 8b be 90 00 00 00 e8 50 cb 57 00 4c 89 f7 5b 41 5e 41 5f e9 f3 8b 5d 00 7c 40 5b 41 5e 41 5f e9 87 4c 80 09 cc 90 <0f> 0b 90 eb 10 90 0f 0b 90 eb 0a 90 0f 0b 90 eb 04 90 0f 0b 90 4c [ 1256.564837][T16812] RSP: 0018:ffffc90004f67d20 EFLAGS: 00010246 [ 1256.564923][T16812] RAX: 90bf7066a6010100 RBX: ffff88803fd83e00 RCX: 0000000000000000 [ 1256.564939][T16812] RDX: 00000000e8f3d702 RSI: ffffffff8bca5f60 RDI: 00000000ffffffff [ 1256.564953][T16812] RBP: ffffc90004f67e80 R08: ffffffff8b4419a0 R09: 0000000000000000 [ 1256.564967][T16812] R10: 0000000000000000 R11: ffffffff8e1c3000 R12: 0000000000000000 [ 1256.564981][T16812] R13: ffff88803fd83e00 R14: ffff888025ef4200 R15: ffff888025ef4208 [ 1256.565004][T16812] ? rt_spin_lock+0x1e0/0x400 [ 1256.565043][T16812] do_exit+0x159/0x2360 [ 1256.565072][T16812] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1256.565164][T16812] ? rt_mutex_slowunlock+0x4ee/0xa20 [ 1256.565194][T16812] ? reacquire_held_locks+0x104/0x190 [ 1256.565222][T16812] ? __pfx_do_exit+0x10/0x10 [ 1256.565260][T16812] ? rt_spin_unlock+0x157/0x200 [ 1256.565289][T16812] ? rt_spin_unlock+0x163/0x200 [ 1256.565318][T16812] do_group_exit+0x22d/0x2f0 [ 1256.565348][T16812] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1256.565370][T16812] __x64_sys_exit_group+0x3f/0x40 [ 1256.565399][T16812] x64_sys_call+0x221a/0x2240 [ 1256.565419][T16812] do_syscall_64+0x174/0x580 [ 1256.565446][T16812] ? trace_irq_disable+0x3b/0x140 [ 1256.565476][T16812] ? clear_bhb_loop+0x40/0x90 [ 1256.565501][T16812] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1256.565519][T16812] RIP: 0033:0x7f3bba0d76c5 [ 1256.565539][T16812] Code: ff ff ff 64 89 02 eb d2 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 35 21 f7 0f 00 ba e7 00 00 00 eb 03 66 90 f4 89 d0 0f 05 <48> 3d 00 f0 ff ff 76 f3 f7 d8 64 89 06 eb ec 66 2e 0f 1f 84 00 00 [ 1256.565556][T16812] RSP: 002b:00007ffd1d0ceed8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 1256.565579][T16812] RAX: ffffffffffffffda RBX: 0000562bbd6f0040 RCX: 00007f3bba0d76c5 [ 1256.565596][T16812] RDX: 00000000000000e7 RSI: fffffffffffffe68 RDI: 0000000000000000 [ 1256.565611][T16812] RBP: 0000562bbd6ce910 R08: 0000000000000000 R09: 0000000000000000 [ 1256.565625][T16812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1256.565637][T16812] R13: 00007ffd1d0cef20 R14: 0000000000000000 R15: 0000000000000000 [ 1256.565667][T16812] [ 1256.565828][T16812] Kernel Offset: disabled