last executing test programs: 7m26.345223624s ago: executing program 0 (id=155): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$sg(0x0, 0xffff0000, 0x2842) pipe(&(0x7f0000000d00)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) syz_open_dev$radio(&(0x7f0000000100), 0x0, 0x2) sendmmsg$inet(r3, &(0x7f0000000500)=[{{&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='p'], 0x70}}], 0x1, 0x2000c044) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r6], 0x20}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000240), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x714f, 0x0) 7m22.566025616s ago: executing program 0 (id=163): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000540)={0x1, 0x3, {0x61efbc0f, @struct={0x5, 0x4}, 0x0, 0x0, 0x8000000000000001, 0xfffffffffffffff8, 0x6, 0xfffffffffffffff2, 0xa0, @usage=0xfffffffffffffffb, 0xc94, 0x8, [0x4, 0xfffffffffffffff8, 0x7fffffffffffffff, 0x4f, 0x3, 0x80]}, {0x8000000000000001, @struct={0x9, 0x80000001}, 0x0, 0xf, 0x2, 0x4, 0x9, 0xffffffffffffff97, 0x10, @struct={0x1, 0x3}, 0x8000, 0x0, [0x1, 0x7, 0x3, 0x40, 0x9, 0x8000000000000001]}, {0x0, @usage=0x7, 0x0, 0x6c2, 0xb, 0x7, 0x46c89e81, 0x8, 0x4, @struct={0x3, 0xffffffff}, 0xffff8000, 0x9, [0x7, 0x101, 0x2, 0x0, 0x7, 0x3]}, {0x315f, 0x1}}) r1 = fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000580)='\xc1J\xaf\xfd,\x86\xbc\xa9\x02\xf2\xf6\xe2\xcd\x9f\xf6\x83\xeb\xba_6\xfdR\xd0\x8d\xc1\xf6.$w\xab|*`\x11H+^\xbb\x8ar\xb1\x8ec\xec,\xd5\xfd,\xce`\x9f\x92\xb4\xbe\x06?\xaa\x16Q\x94\x15\xbe\x80E\x9c\x93Hq?<(+\xceb0\xcc\xad\xdd\x1c\xee\x19\x1b\x91Z\x85\xb7\x04\xe7\xaf\xe0W,G\xc8\xc0\xbcR\x90\x17\x19@m\xa5\x19\x16i\xc8\x99)\xa5\xb0\xba\xbc\xe0rV\x06\xd0B\x0f\xcdF\xbc\x8e\x8a^%8k\x849S\x15=kxS\x1c\xc1\xdaT\x9c\b\xb6\xd8\xa0st~\xf1\x93\xb8\xba\xa5gV\x18F\x8f\xe4b\xdc\x19_P\x81\xa4\xc3\\g\x11\xd1\xc8 U\xba\x03\xc9\xf17\x88\r\xb99]\xdfM\xc8AQB\xc3\xf0\xf7t\xee\x95&w\xc3;', 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000780)='{:\'@-\x00\x9dF\x15\x86!\xa0\x85\xb9\x1f\xed\xb7X\x80\nQ\xf8\xc9\xf9|o3 S\xf7\x1eQr\xb1\xea\xe4\x16\xd8\x1c\\]\xb9\t\x92\xb0\x17\xdc*\xcd*\xc7:%\\LG\xa1\xd5c\x05T;\x99k\xe8\\\x8d5\x1c\xb2\x9e\x8eFV\x0e_gw\xc9^\xd8\xc6\t\xf5\xb1!\x97\x97x\x14:\x1e\x16\x0f&Tk.\xae6\'+\xcf\a\xe1\x87(l\xe0\x00|\n?u\xb8\xd3H\vt\xcc\xa1\x85\xf0\xd7\xd6wzx\xb9\x1c\xc9i\x9fc[u$$\a\xff2\x06\x03|(\xbc\xf4il@OA\f*\xd2', &(0x7f0000000180)='%*.\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, 0x0, &(0x7f0000000a80)='fuseblk\x00', 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0xffffffffffffffa9, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed36adbe9abc89b6f5bec", 0x0, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r5 = dup(r2) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x103, 0x100, 0x551}}) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x107, 0x100, 0x100, 0x1, 0x4000}}) syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000fddbdf251200000008000300", @ANYRES32, @ANYBLOB="0a00060008021100000100000c00430002"], 0x34}}, 0x20048054) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000500)=ANY=[], 0x119) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)='\b\x00\x00\x00', 0x4}, {0x0, 0x18}], 0x2) 7m21.537933797s ago: executing program 0 (id=167): socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000540)={0x1, 0x3, {0x61efbc0f, @struct={0x5, 0x4}, 0x0, 0x0, 0x8000000000000001, 0xfffffffffffffff8, 0x6, 0xfffffffffffffff2, 0xa0, @usage=0xfffffffffffffffb, 0xc94, 0x8, [0x4, 0xfffffffffffffff8, 0x7fffffffffffffff, 0x4f, 0x3, 0x80]}, {0x8000000000000001, @struct={0x9, 0x80000001}, 0x0, 0xf, 0x2, 0x4, 0x9, 0xffffffffffffff97, 0x10, @struct={0x1, 0x3}, 0x8000, 0x0, [0x1, 0x7, 0x3, 0x40, 0x9, 0x8000000000000001]}, {0x0, @usage=0x7, 0x0, 0x6c2, 0xb, 0x7, 0x46c89e81, 0x8, 0x4, @struct={0x3, 0xffffffff}, 0xffff8000, 0x9, [0x7, 0x101, 0x2, 0x0, 0x7, 0x3]}, {0x315f, 0x1}}) r0 = fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000780)='{:\'@-\x00\x9dF\x15\x86!\xa0\x85\xb9\x1f\xed\xb7X\x80\nQ\xf8\xc9\xf9|o3 S\xf7\x1eQr\xb1\xea\xe4\x16\xd8\x1c\\]\xb9\t\x92\xb0\x17\xdc*\xcd*\xc7:%\\LG\xa1\xd5c\x05T;\x99k\xe8\\\x8d5\x1c\xb2\x9e\x8eFV\x0e_gw\xc9^\xd8\xc6\t\xf5\xb1!\x97\x97x\x14:\x1e\x16\x0f&Tk.\xae6\'+\xcf\a\xe1\x87(l\xe0\x00|\n?u\xb8\xd3H\vt\xcc\xa1\x85\xf0\xd7\xd6wzx\xb9\x1c\xc9i\x9fc[u$$\a\xff2\x06\x03|(\xbc\xf4il@OA\f*\xd2', &(0x7f0000000180)='%*.\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, 0x0, &(0x7f0000000a80)='fuseblk\x00', 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0xffffffffffffffa9, 0x0, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0x5, &(0x7f0000000140)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed36adbe9abc89b6f5bec", 0x0, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r4 = dup(r1) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x103, 0x100, 0x551}}) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x107, 0x100, 0x100, 0x1, 0x4000}}) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x181001, 0x0) ioctl$COMEDI_INSN(r5, 0x8028640c, &(0x7f0000000080)={0xc000003, 0x40000000000001a3, &(0x7f0000000580), 0x0, 0x2}) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), 0xffffffffffffffff) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000500)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) writev(r6, &(0x7f00000002c0)=[{&(0x7f0000000040)='\b\x00\x00\x00', 0x4}, {0x0, 0x18}], 0x2) 7m19.076996752s ago: executing program 0 (id=172): setitimer(0x2, &(0x7f0000000040)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) clock_adjtime(0x0, &(0x7f0000000040)={0xa9c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdir(0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000040)=0x1, 0x12) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000cbd38211d6b4e30abddae9bd9d913f2df7da2793f064a04b7ee6ab02fc38e90b87c639a7073d227e3d9d8703a4dbb4e3f10aaa3709c7e50d31ba0ea979d33b20ccf870d06a7e637412c9889921c661722b096f28014ae18692cbdb3d15106f6736b3819725662592f47e6224dfd7cf2280d1ef4d550cc2a2fb7df3c2514cf3adc448a3fd29e1c3bf87c18ebee3292766e6d8d80c23c761be2819b2fafc5680dd94a06eb66afda8", @ANYRES32=r5, @ANYBLOB], &(0x7f0000000000)='syzkaller\x00'}, 0x94) 7m16.963404256s ago: executing program 0 (id=175): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000008880)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x80000, 0x0, 0x0, 0x0, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x5, 0x0, 0xa53, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x10b}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) read$FUSE(r2, &(0x7f0000002140)={0x2020}, 0x2020) 7m16.55750404s ago: executing program 0 (id=179): bind$tipc(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, 0x0) 7m1.322014016s ago: executing program 32 (id=179): bind$tipc(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, 0x0) 11.189094862s ago: executing program 1 (id=1328): syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2ac, 0x0, 0x1, 0x15, 0x0, "89753015418ab0cb0900245518580ce0c8bf604cca41f31c108938fcfa393ef569e0bcf244bb4b23555b130900000000000000d0f08e8ad896ba67a07673defa", "8b609009aaa722681a1e2513d754f688a9e306ee1dba533f02e1b69da6e26ec889fee40080000027cc7d24fdc26f1a95d702020000e4b8fb1703e47463b969e4", "ca1bf5ffffffffffffff6570128218a0d22915ff6eddb10000800400", [0xc]}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000ec0)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @dstopts_2292={{0x80, 0x29, 0x4, {0x4, 0xc, '\x00', [@generic={0x80, 0xf, "09e12e5f0b6bdcf72f2ec7008a15fa"}, @calipso={0x7, 0x30, {0x1, 0xa, 0x7a, 0x8001, [0x5, 0x9, 0x4, 0x400, 0xb]}}, @ra={0x5, 0x2, 0xa7e}, @pad1, @ra={0x5, 0x2, 0xbf4}, @hao={0xc9, 0x10, @private2}, @generic={0x93}]}}}, @hoplimit={{0x14}}, @hopopts={{0x70, 0x29, 0x36, {0x5e, 0xa, '\x00', [@generic={0xff, 0x41, "50d650847249ad288702ebd0d654b985e8908defb7ec6c5ff115c58e128b9e3a21c34b45ef9de99984e143ca7c3509a971b2ec429ee1edc0bb903fe94b32c28f70"}, @pad1, @pad1, @generic={0x8}, @calipso={0x7, 0x8, {0x3, 0x0, 0x3}}]}}}, @rthdr={{0x18}}], 0x138}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 10.795022895s ago: executing program 1 (id=1332): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000180)={0x1d, r5, 0x0, {0x0, 0x0, 0x1}, 0x2}, 0x18) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') getpeername$ax25(r4, &(0x7f0000019080)={{0x3, @rose}, [@remote, @rose, @null, @bcast, @netrom, @default, @remote, @bcast]}, 0x0) pread64(r6, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000040)={&(0x7f00006c6000/0x400000)=nil, &(0x7f0000685000/0x4000)=nil, 0x400000, 0x0, 0x18100}) 7.47695875s ago: executing program 2 (id=1340): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x30}}, 0x2}}, 0x2e) connect$inet6(r1, &(0x7f0000000080)={0xa, 0xfffa, 0x0, @loopback, 0x2}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000300)='task\x00') setxattr$incfs_size(&(0x7f0000010040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000020040), 0x0, 0x0, 0x2) getdents(r2, 0xffffffffffffffff, 0x5a) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, &(0x7f0000000340)=""/203, &(0x7f00000000c0)=0xcb) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) getpid() socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x34, r3, 0x1, 0x70bd2b, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) 7.177300508s ago: executing program 2 (id=1345): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@noblock_validity}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@grpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") r1 = creat(&(0x7f0000000040)='./bus\x00', 0x4) io_setup(0x202, &(0x7f0000000200)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x42) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r3, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x2000, 0x0, 0x0, r0}]) 6.850838207s ago: executing program 1 (id=1349): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000540)={0x1, 0x3, {0x61efbc0f, @struct={0x5, 0x4}, 0x0, 0x0, 0x8000000000000001, 0xfffffffffffffff8, 0x6, 0xfffffffffffffff2, 0xa0, @usage=0xfffffffffffffffb, 0xc94, 0x8, [0x4, 0xfffffffffffffff8, 0x7fffffffffffffff, 0x4f, 0x3, 0x80]}, {0x8000000000000001, @struct={0x9, 0x80000001}, 0x0, 0xf, 0x2, 0x4, 0x9, 0xffffffffffffff97, 0x10, @struct={0x1, 0x3}, 0x8000, 0x0, [0x1, 0x7, 0x3, 0x40, 0x9, 0x8000000000000001]}, {0x0, @usage=0x7, 0x0, 0x6c2, 0xb, 0x7, 0x46c89e81, 0x8, 0x4, @struct={0x3, 0xffffffff}, 0xffff8000, 0x9, [0x7, 0x101, 0x2, 0x0, 0x7, 0x3]}, {0x315f, 0x1}}) r1 = fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000580)='\xc1J\xaf\xfd,\x86\xbc\xa9\x02\xf2\xf6\xe2\xcd\x9f\xf6\x83\xeb\xba_6\xfdR\xd0\x8d\xc1\xf6.$w\xab|*`\x11H+^\xbb\x8ar\xb1\x8ec\xec,\xd5\xfd,\xce`\x9f\x92\xb4\xbe\x06?\xaa\x16Q\x94\x15\xbe\x80E\x9c\x93Hq?<(+\xceb0\xcc\xad\xdd\x1c\xee\x19\x1b\x91Z\x85\xb7\x04\xe7\xaf\xe0W,G\xc8\xc0\xbcR\x90\x17\x19@m\xa5\x19\x16i\xc8\x99)\xa5\xb0\xba\xbc\xe0rV\x06\xd0B\x0f\xcdF\xbc\x8e\x8a^%8k\x849S\x15=kxS\x1c\xc1\xdaT\x9c\b\xb6\xd8\xa0st~\xf1\x93\xb8\xba\xa5gV\x18F\x8f\xe4b\xdc\x19_P\x81\xa4\xc3\\g\x11\xd1\xc8 U\xba\x03\xc9\xf17\x88\r\xb99]\xdfM\xc8AQB\xc3\xf0\xf7t\xee\x95&w\xc3;', 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000780)='{:\'@-\x00\x9dF\x15\x86!\xa0\x85\xb9\x1f\xed\xb7X\x80\nQ\xf8\xc9\xf9|o3 S\xf7\x1eQr\xb1\xea\xe4\x16\xd8\x1c\\]\xb9\t\x92\xb0\x17\xdc*\xcd*\xc7:%\\LG\xa1\xd5c\x05T;\x99k\xe8\\\x8d5\x1c\xb2\x9e\x8eFV\x0e_gw\xc9^\xd8\xc6\t\xf5\xb1!\x97\x97x\x14:\x1e\x16\x0f&Tk.\xae6\'+\xcf\a\xe1\x87(l\xe0\x00|\n?u\xb8\xd3H\vt\xcc\xa1\x85\xf0\xd7\xd6wzx\xb9\x1c\xc9i\x9fc[u$$\a\xff2\x06\x03|(\xbc\xf4il@OA\f*\xd2', &(0x7f0000000180)='%*.\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, 0x0, &(0x7f0000000a80)='fuseblk\x00', 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0xffffffffffffffa9, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000913000000000000030000008500000027000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed36adbe9abc89b6f5bec", 0x0, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r5 = dup(r2) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x103, 0x100, 0x551}}) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x107, 0x100, 0x100, 0x1, 0x4000}}) syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYRES32, @ANYBLOB="0a00060008021100000100000c00430002"], 0x34}}, 0x20048054) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000500)=ANY=[], 0x119) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)='\b\x00\x00\x00', 0x4}, {0x0, 0x18}], 0x2) 5.660977137s ago: executing program 3 (id=1350): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000002000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa0000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) 5.495387307s ago: executing program 5 (id=1351): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x1, 0x7, 0x3655ebcf}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000040)={r0, r0, 0xfd, 0x0, 0x0, 0x2, 0x9, 0xe, 0x8, 0x0, 0x0, 0xd9, 'syz1\x00'}) 5.351669515s ago: executing program 1 (id=1353): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x5c, 0x160, 0x0, 0x3e0, 0x250, 0x228, 0x25a, 0x250, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev, [], [0x0, 0x0, 0x0, 0xff000000], 'veth0_to_batadv\x00', 'pim6reg\x00', {0xff}, {}, 0x3a}, 0x5002, 0xf8, 0x140, 0x52020000, {0x0, 0x6802000000000000}, [@common=@icmp6={{0x28}, {0x12, "d176", 0xff}}, @common=@unspec=@state={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x1}}}, {{@ipv6={@empty, @empty, [0xffffffff], [], 'veth1_to_hsr\x00', 'dummy0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00', {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 5.27359626s ago: executing program 2 (id=1354): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0xc0}, 0x44080) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c"], 0x7c}, 0x1, 0x0, 0x0, 0xc4}, 0x890) ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f0000000900)={0x0, 0x9}) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x8000) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)}, 0x8000) sendmmsg(r0, &(0x7f0000000dc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000600)="ded6428a5918ee0d654fa3090616448acfb51d3e1c0810335481f6f61b6298fa07f54821c6203ba0c420", 0x2a}], 0x1}}], 0x1, 0x4088) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0x20104, 0x4, 0x1, 0x1}, 0x48) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 5.2730179s ago: executing program 3 (id=1355): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_ep_read(0xffffffffffffffff, 0x7, 0x92, &(0x7f0000002240)=""/146) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) socket$inet(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f0000000080)={0x3ff, 0x7, 0x100000, 0x9, 0x0, 0xf, 0x80000002}, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000140)='tracefs\x00', 0x22048dc, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r2, &(0x7f0000002780)={0x2020}, 0x5ecfb203) futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0) read$eventfd(r2, &(0x7f0000000180), 0x8) 5.245132101s ago: executing program 1 (id=1357): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x55) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4) bind$inet6(r1, &(0x7f0000000540)={0xa, 0x4e22, 0x7, @empty, 0x200}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2, 0x0, 0x0, 0x60}}}}}}, 0x0) 5.153183287s ago: executing program 5 (id=1358): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) getsockopt$MRT(r1, 0x0, 0xce, 0x0, 0x0) 5.152605527s ago: executing program 1 (id=1359): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000180)={0x1d, r5, 0x0, {0x0, 0x0, 0x1}, 0x2}, 0x18) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') getpeername$ax25(r4, &(0x7f0000019080)={{0x3, @rose}, [@remote, @rose, @null, @bcast, @netrom, @default, @remote, @bcast]}, 0x0) pread64(r6, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000040)={&(0x7f00006c6000/0x400000)=nil, &(0x7f0000685000/0x4000)=nil, 0x400000, 0x0, 0x18100}) 5.049581023s ago: executing program 5 (id=1361): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0xf, @ipv4={'\x00', '\xff\xff', @empty}, 0x5}, 0x1c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e34, 0x80000000, @remote, 0x2}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x80000b, @empty, 0x3}, 0x1c) 4.684111864s ago: executing program 4 (id=1362): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@bridge_newvlan={0x18, 0x70, 0x1, 0x800000, 0x0, {0x7, 0x0, 0x0, r2}}, 0x18}, 0x1, 0x0, 0x0, 0x881}, 0x20044014) 3.73737533s ago: executing program 2 (id=1363): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x11, &(0x7f0000001a80)={[{@orlov}, {@norecovery}, {@inlinecrypt}, {@resuid}]}, 0x8, 0x617, &(0x7f0000001100)="$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") 3.56949138s ago: executing program 5 (id=1364): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000540)={0x1, 0x3, {0x61efbc0f, @struct={0x5, 0x4}, 0x0, 0x0, 0x8000000000000001, 0xfffffffffffffff8, 0x6, 0xfffffffffffffff2, 0xa0, @usage=0xfffffffffffffffb, 0xc94, 0x8, [0x4, 0xfffffffffffffff8, 0x7fffffffffffffff, 0x4f, 0x3, 0x80]}, {0x8000000000000001, @struct={0x9, 0x80000001}, 0x0, 0xf, 0x2, 0x4, 0x9, 0xffffffffffffff97, 0x10, @struct={0x1, 0x3}, 0x8000, 0x0, [0x1, 0x7, 0x3, 0x40, 0x9, 0x8000000000000001]}, {0x0, @usage=0x7, 0x0, 0x6c2, 0xb, 0x7, 0x46c89e81, 0x8, 0x4, @struct={0x3, 0xffffffff}, 0xffff8000, 0x9, [0x7, 0x101, 0x2, 0x0, 0x7, 0x3]}, {0x315f, 0x1}}) r1 = fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000580)='\xc1J\xaf\xfd,\x86\xbc\xa9\x02\xf2\xf6\xe2\xcd\x9f\xf6\x83\xeb\xba_6\xfdR\xd0\x8d\xc1\xf6.$w\xab|*`\x11H+^\xbb\x8ar\xb1\x8ec\xec,\xd5\xfd,\xce`\x9f\x92\xb4\xbe\x06?\xaa\x16Q\x94\x15\xbe\x80E\x9c\x93Hq?<(+\xceb0\xcc\xad\xdd\x1c\xee\x19\x1b\x91Z\x85\xb7\x04\xe7\xaf\xe0W,G\xc8\xc0\xbcR\x90\x17\x19@m\xa5\x19\x16i\xc8\x99)\xa5\xb0\xba\xbc\xe0rV\x06\xd0B\x0f\xcdF\xbc\x8e\x8a^%8k\x849S\x15=kxS\x1c\xc1\xdaT\x9c\b\xb6\xd8\xa0st~\xf1\x93\xb8\xba\xa5gV\x18F\x8f\xe4b\xdc\x19_P\x81\xa4\xc3\\g\x11\xd1\xc8 U\xba\x03\xc9\xf17\x88\r\xb99]\xdfM\xc8AQB\xc3\xf0\xf7t\xee\x95&w\xc3;', 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000780)='{:\'@-\x00\x9dF\x15\x86!\xa0\x85\xb9\x1f\xed\xb7X\x80\nQ\xf8\xc9\xf9|o3 S\xf7\x1eQr\xb1\xea\xe4\x16\xd8\x1c\\]\xb9\t\x92\xb0\x17\xdc*\xcd*\xc7:%\\LG\xa1\xd5c\x05T;\x99k\xe8\\\x8d5\x1c\xb2\x9e\x8eFV\x0e_gw\xc9^\xd8\xc6\t\xf5\xb1!\x97\x97x\x14:\x1e\x16\x0f&Tk.\xae6\'+\xcf\a\xe1\x87(l\xe0\x00|\n?u\xb8\xd3H\vt\xcc\xa1\x85\xf0\xd7\xd6wzx\xb9\x1c\xc9i\x9fc[u$$\a\xff2\x06\x03|(\xbc\xf4il@OA\f*\xd2', &(0x7f0000000180)='%*.\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, 0x0, &(0x7f0000000a80)='fuseblk\x00', 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0xffffffffffffffa9, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000913000000000000030000008500000027000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed36adbe9abc89b6f5bec", 0x0, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r5 = dup(r2) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x103, 0x100, 0x551}}) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x107, 0x100, 0x100, 0x1, 0x4000}}) syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB, @ANYRES32, @ANYBLOB="0a00060008021100000100000c00430002"], 0x34}}, 0x20048054) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000500)=ANY=[], 0x119) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)='\b\x00\x00\x00', 0x4}, {0x0, 0x18}], 0x2) 3.56923504s ago: executing program 4 (id=1365): syz_read_part_table(0x5bf, &(0x7f0000000280)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x183042, 0x15) fallocate(r0, 0x0, 0x37eb, 0x1955) 3.525119443s ago: executing program 3 (id=1366): set_mempolicy(0x3, &(0x7f0000000000)=0x7, 0x8) r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0x10017, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 2.531795661s ago: executing program 3 (id=1367): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0xa4, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1], 0x0, [0x8, 0x6, 0x3c, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x401]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x1}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0x1}]}}]}, 0xa4}}, 0x0) 2.459819736s ago: executing program 4 (id=1368): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb0400000220376a412f853e13f49133025743c25198841dd7e6e277edc8b622235ba9b1fe074fc0afef4c9c2a5f277759281a47dd562fecb80e59e2a71dfad76f96a5ed7572c2e98dadddacb90e542b12837be0ef4f6b7e3ef462c4300d6368ac1cf07bcbb86271ba0de3a61ed758ff6bcbded2bb2fe04cf7576f03694c12145124216bad"], 0x0, 0x26}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$bt_hci(r3, 0x0, 0x1, &(0x7f0000000000)=""/204, &(0x7f0000000100)=0xcc) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x6, &(0x7f00000007c0)={0x65, {{0x29, 0x0, 0x8000002, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2b}}, 0x3}}}, 0x88) r4 = syz_open_dev$video4linux(&(0x7f00000007c0), 0x80000005, 0x20040) ioctl$VIDIOC_SUBDEV_S_FMT(r4, 0xc0585605, &(0x7f00000000c0)={0x1, 0x0, {0x1, 0x0, 0x201a, 0x9, 0xa, 0x0, 0x5, 0x1993012db91ab52e}}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r6, r5, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000a2b000/0x2000)=nil, 0x2000, 0x1, 0x11, r7, 0x50000000000) socket$inet6_tcp(0xa, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80a02, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x8000000a, 0x2}, 0x0, 0x0) 2.459156896s ago: executing program 5 (id=1369): socket$can_raw(0x1d, 0x3, 0x1) socket$can_raw(0x1d, 0x3, 0x1) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x11) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x2) 2.197711261s ago: executing program 3 (id=1370): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000001000)='./bus\x00', 0x0, &(0x7f0000000200)={[{@noquota}, {@min_batch_time={'min_batch_time', 0x3d, 0x1b}}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@norecovery}]}, 0xfe, 0x27e, &(0x7f00000002c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="08000000020003000b"], 0x0) 1.466575624s ago: executing program 4 (id=1371): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@multicast1, @in=@multicast2, 0x4e20, 0x0, 0x800, 0x0, 0x2}, {0x7, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {0xffffffffffffffff}, 0x3, 0x0, 0x0, 0x0, 0x3, 0x3}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x2b}, 0x0, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x200000}}, 0xe8) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "108f84", 0x18, 0x3a, 0xff, @remote, @local, {[], @ndisc_na={0x92, 0x0, 0x0, 0x0, '\x00', @ipv4={'\x00', '\xff\xff', @multicast2}}}}}}}, 0x0) 1.269108876s ago: executing program 4 (id=1372): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000540)={0x1, 0x3, {0x61efbc0f, @struct={0x5, 0x4}, 0x0, 0x0, 0x8000000000000001, 0xfffffffffffffff8, 0x6, 0xfffffffffffffff2, 0xa0, @usage=0xfffffffffffffffb, 0xc94, 0x8, [0x4, 0xfffffffffffffff8, 0x7fffffffffffffff, 0x4f, 0x3, 0x80]}, {0x8000000000000001, @struct={0x9, 0x80000001}, 0x0, 0xf, 0x2, 0x4, 0x9, 0xffffffffffffff97, 0x10, @struct={0x1, 0x3}, 0x8000, 0x0, [0x1, 0x7, 0x3, 0x40, 0x9, 0x8000000000000001]}, {0x0, @usage=0x7, 0x0, 0x6c2, 0xb, 0x7, 0x46c89e81, 0x8, 0x4, @struct={0x3, 0xffffffff}, 0xffff8000, 0x9, [0x7, 0x101, 0x2, 0x0, 0x7, 0x3]}, {0x315f, 0x1}}) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000580)='\xc1J\xaf\xfd,\x86\xbc\xa9\x02\xf2\xf6\xe2\xcd\x9f\xf6\x83\xeb\xba_6\xfdR\xd0\x8d\xc1\xf6.$w\xab|*`\x11H+^\xbb\x8ar\xb1\x8ec\xec,\xd5\xfd,\xce`\x9f\x92\xb4\xbe\x06?\xaa\x16Q\x94\x15\xbe\x80E\x9c\x93Hq?<(+\xceb0\xcc\xad\xdd\x1c\xee\x19\x1b\x91Z\x85\xb7\x04\xe7\xaf\xe0W,G\xc8\xc0\xbcR\x90\x17\x19@m\xa5\x19\x16i\xc8\x99)\xa5\xb0\xba\xbc\xe0rV\x06\xd0B\x0f\xcdF\xbc\x8e\x8a^%8k\x849S\x15=kxS\x1c\xc1\xdaT\x9c\b\xb6\xd8\xa0st~\xf1\x93\xb8\xba\xa5gV\x18F\x8f\xe4b\xdc\x19_P\x81\xa4\xc3\\g\x11\xd1\xc8 U\xba\x03\xc9\xf17\x88\r\xb99]\xdfM\xc8AQB\xc3\xf0\xf7t\xee\x95&w\xc3;', 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000780)='{:\'@-\x00\x9dF\x15\x86!\xa0\x85\xb9\x1f\xed\xb7X\x80\nQ\xf8\xc9\xf9|o3 S\xf7\x1eQr\xb1\xea\xe4\x16\xd8\x1c\\]\xb9\t\x92\xb0\x17\xdc*\xcd*\xc7:%\\LG\xa1\xd5c\x05T;\x99k\xe8\\\x8d5\x1c\xb2\x9e\x8eFV\x0e_gw\xc9^\xd8\xc6\t\xf5\xb1!\x97\x97x\x14:\x1e\x16\x0f&Tk.\xae6\'+\xcf\a\xe1\x87(l\xe0\x00|\n?u\xb8\xd3H\vt\xcc\xa1\x85\xf0\xd7\xd6wzx\xb9\x1c\xc9i\x9fc[u$$\a\xff2\x06\x03|(\xbc\xf4il@OA\f*\xd2', &(0x7f0000000180)='%*.\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000a80)='fuseblk\x00', 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0xffffffffffffffa9, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000913000000000000030000008500000027000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r4 = dup(r1) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x103, 0x100, 0x551}}) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x107, 0x100, 0x100, 0x1, 0x4000}}) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x181001, 0x0) ioctl$COMEDI_INSN(r5, 0x8028640c, &(0x7f0000000080)={0xc000003, 0x40000000000001a3, &(0x7f0000000580), 0x0, 0x2}) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000fddbdf", @ANYRES32=r6, @ANYBLOB="0a00060008021100000100000c00430002"], 0x34}}, 0x20048054) r8 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) write$UHID_CREATE2(r8, &(0x7f0000000500)=ANY=[], 0x119) writev(r8, &(0x7f00000002c0)=[{&(0x7f0000000040)='\b\x00\x00\x00', 0x4}, {0x0, 0x18}], 0x2) 1.214573179s ago: executing program 2 (id=1373): fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000200)=0x4) bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffe68) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x8, 0x6, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0xda00, 0x0, 0x0, 0x0, 0x80c51000}]}, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0xce, &(0x7f0000000340)=""/206}, 0x94) keyctl$join(0x1, &(0x7f0000000300)={'syz', 0x2}) getsockopt(r0, 0x7, 0x6, &(0x7f0000000040)=""/57, &(0x7f0000000140)=0x39) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() syz_open_pts(0xffffffffffffffff, 0x101580) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) shmctl$IPC_RMID(0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) unshare(0x28000600) epoll_create1(0x80000) unshare(0x2c020400) 82.728055ms ago: executing program 2 (id=1374): r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) sched_setscheduler(0x0, 0x2, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000002bc0), 0x602, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x1, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 82.453175ms ago: executing program 4 (id=1375): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff000000000000000458000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1) 1.65549ms ago: executing program 3 (id=1376): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) shmget(0x0, 0x1000, 0x2, &(0x7f0000c36000/0x1000)=nil) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000200)={'vcan0\x00'}) bind$can_j1939(r4, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') getpeername$ax25(r4, &(0x7f0000019080)={{0x3, @rose}, [@remote, @rose, @null, @bcast, @netrom, @default, @remote, @bcast]}, 0x0) 0s ago: executing program 5 (id=1377): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@dev={0xac, 0x14, 0x14, 0x24}, @in6=@mcast1, 0x0, 0x0, 0x800, 0x0, 0x2}, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x800000000000000, 0xffffffffffffffff}, {}, 0x5, 0x0, 0x1, 0x1, 0x0, 0x2}, {{@in=@empty, 0x1, 0x33}, 0x0, @in6=@loopback, 0x0, 0x0, 0x1, 0xb7}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) kernel console output (not intermixed with test programs): hsr0: link becomes ready [ 72.430066][ T4194] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.445275][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.456937][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.466710][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.498500][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.519123][ T1210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.537057][ T1210] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.552146][ T1210] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.559574][ T1210] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.575370][ T1210] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.593150][ T1210] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.602387][ T1210] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.609579][ T1210] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.623565][ T1210] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.664802][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.681484][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.702676][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.736718][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.753178][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.772011][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.782831][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.798964][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.812911][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.824449][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.846675][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.864199][ T4194] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 72.880445][ T4194] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.892770][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.901346][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.911440][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.920264][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.929074][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.957438][ T4265] Bluetooth: hci0: command 0x041b tx timeout [ 72.972884][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.979955][ T4265] Bluetooth: hci3: command 0x041b tx timeout [ 72.988927][ T4265] Bluetooth: hci4: command 0x041b tx timeout [ 72.995618][ T4265] Bluetooth: hci2: command 0x041b tx timeout [ 73.002343][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.003211][ T4265] Bluetooth: hci1: command 0x041b tx timeout [ 73.017320][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.028009][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.036960][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.046029][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.053180][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.061358][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.070839][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.079837][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.086985][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.094860][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.102788][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.116311][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.124916][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.132916][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.147701][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.155983][ T1210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.176403][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.222625][ T1210] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.238286][ T1210] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.253246][ T1210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.264872][ T1210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.276751][ T1210] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.286872][ T1210] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.296171][ T1210] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.304955][ T1210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.314171][ T1210] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.323288][ T1210] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.330541][ T1210] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.339739][ T1210] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.352697][ T1210] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.367847][ T1210] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.376734][ T1210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.407065][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.423294][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.451561][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.464560][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.473754][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.481058][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.496342][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.504892][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.541089][ T4188] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.552994][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.565403][ T4186] device veth0_vlan entered promiscuous mode [ 73.588389][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.598030][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.607972][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.617546][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.626589][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.635845][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.647431][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.656795][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.666815][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.674923][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.691536][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.701265][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.711481][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.720411][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.728724][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.739404][ T4187] device veth0_vlan entered promiscuous mode [ 73.759026][ T4186] device veth1_vlan entered promiscuous mode [ 73.775125][ T1250] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.785310][ T1250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.794435][ T1250] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.832132][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.865875][ T1250] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.880564][ T1250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.892251][ T1250] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.909105][ T1250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.924232][ T1250] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.937077][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.956103][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.971037][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.981197][ T4187] device veth1_vlan entered promiscuous mode [ 73.997427][ T4186] device veth0_macvtap entered promiscuous mode [ 74.014079][ T1210] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.025993][ T1210] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.034436][ T1210] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.043176][ T1210] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.068211][ T4186] device veth1_macvtap entered promiscuous mode [ 74.083575][ T1210] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.093503][ T1210] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.109392][ T1210] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.120878][ T1210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.160043][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.176145][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.196620][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.209208][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.227444][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.240219][ T4194] device veth0_vlan entered promiscuous mode [ 74.264983][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.277512][ T4187] device veth0_macvtap entered promiscuous mode [ 74.292418][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.300694][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.309708][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.321402][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.331406][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.350316][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.362243][ T4187] device veth1_macvtap entered promiscuous mode [ 74.374524][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.383363][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.393116][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.408705][ T4186] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.419956][ T4186] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.432190][ T4186] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.448055][ T4186] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.480473][ T4194] device veth1_vlan entered promiscuous mode [ 74.502016][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.517220][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.547588][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.555634][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.576721][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.594055][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.626465][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.637779][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.653187][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.672010][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.684349][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.702576][ T4194] device veth0_macvtap entered promiscuous mode [ 74.721936][ T1210] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.750740][ T1210] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.759942][ T1210] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.771868][ T1210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.787955][ T4187] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.797009][ T4187] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.806156][ T4187] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.814983][ T4187] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.844568][ T4194] device veth1_macvtap entered promiscuous mode [ 74.856745][ T1210] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.871190][ T1210] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.879742][ T1210] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.889279][ T1210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.918945][ T1210] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.928464][ T1210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.968807][ T1210] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.980239][ T1210] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.988531][ T1210] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.998643][ T1210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.025796][ T4265] Bluetooth: hci2: command 0x040f tx timeout [ 75.032452][ T4265] Bluetooth: hci4: command 0x040f tx timeout [ 75.040622][ T4191] device veth0_vlan entered promiscuous mode [ 75.047097][ T4265] Bluetooth: hci3: command 0x040f tx timeout [ 75.054532][ T1210] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.066917][ T1210] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.072454][ T4265] Bluetooth: hci0: command 0x040f tx timeout [ 75.091581][ T4188] device veth0_vlan entered promiscuous mode [ 75.105683][ T1107] Bluetooth: hci1: command 0x040f tx timeout [ 75.106631][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.123501][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.133425][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.144194][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.156733][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.172048][ T1210] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.184793][ T1210] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.194804][ T1210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.207205][ T1210] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.216688][ T1210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.225909][ T1210] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.233879][ T1210] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.262434][ T4191] device veth1_vlan entered promiscuous mode [ 75.271976][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.283540][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.297241][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.308143][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.321168][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.339877][ T4188] device veth1_vlan entered promiscuous mode [ 75.348630][ T1210] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 75.357986][ T1210] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 75.367105][ T1210] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.376691][ T1210] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.394050][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.399063][ T4194] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.412871][ T4194] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.422822][ T4194] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.433352][ T4194] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.436613][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.457019][ T1210] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 75.467978][ T1210] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.492645][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.512945][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.545983][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.599764][ T4188] device veth0_macvtap entered promiscuous mode [ 75.613612][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.623823][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.641180][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.657382][ T4188] device veth1_macvtap entered promiscuous mode [ 75.702173][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.710856][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.721661][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.741848][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.780785][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.791120][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.806731][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.817944][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.829782][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.853126][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.904945][ T1258] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.919433][ T1275] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.952454][ T1258] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.964115][ T1275] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.004697][ T4191] device veth0_macvtap entered promiscuous mode [ 76.069602][ T1258] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.117753][ T1258] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.176880][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 76.312555][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.358631][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.413880][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.452635][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.484092][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 76.508569][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.571524][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.641341][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.652341][ T4191] device veth1_macvtap entered promiscuous mode [ 76.678747][ T1258] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 76.691113][ T1258] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.701437][ T1258] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.714918][ T4188] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.724599][ T4188] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.733458][ T4188] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.743241][ T4188] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.812411][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.832065][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.842837][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.884253][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.897756][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.915171][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.932007][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.951747][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.003531][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.028098][ T1210] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.050611][ T1258] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.070675][ T1210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.080319][ T1258] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.105301][ T4237] Bluetooth: hci3: command 0x0419 tx timeout [ 77.111475][ T4237] Bluetooth: hci4: command 0x0419 tx timeout [ 77.118312][ T1110] Bluetooth: hci0: command 0x0419 tx timeout [ 77.133398][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.154853][ T4237] Bluetooth: hci2: command 0x0419 tx timeout [ 77.161845][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.184163][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.196024][ T4230] Bluetooth: hci1: command 0x0419 tx timeout [ 77.223266][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.243438][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.254170][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.267083][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.285105][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.302938][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.471742][ T1258] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.481582][ T1258] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.496083][ T1258] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.773321][ T4191] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.887045][ T4191] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.977417][ T4191] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.155154][ T4191] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.315257][ T1210] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.361695][ T1210] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.443631][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.487821][ T1275] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.517968][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.536637][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.549606][ T1275] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.587378][ T1258] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.615066][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 78.624088][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 78.633274][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 78.642319][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #302!!! [ 78.651351][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #302!!! [ 78.660672][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #302!!! [ 78.669837][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 78.678843][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 79.207359][ T4324] vcan0: tx drop: invalid da for name 0x0000000000000015 [ 80.427755][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.505206][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.523979][ T1258] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 81.388432][ T1258] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 81.410723][ T1258] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.474937][ T1258] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.528503][ T1258] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 81.692485][ T26] audit: type=1326 audit(1769089389.235:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4334 comm="syz.1.14" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dd7925cb9 code=0x7ffc0000 [ 81.714704][ C0] vkms_vblank_simulate: vblank timer overrun [ 81.806379][ T4340] ======================================================= [ 81.806379][ T4340] WARNING: The mand mount option has been deprecated and [ 81.806379][ T4340] and is ignored by this kernel. Remove the mand [ 81.806379][ T4340] option from the mount to silence this warning. [ 81.806379][ T4340] ======================================================= [ 81.894661][ T4340] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 82.499643][ T26] audit: type=1326 audit(1769089389.275:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4334 comm="syz.1.14" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dd7925cb9 code=0x7ffc0000 [ 82.593552][ T26] audit: type=1326 audit(1769089389.275:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4334 comm="syz.1.14" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dd7925cb9 code=0x7ffc0000 [ 82.616008][ C0] vkms_vblank_simulate: vblank timer overrun [ 82.622649][ T26] audit: type=1326 audit(1769089389.275:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4334 comm="syz.1.14" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6dd7925cb9 code=0x7ffc0000 [ 82.647447][ T26] audit: type=1326 audit(1769089389.275:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4334 comm="syz.1.14" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dd7925cb9 code=0x7ffc0000 [ 82.683667][ T26] audit: type=1326 audit(1769089389.285:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4334 comm="syz.1.14" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dd7925cb9 code=0x7ffc0000 [ 82.844734][ T26] audit: type=1326 audit(1769089389.305:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4334 comm="syz.1.14" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dd7925cb9 code=0x7ffc0000 [ 82.932203][ T26] audit: type=1326 audit(1769089389.305:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4334 comm="syz.1.14" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dd7925cb9 code=0x7ffc0000 [ 82.955760][ T26] audit: type=1326 audit(1769089389.305:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4334 comm="syz.1.14" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f6dd7925cb9 code=0x7ffc0000 [ 82.978683][ T26] audit: type=1326 audit(1769089389.305:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4334 comm="syz.1.14" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dd7925cb9 code=0x7ffc0000 [ 83.000793][ C0] vkms_vblank_simulate: vblank timer overrun [ 85.767479][ T4365] vcan0: tx drop: invalid da for name 0x0000000000000015 [ 86.891350][ T13] cfg80211: failed to load regulatory.db [ 88.593465][ T4385] netlink: 'syz.0.25': attribute type 27 has an invalid length. [ 88.684066][ T4388] tmpfs: Bad value for 'mpol' [ 89.207696][ T4397] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 89.546498][ T7] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 89.856359][ T7] usb 5-1: Using ep0 maxpacket: 32 [ 90.005771][ T7] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 90.041298][ T7] usb 5-1: config 0 has no interface number 0 [ 90.335752][ T7] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 90.346665][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.357158][ T7] usb 5-1: Product: syz [ 90.361402][ T7] usb 5-1: Manufacturer: syz [ 90.366436][ T7] usb 5-1: SerialNumber: syz [ 90.377656][ T7] usb 5-1: config 0 descriptor?? [ 90.662976][ T7] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 90.805355][ T7] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 91.027178][ T7] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 91.695865][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88801ee5e800: rx timeout, send abort [ 91.721989][ C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff88801ee5e800: 0x0f000: (3) A timeout occurred and this is the connection abort to close the session. [ 92.445090][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 92.495443][ T4237] usb 5-1: USB disconnect, device number 2 [ 92.567830][ T4237] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 92.580814][ T4426] netlink: 12 bytes leftover after parsing attributes in process `syz.2.39'. [ 92.778388][ T4432] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 93.656290][ T4237] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 93.670171][ T4237] quatech2 5-1:0.51: device disconnected [ 93.705937][ T4447] fuse: Unknown parameter 'use00000000000000000000' [ 95.085955][ T1110] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 95.288861][ T4464] tmpfs: Bad value for 'mpol' [ 95.728826][ T1110] usb 3-1: Using ep0 maxpacket: 8 [ 96.162588][ T4237] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 96.356046][ T4485] comedi: No check for data length of config insn id 6 is implemented [ 96.364594][ T4485] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 96.374435][ T4485] comedi: Assuming n=419 is correct [ 96.406648][ T7] hid-generic 0000:0009:0000.0001: unknown main item tag 0x1 [ 96.417706][ T1110] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 96.425707][ T4237] usb 5-1: Using ep0 maxpacket: 32 [ 96.434429][ T1110] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.448083][ T1110] usb 3-1: Product: syz [ 96.453135][ T1110] usb 3-1: Manufacturer: syz [ 96.460993][ T7] hid-generic 0000:0009:0000.0001: hidraw0: HID vffffff.97 Device [syz0] on syz0 [ 96.474267][ T1110] usb 3-1: SerialNumber: syz [ 96.545394][ T4237] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 96.602060][ T4237] usb 5-1: config 0 has no interface number 0 [ 96.669345][ T4486] fido_id[4486]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 96.775399][ T4237] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 96.813921][ T4237] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.833027][ T4237] usb 5-1: Product: syz [ 96.843917][ T4492] fuse: Unknown parameter 'use00000000000000000000' [ 96.853316][ T4237] usb 5-1: Manufacturer: syz [ 96.866816][ T1110] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 96.902069][ T4237] usb 5-1: SerialNumber: syz [ 96.996137][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88805f25f800: rx timeout, send abort [ 97.005665][ C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff88805f25f800: 0x0f000: (3) A timeout occurred and this is the connection abort to close the session. [ 97.244391][ T4237] usb 5-1: config 0 descriptor?? [ 97.429461][ T4237] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 97.667441][ T4237] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 97.750192][ T4237] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 98.663684][ T4504] process 'syz.3.60' launched './file0' with NULL argv: empty string added [ 98.801315][ T4237] usb 3-1: USB disconnect, device number 2 [ 98.836073][ T4237] usblp0: removed [ 98.905081][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 98.960563][ T7] usb 5-1: USB disconnect, device number 3 [ 98.977613][ T7] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 99.020197][ T4512] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 99.177423][ T7] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 99.421104][ T4519] binder: 4513:4519 ioctl 4018620d 0 returned -22 [ 99.767526][ T7] quatech2 5-1:0.51: device disconnected [ 100.065446][ T4524] comedi: No check for data length of config insn id 6 is implemented [ 100.074323][ T4524] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 100.085954][ T4524] comedi: Assuming n=419 is correct [ 100.099879][ T1110] hid-generic 0000:0009:0000.0002: unknown main item tag 0x1 [ 100.133418][ T1110] hid-generic 0000:0009:0000.0002: hidraw0: HID vffffff.97 Device [syz0] on syz0 [ 100.909332][ T4532] fuse: Unknown parameter 'user_i00000000000000000000' [ 102.397142][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888061497c00: rx timeout, send abort [ 103.743672][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff888061497c00: 0x0f000: (3) A timeout occurred and this is the connection abort to close the session. [ 104.344661][ T4562] fido_id[4562]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 104.395292][ T4237] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 104.555740][ T4565] binder: 4561:4565 ioctl 4018620d 0 returned -22 [ 104.715257][ T4237] usb 1-1: Using ep0 maxpacket: 32 [ 104.866432][ T4237] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 105.290532][ T4237] usb 1-1: config 0 has no interface number 0 [ 105.436914][ T4571] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 105.497181][ T4237] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 105.535478][ T4237] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.565119][ T4237] usb 1-1: Product: syz [ 105.625259][ T4237] usb 1-1: Manufacturer: syz [ 105.645134][ T4237] usb 1-1: SerialNumber: syz [ 105.862596][ T4237] usb 1-1: config 0 descriptor?? [ 106.026205][ T4237] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 106.179781][ T4237] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 106.214911][ T4237] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 107.435324][ C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 107.445816][ T4230] usb 1-1: USB disconnect, device number 2 [ 107.579559][ T4230] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 107.730669][ T4230] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 108.083704][ T4230] quatech2 1-1:0.51: device disconnected [ 108.561277][ T4589] comedi: No check for data length of config insn id 6 is implemented [ 108.570403][ T4589] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 108.580869][ T4589] comedi: Assuming n=419 is correct [ 108.627436][ T4237] hid-generic 0000:0009:0000.0003: unknown main item tag 0x1 [ 108.869390][ T4237] hid-generic 0000:0009:0000.0003: hidraw0: HID vffffff.97 Device [syz0] on syz0 [ 110.204641][ T4604] vivid-009: kernel_thread() failed [ 110.359570][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88805eaddc00: rx timeout, send abort [ 110.395819][ C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff88805eaddc00: 0x0f000: (3) A timeout occurred and this is the connection abort to close the session. [ 110.926735][ T4614] tmpfs: Bad value for 'mpol' [ 111.239943][ T4629] fido_id[4629]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 113.152952][ T4316] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 113.197130][ T4644] vcan0: tx drop: invalid da for name 0x0000000000000015 [ 113.405940][ T4316] usb 4-1: Using ep0 maxpacket: 32 [ 113.915478][ T4316] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 113.938762][ T4316] usb 4-1: config 0 has no interface number 0 [ 114.115287][ T4316] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 114.124528][ T4316] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.164094][ T4316] usb 4-1: Product: syz [ 114.184335][ T4316] usb 4-1: Manufacturer: syz [ 114.202003][ T4316] usb 4-1: SerialNumber: syz [ 114.445948][ T4316] usb 4-1: config 0 descriptor?? [ 114.650000][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888022b06c00: rx timeout, send abort [ 115.247271][ C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff888022b06c00: 0x0f000: (3) A timeout occurred and this is the connection abort to close the session. [ 116.906978][ T4316] usb 4-1: can't set config #0, error -71 [ 116.922648][ T4316] usb 4-1: USB disconnect, device number 2 [ 119.070258][ T4694] binder: 4689:4694 ioctl 4018620d 0 returned -22 [ 119.193936][ T4695] tmpfs: Bad value for 'mpol' [ 121.914346][ C0] vxcan0: j1939_tp_rxtimer: 0xffff8880254f7c00: rx timeout, send abort [ 121.923558][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff8880254f7c00: 0x0f000: (3) A timeout occurred and this is the connection abort to close the session. [ 127.349507][ T4739] binder: 4735:4739 ioctl 4018620d 0 returned -22 [ 127.796288][ T4745] binder: 4740:4745 ioctl 4018620d 0 returned -22 [ 129.013733][ T4746] device vlan2 entered promiscuous mode [ 129.040798][ T4746] device bridge0 entered promiscuous mode [ 129.062380][ T4746] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 129.195200][ T1107] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 129.294894][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 131.415206][ T4760] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 132.242081][ T4760] usb 1-1: Using ep0 maxpacket: 32 [ 132.948127][ T1425] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.958617][ T1425] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.245608][ T4760] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 133.301170][ T4760] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.542926][ T4760] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.656812][ T4785] ufs: You didn't specify the type of your ufs filesystem [ 133.656812][ T4785] [ 133.656812][ T4785] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 133.656812][ T4785] [ 133.656812][ T4785] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 133.699914][ T4785] ufs: ufstype=old is supported read-only [ 133.721586][ T4785] ufs: ufs_fill_super(): bad magic number [ 134.652819][ T4760] usb 1-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 135.503528][ T4760] usb 1-1: config 0 interface 0 has no altsetting 0 [ 135.753874][ T4799] tipc: Started in network mode [ 135.760712][ T4799] tipc: Node identity fe800000000000000000000000000014, cluster identity 4711 [ 135.789510][ T4799] tipc: Enabled bearer , priority 10 [ 136.261027][ T4760] usb 1-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 136.382712][ T4760] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.276704][ T1328] tipc: Node number set to 4269801492 [ 137.374407][ T4760] usb 1-1: config 0 descriptor?? [ 137.495966][ T4760] usb 1-1: can't set config #0, error -71 [ 137.665233][ T4760] usb 1-1: USB disconnect, device number 3 [ 139.325193][ T1107] usb 2-1: string descriptor 0 read error: -71 [ 139.356106][ T1107] usb 2-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 139.438100][ T4833] ufs: You didn't specify the type of your ufs filesystem [ 139.438100][ T4833] [ 139.438100][ T4833] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 139.438100][ T4833] [ 139.438100][ T4833] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 139.473916][ T4833] ufs: ufstype=old is supported read-only [ 139.484005][ T4833] ufs: ufs_fill_super(): bad magic number [ 140.210703][ T1107] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.204936][ T1107] usb 2-1: config 0 descriptor?? [ 141.438922][ T1107] usb 2-1: can't set config #0, error -71 [ 141.486721][ T4844] binder: 4836:4844 ioctl 4018620d 0 returned -22 [ 141.505558][ T1107] usb 2-1: USB disconnect, device number 2 [ 143.827162][ T4870] comedi: No check for data length of config insn id 6 is implemented [ 143.836191][ T4870] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 143.845804][ T4870] comedi: Assuming n=419 is correct [ 143.986527][ T4252] hid-generic 0000:0009:0000.0004: unknown main item tag 0x1 [ 144.352180][ T4252] hid-generic 0000:0009:0000.0004: hidraw0: HID vffffff.97 Device [syz0] on syz0 [ 144.735654][ T4876] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 144.890940][ T4877] fido_id[4877]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 147.233595][ T4897] fuse: Unknown parameter '0x0000000000000003' [ 150.476341][ T4925] comedi: No check for data length of config insn id 6 is implemented [ 150.488038][ T4925] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 150.500704][ T4925] comedi: Assuming n=419 is correct [ 150.922293][ T4935] ufs: You didn't specify the type of your ufs filesystem [ 150.922293][ T4935] [ 150.922293][ T4935] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 150.922293][ T4935] [ 150.922293][ T4935] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 150.954006][ C1] vkms_vblank_simulate: vblank timer overrun [ 150.961401][ T4935] ufs: ufstype=old is supported read-only [ 150.971929][ T4935] ufs: ufs_fill_super(): bad magic number [ 151.827698][ T4943] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 152.252149][ T4951] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 153.219389][ T4955] fuse: Unknown parameter '0x0000000000000003' [ 153.875150][ T4229] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 154.315547][ T4229] usb 4-1: Using ep0 maxpacket: 16 [ 155.235374][ T4229] usb 4-1: unable to get BOS descriptor or descriptor too short [ 155.889941][ T4981] device bridge1 entered promiscuous mode [ 157.185456][ T4229] usb 4-1: unable to read config index 0 descriptor/all [ 157.212267][ T4229] usb 4-1: can't read configurations, error -71 [ 160.237968][ T5015] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 160.368566][ T5016] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 163.624117][ T5046] bridge0: port 3(gretap0) entered blocking state [ 163.631364][ T5046] bridge0: port 3(gretap0) entered disabled state [ 163.675415][ T5046] device gretap0 entered promiscuous mode [ 163.690450][ T5046] bridge0: port 3(gretap0) entered blocking state [ 163.698366][ T5046] bridge0: port 3(gretap0) entered forwarding state [ 165.640263][ T5063] binder: 5060:5063 ioctl 4018620d 0 returned -22 [ 166.337533][ T5070] device bridge1 entered promiscuous mode [ 173.426920][ T5135] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 173.766080][ T5139] comedi: No check for data length of config insn id -38843711 is implemented [ 173.766141][ T5139] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 173.766157][ T5139] comedi: Assuming n=419 is correct [ 174.145319][ T1110] Bluetooth: hci5: command 0x0409 tx timeout [ 174.431145][ T9] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.533070][ T5141] binder: 5123:5141 ioctl 4018620d 0 returned -22 [ 174.863416][ T9] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.028002][ T9] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.186245][ T9] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.360331][ T5128] chnl_net:caif_netlink_parms(): no params data found [ 176.465874][ T1328] Bluetooth: hci5: command 0x041b tx timeout [ 178.726438][ T1110] Bluetooth: hci5: command 0x040f tx timeout [ 179.184664][ T5128] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.196093][ T5128] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.204749][ T5128] device bridge_slave_0 entered promiscuous mode [ 179.270458][ T5128] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.280970][ T5128] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.875798][ T13] Bluetooth: hci5: command 0x0419 tx timeout [ 180.889246][ T5128] device bridge_slave_1 entered promiscuous mode [ 181.317547][ T5191] netlink: 'syz.1.228': attribute type 27 has an invalid length. [ 182.477408][ T5128] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 182.507116][ T5128] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 183.358298][ T5128] team0: Port device team_slave_0 added [ 183.391144][ T5128] team0: Port device team_slave_1 added [ 183.531347][ T5128] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 183.586704][ T5128] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 183.676653][ T5128] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 185.291895][ T5128] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 185.307074][ T5128] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.557577][ T5128] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 186.125897][ T5220] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 186.283754][ T5128] device hsr_slave_0 entered promiscuous mode [ 186.533554][ T5128] device hsr_slave_1 entered promiscuous mode [ 186.562919][ T5128] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 186.604925][ T5128] Cannot create hsr debugfs directory [ 191.304595][ T5271] netlink: 12 bytes leftover after parsing attributes in process `syz.2.245'. [ 192.558058][ T4229] Bluetooth: hci0: command 0x0406 tx timeout [ 192.577114][ T4229] Bluetooth: hci1: command 0x0406 tx timeout [ 192.590300][ T4229] Bluetooth: hci2: command 0x0406 tx timeout [ 192.767871][ T5128] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 193.007018][ T5128] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 193.897821][ T5128] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 193.944028][ T5128] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 194.764394][ T1425] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.774870][ T1425] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.496878][ T9] device hsr_slave_0 left promiscuous mode [ 195.527479][ T9] device hsr_slave_1 left promiscuous mode [ 195.577342][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 195.606730][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 195.625759][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 195.642509][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 195.660380][ T9] device bridge_slave_1 left promiscuous mode [ 195.677050][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.764076][ T5296] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 195.829352][ T9] device bridge_slave_0 left promiscuous mode [ 195.852730][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.590330][ T9] device veth1_macvtap left promiscuous mode [ 196.601007][ T9] device veth0_macvtap left promiscuous mode [ 196.621790][ T9] device veth1_vlan left promiscuous mode [ 196.631387][ T5319] input: syz1 as /devices/virtual/input/input5 [ 196.670772][ T9] device veth0_vlan left promiscuous mode [ 198.269286][ T9] team0 (unregistering): Port device team_slave_1 removed [ 198.448033][ T5340] vivid-009: kernel_thread() failed [ 198.500109][ T9] team0 (unregistering): Port device team_slave_0 removed [ 198.590843][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 198.675503][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 199.629304][ T9] bond0 (unregistering): Released all slaves [ 202.314715][ T5364] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 202.658389][ T5128] 8021q: adding VLAN 0 to HW filter on device bond0 [ 203.138460][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 203.188585][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 203.385831][ T5128] 8021q: adding VLAN 0 to HW filter on device team0 [ 203.499315][ T1258] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 203.528999][ T1258] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 203.623100][ T1258] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.630880][ T1258] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.371694][ T1258] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 204.987444][ T1258] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 205.032102][ T1258] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 205.103835][ T1258] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.114494][ T1258] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.190113][ T1258] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 205.244764][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 205.267830][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 205.297726][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 205.366866][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 206.029980][ T1258] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 206.232330][ T1258] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 206.250240][ T5128] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 206.264117][ T5128] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 206.284597][ T1258] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 206.295847][ T1258] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 206.316362][ T1258] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 206.386276][ T1258] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 206.414864][ T1258] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 207.287602][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 207.341532][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 207.491677][ T5128] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 210.933585][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 210.967255][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 211.071019][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 211.085650][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 211.106653][ T5128] device veth0_vlan entered promiscuous mode [ 211.986343][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 212.064119][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 212.113584][ T5128] device veth1_vlan entered promiscuous mode [ 212.359289][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 212.403597][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 212.633306][ T5498] vivid-009: kernel_thread() failed [ 212.684555][ T5128] device veth0_macvtap entered promiscuous mode [ 212.762616][ T5128] device veth1_macvtap entered promiscuous mode [ 213.004588][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 213.027230][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 213.082413][ T5128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.147061][ T5128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.355081][ T5128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.113332][ T4252] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 214.140792][ T5128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.161461][ T5128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.202110][ T5128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.241652][ T5128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.825872][ T5128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.858631][ T5128] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 214.909974][ T5509] device vlan2 entered promiscuous mode [ 214.923809][ T5509] device bridge0 entered promiscuous mode [ 214.938074][ T5509] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 216.056650][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 216.077820][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 216.320281][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 216.349917][ T5128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.411568][ T5128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.464490][ T5128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 217.998031][ T5128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.246759][ T5128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.358065][ T5128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.451571][ T5128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.556835][ T5128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.613698][ T5128] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 218.698960][ T4711] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 218.765799][ T4711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 218.847981][ T5128] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.877612][ T5128] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.109995][ T5128] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.509271][ T5128] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.814981][ C0] sched: RT throttling activated [ 222.627788][ T1210] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.654347][ T1210] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.690140][ T1210] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.703911][ T4252] usb 5-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 222.721994][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 222.796141][ T4252] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.801102][ T1210] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.205941][ T4252] usb 5-1: Product: syz [ 223.274373][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 223.463835][ T4252] usb 5-1: config 0 descriptor?? [ 223.637838][ T4252] usb 5-1: can't set config #0, error -32 [ 225.053268][ T5594] vcan0: tx drop: invalid da for name 0x0000000000000015 [ 226.238889][ T4760] usb 5-1: USB disconnect, device number 4 [ 227.915242][ T4230] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 228.217378][ T4230] usb 3-1: Using ep0 maxpacket: 32 [ 228.385469][ T4230] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 228.535095][ T4230] usb 3-1: config 0 has no interface number 0 [ 228.785961][ T4230] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 229.476706][ T4230] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.869683][ T4230] usb 3-1: Product: syz [ 229.907442][ T4230] usb 3-1: Manufacturer: syz [ 229.912460][ T4230] usb 3-1: SerialNumber: syz [ 229.938230][ T5640] ufs: You didn't specify the type of your ufs filesystem [ 229.938230][ T5640] [ 229.938230][ T5640] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 229.938230][ T5640] [ 229.938230][ T5640] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 229.969197][ T5640] ufs: ufstype=old is supported read-only [ 229.977289][ T5640] ufs: ufs_fill_super(): bad magic number [ 230.608789][ T4230] usb 3-1: config 0 descriptor?? [ 230.652051][ T4230] usb 3-1: can't set config #0, error -71 [ 231.386518][ T4230] usb 3-1: USB disconnect, device number 3 [ 232.313504][ T5654] device vlan2 entered promiscuous mode [ 232.319526][ T5654] device bridge0 entered promiscuous mode [ 232.327650][ T5654] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 232.367894][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 232.595262][ T23] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 233.801887][ T5669] tipc: Enabled bearer , priority 0 [ 233.856049][ T5673] device syzkaller0 entered promiscuous mode [ 234.295191][ T23] usb 3-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 234.375247][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.383305][ T23] usb 3-1: Product: syz [ 234.481062][ T23] usb 3-1: Manufacturer: syz [ 234.509130][ T23] usb 3-1: SerialNumber: syz [ 235.082156][ T23] usb 3-1: config 0 descriptor?? [ 235.089459][ T5680] tipc: Resetting bearer [ 235.229601][ T5680] tipc: Disabling bearer [ 236.785128][ T5642] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 237.815110][ T5642] usb 6-1: Using ep0 maxpacket: 32 [ 237.986376][ T5718] binder: 5711:5718 ioctl c0306201 0 returned -14 [ 238.955203][ T5642] usb 6-1: unable to read config index 0 descriptor/all [ 238.969813][ T5642] usb 6-1: can't read configurations, error -71 [ 240.175300][ T23] usb 3-1: can't set config #0, error -110 [ 241.939320][ T5752] o2cb: This node has not been configured. [ 241.945543][ T5752] o2cb: Cluster check failed. Fix errors before retrying. [ 241.952987][ T5752] (syz.4.345,5752,1):user_dlm_register:675 ERROR: status = -22 [ 241.960708][ T5752] (syz.4.345,5752,1):dlmfs_mkdir:430 ERROR: Error -22 could not register domain "file0" [ 241.973912][ T5752] o2cb: This node has not been configured. [ 241.980132][ T5752] o2cb: Cluster check failed. Fix errors before retrying. [ 241.987517][ T5752] (syz.4.345,5752,1):user_dlm_register:675 ERROR: status = -22 [ 241.995406][ T5752] (syz.4.345,5752,1):dlmfs_mkdir:430 ERROR: Error -22 could not register domain "file1" [ 243.727444][ T5767] comedi: No check for data length of config insn id -38843711 is implemented [ 243.736504][ T5767] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 243.745846][ T5767] comedi: Assuming n=419 is correct [ 244.434495][ T23] usb 3-1: USB disconnect, device number 4 [ 244.952982][ T5774] Zero length message leads to an empty skb [ 245.345290][ T4760] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 245.615108][ T4760] usb 6-1: Using ep0 maxpacket: 32 [ 245.735933][ T4760] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 245.846825][ T4760] usb 6-1: config 0 has no interface number 0 [ 246.156041][ T4760] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 246.245080][ T4760] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.308053][ T4760] usb 6-1: Product: syz [ 246.312284][ T4760] usb 6-1: Manufacturer: syz [ 246.404553][ T4760] usb 6-1: SerialNumber: syz [ 246.445913][ T4760] usb 6-1: config 0 descriptor?? [ 246.507797][ T4760] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 246.625196][ T4230] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 246.727089][ T4760] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 246.743875][ T4760] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 247.019403][ T4230] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 247.050951][ T4230] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 247.090916][ T4230] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 247.124281][ T4230] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0a16, bcdDevice= 0.00 [ 247.144163][ T4230] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.173370][ T4230] usb 4-1: config 0 descriptor?? [ 247.775163][ T4230] usbhid 4-1:0.0: can't add hid device: -71 [ 247.782522][ T4230] usbhid: probe of 4-1:0.0 failed with error -71 [ 247.985078][ C1] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 248.388003][ T4230] usb 4-1: USB disconnect, device number 5 [ 248.417339][ T5642] usb 6-1: USB disconnect, device number 4 [ 248.475640][ T5642] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 248.726803][ T5642] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 248.928074][ T5843] comedi: No check for data length of config insn id -38843711 is implemented [ 248.937153][ T5843] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 248.946559][ T5843] comedi: Assuming n=419 is correct [ 249.588012][ T5642] quatech2 6-1:0.51: device disconnected [ 255.841413][ T1425] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.847974][ T1425] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.919192][ T5960] comedi: No check for data length of config insn id -38843711 is implemented [ 257.928487][ T5960] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 257.938593][ T5960] comedi: Assuming n=419 is correct [ 263.192227][ T6013] comedi: No check for data length of config insn id -38843711 is implemented [ 263.201356][ T6013] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 263.210785][ T6013] comedi: Assuming n=419 is correct [ 264.011586][ T6020] input: syz0 as /devices/virtual/input/input6 [ 266.631544][ T6069] comedi: No check for data length of config insn id -38843711 is implemented [ 266.641499][ T6069] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 266.650998][ T6069] comedi: Assuming n=419 is correct [ 267.780260][ T6084] ufs: You didn't specify the type of your ufs filesystem [ 267.780260][ T6084] [ 267.780260][ T6084] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 267.780260][ T6084] [ 267.780260][ T6084] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 267.811152][ T6084] ufs: ufstype=old is supported read-only [ 267.827555][ T6084] ufs: ufs_fill_super(): bad magic number [ 268.825178][ T4229] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 269.105193][ T4229] usb 6-1: Using ep0 maxpacket: 16 [ 269.385229][ T4229] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 269.435017][ T4229] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 269.485575][ T4229] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 269.530310][ T4229] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 269.635240][ T4229] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 269.644344][ T4229] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 269.687193][ T4229] usb 6-1: SerialNumber: syz [ 269.757251][ T4229] cdc_acm 6-1:1.0: skipping garbage [ 269.776154][ T4229] cdc_acm: probe of 6-1:1.0 failed with error -12 [ 269.959692][ T4229] usb 6-1: USB disconnect, device number 5 [ 273.265275][ T4316] Bluetooth: hci4: command 0x0406 tx timeout [ 273.624082][ T6150] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 274.319938][ T6159] ufs: You didn't specify the type of your ufs filesystem [ 274.319938][ T6159] [ 274.319938][ T6159] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 274.319938][ T6159] [ 274.319938][ T6159] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 274.352365][ T6159] ufs: ufstype=old is supported read-only [ 274.360686][ T6159] ufs: ufs_fill_super(): bad magic number [ 275.222959][ T6161] comedi: No check for data length of config insn id -38843711 is implemented [ 275.222979][ T6161] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 275.222993][ T6161] comedi: Assuming n=419 is correct [ 276.564503][ T6175] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 276.616025][ T6175] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 277.076556][ T6187] overlayfs: failed to clone lowerpath [ 279.885251][ T6227] ufs: You didn't specify the type of your ufs filesystem [ 279.885251][ T6227] [ 279.885251][ T6227] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 279.885251][ T6227] [ 279.885251][ T6227] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 279.916135][ T6227] ufs: ufstype=old is supported read-only [ 280.486997][ T6227] ufs: ufs_fill_super(): bad magic number [ 281.358923][ T6237] binder: 6233:6237 ioctl 4018620d 0 returned -22 [ 282.793947][ T6236] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 283.954030][ T6257] input: syz1 as /devices/virtual/input/input7 [ 286.001622][ T6282] ufs: You didn't specify the type of your ufs filesystem [ 286.001622][ T6282] [ 286.001622][ T6282] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 286.001622][ T6282] [ 286.001622][ T6282] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 286.032992][ T6282] ufs: ufstype=old is supported read-only [ 286.042121][ T6282] ufs: ufs_fill_super(): bad magic number [ 288.197389][ T6298] syz.1.459 (6298): /proc/6294/oom_adj is deprecated, please use /proc/6294/oom_score_adj instead. [ 288.271355][ T6308] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 290.701213][ T6327] ufs: You didn't specify the type of your ufs filesystem [ 290.701213][ T6327] [ 290.701213][ T6327] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 290.701213][ T6327] [ 290.701213][ T6327] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 290.732639][ T6327] ufs: ufstype=old is supported read-only [ 290.740598][ T6327] ufs: ufs_fill_super(): bad magic number [ 293.425450][ T6356] netlink: 4 bytes leftover after parsing attributes in process `syz.3.476'. [ 296.466932][ T6374] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 296.875800][ T6380] binder: 6377:6380 ioctl 4018620d 0 returned -22 [ 300.579265][ T6418] xt_bpf: check failed: parse error [ 301.818631][ T4760] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 302.095083][ T4760] usb 6-1: Using ep0 maxpacket: 8 [ 302.215308][ T4760] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 302.232542][ T4760] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.298669][ T4760] pvrusb2: Hardware description: Terratec Grabster AV400 [ 302.338273][ T4760] pvrusb2: ********** [ 302.347156][ T4760] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 302.391948][ T4760] pvrusb2: Important functionality might not be entirely working. [ 302.410466][ T6398] delete_channel: no stack [ 302.415253][ T4760] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 302.415302][ T4760] pvrusb2: ********** [ 302.518164][ T2428] pvrusb2: Invalid write control endpoint [ 302.756432][ T6423] pvrusb2: Killing an I2C write to 0 that is too large (desired=62 limit=61) [ 302.858407][ T6436] netlink: 8 bytes leftover after parsing attributes in process `syz.2.495'. [ 302.915745][ T4230] usb 6-1: USB disconnect, device number 6 [ 304.143659][ T6443] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 304.169213][ T2428] pvrusb2: Invalid write control endpoint [ 304.203788][ T2428] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 304.232342][ T2428] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 304.251282][ T2428] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 304.269460][ T2428] pvrusb2: Device being rendered inoperable [ 304.287534][ T2428] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 304.305082][ T2428] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 304.371847][ T2428] pvrusb2: Attached sub-driver cx25840 [ 304.407937][ T2428] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 304.480241][ T2428] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 305.963231][ T6478] syz.5.507 uses obsolete (PF_INET,SOCK_PACKET) [ 307.346662][ T6488] ufs: You didn't specify the type of your ufs filesystem [ 307.346662][ T6488] [ 307.346662][ T6488] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 307.346662][ T6488] [ 307.346662][ T6488] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 307.377869][ T6488] ufs: ufstype=old is supported read-only [ 307.385732][ T6488] ufs: ufs_fill_super(): bad magic number [ 308.334662][ T6496] tipc: Started in network mode [ 308.366230][ T6496] tipc: Node identity 7f000001, cluster identity 4711 [ 308.415448][ T6496] tipc: Enabled bearer , priority 10 [ 308.437144][ T6496] netlink: 104 bytes leftover after parsing attributes in process `syz.4.513'. [ 308.576096][ T6500] tmpfs: Unknown parameter 'grpquota' [ 308.653602][ T6500] netlink: 'syz.5.514': attribute type 1 has an invalid length. [ 309.506754][ T6500] 8021q: adding VLAN 0 to HW filter on device bond1 [ 309.574657][ T6512] netlink: 8 bytes leftover after parsing attributes in process `syz.5.514'. [ 309.647497][ T6512] netlink: 16 bytes leftover after parsing attributes in process `syz.5.514'. [ 309.704082][ T23] tipc: Node number set to 2130706433 [ 312.189553][ T6555] binder: 6547:6555 ioctl 4018620d 0 returned -22 [ 313.205193][ T6562] vivid-001: kernel_thread() failed [ 315.770784][ T6589] overlayfs: unrecognized mount option "/" or missing value [ 317.860195][ T1425] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.866582][ T1425] ieee802154 phy1 wpan1: encryption failed: -22 [ 320.913916][ T4244] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 322.358709][ T6632] overlayfs: unrecognized mount option "/" or missing value [ 323.769759][ T21] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 323.975761][ T6647] vivid-007: kernel_thread() failed [ 324.705160][ T21] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 325.045143][ T21] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.092274][ T21] usb 3-1: Product: syz [ 325.124509][ T21] usb 3-1: Manufacturer: syz [ 325.150066][ T21] usb 3-1: SerialNumber: syz [ 325.614896][ T21] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 327.035495][ T21] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 327.238618][ T1328] usb 3-1: USB disconnect, device number 5 [ 327.285280][ T4244] usb 2-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 327.294765][ T4244] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.339456][ T4244] usb 2-1: Product: syz [ 327.343688][ T4244] usb 2-1: Manufacturer: syz [ 328.455667][ T6679] overlayfs: unrecognized mount option "/" or missing value [ 328.532484][ T21] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 329.074739][ T21] ath9k_htc: Failed to initialize the device [ 329.083545][ T1328] usb 3-1: ath9k_htc: USB layer deinitialized [ 329.091216][ T4244] usb 2-1: config 0 descriptor?? [ 329.257898][ T4244] usb 2-1: can't set config #0, error -71 [ 329.376331][ T4244] usb 2-1: USB disconnect, device number 3 [ 329.893163][ T6695] o2cb: This node has not been configured. [ 329.899262][ T6695] o2cb: Cluster check failed. Fix errors before retrying. [ 329.906704][ T6695] (syz.2.562,6695,0):user_dlm_register:675 ERROR: status = -22 [ 329.914528][ T6695] (syz.2.562,6695,0):dlmfs_mkdir:430 ERROR: Error -22 could not register domain "file0" [ 329.928545][ T6695] o2cb: This node has not been configured. [ 329.934613][ T6695] o2cb: Cluster check failed. Fix errors before retrying. [ 330.154568][ T6695] (syz.2.562,6695,1):user_dlm_register:675 ERROR: status = -22 [ 330.162323][ T6695] (syz.2.562,6695,1):dlmfs_mkdir:430 ERROR: Error -22 could not register domain "file1" [ 332.117155][ T26] kauditd_printk_skb: 10 callbacks suppressed [ 332.117176][ T26] audit: type=1326 audit(1769089639.665:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6711 comm="syz.4.570" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fef25bffcb9 code=0x0 [ 333.566687][ T6741] comedi: No check for data length of config insn id 6 is implemented [ 333.574996][ T6741] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 333.584308][ T6741] comedi: Assuming n=419 is correct [ 334.867653][ T6758] o2cb: This node has not been configured. [ 334.873663][ T6758] o2cb: Cluster check failed. Fix errors before retrying. [ 334.881713][ T6758] (syz.2.580,6758,0):user_dlm_register:675 ERROR: status = -22 [ 334.889492][ T6758] (syz.2.580,6758,0):dlmfs_mkdir:430 ERROR: Error -22 could not register domain "file0" [ 334.901964][ T6758] o2cb: This node has not been configured. [ 334.907940][ T6758] o2cb: Cluster check failed. Fix errors before retrying. [ 334.915291][ T6758] (syz.2.580,6758,0):user_dlm_register:675 ERROR: status = -22 [ 334.923133][ T6758] (syz.2.580,6758,0):dlmfs_mkdir:430 ERROR: Error -22 could not register domain "file1" [ 339.856444][ T6790] comedi: No check for data length of config insn id 6 is implemented [ 339.865301][ T6790] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 339.875034][ T6790] comedi: Assuming n=419 is correct [ 339.907418][ T4760] hid-generic 0000:0009:0000.0005: unknown main item tag 0x1 [ 341.522999][ T4760] hid-generic 0000:0009:0000.0005: hidraw0: HID vffffff.97 Device [syz0] on syz0 [ 342.203672][ T6797] binder: 6791:6797 ioctl 4018620d 0 returned -22 [ 342.962665][ T6793] fido_id[6793]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 346.932694][ T6834] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 8, id = 0 [ 347.308068][ T6841] IPVS: stopping backup sync thread 6834 ... [ 348.404009][ T6852] binder: 6846:6852 ioctl 4018620d 0 returned -22 [ 353.147165][ T6890] netlink: 4 bytes leftover after parsing attributes in process `syz.4.614'. [ 357.963104][ T6928] o2cb: This node has not been configured. [ 357.969215][ T6928] o2cb: Cluster check failed. Fix errors before retrying. [ 357.976657][ T6928] (syz.2.624,6928,1):user_dlm_register:675 ERROR: status = -22 [ 357.985069][ T6928] (syz.2.624,6928,1):dlmfs_mkdir:430 ERROR: Error -22 could not register domain "file0" [ 357.997684][ T6928] o2cb: This node has not been configured. [ 358.003693][ T6928] o2cb: Cluster check failed. Fix errors before retrying. [ 358.011085][ T6928] (syz.2.624,6928,1):user_dlm_register:675 ERROR: status = -22 [ 358.018856][ T6928] (syz.2.624,6928,1):dlmfs_mkdir:430 ERROR: Error -22 could not register domain "file1" [ 365.853875][ T6998] o2cb: This node has not been configured. [ 365.859883][ T6998] o2cb: Cluster check failed. Fix errors before retrying. [ 365.885902][ T6998] (syz.3.642,6998,1):user_dlm_register:675 ERROR: status = -22 [ 365.893578][ T6998] (syz.3.642,6998,1):dlmfs_mkdir:430 ERROR: Error -22 could not register domain "file0" [ 366.735303][ T7014] netlink: 'syz.4.645': attribute type 1 has an invalid length. [ 367.670171][ T7021] 8021q: adding VLAN 0 to HW filter on device bond1 [ 367.692071][ T7023] netlink: 8 bytes leftover after parsing attributes in process `syz.5.647'. [ 369.585485][ T1110] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 370.185335][ T1110] usb 2-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 370.198722][ T1110] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.207486][ T1110] usb 2-1: Product: syz [ 370.211758][ T1110] usb 2-1: Manufacturer: syz [ 370.219643][ T1110] usb 2-1: SerialNumber: syz [ 370.232383][ T1110] usb 2-1: config 0 descriptor?? [ 370.287211][ T1110] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 370.311653][ T7055] IPVS: stopping backup sync thread 7056 ... [ 370.318165][ T7056] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 8, id = 0 [ 371.275212][ T1110] gspca_sunplus: reg_w_riv err -110 [ 371.281104][ T1110] sunplus: probe of 2-1:0.0 failed with error -110 [ 378.736448][ T1425] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.748780][ T1425] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.853692][ T7128] Bluetooth: hci0: invalid length 0, exp 2 for type 13 [ 379.225377][ T1107] usb 2-1: USB disconnect, device number 4 [ 379.564148][ T7149] IPVS: stopping backup sync thread 7150 ... [ 379.570963][ T7150] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 8, id = 0 [ 379.654865][ T4760] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 380.284148][ T4760] usb 6-1: Using ep0 maxpacket: 32 [ 380.676744][ T4760] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 381.335824][ T4760] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 381.443123][ T4760] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.907941][ T4760] usb 6-1: Product: syz [ 381.912167][ T4760] usb 6-1: Manufacturer: syz [ 381.918254][ T4760] usb 6-1: SerialNumber: syz [ 382.783546][ T4760] usb 6-1: config 0 descriptor?? [ 382.886574][ T7170] Bluetooth: hci0: invalid length 0, exp 2 for type 13 [ 382.941468][ T4760] usb 6-1: can't set config #0, error -71 [ 382.968085][ T4760] usb 6-1: USB disconnect, device number 7 [ 389.129333][ T7249] comedi: No check for data length of config insn id 6 is implemented [ 389.137757][ T7249] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 389.147128][ T7249] comedi: Assuming n=419 is correct [ 390.708830][ T1107] hid-generic 0000:0009:0000.0006: unknown main item tag 0x1 [ 390.920530][ T1107] hid-generic 0000:0009:0000.0006: hidraw0: HID vffffff.97 Device [syz0] on syz0 [ 391.196035][ T7250] fido_id[7250]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 391.845776][ T7267] ufs: You didn't specify the type of your ufs filesystem [ 391.845776][ T7267] [ 391.845776][ T7267] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 391.845776][ T7267] [ 391.845776][ T7267] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 391.877300][ T7267] ufs: ufstype=old is supported read-only [ 391.885584][ T7267] ufs: ufs_fill_super(): bad magic number [ 394.646496][ T7290] overlayfs: failed to clone lowerpath [ 395.854402][ T7297] comedi: No check for data length of config insn id 6 is implemented [ 395.912959][ T7297] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 395.996406][ T7297] comedi: Assuming n=419 is correct [ 403.960726][ T7348] comedi: No check for data length of config insn id 6 is implemented [ 403.969225][ T7348] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 403.978706][ T7348] comedi: Assuming n=419 is correct [ 404.014992][ T4244] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 404.021607][ T4265] hid-generic 0000:0009:0000.0007: unknown main item tag 0x1 [ 404.198446][ T4265] hid-generic 0000:0009:0000.0007: hidraw0: HID vffffff.97 Device [syz0] on syz0 [ 404.695156][ T7350] fido_id[7350]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 404.955759][ T4244] usb 4-1: Using ep0 maxpacket: 16 [ 405.075692][ T4244] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 405.098479][ T4244] usb 4-1: config 0 has no interface number 0 [ 405.107858][ T4244] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 405.915264][ T4244] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 405.944982][ T4244] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 405.969075][ T4244] usb 4-1: Product: syz [ 405.973328][ T4244] usb 4-1: SerialNumber: syz [ 406.036048][ T4244] usb 4-1: config 0 descriptor?? [ 406.091097][ T4244] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input8 [ 406.402157][ T4244] usb 4-1: USB disconnect, device number 6 [ 406.408412][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 406.408642][ C0] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 406.847865][ T4244] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 412.280350][ T7413] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 415.495709][ T7453] comedi: No check for data length of config insn id 6 is implemented [ 415.504097][ T7453] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 415.513672][ T7453] comedi: Assuming n=419 is correct [ 415.630643][ T13] hid-generic 0000:0009:0000.0008: unknown main item tag 0x1 [ 415.835514][ T13] hid-generic 0000:0009:0000.0008: hidraw0: HID vffffff.97 Device [syz0] on syz0 [ 416.822311][ T7461] fido_id[7461]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 420.146969][ T7504] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 421.146381][ T7509] comedi: No check for data length of config insn id -38843711 is implemented [ 421.155445][ T7509] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 421.165332][ T7509] comedi: Assuming n=419 is correct [ 424.408189][ T7535] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 425.752952][ T7547] comedi: No check for data length of config insn id -38843711 is implemented [ 425.762017][ T7547] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 425.772864][ T7547] comedi: Assuming n=419 is correct [ 426.623224][ T7534] netlink: 52 bytes leftover after parsing attributes in process `syz.5.791'. [ 432.756875][ T7637] comedi: No check for data length of config insn id -38843711 is implemented [ 432.766116][ T7637] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 432.775499][ T7637] comedi: Assuming n=419 is correct [ 434.677701][ T5642] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 434.935180][ T5642] usb 3-1: Using ep0 maxpacket: 32 [ 435.410941][ T5642] usb 3-1: config 0 has no interfaces? [ 435.625111][ T5642] usb 3-1: string descriptor 0 read error: -71 [ 435.636957][ T5642] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 435.674798][ T5642] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.694420][ T5642] usb 3-1: config 0 descriptor?? [ 435.755375][ T5642] usb 3-1: can't set config #0, error -71 [ 435.786601][ T5642] usb 3-1: USB disconnect, device number 6 [ 438.465463][ T5642] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 438.765133][ T5642] usb 3-1: Using ep0 maxpacket: 32 [ 439.028209][ T5642] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 440.415519][ T1425] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.421982][ T1425] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.645296][ T5642] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 440.678595][ T5642] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.688186][ T5642] usb 3-1: Product: syz [ 440.692404][ T5642] usb 3-1: Manufacturer: syz [ 440.701089][ T5642] usb 3-1: SerialNumber: syz [ 440.713322][ T5642] usb 3-1: config 0 descriptor?? [ 440.766452][ T5642] usb 3-1: bad CDC descriptors [ 440.788869][ T5642] usb 3-1: unsupported MDLM descriptors [ 441.036914][ T21] usb 3-1: USB disconnect, device number 7 [ 441.355251][ T1107] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 442.575530][ T26] audit: type=1326 audit(1769089750.115:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7761 comm="syz.2.860" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fef6cbc9cb9 code=0x0 [ 442.598044][ T1107] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 442.611236][ T1107] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 442.623218][ T1107] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 442.637000][ T1107] usb 2-1: New USB device found, idVendor=0458, idProduct=5014, bcdDevice= 0.00 [ 442.646541][ T1107] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.716926][ T1107] usb 2-1: config 0 descriptor?? [ 442.755345][ T7754] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 443.881748][ T1107] hid-generic 0003:0458:5014.0009: hidraw0: USB HID v0.01 Device [HID 0458:5014] on usb-dummy_hcd.1-1/input0 [ 443.930566][ T1107] usb 2-1: USB disconnect, device number 5 [ 444.035148][ T7781] fido_id[7781]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 444.385330][ T21] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 445.395083][ T21] usb 4-1: Using ep0 maxpacket: 32 [ 445.476101][ T7802] overlayfs: failed to clone upperpath [ 445.536364][ T21] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 445.548834][ T21] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 445.559548][ T21] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 445.569167][ T21] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.605878][ T21] usb 4-1: config 0 descriptor?? [ 445.646210][ T21] hub 4-1:0.0: USB hub found [ 445.865202][ T21] hub 4-1:0.0: 1 port detected [ 445.956850][ T5642] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 446.037045][ T7813] netlink: 25 bytes leftover after parsing attributes in process `syz.4.877'. [ 446.085257][ T21] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 446.095774][ T21] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 446.206963][ T21] usbhid 4-1:0.0: can't add hid device: -71 [ 446.213051][ T21] usbhid: probe of 4-1:0.0 failed with error -71 [ 446.328530][ T21] usb 4-1: USB disconnect, device number 7 [ 447.052391][ T5642] usb 3-1: Using ep0 maxpacket: 32 [ 447.187146][ T5642] usb 3-1: config 0 has no interfaces? [ 447.219384][ T7] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 447.286327][ T7831] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 447.296099][ T7831] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 447.386653][ T5642] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 447.438330][ T5642] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.464534][ T5642] usb 3-1: Product: syz [ 447.479919][ T5642] usb 3-1: Manufacturer: syz [ 447.484628][ T5642] usb 3-1: SerialNumber: syz [ 447.635078][ T7] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 448.300268][ T7] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 448.310450][ T5642] usb 3-1: config 0 descriptor?? [ 448.435249][ T7] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 448.454620][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 448.463385][ T7] usb 2-1: SerialNumber: syz [ 448.497053][ T5642] usb 3-1: USB disconnect, device number 8 [ 449.285668][ T7] usb 2-1: 0:2 : does not exist [ 449.371317][ T7849] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 449.379368][ T7849] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 449.532693][ T7] usb 2-1: USB disconnect, device number 6 [ 450.408775][ T7] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 451.255454][ T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 451.385299][ T7] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 451.450892][ T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 452.313242][ T7] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 452.625037][ T7] usb 2-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 452.644589][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.654719][ T7] usb 2-1: Product: syz [ 452.710853][ T7885] netlink: 4 bytes leftover after parsing attributes in process `syz.5.899'. [ 452.809529][ T7885] vivid-001: kernel_thread() failed [ 453.123567][ T7] usb 2-1: Manufacturer: syz [ 453.825753][ T7] usb 2-1: config 0 descriptor?? [ 453.953262][ T7894] siw: device registration error -23 [ 453.980244][ T7] usb 2-1: can't set config #0, error -71 [ 454.043920][ T7] usb 2-1: USB disconnect, device number 7 [ 454.292223][ T4252] hid-generic 0000:0009:0000.000A: unknown main item tag 0x1 [ 454.394418][ T4252] hid-generic 0000:0009:0000.000A: hidraw0: HID vffffff.97 Device [syz0] on syz0 [ 454.454999][ T7] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 455.865271][ T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 455.974981][ T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 456.021510][ T7907] fido_id[7907]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 456.932529][ T7] usb 2-1: New USB device found, idVendor=04f2, idProduct=0418, bcdDevice= 0.00 [ 457.013660][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.863664][ T7] usb 2-1: config 0 descriptor?? [ 458.105202][ T7] usb 2-1: can't set config #0, error -71 [ 458.112288][ T4462] udevd[4462]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 458.116306][ T7] usb 2-1: USB disconnect, device number 8 [ 459.877373][ T7952] netlink: 4 bytes leftover after parsing attributes in process `syz.2.914'. [ 459.973478][ T7952] vivid-005: kernel_thread() failed [ 460.330143][ T7960] comedi: No check for data length of config insn id 6 is implemented [ 460.338684][ T7960] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 460.348102][ T7960] comedi: Assuming n=419 is correct [ 461.806246][ T21] hid-generic 0000:0009:0000.000B: unknown main item tag 0x1 [ 462.335274][ T7922] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 462.344547][ T21] hid-generic 0000:0009:0000.000B: hidraw0: HID vffffff.97 Device [syz0] on syz0 [ 462.615064][ T7922] usb 4-1: Using ep0 maxpacket: 32 [ 462.810122][ T7977] netlink: 'syz.1.925': attribute type 1 has an invalid length. [ 462.899315][ T7977] 8021q: adding VLAN 0 to HW filter on device bond1 [ 462.942191][ T7981] netlink: 8 bytes leftover after parsing attributes in process `syz.1.925'. [ 462.951324][ T7981] netlink: 16 bytes leftover after parsing attributes in process `syz.1.925'. [ 463.035146][ T7922] usb 4-1: device descriptor read/all, error -71 [ 463.055136][ T7977] netlink: 'syz.1.925': attribute type 10 has an invalid length. [ 463.063437][ T7977] netlink: 40 bytes leftover after parsing attributes in process `syz.1.925'. [ 463.101611][ T7977] device dummy0 entered promiscuous mode [ 463.157289][ T7979] fido_id[7979]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 464.467664][ T8011] netlink: 4 bytes leftover after parsing attributes in process `syz.4.932'. [ 466.080471][ T8021] comedi: No check for data length of config insn id 6 is implemented [ 466.088987][ T8021] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 466.098544][ T8021] comedi: Assuming n=419 is correct [ 467.008097][ T8026] netlink: 'syz.1.939': attribute type 1 has an invalid length. [ 467.063828][ T8026] 8021q: adding VLAN 0 to HW filter on device bond2 [ 467.086237][ T8031] netlink: 8 bytes leftover after parsing attributes in process `syz.1.939'. [ 467.155333][ T8031] netlink: 16 bytes leftover after parsing attributes in process `syz.1.939'. [ 467.224079][ T8026] netlink: 'syz.1.939': attribute type 10 has an invalid length. [ 467.265987][ T8026] netlink: 40 bytes leftover after parsing attributes in process `syz.1.939'. [ 467.335090][ T4229] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 467.595165][ T4229] usb 6-1: Using ep0 maxpacket: 32 [ 467.865330][ T4229] usb 6-1: New USB device found, idVendor=056a, idProduct=00ed, bcdDevice= 0.00 [ 468.289052][ T4229] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.485526][ T4229] usb 6-1: config 0 descriptor?? [ 469.627466][ T4229] wacom 0003:056A:00ED.000C: unknown main item tag 0x5 [ 469.693150][ T4229] wacom 0003:056A:00ED.000C: hidraw0: USB HID v0.04 Device [HID 056a:00ed] on usb-dummy_hcd.5-1/input0 [ 469.832764][ T4229] usb 6-1: USB disconnect, device number 8 [ 470.576530][ T8062] fido_id[8062]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 470.961922][ T8069] comedi: No check for data length of config insn id 6 is implemented [ 470.970436][ T8069] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 470.980231][ T8069] comedi: Assuming n=419 is correct [ 471.107179][ T7922] hid-generic 0000:0009:0000.000D: unknown main item tag 0x1 [ 472.455303][ T7922] hid-generic 0000:0009:0000.000D: hidraw0: HID vffffff.97 Device [syz0] on syz0 [ 472.763483][ T8074] fido_id[8074]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 472.893721][ T8082] netlink: 'syz.4.953': attribute type 1 has an invalid length. [ 473.178688][ T8089] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 474.077971][ T8082] 8021q: adding VLAN 0 to HW filter on device bond2 [ 474.164973][ T8085] netlink: 8 bytes leftover after parsing attributes in process `syz.4.953'. [ 474.290312][ T8085] netlink: 16 bytes leftover after parsing attributes in process `syz.4.953'. [ 475.065009][ T8087] netlink: 'syz.4.953': attribute type 10 has an invalid length. [ 475.137334][ T8087] netlink: 40 bytes leftover after parsing attributes in process `syz.4.953'. [ 475.151002][ T8087] device dummy0 entered promiscuous mode [ 476.833123][ T8119] comedi: No check for data length of config insn id 6 is implemented [ 476.841753][ T8119] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 476.851116][ T8119] comedi: Assuming n=419 is correct [ 477.435890][ T8135] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 8, id = 0 [ 477.673225][ T8136] IPVS: stopping backup sync thread 8135 ... [ 477.735921][ T8138] netlink: 'syz.5.971': attribute type 1 has an invalid length. [ 477.780552][ T7922] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 477.825562][ T8138] 8021q: adding VLAN 0 to HW filter on device bond2 [ 477.879443][ T8140] bond2: (slave dummy0): making interface the new active one [ 477.931173][ T8140] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 477.963399][ T1210] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 477.977520][ T8141] netlink: 'syz.5.971': attribute type 10 has an invalid length. [ 477.995540][ T8141] netlink: 40 bytes leftover after parsing attributes in process `syz.5.971'. [ 478.055194][ T7922] usb 2-1: Using ep0 maxpacket: 32 [ 478.074384][ T8141] device dummy0 entered promiscuous mode [ 478.171687][ T8141] bond2: (slave dummy0): Releasing active interface [ 478.200551][ T7922] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 478.215291][ T7922] usb 2-1: config 0 has no interface number 0 [ 478.242740][ T7922] usb 2-1: config 0 interface 184 has no altsetting 0 [ 478.334802][ T8140] syz.5.971 (8140) used greatest stack depth: 19536 bytes left [ 478.435322][ T7922] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 478.444582][ T7922] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.459029][ T7922] usb 2-1: Product: syz [ 478.463262][ T7922] usb 2-1: Manufacturer: syz [ 478.469498][ T7922] usb 2-1: SerialNumber: syz [ 478.493936][ T7922] usb 2-1: config 0 descriptor?? [ 478.548381][ T7922] smsc75xx v1.0.0 [ 479.205131][ T7922] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 479.254940][ T7922] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 479.359604][ T8156] device vlan2 entered promiscuous mode [ 479.366851][ T8156] device bridge0 entered promiscuous mode [ 479.406504][ T8156] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 479.565209][ T7922] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 479.595089][ T7972] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 479.640417][ T7922] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 479.686367][ T7922] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 479.712588][ T8159] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 479.750933][ T8159] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 480.577219][ T1210] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 480.708149][ T7922] smsc75xx: probe of 2-1:0.184 failed with error -71 [ 480.834801][ T7922] usb 2-1: USB disconnect, device number 9 [ 481.260664][ T7972] usb 6-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 481.260806][ T7972] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.272092][ T7972] usb 6-1: Product: syz [ 481.272158][ T7972] usb 6-1: Manufacturer: syz [ 481.272248][ T7972] usb 6-1: SerialNumber: syz [ 481.299828][ T7972] usb 6-1: config 0 descriptor?? [ 482.585481][ T8186] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 8, id = 0 [ 482.625397][ T8187] IPVS: stopping backup sync thread 8186 ... [ 486.052727][ T8214] comedi: No check for data length of config insn id 6 is implemented [ 486.061180][ T8214] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 486.071122][ T8214] comedi: Assuming n=419 is correct [ 486.335467][ T7972] usb 6-1: can't set config #0, error -110 [ 490.573760][ T8244] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -4 [ 490.583284][ T8244] platform regulatory.0: Direct firmware load for regulatory.db failed with error -4 [ 490.592968][ T8244] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 490.698264][ T8244] syz.4.991 (8244) used greatest stack depth: 18160 bytes left [ 490.711492][ T26] audit: type=1800 audit(1769089798.115:24): pid=8244 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.991" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 490.766094][ T8249] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 8, id = 0 [ 491.008212][ T8251] IPVS: stopping backup sync thread 8249 ... [ 491.240889][ T8257] binder: 8255:8257 ioctl 4018620d 0 returned -22 [ 491.655877][ T1107] usb 6-1: USB disconnect, device number 9 [ 495.825934][ T8307] comedi: No check for data length of config insn id 6 is implemented [ 495.834482][ T8307] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 495.844178][ T8307] comedi: Assuming n=419 is correct [ 496.507814][ T8313] loop4: detected capacity change from 0 to 7 [ 496.565142][ T8313] Dev loop4: unable to read RDB block 7 [ 496.685094][ T8313] loop4: unable to read partition table [ 496.724196][ T8313] loop4: partition table beyond EOD, truncated [ 496.730858][ T8321] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 8, id = 0 [ 496.757624][ T8099] loop: Write error at byte offset 4, length 3584. [ 496.764664][ C1] blk_update_request: I/O error, dev loop4, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 496.776153][ C1] Buffer I/O error on dev loop4, logical block 0, lost async page write [ 496.815144][ T8313] loop_reread_partitions: partition scan of loop4 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 496.949999][ T8331] IPVS: stopping backup sync thread 8321 ... [ 499.169880][ T8359] comedi: No check for data length of config insn id 6 is implemented [ 499.178344][ T8359] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 499.187823][ T8359] comedi: Assuming n=419 is correct [ 499.907292][ T8362] device dummy0 left promiscuous mode [ 499.980013][ T8365] netlink: 'syz.1.1031': attribute type 10 has an invalid length. [ 500.055629][ T8365] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1031'. [ 500.106299][ T8365] device dummy0 entered promiscuous mode [ 502.088211][ T1425] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.088276][ T1425] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.155034][ T13] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 502.245013][ T8386] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1036'. [ 502.945798][ T13] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 502.973041][ T13] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 503.855343][ T13] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 503.889689][ T13] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 504.345082][ T13] usb 4-1: can't set config #1, error -71 [ 504.357920][ T13] usb 4-1: USB disconnect, device number 10 [ 504.438024][ T8421] netlink: 'syz.4.1050': attribute type 1 has an invalid length. [ 504.493092][ T8421] 8021q: adding VLAN 0 to HW filter on device bond3 [ 504.535793][ T8426] device dummy0 left promiscuous mode [ 504.590098][ T8421] netlink: 'syz.4.1050': attribute type 10 has an invalid length. [ 504.599166][ T8421] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1050'. [ 504.608581][ T8421] device dummy0 entered promiscuous mode [ 504.683911][ T8428] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 504.732205][ T8428] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 504.750803][ T8433] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1053'. [ 504.765080][ T7972] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 504.795220][ T13] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 505.175605][ T13] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 505.217524][ T13] usb 4-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 505.283145][ T13] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.411845][ T13] usb 4-1: config 0 descriptor?? [ 506.425177][ T7972] usb 6-1: Using ep0 maxpacket: 8 [ 506.551109][ T7972] usb 6-1: config index 0 descriptor too short (expected 5924, got 36) [ 506.569733][ T7972] usb 6-1: config 250 has an invalid interface number: 228 but max is -1 [ 506.588724][ T7972] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 506.607173][ T7972] usb 6-1: config 250 has no interface number 0 [ 506.614047][ T7972] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 506.626776][ T7972] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 506.639062][ T7972] usb 6-1: config 250 interface 228 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 506.653867][ T7972] usb 6-1: config 250 interface 228 has no altsetting 0 [ 506.658069][ T13] hid-generic 0003:1038:12B6.000E: item fetching failed at offset 5/7 [ 506.702478][ T13] hid-generic: probe of 0003:1038:12B6.000E failed with error -22 [ 507.701024][ T8467] comedi: No check for data length of config insn id 6 is implemented [ 507.709561][ T8467] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 507.719389][ T8467] comedi: Assuming n=419 is correct [ 508.020207][ T8470] binder: 8468:8470 ioctl 4018620d 0 returned -22 [ 508.028793][ T8470] binder: BINDER_SET_CONTEXT_MGR bad uid 0 != 255 [ 508.035693][ T8470] binder: 8468:8470 ioctl 4018620d 200000000180 returned -1 [ 508.075586][ T7972] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 508.105586][ T4244] usb 4-1: USB disconnect, device number 11 [ 508.125478][ T7972] usb 6-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 508.287419][ T7972] usb 6-1: Product: syz [ 509.225120][ T7972] usb 6-1: can't set config #250, error -71 [ 509.264416][ T7972] usb 6-1: USB disconnect, device number 10 [ 509.430779][ T8487] netlink: 'syz.1.1070': attribute type 16 has an invalid length. [ 509.448462][ T8487] netlink: 'syz.1.1070': attribute type 2 has an invalid length. [ 509.460768][ T8487] netlink: 64086 bytes leftover after parsing attributes in process `syz.1.1070'. [ 509.759462][ T8496] siw: device registration error -23 [ 511.278079][ T8515] binder: 8508:8515 ioctl 4018620d 0 returned -22 [ 512.995026][ T7972] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 513.825050][ T7972] usb 3-1: Using ep0 maxpacket: 16 [ 513.904948][ T4252] Bluetooth: hci5: command 0x0406 tx timeout [ 513.955351][ T7972] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 513.986741][ T7972] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 514.025133][ T7972] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 514.054657][ T7972] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 514.091151][ T7972] usb 3-1: config 0 descriptor?? [ 514.574064][ T8555] device dummy0 left promiscuous mode [ 514.594346][ T8555] netlink: 'syz.5.1095': attribute type 10 has an invalid length. [ 514.621176][ T8555] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1095'. [ 514.653010][ T8555] device dummy0 entered promiscuous mode [ 514.696352][ T7972] usbhid 3-1:0.0: can't add hid device: -71 [ 514.707875][ T7972] usbhid: probe of 3-1:0.0 failed with error -71 [ 514.746621][ T7972] usb 3-1: USB disconnect, device number 9 [ 517.661061][ T8610] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 8, id = 0 [ 517.843998][ T8297] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 517.857408][ T8609] IPVS: stopping backup sync thread 8610 ... [ 518.705186][ T8297] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 518.735700][ T8297] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 518.935611][ T8297] usb 3-1: New USB device found, idVendor=056a, idProduct=030c, bcdDevice= 0.00 [ 518.944713][ T8297] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.978286][ T8297] usb 3-1: config 0 descriptor?? [ 519.044308][ T8626] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1118'. [ 519.955562][ T8297] hid (null): nested delimiters [ 519.963356][ T8297] wacom 0003:056A:030C.000F: nested delimiters [ 519.972051][ T8297] wacom 0003:056A:030C.000F: item 0 1 2 10 parsing failed [ 519.985308][ T8297] wacom 0003:056A:030C.000F: parse failed [ 519.992477][ T8297] wacom: probe of 0003:056A:030C.000F failed with error -22 [ 520.308844][ T8297] usb 3-1: USB disconnect, device number 10 [ 522.257949][ T8661] binder: 8655:8661 ioctl 4018620d 0 returned -22 [ 523.720500][ T8683] syz.4.1137 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 524.645943][ T4244] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 525.655637][ T8695] siw: device registration error -23 [ 525.785164][ T4244] usb 3-1: Using ep0 maxpacket: 16 [ 525.921273][ T4244] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 525.934413][ T4244] usb 3-1: New USB device found, idVendor=17ef, idProduct=60a4, bcdDevice= 0.00 [ 525.964294][ T4244] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 525.988585][ T4244] usb 3-1: config 0 descriptor?? [ 526.491793][ T4244] lenovo 0003:17EF:60A4.0010: unknown main item tag 0x2 [ 526.547068][ T4244] lenovo 0003:17EF:60A4.0010: hidraw0: USB HID v0.80 Device [HID 17ef:60a4] on usb-dummy_hcd.2-1/input0 [ 526.700187][ T4244] usb 3-1: USB disconnect, device number 11 [ 526.919813][ T8722] fido_id[8722]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 527.018710][ T8729] binder: 8725:8729 ioctl 4018620d 0 returned -22 [ 528.289255][ T8748] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1158'. [ 528.382672][ T8748] vivid-005: kernel_thread() failed [ 540.846390][ T8878] binder: 8869:8878 ioctl 4018620d 0 returned -22 [ 544.146927][ T8920] binder: 8908:8920 ioctl 4018620d 0 returned -22 [ 552.519346][ T8998] binder: 8994:8998 ioctl 4018620d 0 returned -22 [ 552.526848][ T8998] binder: BINDER_SET_CONTEXT_MGR bad uid 0 != 255 [ 552.533361][ T8998] binder: 8994:8998 ioctl 4018620d 200000000180 returned -1 [ 553.279131][ T9006] netlink: 'syz.2.1246': attribute type 1 has an invalid length. [ 553.451389][ T9006] 8021q: adding VLAN 0 to HW filter on device bond1 [ 553.486976][ T9013] netlink: 'syz.2.1246': attribute type 10 has an invalid length. [ 553.615013][ T9013] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1246'. [ 553.649744][ T9013] device dummy0 entered promiscuous mode [ 554.681014][ T7972] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 554.955010][ T7972] usb 6-1: Using ep0 maxpacket: 32 [ 555.095721][ T7972] usb 6-1: config 0 has an invalid interface number: 151 but max is 0 [ 555.145468][ T7972] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 555.290492][ T7972] usb 6-1: config 0 has no interface number 0 [ 555.379380][ T7972] usb 6-1: config 0 interface 151 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 555.746314][ T7972] usb 6-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 555.779648][ T7972] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.836264][ T7972] usb 6-1: Product: syz [ 555.840847][ T7972] usb 6-1: Manufacturer: syz [ 555.864016][ T7972] usb 6-1: SerialNumber: syz [ 555.917610][ T7972] usb 6-1: config 0 descriptor?? [ 557.200346][ T9042] binder: 9037:9042 ioctl 4018620d 0 returned -22 [ 557.491772][ T8297] usb 6-1: USB disconnect, device number 11 [ 557.710510][ T9049] tmpfs: Bad value for 'mpol' [ 557.807609][ T4462] udevd[4462]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 560.348472][ T9067] device dummy0 left promiscuous mode [ 560.405197][ T9072] netlink: 'syz.2.1265': attribute type 10 has an invalid length. [ 560.455029][ T9072] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1265'. [ 560.464148][ T9072] device dummy0 entered promiscuous mode [ 560.644971][ T8297] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 561.814550][ T8297] usb 4-1: Using ep0 maxpacket: 32 [ 561.908777][ T9086] binder: 9081:9086 ioctl 4018620d 0 returned -22 [ 561.916425][ T9086] binder: BINDER_SET_CONTEXT_MGR bad uid 0 != 255 [ 561.922950][ T9086] binder: 9081:9086 ioctl 4018620d 200000000180 returned -1 [ 561.985514][ T8297] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xA6, skipping [ 562.612070][ T8297] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 562.654229][ T8297] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 563.576229][ T1425] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.582593][ T1425] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.815006][ T8297] usb 4-1: string descriptor 0 read error: -71 [ 563.821312][ T8297] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 563.844885][ T8297] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.226838][ T8297] usb 4-1: config 0 descriptor?? [ 564.272690][ T8297] usb 4-1: can't set config #0, error -71 [ 564.281278][ T8297] usb 4-1: USB disconnect, device number 12 [ 564.433047][ T9110] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1277'. [ 565.920014][ T4280] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 565.947014][ T9127] siw: device registration error -23 [ 565.994924][ T1328] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 566.095316][ T1110] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 567.771678][ T1328] usb 4-1: Using ep0 maxpacket: 8 [ 567.891826][ T4280] usb 6-1: unable to read config index 0 descriptor/all [ 567.902608][ T4280] usb 6-1: can't read configurations, error -71 [ 567.909726][ T1110] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 567.918206][ T1328] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 567.928044][ T1328] usb 4-1: can't read configurations, error -71 [ 567.934526][ T1110] usb 3-1: config 0 has no interface number 0 [ 567.953981][ T1110] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 567.971310][ T1110] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 567.982481][ T1110] usb 3-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 568.003748][ T1110] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 568.835914][ T1110] usb 3-1: config 0 descriptor?? [ 568.865244][ T1110] usb 3-1: can't set config #0, error -71 [ 568.888546][ T1110] usb 3-1: USB disconnect, device number 12 [ 570.155080][ T1328] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 570.155480][ T4280] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 570.655290][ T1328] usb 4-1: Using ep0 maxpacket: 8 [ 570.805094][ T1328] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 570.824116][ T1328] usb 4-1: config 0 has no interface number 0 [ 570.890953][ T4280] usb 6-1: Using ep0 maxpacket: 32 [ 570.897017][ T9175] siw: device registration error -23 [ 571.015514][ T4280] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 571.026743][ T1328] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 571.039726][ T1328] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 571.049468][ T4280] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 571.067303][ T1328] usb 4-1: Product: syz [ 571.075468][ T4280] usb 6-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 571.086065][ T1328] usb 4-1: Manufacturer: syz [ 571.090826][ T1328] usb 4-1: SerialNumber: syz [ 571.095957][ T4280] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 571.106506][ T1328] usb 4-1: config 0 descriptor?? [ 571.121820][ T4280] usb 6-1: config 0 descriptor?? [ 571.380100][ T1328] usb 4-1: USB disconnect, device number 14 [ 571.598941][ T4280] hid-u2fzero 0003:10C4:8ACF.0011: unknown main item tag 0x1 [ 571.606969][ T4280] hid-u2fzero 0003:10C4:8ACF.0011: item fetching failed at offset 3/5 [ 571.616326][ T4280] hid-u2fzero: probe of 0003:10C4:8ACF.0011 failed with error -22 [ 571.807936][ T8297] usb 6-1: USB disconnect, device number 13 [ 576.468588][ T9262] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1317'. [ 577.409678][ T9266] comedi: No check for data length of config insn id 6 is implemented [ 577.418184][ T9266] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 577.428229][ T9266] comedi: Assuming n=419 is correct [ 577.688547][ T9264] netlink: 'syz.4.1319': attribute type 10 has an invalid length. [ 577.733012][ T9264] bridge0: port 3(gretap0) entered disabled state [ 577.740099][ T9264] bridge0: port 2(bridge_slave_1) entered disabled state [ 577.747516][ T9264] bridge0: port 1(bridge_slave_0) entered disabled state [ 577.919787][ T9264] bridge0: port 3(gretap0) entered blocking state [ 577.926463][ T9264] bridge0: port 3(gretap0) entered forwarding state [ 577.935440][ T9264] bridge0: port 2(bridge_slave_1) entered blocking state [ 577.942601][ T9264] bridge0: port 2(bridge_slave_1) entered forwarding state [ 577.950073][ T9264] bridge0: port 1(bridge_slave_0) entered blocking state [ 577.957253][ T9264] bridge0: port 1(bridge_slave_0) entered forwarding state [ 578.002696][ T9284] binder: 9273:9284 ioctl 4018620d 0 returned -22 [ 578.135106][ T9264] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 578.156982][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 578.181812][ T9282] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1325'. [ 578.776279][ T9282] 8021q: adding VLAN 0 to HW filter on device bond2 [ 579.344940][ T4280] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 579.594977][ T4280] usb 6-1: Using ep0 maxpacket: 8 [ 579.725216][ T4280] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 579.751156][ T4280] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 579.795543][ T4280] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 579.836270][ T4280] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 579.887466][ T4280] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 579.929934][ T4280] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 580.093579][ T4280] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.121175][ T9321] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1337'. [ 582.425200][ T4280] usb 6-1: usb_control_msg returned -71 [ 582.435243][ T4280] usbtmc 6-1:16.0: can't read capabilities [ 582.521014][ T4280] usb 6-1: USB disconnect, device number 14 [ 582.566957][ T9332] netlink: 'syz.3.1344': attribute type 10 has an invalid length. [ 582.638826][ T9332] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1344'. [ 582.660135][ T9332] device dummy0 entered promiscuous mode [ 582.826578][ T9340] loop2: detected capacity change from 0 to 1024 [ 582.874570][ T9340] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 583.211409][ T9340] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000080,nodelalloc,grpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 584.293416][ T9353] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1349'. [ 584.386641][ T9340] EXT4-fs (loop2): shut down requested (1) [ 586.241923][ T9386] loop2: detected capacity change from 0 to 1024 [ 586.332055][ T9386] EXT4-fs (loop2): Ignoring removed orlov option [ 586.377268][ T9386] EXT4-fs (loop2): inline encryption not supported [ 586.501091][ T9391] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1364'. [ 587.265732][ T9386] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869) [ 587.315268][ T9386] EXT4-fs error (device loop2): ext4_get_journal_inode:5185: comm syz.2.1363: inode #102: comm syz.2.1363: iget: illegal inode # [ 587.425217][ T9386] EXT4-fs (loop2): no journal found [ 587.484913][ T9386] EXT4-fs (loop2): can't get journal size [ 587.629660][ T9386] EXT4-fs (loop2): failed to initialize system zone (-22) [ 587.647889][ T9386] EXT4-fs (loop2): mount failed [ 588.491598][ T9409] loop3: detected capacity change from 0 to 128 [ 588.578140][ T9409] EXT4-fs (loop3): mounted filesystem without journal. Opts: noquota,min_batch_time=0x000000000000001b,barrier=0x0000000000000009,norecovery,,errors=continue. Quota mode: none. [ 588.746026][ T9409] ext4 filesystem being mounted at /278/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 589.904632][ T9423] [ 589.907028][ T9423] ====================================================== [ 589.914076][ T9423] WARNING: possible circular locking dependency detected [ 589.921132][ T9423] syzkaller #0 Not tainted [ 589.925585][ T9423] ------------------------------------------------------ [ 589.932628][ T9423] syz.4.1375/9423 is trying to acquire lock: [ 589.938640][ T9423] ffff88807da5ef60 (sk_lock-AF_INET6){+.+.}-{0:0}, at: inet_sk_diag_fill+0xf5e/0x1ca0 [ 589.948299][ T9423] [ 589.948299][ T9423] but task is already holding lock: [ 589.955696][ T9423] ffffc9000164b8d8 (&h->lhash2[i].lock){+.+.}-{2:2}, at: mptcp_diag_dump+0x917/0x12b0 [ 589.965315][ T9423] [ 589.965315][ T9423] which lock already depends on the new lock. [ 589.965315][ T9423] [ 589.975966][ T9423] [ 589.975966][ T9423] the existing dependency chain (in reverse order) is: [ 589.985100][ T9423] [ 589.985100][ T9423] -> #1 (&h->lhash2[i].lock){+.+.}-{2:2}: [ 589.993046][ T9423] _raw_spin_lock+0x2a/0x40 [ 589.998122][ T9423] __inet_hash+0xe3/0x960 [ 590.003018][ T9423] inet_csk_listen_start+0x22f/0x320 [ 590.008959][ T9423] inet_listen+0x2e1/0x590 [ 590.014311][ T9423] __sys_listen+0x19d/0x220 [ 590.019387][ T9423] __x64_sys_listen+0x56/0x60 [ 590.024720][ T9423] do_syscall_64+0x4c/0xa0 [ 590.029694][ T9423] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 590.036281][ T9423] [ 590.036281][ T9423] -> #0 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 590.044055][ T9423] __lock_acquire+0x2c42/0x7d10 [ 590.049490][ T9423] lock_acquire+0x19e/0x400 [ 590.054643][ T9423] mptcp_diag_get_info+0x1f2/0x9e0 [ 590.060316][ T9423] inet_sk_diag_fill+0xf5e/0x1ca0 [ 590.065898][ T9423] mptcp_diag_dump+0xce6/0x12b0 [ 590.071300][ T9423] __inet_diag_dump+0x1f6/0x380 [ 590.076709][ T9423] netlink_dump+0x694/0xcf0 [ 590.081762][ T9423] __netlink_dump_start+0x523/0x700 [ 590.087679][ T9423] inet_diag_handler_cmd+0x1d3/0x2b0 [ 590.093622][ T9423] sock_diag_rcv_msg+0x164/0x3e0 [ 590.099127][ T9423] netlink_rcv_skb+0x1f5/0x440 [ 590.104549][ T9423] sock_diag_rcv+0x26/0x40 [ 590.109519][ T9423] netlink_unicast+0x774/0x920 [ 590.114947][ T9423] netlink_sendmsg+0x8ba/0xbe0 [ 590.120268][ T9423] sock_write_iter+0x2a6/0x3a0 [ 590.125599][ T9423] do_iter_readv_writev+0x47e/0x5f0 [ 590.131481][ T9423] do_iter_write+0x205/0x7b0 [ 590.136631][ T9423] do_writev+0x281/0x480 [ 590.141494][ T9423] do_syscall_64+0x4c/0xa0 [ 590.146464][ T9423] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 590.152940][ T9423] [ 590.152940][ T9423] other info that might help us debug this: [ 590.152940][ T9423] [ 590.163193][ T9423] Possible unsafe locking scenario: [ 590.163193][ T9423] [ 590.170758][ T9423] CPU0 CPU1 [ 590.176151][ T9423] ---- ---- [ 590.181571][ T9423] lock(&h->lhash2[i].lock); [ 590.186286][ T9423] lock(sk_lock-AF_INET6); [ 590.193525][ T9423] lock(&h->lhash2[i].lock); [ 590.200771][ T9423] lock(sk_lock-AF_INET6); [ 590.205315][ T9423] [ 590.205315][ T9423] *** DEADLOCK *** [ 590.205315][ T9423] [ 590.213494][ T9423] 6 locks held by syz.4.1375/9423: [ 590.218634][ T9423] #0: ffffffff8d446128 (sock_diag_mutex){+.+.}-{3:3}, at: sock_diag_rcv+0x17/0x40 [ 590.228001][ T9423] #1: ffffffff8d445fe8 (sock_diag_table_mutex){+.+.}-{3:3}, at: sock_diag_rcv_msg+0x217/0x3e0 [ 590.238526][ T9423] #2: ffff888061960698 (nlk_cb_mutex-SOCK_DIAG){+.+.}-{3:3}, at: __netlink_dump_start+0x11f/0x700 [ 590.249287][ T9423] #3: ffffffff8d51ff88 (inet_diag_table_mutex){+.+.}-{3:3}, at: __inet_diag_dump+0x181/0x380 [ 590.259651][ T9423] #4: ffffffff8c31eaa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 590.269057][ T9423] #5: ffffc9000164b8d8 (&h->lhash2[i].lock){+.+.}-{2:2}, at: mptcp_diag_dump+0x917/0x12b0 [ 590.279253][ T9423] [ 590.279253][ T9423] stack backtrace: [ 590.285208][ T9423] CPU: 0 PID: 9423 Comm: syz.4.1375 Not tainted syzkaller #0 [ 590.292636][ T9423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 590.302939][ T9423] Call Trace: [ 590.306265][ T9423] [ 590.309225][ T9423] dump_stack_lvl+0x188/0x250 [ 590.313944][ T9423] ? load_image+0x400/0x400 [ 590.318480][ T9423] ? show_regs_print_info+0x20/0x20 [ 590.323730][ T9423] ? print_circular_bug+0x12b/0x1a0 [ 590.328972][ T9423] check_noncircular+0x296/0x330 [ 590.334041][ T9423] ? add_chain_block+0x940/0x940 [ 590.339013][ T9423] ? lockdep_lock+0xf1/0x1f0 [ 590.343639][ T9423] ? __lock_acquire+0x12e8/0x7d10 [ 590.348699][ T9423] ? mark_lock+0x94/0x320 [ 590.353062][ T9423] __lock_acquire+0x2c42/0x7d10 [ 590.357967][ T9423] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 590.363983][ T9423] ? verify_lock_unused+0x140/0x140 [ 590.369259][ T9423] ? lockdep_hardirqs_on_prepare+0x770/0x770 [ 590.375280][ T9423] ? verify_lock_unused+0x140/0x140 [ 590.380515][ T9423] ? __local_bh_enable_ip+0xd7/0x1c0 [ 590.385873][ T9423] ? __local_bh_enable_ip+0x136/0x1c0 [ 590.391283][ T9423] ? lockdep_hardirqs_on+0x94/0x140 [ 590.396515][ T9423] ? __local_bh_enable_ip+0x136/0x1c0 [ 590.401930][ T9423] ? _local_bh_enable+0xa0/0xa0 [ 590.406911][ T9423] ? nla_put+0x130/0x1e0 [ 590.411215][ T9423] lock_acquire+0x19e/0x400 [ 590.415760][ T9423] ? inet_sk_diag_fill+0xf5e/0x1ca0 [ 590.421011][ T9423] ? read_lock_is_recursive+0x10/0x10 [ 590.426426][ T9423] ? rcu_lock_release+0x5/0x20 [ 590.431232][ T9423] ? __lock_acquire+0x7d10/0x7d10 [ 590.436300][ T9423] ? inet_sk_diag_fill+0xf5e/0x1ca0 [ 590.441544][ T9423] mptcp_diag_get_info+0x1f2/0x9e0 [ 590.446688][ T9423] ? inet_sk_diag_fill+0xf5e/0x1ca0 [ 590.451923][ T9423] inet_sk_diag_fill+0xf5e/0x1ca0 [ 590.456985][ T9423] ? inet_diag_msg_attrs_fill+0x930/0x930 [ 590.462760][ T9423] ? do_raw_spin_lock+0x128/0x2f0 [ 590.467832][ T9423] ? __rwlock_init+0x140/0x140 [ 590.472719][ T9423] ? inet_diag_bc_sk+0x18b/0x1120 [ 590.477783][ T9423] mptcp_diag_dump+0xce6/0x12b0 [ 590.482703][ T9423] ? mptcp_token_join_cookie_init_state+0x460/0x460 [ 590.489327][ T9423] __inet_diag_dump+0x1f6/0x380 [ 590.494220][ T9423] netlink_dump+0x694/0xcf0 [ 590.498769][ T9423] ? netlink_lookup+0x1d0/0x1d0 [ 590.503662][ T9423] ? __inet_diag_dump_start+0x805/0x970 [ 590.509405][ T9423] __netlink_dump_start+0x523/0x700 [ 590.514646][ T9423] inet_diag_handler_cmd+0x1d3/0x2b0 [ 590.519977][ T9423] ? rcu_lock_release+0x20/0x20 [ 590.524865][ T9423] ? inet_diag_handler_get_info+0xb90/0xb90 [ 590.530794][ T9423] ? inet_diag_dump_start+0x20/0x20 [ 590.536028][ T9423] ? inet_diag_dump+0x50/0x50 [ 590.540771][ T9423] ? rcu_lock_release+0x20/0x20 [ 590.545645][ T9423] sock_diag_rcv_msg+0x164/0x3e0 [ 590.550605][ T9423] netlink_rcv_skb+0x1f5/0x440 [ 590.555402][ T9423] ? sock_diag_bind+0xa0/0xa0 [ 590.560111][ T9423] ? netlink_ack+0xb50/0xb50 [ 590.564742][ T9423] ? __lock_acquire+0x7d10/0x7d10 [ 590.569850][ T9423] sock_diag_rcv+0x26/0x40 [ 590.574303][ T9423] netlink_unicast+0x774/0x920 [ 590.579106][ T9423] netlink_sendmsg+0x8ba/0xbe0 [ 590.583901][ T9423] ? netlink_getsockopt+0x570/0x570 [ 590.589120][ T9423] ? aa_sock_msg_perm+0x94/0x150 [ 590.594108][ T9423] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 590.599421][ T9423] ? security_socket_sendmsg+0x7c/0xa0 [ 590.604903][ T9423] sock_write_iter+0x2a6/0x3a0 [ 590.609700][ T9423] ? sock_read_iter+0x380/0x380 [ 590.614577][ T9423] do_iter_readv_writev+0x47e/0x5f0 [ 590.619805][ T9423] ? aa_path_link+0x880/0x880 [ 590.624518][ T9423] ? generic_file_rw_checks+0x280/0x280 [ 590.630089][ T9423] ? common_file_perm+0x171/0x1c0 [ 590.635137][ T9423] ? fsnotify_perm+0x5d/0x560 [ 590.639846][ T9423] ? security_file_permission+0x75/0xa0 [ 590.645424][ T9423] do_iter_write+0x205/0x7b0 [ 590.650046][ T9423] ? import_iovec+0x6f/0xa0 [ 590.654576][ T9423] do_writev+0x281/0x480 [ 590.658853][ T9423] ? do_readv+0x460/0x460 [ 590.663288][ T9423] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 590.669582][ T9423] ? lock_chain_count+0x20/0x20 [ 590.674466][ T9423] ? vtime_user_exit+0x2c8/0x3e0 [ 590.679450][ T9423] ? lockdep_hardirqs_on+0x94/0x140 [ 590.684669][ T9423] do_syscall_64+0x4c/0xa0 [ 590.689100][ T9423] ? clear_bhb_loop+0x30/0x80 [ 590.693798][ T9423] ? clear_bhb_loop+0x30/0x80 [ 590.698497][ T9423] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 590.704421][ T9423] RIP: 0033:0x7fef25bffcb9 [ 590.708850][ T9423] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 590.728561][ T9423] RSP: 002b:00007fef23e5b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 590.737011][ T9423] RAX: ffffffffffffffda RBX: 00007fef25e7afa0 RCX: 00007fef25bffcb9 [ 590.744996][ T9423] RDX: 0000000000000001 RSI: 0000200000000280 RDI: 0000000000000004 [ 590.752996][ T9423] RBP: 00007fef25c6dbf7 R08: 0000000000000000 R09: 0000000000000000 [ 590.760981][ T9423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 590.768965][ T9423] R13: 00007fef25e7b038 R14: 00007fef25e7afa0 R15: 00007ffd0294fc18 [ 590.776957][ T9423] [ 590.781609][ T9423] BUG: sleeping function called from invalid context at net/core/sock.c:3291 [ 590.791638][ T9423] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 9423, name: syz.4.1375 [ 590.800750][ T9423] INFO: lockdep is turned off. [ 590.805568][ T9423] Preemption disabled at: [ 590.805579][ T9423] [<0000000000000000>] 0x0 [ 590.814361][ T9423] CPU: 0 PID: 9423 Comm: syz.4.1375 Not tainted syzkaller #0 [ 590.821847][ T9423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 590.831920][ T9423] Call Trace: [ 590.835215][ T9423] [ 590.838162][ T9423] dump_stack_lvl+0x188/0x250 [ 590.842861][ T9423] ? show_regs_print_info+0x20/0x20 [ 590.848082][ T9423] ? load_image+0x400/0x400 [ 590.852613][ T9423] ___might_sleep+0x493/0x610 [ 590.857309][ T9423] ? __might_sleep+0xf0/0xf0 [ 590.861913][ T9423] ? read_lock_is_recursive+0x10/0x10 [ 590.867303][ T9423] ? rcu_lock_release+0x5/0x20 [ 590.872083][ T9423] __lock_sock_fast+0x2f/0xe0 [ 590.876779][ T9423] ? inet_sk_diag_fill+0xf5e/0x1ca0 [ 590.881994][ T9423] mptcp_diag_get_info+0x1fe/0x9e0 [ 590.887126][ T9423] inet_sk_diag_fill+0xf5e/0x1ca0 [ 590.892170][ T9423] ? inet_diag_msg_attrs_fill+0x930/0x930 [ 590.897906][ T9423] ? do_raw_spin_lock+0x128/0x2f0 [ 590.902968][ T9423] ? __rwlock_init+0x140/0x140 [ 590.907743][ T9423] ? inet_diag_bc_sk+0x18b/0x1120 [ 590.912786][ T9423] mptcp_diag_dump+0xce6/0x12b0 [ 590.917660][ T9423] ? mptcp_token_join_cookie_init_state+0x460/0x460 [ 590.924269][ T9423] __inet_diag_dump+0x1f6/0x380 [ 590.929139][ T9423] netlink_dump+0x694/0xcf0 [ 590.933667][ T9423] ? netlink_lookup+0x1d0/0x1d0 [ 590.938535][ T9423] ? __inet_diag_dump_start+0x805/0x970 [ 590.944105][ T9423] __netlink_dump_start+0x523/0x700 [ 590.949340][ T9423] inet_diag_handler_cmd+0x1d3/0x2b0 [ 590.954652][ T9423] ? rcu_lock_release+0x20/0x20 [ 590.959516][ T9423] ? inet_diag_handler_get_info+0xb90/0xb90 [ 590.965430][ T9423] ? inet_diag_dump_start+0x20/0x20 [ 590.970641][ T9423] ? inet_diag_dump+0x50/0x50 [ 590.975331][ T9423] ? rcu_lock_release+0x20/0x20 [ 590.980204][ T9423] sock_diag_rcv_msg+0x164/0x3e0 [ 590.985159][ T9423] netlink_rcv_skb+0x1f5/0x440 [ 590.989936][ T9423] ? sock_diag_bind+0xa0/0xa0 [ 590.994632][ T9423] ? netlink_ack+0xb50/0xb50 [ 590.999236][ T9423] ? __lock_acquire+0x7d10/0x7d10 [ 591.004290][ T9423] sock_diag_rcv+0x26/0x40 [ 591.008723][ T9423] netlink_unicast+0x774/0x920 [ 591.013526][ T9423] netlink_sendmsg+0x8ba/0xbe0 [ 591.018310][ T9423] ? netlink_getsockopt+0x570/0x570 [ 591.023526][ T9423] ? aa_sock_msg_perm+0x94/0x150 [ 591.028483][ T9423] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 591.033801][ T9423] ? security_socket_sendmsg+0x7c/0xa0 [ 591.039274][ T9423] sock_write_iter+0x2a6/0x3a0 [ 591.044069][ T9423] ? sock_read_iter+0x380/0x380 [ 591.048947][ T9423] do_iter_readv_writev+0x47e/0x5f0 [ 591.054157][ T9423] ? aa_path_link+0x880/0x880 [ 591.058860][ T9423] ? generic_file_rw_checks+0x280/0x280 [ 591.064424][ T9423] ? common_file_perm+0x171/0x1c0 [ 591.069464][ T9423] ? fsnotify_perm+0x5d/0x560 [ 591.074155][ T9423] ? security_file_permission+0x75/0xa0 [ 591.079725][ T9423] do_iter_write+0x205/0x7b0 [ 591.084336][ T9423] ? import_iovec+0x6f/0xa0 [ 591.088873][ T9423] do_writev+0x281/0x480 [ 591.093139][ T9423] ? do_readv+0x460/0x460 [ 591.097496][ T9423] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 591.103508][ T9423] ? lock_chain_count+0x20/0x20 [ 591.108398][ T9423] ? vtime_user_exit+0x2c8/0x3e0 [ 591.113355][ T9423] ? lockdep_hardirqs_on+0x94/0x140 [ 591.118572][ T9423] do_syscall_64+0x4c/0xa0 [ 591.123009][ T9423] ? clear_bhb_loop+0x30/0x80 [ 591.127701][ T9423] ? clear_bhb_loop+0x30/0x80 [ 591.132395][ T9423] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 591.138301][ T9423] RIP: 0033:0x7fef25bffcb9 [ 591.142729][ T9423] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 591.162353][ T9423] RSP: 002b:00007fef23e5b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 591.170788][ T9423] RAX: ffffffffffffffda RBX: 00007fef25e7afa0 RCX: 00007fef25bffcb9 [ 591.178777][ T9423] RDX: 0000000000000001 RSI: 0000200000000280 RDI: 0000000000000004 [ 591.186774][ T9423] RBP: 00007fef25c6dbf7 R08: 0000000000000000 R09: 0000000000000000 [ 591.194760][ T9423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 591.202852][ T9423] R13: 00007fef25e7b038 R14: 00007fef25e7afa0 R15: 00007ffd0294fc18 [ 591.210847][ T9423]