last executing test programs: 8m30.546047185s ago: executing program 0 (id=294): socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f00000000c0)={0x9909cb, 0xfffffffd}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r0 = socket(0x1d, 0x2, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000040)) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$afs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000002c0), 0x2000400, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000500)='./proc/net/rpc/nfsd.export/channel\x00', 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r4, 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) flock(r5, 0x2) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x10a) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r4) sendmsg$DEVLINK_CMD_GET(r6, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6c00000012ca3b5d9fd1836ebba60d0f000000000000838de3bd7e533be3f0377f8634a522c27f6808a75aafe4f34626d07bc75264d14d350cd57a37d8", @ANYRES16=r7, @ANYBLOB="00022dbd7000fedbdf2501000000080001007063690011000200303030303a30303a31302e30000000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080001007063690011000200303030303a30303a31302e3000000000"], 0x6c}, 0x1, 0x0, 0x0, 0x408c1}, 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) 8m28.740930268s ago: executing program 0 (id=295): socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r3 = open(&(0x7f0000000040)='./bus\x00', 0x4c27e, 0x10) sendfile(r3, r3, 0x0, 0x40000000800) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) fallocate(r4, 0x100000000000011, 0xf00, 0x2f93) 8m26.453562296s ago: executing program 0 (id=300): setns(0xc9, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) execveat(r1, &(0x7f0000000040)='./proc\x00', &(0x7f0000000100), &(0x7f00000002c0)={[&(0x7f00000001c0)='\x00', &(0x7f0000000200)='\x00', &(0x7f0000000280)='proc\x00']}, 0x800) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000000)='3', 0x4e) write(r0, &(0x7f0000000300)="89", 0x3f80) 8m21.822143169s ago: executing program 0 (id=305): r0 = socket(0xa, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x0, 0xffe0}, {0xffff, 0xffff}, {0xb, 0xe}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0xfffffffffffffd4a, 0x2, {0x27, 0x2, 0x7}}]}}]}, 0x48}}, 0x40814) syz_open_dev$ttys(0xc, 0x2, 0x1) r2 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x1, 0x4, 0x1, 0x81, 0x9, "a170ff35fc726204188e2cf9f3e49079065f4e"}) socket$kcm(0x2, 0x1, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x200c01, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(0xffffffffffffffff, &(0x7f0000010440)=[{&(0x7f0000000080)=""/65, 0x41}], 0x1, 0x0, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000010380)=[{&(0x7f0000000140)}, {&(0x7f0000010300)="c97ee13fef738d23abb9f3767e1e88526ec54c0d999c8d4857543981769c282f4cd2396f78b8cf216f14b7466c36101b03cf7044fbdd003bad5d0875f504fb445201fae1a5a695a5be71c5f92eb0", 0x4e}], 0x2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/subsystems/testnqn\x00', 0x1ff) rmdir(&(0x7f0000000040)='./config/nvmet/subsystems/testnqn\x00') ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000200)) ioctl(r3, 0x7, &(0x7f00000102c0)="45077e31ef64ebe9545e55932b1a57c062ad5309e69b5f1dab02da4f75e558fe79a3410e2c91e1340ea8eca517a590a0233ae95142893cda0f2212dadbb8a9") ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f0000000080)=0x200000000) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x8001) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000040), 0x6) 8m20.1222515s ago: executing program 0 (id=307): r0 = userfaultfd(0x801) r1 = socket(0x80000000000000a, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x2, &(0x7f00000000c0)=0x5) syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), r1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b00)=@newtaction={0x94, 0x30, 0x1, 0x0, 0x0, {}, [{0x80, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0xfffffffe}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}, @m_pedit={0x30, 0x2, 0x0, 0x0, {{0xa}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x94}}, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0xa8}, [@ldst={0x5, 0x3, 0x0, 0x0, 0xa}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) ptrace$poke(0x4, r3, &(0x7f0000000200), 0x9) syz_clone(0x14100000, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24000045, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x4, 0x8}, 0x50) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x4}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000380)=@delqdisc={0x434, 0x25, 0x100, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x2, 0xf}, {0xa, 0x7}, {0x0, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x3, 0xfffffff8, 0x4, 0x40, 0x2, 0x2, 0x5, 0x7fff, 0x4, 0x1, 0x6, 0x1cc, 0x7, 0x0, 0x5, 0x0, 0x8, 0x9, 0x9, 0x9, 0xf5, 0x200, 0x1, 0x5, 0x6, 0xfff, 0x9, 0x1, 0x80, 0x10000, 0x0, 0x6, 0xff, 0x4, 0x6, 0x9, 0xe6c1, 0x6, 0x65, 0x6, 0x5, 0x71, 0x1f146d7e, 0x80000001, 0x89, 0xe9, 0x80000001, 0x2, 0xff, 0x8, 0xffff8dc2, 0x400, 0x0, 0x2, 0xffff, 0x10001, 0x3ff, 0x0, 0x5, 0xa000000, 0x0, 0x5, 0x8, 0x3, 0x0, 0x401, 0x5, 0x8, 0x4ad1, 0x1, 0x25ae, 0x1, 0xfff, 0x6, 0xe, 0xffffffff, 0x7, 0x5, 0x3ff, 0xfff, 0x8, 0xf, 0x0, 0x4, 0x626cfd3b, 0x0, 0x60df8662, 0x2, 0x5, 0x4, 0xc6, 0x8, 0x7, 0xfffffffa, 0x9, 0x4, 0x1, 0x3, 0x0, 0x7, 0x616, 0xffff8000, 0xe13, 0x8, 0x7, 0xc, 0xfdc1, 0x7ff, 0x4, 0xffffffec, 0x4, 0x7fff, 0x40, 0x1, 0x1f1f, 0x3, 0x665195e5, 0x5, 0x7, 0x5, 0x8, 0x7, 0x1, 0x800, 0x101, 0x400, 0x2, 0x6, 0xd, 0xa, 0x7, 0xc2, 0x99, 0x4, 0x2e9, 0x4, 0x3, 0x401, 0xfffffffe, 0x7, 0x80000000, 0x8, 0x0, 0x4, 0x37, 0x4, 0x31, 0x2, 0x2, 0x3, 0x6, 0x1, 0x690c, 0x0, 0x9, 0x2, 0xe, 0xb, 0x8, 0x5597, 0x3, 0x4, 0x7fff, 0x62, 0xf6, 0x5, 0x0, 0x7fffffff, 0x9, 0x9, 0x2, 0x100, 0x8, 0x101, 0x5, 0x2, 0x3, 0x4, 0xfc8d, 0x8, 0x3ff, 0x3, 0xaeb3, 0x3, 0x5, 0x9, 0xfc, 0x8000, 0x1, 0x7, 0x20000, 0x2, 0x2, 0x9f85, 0x65, 0x85, 0x4, 0x2, 0x2, 0x6, 0x7, 0xd92, 0x40, 0xfff, 0xe1, 0x8, 0x426, 0x5, 0x9, 0x1, 0x1000, 0x9, 0x36ae765f, 0x401, 0x9, 0x200000, 0x3, 0x4, 0x5, 0x6, 0x89, 0x5, 0x80000000, 0x4007, 0x1, 0x41632842, 0x6, 0x10, 0x2, 0x8001, 0x5, 0x100, 0x8, 0x9, 0xfe64, 0xd, 0x1c2, 0x2, 0x7, 0x2, 0x80000001, 0xa, 0x6, 0xfffffffc, 0x5, 0x3, 0x7f, 0x8001, 0x5, 0x3, 0x6, 0x8001, 0x10001, 0x9, 0xb, 0x7]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40000}, 0x8010) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000001c0)={0x5, 0x1, 0x4}) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000002dc0)=@userptr={0x2, 0x1, 0x4, 0x0, 0x7, {0x77359400}, {0x1, 0xc, 0x9, 0xc, 0x3, 0x8, "c12400"}, 0x3, 0x2, {0x0}, 0x96000}) ppoll(&(0x7f0000000240), 0x20000000000000dc, 0x0, 0x0, 0x30) 8m18.434737709s ago: executing program 0 (id=308): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xa8, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)={0x20, 0x44, 0x1, 0x70bd29, 0x4, {0x2}, [@nested={0x4, 0x48}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x13f}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x200048d5}, 0x4008094) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) listns(0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) write(r4, &(0x7f0000000180)='0fc5:1227:dc', 0xc) chdir(&(0x7f0000000140)='./file0\x00') r5 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) write$binfmt_aout(r5, 0x0, 0x31c8) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000002, 0xc3072, r5, 0x200000) symlink(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') write$USERIO_CMD_SEND_INTERRUPT(r4, &(0x7f00000001c0)={0x2, 0x41}, 0x2) 8m2.101715039s ago: executing program 32 (id=308): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xa8, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)={0x20, 0x44, 0x1, 0x70bd29, 0x4, {0x2}, [@nested={0x4, 0x48}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x13f}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x200048d5}, 0x4008094) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) listns(0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) write(r4, &(0x7f0000000180)='0fc5:1227:dc', 0xc) chdir(&(0x7f0000000140)='./file0\x00') r5 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) write$binfmt_aout(r5, 0x0, 0x31c8) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000002, 0xc3072, r5, 0x200000) symlink(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') write$USERIO_CMD_SEND_INTERRUPT(r4, &(0x7f00000001c0)={0x2, 0x41}, 0x2) 4m56.492884084s ago: executing program 2 (id=593): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120100001d9167204f17316a3f26010203010902120001000000000904"], 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x814}}}, 0x0) 4m52.681505006s ago: executing program 2 (id=597): r0 = userfaultfd(0x801) r1 = socket(0x80000000000000a, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x2, &(0x7f00000000c0)=0x5) syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), r1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b00)=@newtaction={0x94, 0x30, 0x1, 0x0, 0x0, {}, [{0x80, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0xfffffffe}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}, @m_pedit={0x30, 0x2, 0x0, 0x0, {{0xa}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x94}}, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0xa8}, [@ldst={0x5, 0x3, 0x0, 0x0, 0xa}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) ptrace$poke(0x4, r3, &(0x7f0000000200), 0x9) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24000045, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x4, 0x8}, 0x50) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x4}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000380)=@delqdisc={0x434, 0x25, 0x100, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x2, 0xf}, {0xa, 0x7}, {0x0, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x3, 0xfffffff8, 0x4, 0x40, 0x2, 0x2, 0x5, 0x7fff, 0x4, 0x1, 0x6, 0x1cc, 0x7, 0x0, 0x5, 0x0, 0x8, 0x9, 0x9, 0x9, 0xf5, 0x200, 0x1, 0x5, 0x6, 0xfff, 0x9, 0x1, 0x80, 0x10000, 0x0, 0x6, 0xff, 0x4, 0x6, 0x9, 0xe6c1, 0x6, 0x65, 0x6, 0x5, 0x71, 0x1f146d7e, 0x80000001, 0x89, 0xe9, 0x80000001, 0x2, 0xff, 0x8, 0xffff8dc2, 0x400, 0x0, 0x2, 0xffff, 0x10001, 0x3ff, 0x0, 0x5, 0xa000000, 0x0, 0x5, 0x8, 0x3, 0x0, 0x401, 0x5, 0x8, 0x4ad1, 0x1, 0x25ae, 0x1, 0xfff, 0x6, 0xe, 0xffffffff, 0x7, 0x5, 0x3ff, 0xfff, 0x8, 0xf, 0x0, 0x4, 0x626cfd3b, 0x0, 0x60df8662, 0x2, 0x5, 0x4, 0xc6, 0x8, 0x7, 0xfffffffa, 0x9, 0x4, 0x1, 0x3, 0x0, 0x7, 0x616, 0xffff8000, 0xe13, 0x8, 0x7, 0xc, 0xfdc1, 0x7ff, 0x4, 0xffffffec, 0x4, 0x7fff, 0x40, 0x1, 0x1f1f, 0x3, 0x665195e5, 0x5, 0x7, 0x5, 0x8, 0x7, 0x1, 0x800, 0x101, 0x400, 0x2, 0x6, 0xd, 0xa, 0x7, 0xc2, 0x99, 0x4, 0x2e9, 0x4, 0x3, 0x401, 0xfffffffe, 0x7, 0x80000000, 0x8, 0x0, 0x4, 0x37, 0x4, 0x31, 0x2, 0x2, 0x3, 0x6, 0x1, 0x690c, 0x0, 0x9, 0x2, 0xe, 0xb, 0x8, 0x5597, 0x3, 0x4, 0x7fff, 0x62, 0xf6, 0x5, 0x0, 0x7fffffff, 0x9, 0x9, 0x2, 0x100, 0x8, 0x101, 0x5, 0x2, 0x3, 0x4, 0xfc8d, 0x8, 0x3ff, 0x3, 0xaeb3, 0x3, 0x5, 0x9, 0xfc, 0x8000, 0x1, 0x7, 0x20000, 0x2, 0x2, 0x9f85, 0x65, 0x85, 0x4, 0x2, 0x2, 0x6, 0x7, 0xd92, 0x40, 0xfff, 0xe1, 0x8, 0x426, 0x5, 0x9, 0x1, 0x1000, 0x9, 0x36ae765f, 0x401, 0x9, 0x200000, 0x3, 0x4, 0x5, 0x6, 0x89, 0x5, 0x80000000, 0x4007, 0x1, 0x41632842, 0x6, 0x10, 0x2, 0x8001, 0x5, 0x100, 0x8, 0x9, 0xfe64, 0xd, 0x1c2, 0x2, 0x7, 0x2, 0x80000001, 0xa, 0x6, 0xfffffffc, 0x5, 0x3, 0x7f, 0x8001, 0x5, 0x3, 0x6, 0x8001, 0x10001, 0x9, 0xb, 0x7]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40000}, 0x8010) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r7 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f00000001c0)={0x5, 0x1, 0x4}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r7, 0xc058565d, &(0x7f0000002dc0)=@userptr={0x2, 0x1, 0x4, 0x0, 0x7, {0x77359400}, {0x1, 0xc, 0x9, 0xc, 0x3, 0x8, "c12400"}, 0x3, 0x2, {0x0}, 0x96000}) ppoll(&(0x7f0000000240), 0x20000000000000dc, 0x0, 0x0, 0x30) 4m50.667447307s ago: executing program 2 (id=599): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$OCFS2_IOC_GROUP_ADD(r0, 0x40186f02, &(0x7f0000000000)={0x6, 0x7, 0x5}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) pread64(r0, &(0x7f0000000040)=""/214, 0xd6, 0x3) ioctl$XFS_IOC_GOINGDOWN(r1, 0x8004587d, &(0x7f0000000140)=0x1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBENT(r2, 0x4b46, &(0x7f0000000180)={0x7, 0x6, 0x9}) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000001c0)='ip6erspan0\x00', 0x10) setsockopt$sock_void(r1, 0x1, 0x24, 0x0, 0x0) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000200), 0x8a000, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000240)={0x8, "984d6ab6a4e6b38f24160087436337928723bb3ace200e3f6b20169947843938"}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f00000002c0)={0x0, 0x55f3, 0x10, 0x1, 0x3b1}, &(0x7f0000000340)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x904b, 0x400, 0x1, 0x342}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4db6, 0x200, 0x1, 0x3af}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf195, 0x4000, 0x3, 0x30e}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7dea, 0x30c00, 0x0, 0x1ab}}], 0x4, &(0x7f00000015c0)={0x2e, 0x11, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x3, 0x744, 0x0, &(0x7f00000005c0)=@buf_4k="e5a3b58999751e5bd6dc9651d4beddef029fbad92ad77f1a97111dd46d33d92182549ee2ee656a5f141871b45752e113337afec63a0c6873246dd7fd100565dcf2ecefd42aa73170b73f7d5b1fd07ba808c0200a16f5fb51514d3df59c251851ed4667fb4ee977eac5051324aeeb48832218e1f1bb6b055bf22fe2904d9e7fa2a1ef9d869127797c5bb2bf84e61985c86b9c39c51b0e9966a58be123ae63504e21e95410fd919ff16ce8e57ae0b8e80272dc447203987a2fb67d5e9dcfb3bd7eb51b317fc5292667be14ba66b820e739048dbce7feb3c2d5c0321db2e7431d4fb00c5d5739d99666bafb58f118d2904cef1407c6181360452615bb692cdc0dd466a0a5144a087bd453598b0d9694fb7108330d6b2d8028ae80eddd1e9437f56f76255bf5a74ae5bf85b828b71cf16d11487e0266ed9fb6279a1dd9acb8abbb43db75e06df2d32c34d939375484c5cc69657fd8c1aaa9934d0a0763d1e67fd27b48eac2559b317bb0c4a3ecbd7cde802f60ac7c1ac1b48a8dc770fde48c9b78e3c1fb25f434de39148e5852ae3c45874b1600b716d78807da5f64e247204c8a4143e13f51f6da2613be42e0c52809292b2eafacc74c21f342fb719c3351157e1b7f7434179f5cc42a9ea0334fbbd8b9ec7e46451f32e04dc294db0485553749cbb5b3ee0ecd85c7f6710b51d75e14c15b9607004319dfe742129a05bb91c621b329e4a977b4cc41117dc297ba353566bbd2d83d0fbce49398449d68064049dd279eb4b3d9902b95b6e2e71cf5c5cedece3d84b80cfc5530059d04b246634b9c4b740d1d84100ecfa99da3a8e3faa14bbf0a3aaf5295507ab0765d5db546da34b20c1a087237c9046a2aa058378fc36ed51a02c4ec2c1b4b12c1e27859f155000283ff8f6a802b149ea5392454376eafac5ec0c15f009d515e81665562b3a121793705d4e2be09f8bf1adcbf01179cf4920164ec5547f22c7760fc377deb415a177196abfab0c30bb8470f954a1f9999a1346065f083a5b8b659803180ed3a7a5adb1cccd746ab5da975535feb9fdaffb567ef78091d67ec6c82522e003aaf63e344eb18fdd5b9d1542bf815e67379c994906e57ac0f2ffbf78fdc60676ef2b41cd603580239e24b51adff0321262883e2b55b9bb28c530156e9ff990339e21d8edb9bdcf2e693bceb00f6f5cb18f3978c5f7bd335977153f6be590dd5bf0876b260b04ffa5a1125ce09016af44a414b3ce6198636f26077855707bfed6f8533e5fb75f86c3712dad0cbea9a954b5f67488086657c093653aebb7ee5dd00f2b28b223f2db3332dd12b97b9bada27800b86f90fc77e8b525602c77daea581e9173c7dc4ba8786c2a2f01b4dbab35b6b70bac3eeb16caf3b50d32845f421e5977d5a9c5a559acebcba460eac2e6dc67485915b9232a45f4e86bd0d579a7f37291b4397a6416fe4447babae6318570964da9293f0b2641ec8fbcdc5c72b66fbf2954909c586f709d4599a98c22b1b3f27de32621c238ae387a5e02cb285595870f33995a36a6938544972613ad7f818fb3db496dbdff5d2cdd6ce8505b187913aa7c17108f38801d982d1b85613420b26c3498a9ebf0bdfedaa696b7207ab3e2869e9f199f3176288175a6c73fc84bc4e54706ab482f5c1681777d57d30fde0e8aadb569e0a768ad9e0f0526462e07e4cb2bcc5d291c204aedd4888f56f01b55c3217a10181fe4790bc80a31fb53e69f0be313f41b1e7a2d2d564d394a7ab095b6ef4b953583198c4d9f50c4d992b909544db1b5eba55371f1b3bad640ee20fe7eebc972f74f1ad570ea099cd58b21b2bbc1da883fc886110bbdca7e6e00498647c4c293feb63272a8142dc5a124a009493c9aa6eb5099dc18bb31bc9421955ba82ba4f2ff36a3541301a338c9d243458265b280ead87d125c1ccc5903b11a77bdf82a0aed9b4afa32102c69beb25005bcf3730c8b503b7fdd011ae18bd8234bf43994de3a0f9ee2b3f57686f932dd3c10a1e458c4c7f6a63df005906773667d9dd2f0c46a668897d53176dcb4849f178740a572ad3a2e7ded09e4a5f3a22e8f5fe136d14cdecd3297ce749f2eab942009918312738745ebf151387620d25c49cd5b9a738ade8f97da2a04f6e29f20a70a4ee7a1fcf6268eb729574f12a9a1e4220661b4811ed82094ab3f5673f35621a6ee8cc5eae0043035ad51e4873da9b33683ae1620b834b0401d729619a3c6f081e403adaac9b9e78feaa87d07cf8e27eef3023ff0883c65708995f4a37098eda4bdd4d81d452b9bbff3e72ce0bd44e509cbd026a7d91cb4cd0702fdde84576820d72725213f87daa70e6c9f202e71795a4d8fdb6c0bed7119769d4d934fdaa13f2a6b6706d8480930b6b09edc8eb9ec7fa9fc2aff685d4b4d5413a31ff8f31a58e730beb3c79365f4cd91d1f52da849939e6124bb2d57b6aaf88f55ea14549ab3e89b12d20acd97e93e859519d28e1abea8ab2243f9afd7619828784e7c974180c3f6d2a2d6f5011f5781d7f6c0adbb54cfb8c8495593b48dcc5fad6d1a9e6d0ffe538ac0b169c6051d2a96468f492953210e94e5df5900084fef4d386dcca5a65a87b9349ae552069d56cd00da498defcd893920c445f786d0af721fc0d8d26590a8edd5440a3e193b5fe6e2c47f07c97e20dc27381aac75c990bcb8027000b6d4441fff2dfa28728775610e280a9f2ce36b15eb63b22feed4d41dc3d027bab5f4f47b2bf5d8062c5b33316f389b72cce41d6a9dba3c6b1ae3ff8a712fc44c42223ae7036c7aa95819bd17643a60a10272e22e4a0eb1d576113740944533553d16aaec74e6ad34c7c5da1b2e0d6058c458b6c52260ed819d5fc57ed7f71eaebca2f17ffa4a9fedc767389febb4fa3514819861493b6eda329634365c85d824fbfa42560277d370be7262434f9ba9ee5e46cfa0598df3f19479bc5931eabf42bad633822c3bcb4a6130c6002f94a789f130ce0297b432bf8c0b84396c217143dcc76f862f57430d20ee2fc21bc1b4fad8d75539fcbd749ed95881d3da48e615f646441bbc3b785059c7ae17fa51c5b69454fa74c833ee4a35f51d8f14c5189c83308115dfa54b320a9741ebed41f816bdb824e503585b588fc24fd6a208164030a1cc3aafc945ec5ef200e047c604ce181258d2b0202137a05b079b9bbb9291883998135dc1d968d3e2b0577f05be8da2bce206f86257c6ab55037d5af8aeaf733fbfcd9d6a7a1e485dfe920d91d38e48b8dde0d84795ed41db1a4888eedf431c55304c28dc916397d4682963f4cf7bc36d1efd735a2e8e794dc84c57a4265dc6e95991ab2725dd301a1ed63bcff57dfb5608877bdc032ce299b9148cb6d6285df81370d98cc542071dd38afa09dcd613859fb8ebc30bd0d9708b9cecaa2ec4f93c6215eb668379bc03eed86323623946f4eb29eb053b70a03914e675b6f76c011c1e2f1fad85e4d79cb21e595e52f85a0c69b1da259cd212ba0961bcb6246da756960a390d867483efa9329b110fdfce617de362ca75bbb5efbeb8e2c7c6bba25c324800ba4893cf15cc15b3a64acf74f34f83770ff1c83db800842796c0647297280e0cd0688411ee8672a5f67b6b83909a4d77c9d584f247d86fc1c1de25b0739fd15d52f0edf6fef27e72f99fd1b60e838a4aeaa20774cf150c6e975a0c826e4993e4208ee6445368f649c7fcfaa67dae7c0288b8b32cf588e6cd4a6eb220ecd602d21bb9da841b29a4c976ebfab9e6595cac486707d84b443010d23ed8c065dba220bf43ca534bc3db2886887d0bc8ecbba3df6817e3686d10b312661d1f7a771755b65facb16649347b1d40f89cdf1ea5e3426d11f06bc62e4fdaa22fcfc99299192d32bdb0328c152361b0fd450c9092c7ad9c6fcd15b3837b71370626027d2a1edb2acf8353f7a90aa87e6b00acd0fa7beef48e88eca4d0eacc32cdf006192f28c2420c5f7f93edc62fbd8e2ca78c2b666828f84651b5387abc46ac1d4fcb4a16cdb6248703281025c69fe63809565ff17e9aa1490e8a9e2a158b181b5e21e15c244385fa352684122d24fcb9647542063be73a4b57c0c3fef867702a563b4be68ca6f1012b978678a0c8b76afeddae5a68090bb5ae63a28398ba084ffa2282393dabfedc4064b834d04df235ef635f0c5f3dbd182b881b7f5ee45f66556a87e2c9ac9822024e98e0b89051632801f2e368d342366a8ad5eb51459ee0b04ff832a894742fd3e6c0382ca0c5a56f827e5c14fe0c3e4bcf78cf5226aa39a7127c094b175873abee26a6ddba7dfb113c683f5a5bcb08984a6d6002147f772edbe0a801d3dc1b4b0b0e2f3dc49cda69c7e344c59454c668e14093fa9d54e4c2b1b538ecdcbcd7ff8440598a9c050d8b333e148c797c1445bc1ad7fc8242427a51570a4a1259b705143e3474d5001b5ad1a8f15dfc713dfab95e2ad291a793e16272126ebff928d1ca76ca6a53fb00c4a3b315cc11a948d99b595856c6793b0ac03b014b45fffaa81cd6ac137a7016c3847d6ceb4510cde14cd35f8eecc0608f83478f9b4582108111d1e36c499add04d16d109b8cd98dbae90bd35f6ab14e492ad40ead43675d500f445cd74bff754a0cfc3099a07cbf7403f7a26705712b8101b33dafef4147f216f80f57df22731662b65b61530ac0d0cca1491ceac9f87238922e9f070d3141ccc58aa0faa14e95c4bf330523c447e1694ae8c15d94666d02d10077835497527e04b254e7e26175657962d55ca9c29b830fc18080c2078ab552093f5bfcd01beec6b3465792ef2374cd460ec8ab366be5ff0a7742d516248a0a6b335a4be0d1e88f8dd860ce4f101cc8da4b67065ade1a45330116713acc1eca70dbe098ac60e9c11ff84d0e82816ac1b99bec9f0e854646fc273b85ce38b4d091a0714f55e4756f00747ba624d5d1898366d590e9d15510ca4adc73e11850b7f9c79c8e05154161bcac06d5a02be7754c07a8f915b10282ed16df8be9a7cc4629dc988cbd243c38d7e0694b508ee01e027b6d076cd01d8646e3a73587dd9e558ff7f9850d0f69bd59d97e5df1fa651bfb01d13d77bc17b816c03feb619e8e0767c77943983ea1917789870303e8eb6ef5fe83b19066cb4d56d90f218973e16ec47a2dc055b0c239dd7bfe8be343f2f4ac64fa54951a795ed8c7b5deb1bb041cdf19eae3e6317a053cdf042d4ede17ced00f9820a4d2228c7a2b3d458100d545b5b6f84f05ef1e63cfcf06240c7e0a2346fa4804de687bc1bda23a9f78d3d8650bcbe5a39422c37acbd12746e0afd1a63e9e11bf4a1f32a041a21c1f879757f3f8436ffe62a4581f8b2e35ed4894cb66740b60d567906e99b8832531d07056e8b08207a3913297aea65786f65f7e2529217efd566e09f78bc7c4b0d9dad3d66fa947fd7d888eb1f0e2907e843a594abee10cd1774ff61b4d0cb48acc971cde73c93e793e9d76f0649f52cfb5356e8abe91184438c7ac2654088cfab29415ac190ee54fdbb3a75eca95260b7237fc3a3cc02784ee9122520b56c845f6fe1bd61193a3622ba661d003ffd3790464767a4721f2ee22d55f8c52d68a736a9a41bf184653542f7322d6d4d1620d9ebaf68a481b0250caea88eedfe450911daec1c01352a2f71810cd3f3f08153529b2fda12e73d4772c1f7a11dde21ea63d7b6aba4cd988da028122aec078a2606b3fa450323f5f49bacc8cf98b10919f70b9576f4c3264940d4651518e91f591a7c33b320074ad110638d77983d5d1ed452f044ec6d9a2be434ae37907f0336ae5afbc5"}}, &(0x7f0000001640)) mmap$IORING_OFF_SQ_RING(0x0, 0x8, 0x2000006, 0x4010, r5, 0x0) pipe2(&(0x7f0000001680)={0xffffffffffffffff, 0xffffffffffffffff}, 0x880) r9 = getuid() quotactl_fd$Q_QUOTAOFF(r8, 0xffffffff80000302, r9, 0x0) quotactl$Q_GETFMT(0xffffffff80000400, &(0x7f00000016c0)=@filename='./file0\x00', r9, &(0x7f0000001700)) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000028c0)={0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000002940)={0x1b, 0x15, &(0x7f0000001740)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0xa0000}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r8}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @alu={0x7, 0x0, 0xb, 0x9, 0x9, 0x100, 0x8}], {{}, {}, {0x85, 0x0, 0x0, 0xd40e96df3f67230c}}}, &(0x7f0000001800)='syzkaller\x00', 0x9, 0x1000, &(0x7f0000001840)=""/4096, 0x41100, 0x8, '\x00', 0x0, @fallback=0x2b, r6, 0x8, &(0x7f0000002840)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000002880)={0x1, 0xe, 0x10, 0x5}, 0x10, 0xffffffffffffffff, r7, 0x0, &(0x7f0000002900)=[r10, r8, r7, r8, r8, r7, r7, r8, r8], 0x0, 0x10, 0xffffffff}, 0x94) ioctl$LOOP_CHANGE_FD(r8, 0x4c06, r4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000002a00)={r7, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000002a40)={r11}, 0x4) r12 = shmget(0x0, 0x4000, 0x200, &(0x7f0000ffc000/0x4000)=nil) shmctl$SHM_LOCK(r12, 0xb) mount$overlay(0x0, &(0x7f0000002a80)='./file0\x00', &(0x7f0000002ac0), 0x90088, &(0x7f0000002b00)={[{@uuid_on}, {@redirect_dir_on}], [{@uid_eq={'uid', 0x3d, r9}}, {@dont_hash}, {@subj_type={'subj_type', 0x3d, '/dev/infiniband/rdma_cm\x00'}}, {@pcr={'pcr', 0x3d, 0x30}}]}) r13 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002b80), 0x2, 0x0) stat(&(0x7f0000004ec0)='./file0\x00', &(0x7f0000004f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000005000)='./file0\x00', &(0x7f0000005040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r13, &(0x7f0000002bc0)="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", 0x2000, &(0x7f0000007880)={&(0x7f0000004bc0)={0x50, 0xffffffffffffffda, 0x8, {0x7, 0x2d, 0xc, 0x188000, 0xd, 0xdf, 0x7, 0xfffff32b, 0x0, 0x0, 0x4, 0x8000}}, &(0x7f0000004c40)={0x18, 0x0, 0x5, {0xeb}}, &(0x7f0000004c80)={0x18, 0x0, 0xb1, {0x5}}, &(0x7f0000004cc0)={0x18, 0xfffffffffffffffe, 0x9}, &(0x7f0000004d00)={0x18, 0x0, 0xf, {0x9}}, &(0x7f0000004d40)={0x28, 0x0, 0x1000, {{0x9, 0x8, 0x2, 0xffffffffffffffff}}}, &(0x7f0000004d80)={0x60, 0x0, 0x9, {{0x15, 0x4, 0x9c21, 0xffffffffffffff00, 0x6, 0x1, 0x9, 0x401}}}, &(0x7f0000004e00)={0x18, 0xfffffffffffffffe, 0xac, {0x6}}, &(0x7f0000004e40)={0x11, 0x0, 0x7ff, {'\x00'}}, &(0x7f0000004e80)={0x20, 0x0, 0x2, {0x0, 0x18}}, &(0x7f0000004f80)={0x78, 0x0, 0x401, {0x8, 0x4, 0x0, {0x2, 0x875, 0x8001, 0x9d, 0x2, 0x4, 0x25, 0x4, 0x6, 0x6000, 0x3ec, r9, r14, 0x8, 0x7}}}, &(0x7f00000050c0)={0x90, 0xfffffffffffffff5, 0x1ff, {0x6, 0x3, 0x0, 0x10, 0x0, 0xe, {0x6, 0x3ff, 0x100000000, 0x98, 0x80, 0x8, 0xc62, 0x6, 0x7e, 0xc000, 0x0, r9, r15, 0x34, 0x701}}}, &(0x7f0000005180)={0x30, 0xfffffffffffffff5, 0x6eb, [{0x0, 0xd88, 0x2, 0x2, '}%'}]}, &(0x7f00000072c0)={0x298, 0x0, 0xfffffffffffffffc, [{{0x0, 0x2, 0x2, 0xb472, 0x9, 0x200, {0x6, 0x2, 0x93fc, 0x94, 0x0, 0x1, 0x7, 0x5, 0x9, 0xa000, 0xfe03, 0x0, 0xee00, 0x7305e586, 0xfffffffd}}, {0x0, 0x1, 0x9, 0xffff8000, 'dont_hash'}}, {{0x0, 0x3, 0x8, 0x4, 0x8, 0x7, {0x1, 0x63f, 0x8000000000000001, 0x200, 0x1, 0x8, 0x11c, 0xfffffff0, 0x6, 0x4000, 0x4, r9, 0x0, 0x2, 0x4}}, {0x5, 0x100000001, 0x4, 0x7, '@$()'}}, {{0x4, 0x0, 0x9, 0x7, 0x6, 0x7, {0x3, 0x7, 0x8, 0x8, 0x0, 0x1, 0x8, 0x3, 0x9, 0x0, 0x5, r9, 0xffffffffffffffff, 0x7f, 0xff}}, {0x6, 0x51, 0x3, 0x1, 'pcr'}}, {{0x1, 0x1, 0xffffffffffffffff, 0x8000000000000001, 0xbc, 0x6, {0x1, 0x10001, 0x4, 0x8001, 0x0, 0x0, 0xffff, 0x0, 0x8, 0x8000, 0x5, r9, 0x0, 0x1, 0x8}}, {0x4, 0x8000, 0x3, 0x5, '#r&'}}]}, &(0x7f0000007580)={0xa0, 0xffffffffffffffda, 0x9, {{0x1, 0x1, 0x7, 0x1d8, 0x5, 0xb, {0x3, 0x8, 0xce07, 0x400, 0x7, 0xf, 0x6, 0x2, 0x7, 0x8000, 0x7e8b53c3, r9, 0xee01, 0x10100000, 0x7fff}}, {0x0, 0x10}}}, &(0x7f0000007640)={0x20, 0xfffffffffffffff5, 0x8, {0x0, 0x0, 0x0, 0x5bb}}, &(0x7f0000007740)={0x130, 0xfffffffffffffffe, 0x1, {0x2, 0x6, 0x0, '\x00', {0x800, 0x5, 0x8001, 0x10000, r9, 0x0, 0x8000, '\x00', 0xfffffffffffffff9, 0x4, 0x3, 0x9, {0x2, 0x1000}, {0x4, 0x2}, {0x1, 0x4000000}, {0x101, 0x1}, 0x3, 0x2, 0x6000, 0x4}}}}) 4m45.436657194s ago: executing program 2 (id=608): r0 = userfaultfd(0x801) r1 = socket(0x80000000000000a, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x2, &(0x7f00000000c0)=0x5) syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), r1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b00)=@newtaction={0x94, 0x30, 0x1, 0x0, 0x0, {}, [{0x80, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0xfffffffe}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}, @m_pedit={0x30, 0x2, 0x0, 0x0, {{0xa}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x94}}, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0xa8}, [@ldst={0x5, 0x3, 0x0, 0x0, 0xa}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) ptrace$poke(0x4, r3, &(0x7f0000000200), 0x9) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24000045, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x4, 0x8}, 0x50) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x4}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000380)=@delqdisc={0x434, 0x25, 0x100, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x2, 0xf}, {0xa, 0x7}, {0x0, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x3, 0xfffffff8, 0x4, 0x40, 0x2, 0x2, 0x5, 0x7fff, 0x4, 0x1, 0x6, 0x1cc, 0x7, 0x0, 0x5, 0x0, 0x8, 0x9, 0x9, 0x9, 0xf5, 0x200, 0x1, 0x5, 0x6, 0xfff, 0x9, 0x1, 0x80, 0x10000, 0x0, 0x6, 0xff, 0x4, 0x6, 0x9, 0xe6c1, 0x6, 0x65, 0x6, 0x5, 0x71, 0x1f146d7e, 0x80000001, 0x89, 0xe9, 0x80000001, 0x2, 0xff, 0x8, 0xffff8dc2, 0x400, 0x0, 0x2, 0xffff, 0x10001, 0x3ff, 0x0, 0x5, 0xa000000, 0x0, 0x5, 0x8, 0x3, 0x0, 0x401, 0x5, 0x8, 0x4ad1, 0x1, 0x25ae, 0x1, 0xfff, 0x6, 0xe, 0xffffffff, 0x7, 0x5, 0x3ff, 0xfff, 0x8, 0xf, 0x0, 0x4, 0x626cfd3b, 0x0, 0x60df8662, 0x2, 0x5, 0x4, 0xc6, 0x8, 0x7, 0xfffffffa, 0x9, 0x4, 0x1, 0x3, 0x0, 0x7, 0x616, 0xffff8000, 0xe13, 0x8, 0x7, 0xc, 0xfdc1, 0x7ff, 0x4, 0xffffffec, 0x4, 0x7fff, 0x40, 0x1, 0x1f1f, 0x3, 0x665195e5, 0x5, 0x7, 0x5, 0x8, 0x7, 0x1, 0x800, 0x101, 0x400, 0x2, 0x6, 0xd, 0xa, 0x7, 0xc2, 0x99, 0x4, 0x2e9, 0x4, 0x3, 0x401, 0xfffffffe, 0x7, 0x80000000, 0x8, 0x0, 0x4, 0x37, 0x4, 0x31, 0x2, 0x2, 0x3, 0x6, 0x1, 0x690c, 0x0, 0x9, 0x2, 0xe, 0xb, 0x8, 0x5597, 0x3, 0x4, 0x7fff, 0x62, 0xf6, 0x5, 0x0, 0x7fffffff, 0x9, 0x9, 0x2, 0x100, 0x8, 0x101, 0x5, 0x2, 0x3, 0x4, 0xfc8d, 0x8, 0x3ff, 0x3, 0xaeb3, 0x3, 0x5, 0x9, 0xfc, 0x8000, 0x1, 0x7, 0x20000, 0x2, 0x2, 0x9f85, 0x65, 0x85, 0x4, 0x2, 0x2, 0x6, 0x7, 0xd92, 0x40, 0xfff, 0xe1, 0x8, 0x426, 0x5, 0x9, 0x1, 0x1000, 0x9, 0x36ae765f, 0x401, 0x9, 0x200000, 0x3, 0x4, 0x5, 0x6, 0x89, 0x5, 0x80000000, 0x4007, 0x1, 0x41632842, 0x6, 0x10, 0x2, 0x8001, 0x5, 0x100, 0x8, 0x9, 0xfe64, 0xd, 0x1c2, 0x2, 0x7, 0x2, 0x80000001, 0xa, 0x6, 0xfffffffc, 0x5, 0x3, 0x7f, 0x8001, 0x5, 0x3, 0x6, 0x8001, 0x10001, 0x9, 0xb, 0x7]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40000}, 0x8010) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r7 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f00000001c0)={0x5, 0x1, 0x4}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r7, 0xc058565d, &(0x7f0000002dc0)=@userptr={0x2, 0x1, 0x4, 0x0, 0x7, {0x77359400}, {0x1, 0xc, 0x9, 0xc, 0x3, 0x8, "c12400"}, 0x3, 0x2, {0x0}, 0x96000}) ppoll(&(0x7f0000000240), 0x20000000000000dc, 0x0, 0x0, 0x30) 4m42.527332075s ago: executing program 2 (id=610): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/mcfilter\x00') syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0xe00, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000080)={0x1, 0x1, {0x39, 0x38, 0x400009, 0xd, 0x6, 0x4eac, 0x5, 0xce}}) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840), 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) prctl$PR_SET_SECUREBITS(0x1c, 0xc) setresuid(0xee00, 0xee00, 0x0) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x40) fcntl$setlease(r2, 0x400, 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0x4) fcntl$setlease(r2, 0x400, 0x2) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000000)={0x2020}, 0x96) close(r3) read$FUSE(0xffffffffffffffff, &(0x7f0000005040)={0x2020}, 0x2020) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000108117980800000000000109024100010000000009040000020308000009210000010122290a0905", @ANYRES64], 0x0) 4m34.008312461s ago: executing program 2 (id=626): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x9, 0x4, 0x8, 0xc}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000002480)={&(0x7f0000001180)="f8d35b14c0ced6e08a", 0x0, &(0x7f0000001380)="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", &(0x7f0000002380)="062457d1405ad4e371fd3402784bba6159c16cf201c47e99bff0df1bdf6e6430c0c5eb4136c0d8b59abe6521467c7b688bb00195b58d111900a4ca985d4caa51ac455338be47a8617f7af80a6897e50ca38a3a825b8bf93d60ce133f10393b37c8abd35fd0997e13d00a5a95aa39d3f23665c24053edd991ae10df84c06d186752d31d9aac3246472e703491abd5deb0e073c30d66957a05c69b7dcf1375030ffaf3d5e6fb814b6a0f6d77d99c74d31f29021fd1ed944077a3841c961cc8b69e99fd847ce8e0f69931721325be2168396512b65dbb96d5e270a0", 0x7fffffff, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0xc, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1, r0}, 0xc) 4m18.715289822s ago: executing program 33 (id=626): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x9, 0x4, 0x8, 0xc}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000002480)={&(0x7f0000001180)="f8d35b14c0ced6e08a", 0x0, &(0x7f0000001380)="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", &(0x7f0000002380)="062457d1405ad4e371fd3402784bba6159c16cf201c47e99bff0df1bdf6e6430c0c5eb4136c0d8b59abe6521467c7b688bb00195b58d111900a4ca985d4caa51ac455338be47a8617f7af80a6897e50ca38a3a825b8bf93d60ce133f10393b37c8abd35fd0997e13d00a5a95aa39d3f23665c24053edd991ae10df84c06d186752d31d9aac3246472e703491abd5deb0e073c30d66957a05c69b7dcf1375030ffaf3d5e6fb814b6a0f6d77d99c74d31f29021fd1ed944077a3841c961cc8b69e99fd847ce8e0f69931721325be2168396512b65dbb96d5e270a0", 0x7fffffff, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0xc, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1, r0}, 0xc) 1m13.722738535s ago: executing program 1 (id=992): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) r4 = getpgrp(0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r4, r5, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) 1m0.794560083s ago: executing program 4 (id=1012): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) listen(r0, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap$IORING_OFF_CQ_RING(0x7fffffffb000, 0x2dc3, 0xe, 0x11, r2, 0x8000000) getgid() r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) stat(&(0x7f0000000280)='./file1/../file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x0, r6) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="540000001200010000000000000000000a0304006e"], 0x54}}, 0x20044010) 1m0.432671334s ago: executing program 3 (id=1013): socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=ANY=[@ANYBLOB="98000000", @ANYRES16=r0, @ANYBLOB="010029bd7000fedbdf25010000000c0001800800030002000000780002803c00018008000100030000000800010007000000080001000100000008000100050000000800010001000000080001000800000008000100070000001c0001800800010001000000"], 0x98}, 0x1, 0x0, 0x0, 0x80d0}, 0x8080) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x6}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f00000ee000/0x2000)=nil, 0x2000, 0x8) close(r2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r5, 0x0, 0xf3a, 0x0) write$cgroup_pid(r5, &(0x7f0000000000), 0xffffff98) splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0x100000004, 0x0) 1m0.179439548s ago: executing program 1 (id=1014): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt(0xffffffffffffffff, 0xff, 0x1, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 59.387005123s ago: executing program 3 (id=1015): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff) openat(0xffffffffffffff9c, 0x0, 0x101, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x4) socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$getsig(0x4202, r3, 0x3, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 58.444614581s ago: executing program 1 (id=1016): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x1) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$inet6_tcp(0xa, 0x1, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000280)={@void, @void, @eth={@broadcast, @remote, @val={@val={0x88a8, 0x2, 0x1, 0x1}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x2, 0x28, 0x64, 0x60e0, 0xbb, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0x11}, @private=0xa010102}, {{0x4e20, 0x4e22, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x10, 0xfff, 0x0, 0x2e}}}}}}}, 0x3e) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r4, 0x2007ffb) sendfile(r4, r4, 0x0, 0x1000000201005) 57.894972044s ago: executing program 4 (id=1017): r0 = syz_open_dev$vcsa(&(0x7f0000000380), 0x7b95b611, 0x802) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000000)='x', 0x1}], 0x1) 57.416007552s ago: executing program 3 (id=1018): openat(0xffffffffffffff9c, 0x0, 0x80342, 0x168) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_buf(r2, 0x0, 0x31, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open_tree(0xffffffffffffffff, 0x0, 0x8c00) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) futex(0x0, 0x6, 0x0, 0x0, 0x0, 0x0) futex(0x0, 0x7, 0x0, 0x0, 0x0, 0x0) 56.561274639s ago: executing program 4 (id=1019): r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, 0x0) 56.465604013s ago: executing program 1 (id=1020): keyctl$chown(0x4, 0x0, 0xee01, 0xee01) 56.212705093s ago: executing program 4 (id=1021): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = socket$inet6(0xa, 0x80003, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) getegid() setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) recvmmsg(0xffffffffffffffff, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000, 0xfff5}}], 0xf00, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, &(0x7f0000000000)=0x400000d2, 0x4) shutdown(0xffffffffffffffff, 0x0) 55.330635269s ago: executing program 3 (id=1022): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) r4 = getpgrp(0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r4, r5, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) 54.912640974s ago: executing program 4 (id=1023): socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=ANY=[@ANYBLOB="98000000", @ANYRES16=r0, @ANYBLOB="010029bd7000fedbdf25010000000c0001800800030002000000780002803c00018008000100030000000800010007000000080001000100000008000100050000000800010001000000080001000800000008000100070000001c0001800800010001000000"], 0x98}, 0x1, 0x0, 0x0, 0x80d0}, 0x8080) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x6}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f00000ee000/0x2000)=nil, 0x2000, 0x8) close(r2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r5, 0x0, 0xf3a, 0x0) write$cgroup_pid(r5, &(0x7f0000000000), 0xffffff98) splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0x100000004, 0x0) 54.903058768s ago: executing program 1 (id=1024): r0 = socket$packet(0x11, 0x3, 0x300) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x1, 0x1, 0x0, 0x6, @random="001122334455"}, 0x14) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000)) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/mass_storage.usb0\x00', 0x1ff) rmdir(&(0x7f0000000200)='./config/usb_gadget/g1/functions/mass_storage.usb0\x00') sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1300000042000062000000"], 0x18}}, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000000c0)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x0) write(r0, &(0x7f0000000000)="0100000000000007e0", 0x9) 54.723575737s ago: executing program 4 (id=1025): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) unshare(0x40000000) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, 0x0, 0x41) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000ac0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e8, 0x0, 0x18c, 0x203, 0x300, 0x19030000, 0x418, 0x2e0, 0x2e0, 0x418, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x1d}, {0x20}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4000}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {0x0, 0xa, 0x0, 0xfffffffe}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {}, {}, {0x0, 0x0, 0xfe}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1000, 0x0, 0x0, 0xffff}, {0x4}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@hl={{0x28}, {0x3, 0xf9}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x548) 51.074791261s ago: executing program 1 (id=1026): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'pimreg\x00', 0x5005}) write$tun(0xffffffffffffffff, &(0x7f0000001240)={@void, @val={0x1, 0x0, 0x9, 0x464, 0x14, 0xc}, @ipv4=@generic={{0x8, 0x4, 0x2, 0x16, 0x20, 0x68, 0x0, 0xf1, 0x88, 0x0, @empty, @broadcast, {[@timestamp_addr={0x44, 0xc, 0x51, 0x1, 0x3, [{@loopback, 0x5}]}]}}}}, 0x2a) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) mkdirat(0xffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) r0 = openat(0xffffff9c, &(0x7f00000001c0)='./proc/sys/net/ipv6/conf/all/force_mld_version\x00', 0x1, 0x5) write$cgroup_int(r0, &(0x7f0000000180)=0x1, 0x12) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x18}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 49.880671816s ago: executing program 3 (id=1027): r0 = syz_open_dev$vcsa(&(0x7f0000000380), 0x7b95b611, 0x802) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000000)='x', 0x1}], 0x1) 49.847744286s ago: executing program 3 (id=1028): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./tracing\x00', &(0x7f0000000880)='tracefs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000000100)='./tracing/events/enable\x00', 0x19) write(r0, &(0x7f0000000140)='1', 0x1) 0s ago: executing program 34 (id=1025): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) unshare(0x40000000) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, 0x0, 0x41) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000ac0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e8, 0x0, 0x18c, 0x203, 0x300, 0x19030000, 0x418, 0x2e0, 0x2e0, 0x418, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x1d}, {0x20}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4000}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {0x0, 0xa, 0x0, 0xfffffffe}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {}, {}, {0x0, 0x0, 0xfe}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1000, 0x0, 0x0, 0xffff}, {0x4}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@hl={{0x28}, {0x3, 0xf9}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x548) kernel console output (not intermixed with test programs): config 0 descriptor?? [ 381.910971][ T5605] usb 4-1: can't set config #0, error -71 [ 381.933031][ T5605] usb 4-1: USB disconnect, device number 22 [ 382.756062][ T42] team0 (unregistering): Port device team_slave_1 removed [ 382.794402][ T5605] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 382.866660][ T42] team0 (unregistering): Port device team_slave_0 removed [ 382.975236][ T5605] usb 4-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 382.976453][ T5605] usb 4-1: config 0 has an invalid interface number: 117 but max is 0 [ 382.976471][ T5605] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 382.976483][ T5605] usb 4-1: config 0 has no interface number 0 [ 382.976512][ T5605] usb 4-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 382.976531][ T5605] usb 4-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 382.976553][ T5605] usb 4-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 382.979455][ T5605] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.979473][ T5605] usb 4-1: Product: syz [ 382.979482][ T5605] usb 4-1: Manufacturer: syz [ 382.979491][ T5605] usb 4-1: SerialNumber: syz [ 383.108473][ T5605] usb 4-1: config 0 descriptor?? [ 384.122710][ T5253] 8021q: adding VLAN 0 to HW filter on device eth2 [ 384.159106][ T7485] ipvlan2: entered promiscuous mode [ 384.270869][ T7485] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 384.271061][ T7485] team0: Device ipvlan2 failed to register rx_handler [ 386.804650][ T7541] block nbd0: Unsupported socket: should be TCP or UNIX. [ 386.907667][ T5726] usb 4-1: USB disconnect, device number 23 [ 388.305209][ T5704] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 389.525830][ T5704] usb 3-1: Using ep0 maxpacket: 8 [ 389.539974][ T5704] usb 3-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 389.553311][ T5704] usb 3-1: config 0 has an invalid interface number: 6 but max is 2 [ 389.553339][ T5704] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 389.553358][ T5704] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 389.553378][ T5704] usb 3-1: config 0 has no interface number 0 [ 389.553425][ T5704] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.590860][ T5704] usb 3-1: config 0 descriptor?? [ 389.696663][ T7554] netlink: 48 bytes leftover after parsing attributes in process `syz.4.450'. [ 389.834783][ T7557] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 390.105632][ T1255] usb 3-1: USB disconnect, device number 18 [ 394.417335][ T7595] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 394.930127][ T7608] netlink: 7 bytes leftover after parsing attributes in process `syz.1.464'. [ 395.520256][ T5253] 8021q: adding VLAN 0 to HW filter on device eth3 [ 395.594271][ T5726] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 395.749930][ T5726] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 395.786174][ T5726] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.786207][ T5726] usb 2-1: Product: syz [ 395.786224][ T5726] usb 2-1: Manufacturer: syz [ 395.786239][ T5726] usb 2-1: SerialNumber: syz [ 395.812071][ T7408] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.812219][ T7408] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.812446][ T7408] bridge_slave_0: entered allmulticast mode [ 395.842489][ T7408] bridge_slave_0: entered promiscuous mode [ 395.875788][ T5726] usb 2-1: config 0 descriptor?? [ 395.900204][ T5726] ch341 2-1:0.0: ch341-uart converter detected [ 395.912249][ T7408] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.912377][ T7408] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.912572][ T7408] bridge_slave_1: entered allmulticast mode [ 395.952769][ T7408] bridge_slave_1: entered promiscuous mode [ 396.273246][ T31] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 396.305289][ T7408] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 396.310491][ T7408] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 396.435323][ T31] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 396.444859][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.444903][ T31] usb 4-1: Product: syz [ 396.444919][ T31] usb 4-1: Manufacturer: syz [ 396.444933][ T31] usb 4-1: SerialNumber: syz [ 396.462835][ T31] usb 4-1: config 0 descriptor?? [ 396.464530][ T5704] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 396.546775][ T31] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 396.662490][ T5704] usb 3-1: not running at top speed; connect to a high speed hub [ 396.662538][ T5704] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 396.670994][ T5704] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 396.671605][ T5704] usb 3-1: config 1 interface 0 altsetting 200 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 396.671634][ T5704] usb 3-1: config 1 interface 0 has no altsetting 0 [ 396.728033][ T5704] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=19 [ 396.728798][ T5704] usb 3-1: Product: syz [ 396.728818][ T5704] usb 3-1: Manufacturer: syz [ 396.728834][ T5704] usb 3-1: SerialNumber: syz [ 396.894300][ T1255] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 396.991511][ T5726] usb 2-1: ch341-uart converter now attached to ttyUSB0 [ 397.050341][ T1255] usb 5-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 397.052414][ T1255] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 397.052482][ T1255] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 397.052507][ T1255] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 397.052534][ T1255] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 397.052582][ T1255] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.822243][ T31] gspca_stk1135: reg_w 0x5 err -110 [ 397.922085][ T31] gspca_stk1135: serial bus timeout: status=0x00 [ 397.975924][ T31] gspca_stk1135: Sensor write failed [ 397.975966][ T31] gspca_stk1135: serial bus timeout: status=0x00 [ 397.975978][ T31] gspca_stk1135: Sensor write failed [ 397.976142][ T31] gspca_stk1135: serial bus timeout: status=0x00 [ 397.976155][ T31] gspca_stk1135: Sensor read failed [ 397.976188][ T31] gspca_stk1135: serial bus timeout: status=0x00 [ 397.976199][ T31] gspca_stk1135: Sensor read failed [ 397.976207][ T31] gspca_stk1135: Detected sensor type unknown (0x0) [ 397.976310][ T31] gspca_stk1135: serial bus timeout: status=0x00 [ 397.976322][ T31] gspca_stk1135: Sensor read failed [ 397.976356][ T31] gspca_stk1135: serial bus timeout: status=0x00 [ 397.976366][ T31] gspca_stk1135: Sensor read failed [ 397.976465][ T31] gspca_stk1135: serial bus timeout: status=0x00 [ 397.976478][ T31] gspca_stk1135: Sensor write failed [ 397.976510][ T31] gspca_stk1135: serial bus timeout: status=0x00 [ 397.976521][ T31] gspca_stk1135: Sensor write failed [ 397.978883][ T31] stk1135 4-1:0.0: probe with driver stk1135 failed with error -110 [ 398.155410][ T7631] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 398.231474][ T7631] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 398.254732][ T5605] usb 2-1: USB disconnect, device number 18 [ 398.563082][ T5605] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0 [ 398.569365][ T5605] ch341 2-1:0.0: device disconnected [ 399.997987][ T5963] usb 5-1: USB disconnect, device number 10 [ 400.091553][ T5605] usb 4-1: USB disconnect, device number 24 [ 400.178091][ T7408] team0: Port device team_slave_0 added [ 400.222498][ T7408] team0: Port device team_slave_1 added [ 402.019115][ T5704] cdc_ether 3-1:1.0: Descriptor too short [ 402.172267][ T5704] usb 3-1: USB disconnect, device number 19 [ 404.363893][ T5599] block nbd0: Receive control failed (result -32) [ 404.622517][ T7408] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 404.622538][ T7408] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 404.622570][ T7408] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 404.722067][ T5253] 8021q: adding VLAN 0 to HW filter on device eth4 [ 404.731833][ T7408] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 404.731852][ T7408] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 404.731883][ T7408] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 404.883231][ T7675] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 404.883275][ T7675] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 406.578071][ T7408] hsr_slave_0: entered promiscuous mode [ 406.615077][ T7408] hsr_slave_1: entered promiscuous mode [ 406.620711][ T7408] debugfs: 'hsr0' already exists in 'hsr' [ 406.620740][ T7408] Cannot create hsr debugfs directory [ 406.864331][ T5704] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 407.045824][ T5704] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 407.049238][ T5704] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.049256][ T5704] usb 2-1: Product: syz [ 407.049265][ T5704] usb 2-1: Manufacturer: syz [ 407.049274][ T5704] usb 2-1: SerialNumber: syz [ 407.078621][ T5704] usb 2-1: config 0 descriptor?? [ 407.120634][ T5704] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 409.152943][ T7696] netlink: 256 bytes leftover after parsing attributes in process `syz.2.482'. [ 409.969658][ T5704] gspca_stk1135: reg_w 0x0 err -110 [ 409.983139][ T5704] gspca_stk1135: serial bus timeout: status=0x00 [ 409.983160][ T5704] gspca_stk1135: Sensor write failed [ 409.983193][ T5704] gspca_stk1135: serial bus timeout: status=0x00 [ 409.983205][ T5704] gspca_stk1135: Sensor write failed [ 409.983238][ T5704] gspca_stk1135: serial bus timeout: status=0x00 [ 409.983249][ T5704] gspca_stk1135: Sensor read failed [ 409.983282][ T5704] gspca_stk1135: serial bus timeout: status=0x00 [ 409.983292][ T5704] gspca_stk1135: Sensor read failed [ 409.983300][ T5704] gspca_stk1135: Detected sensor type unknown (0x0) [ 409.983337][ T5704] gspca_stk1135: serial bus timeout: status=0x00 [ 409.983348][ T5704] gspca_stk1135: Sensor read failed [ 409.983386][ T5704] gspca_stk1135: serial bus timeout: status=0x00 [ 409.983397][ T5704] gspca_stk1135: Sensor read failed [ 409.983430][ T5704] gspca_stk1135: serial bus timeout: status=0x00 [ 409.983440][ T5704] gspca_stk1135: Sensor write failed [ 409.983472][ T5704] gspca_stk1135: serial bus timeout: status=0x00 [ 409.983482][ T5704] gspca_stk1135: Sensor write failed [ 409.983580][ T5704] stk1135 2-1:0.0: probe with driver stk1135 failed with error -110 [ 410.081212][ T5963] usb 2-1: USB disconnect, device number 19 [ 416.676747][ T42] bridge_slave_1: left allmulticast mode [ 416.676788][ T42] bridge_slave_1: left promiscuous mode [ 416.677168][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.867914][ T7739] netlink: 256 bytes leftover after parsing attributes in process `syz.4.493'. [ 417.999929][ T42] bridge_slave_0: left allmulticast mode [ 417.999977][ T42] bridge_slave_0: left promiscuous mode [ 418.000278][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.684820][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 419.759442][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 419.848507][ T42] bond0 (unregistering): Released all slaves [ 420.081880][ T5253] 8021q: adding VLAN 0 to HW filter on device eth5 [ 420.354335][ T5605] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 420.505381][ T5605] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 420.532684][ T5605] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.532716][ T5605] usb 3-1: Product: syz [ 420.532731][ T5605] usb 3-1: Manufacturer: syz [ 420.532757][ T5605] usb 3-1: SerialNumber: syz [ 420.575352][ T5605] usb 3-1: config 0 descriptor?? [ 420.594349][ T5605] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 421.718893][ T5605] gspca_stk1135: reg_w 0x7 err -71 [ 421.719962][ T5605] gspca_stk1135: serial bus timeout: status=0x00 [ 421.719978][ T5605] gspca_stk1135: Sensor write failed [ 421.720007][ T5605] gspca_stk1135: serial bus timeout: status=0x00 [ 421.720019][ T5605] gspca_stk1135: Sensor write failed [ 421.720051][ T5605] gspca_stk1135: serial bus timeout: status=0x00 [ 421.720062][ T5605] gspca_stk1135: Sensor read failed [ 421.720093][ T5605] gspca_stk1135: serial bus timeout: status=0x00 [ 421.720105][ T5605] gspca_stk1135: Sensor read failed [ 421.720114][ T5605] gspca_stk1135: Detected sensor type unknown (0x0) [ 421.720152][ T5605] gspca_stk1135: serial bus timeout: status=0x00 [ 421.720164][ T5605] gspca_stk1135: Sensor read failed [ 421.720196][ T5605] gspca_stk1135: serial bus timeout: status=0x00 [ 421.720207][ T5605] gspca_stk1135: Sensor read failed [ 421.720239][ T5605] gspca_stk1135: serial bus timeout: status=0x00 [ 421.720250][ T5605] gspca_stk1135: Sensor write failed [ 421.720282][ T5605] gspca_stk1135: serial bus timeout: status=0x00 [ 421.720293][ T5605] gspca_stk1135: Sensor write failed [ 421.836703][ T5605] stk1135 3-1:0.0: probe with driver stk1135 failed with error -71 [ 421.892796][ T5605] usb 3-1: USB disconnect, device number 20 [ 422.014587][ T42] hsr_slave_0: left promiscuous mode [ 422.110709][ T42] hsr_slave_1: left promiscuous mode [ 422.240013][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 422.768388][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 422.801910][ T7782] misc userio: No port type given on /dev/userio [ 423.507828][ T42] team0 (unregistering): Port device team_slave_1 removed [ 423.576287][ T42] team0 (unregistering): Port device team_slave_0 removed [ 424.131197][ T4907] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 424.153197][ T4907] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 424.189784][ T4907] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 424.196141][ T4907] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 424.201441][ T4907] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 427.617394][ T5599] Bluetooth: hci5: command tx timeout [ 429.124424][ T31] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 429.300414][ T31] usb 4-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 429.360126][ T7837] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[5596] was attempted by "ci-upstream-kasan-gce-smack-root/syz-executor exec"[7837] [ 429.926739][ T5599] Bluetooth: hci5: command tx timeout [ 430.270694][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.271174][ T31] usb 4-1: Product: syz [ 430.271195][ T31] usb 4-1: Manufacturer: syz [ 430.271211][ T31] usb 4-1: SerialNumber: syz [ 430.286681][ T31] r8152-cfgselector 4-1: Unknown version 0x0000 [ 430.286706][ T31] r8152-cfgselector 4-1: config 0 descriptor?? [ 430.645870][ T5707] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 430.784276][ T5707] usb 3-1: device descriptor read/64, error -71 [ 431.074308][ T5707] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 431.234325][ T5707] usb 3-1: device descriptor read/64, error -71 [ 431.262891][ T7855] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 431.262933][ T7855] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 431.534097][ T5707] usb usb3-port1: attempt power cycle [ 431.998593][ T5707] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 432.606194][ T5707] usb 3-1: device descriptor read/8, error -71 [ 432.631721][ T5599] Bluetooth: hci5: command tx timeout [ 433.172740][ T5707] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 433.195167][ T5707] usb 3-1: device descriptor read/8, error -71 [ 433.305091][ T5707] usb usb3-port1: unable to enumerate USB device [ 433.974551][ T7868] netlink: 48 bytes leftover after parsing attributes in process `syz.4.516'. [ 434.831489][ T31] r8152-cfgselector 4-1: USB disconnect, device number 25 [ 435.847255][ T7786] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.852498][ T7786] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.852729][ T7786] bridge_slave_0: entered allmulticast mode [ 436.060011][ T5599] Bluetooth: hci5: command tx timeout [ 436.092018][ T7786] bridge_slave_0: entered promiscuous mode [ 436.266338][ T7895] FAULT_INJECTION: forcing a failure. [ 436.266338][ T7895] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 436.266380][ T7895] CPU: 1 UID: 0 PID: 7895 Comm: syz.1.520 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 436.266411][ T7895] Tainted: [L]=SOFTLOCKUP [ 436.266420][ T7895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 436.266434][ T7895] Call Trace: [ 436.266443][ T7895] [ 436.266453][ T7895] dump_stack_lvl+0xe8/0x150 [ 436.266493][ T7895] should_fail_ex+0x46b/0x600 [ 436.266531][ T7895] _copy_to_user+0x31/0xb0 [ 436.266600][ T7895] simple_read_from_buffer+0xe1/0x170 [ 436.266639][ T7895] proc_fail_nth_read+0x1be/0x230 [ 436.266690][ T7895] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 436.266723][ T7895] ? rw_verify_area+0x250/0x4d0 [ 436.266752][ T7895] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 436.266780][ T7895] vfs_read+0x219/0xa90 [ 436.266846][ T7895] ? __pfx_vfs_read+0x10/0x10 [ 436.266876][ T7895] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 436.266990][ T7895] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 436.267025][ T7895] ? mutex_lock_nested+0x152/0x1d0 [ 436.267051][ T7895] ? fdget_pos+0x252/0x320 [ 436.267085][ T7895] ksys_read+0x156/0x270 [ 436.267115][ T7895] ? __pfx_ksys_read+0x10/0x10 [ 436.267162][ T7895] do_syscall_64+0x166/0x520 [ 436.267195][ T7895] ? trace_irq_disable+0x3b/0x140 [ 436.267225][ T7895] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.267248][ T7895] ? clear_bhb_loop+0x70/0xc0 [ 436.267277][ T7895] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.267300][ T7895] RIP: 0033:0x7f1c2598e98e [ 436.267321][ T7895] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 436.267341][ T7895] RSP: 002b:00007f1c23c04fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 436.267366][ T7895] RAX: ffffffffffffffda RBX: 00007f1c23c056c0 RCX: 00007f1c2598e98e [ 436.267383][ T7895] RDX: 000000000000000f RSI: 00007f1c23c050a0 RDI: 0000000000000005 [ 436.267398][ T7895] RBP: 00007f1c23c05090 R08: 0000000000000000 R09: 0000000000000000 [ 436.267412][ T7895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 436.267426][ T7895] R13: 00007f1c25c56128 R14: 00007f1c25c56090 R15: 00007ffe622836f8 [ 436.267463][ T7895] [ 436.562042][ T7786] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.562204][ T7786] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.562431][ T7786] bridge_slave_1: entered allmulticast mode [ 436.589820][ T7786] bridge_slave_1: entered promiscuous mode [ 436.979859][ T7786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 437.010090][ T7786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 438.409174][ T7786] team0: Port device team_slave_0 added [ 439.043451][ T7786] team0: Port device team_slave_1 added [ 439.264559][ T7786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 439.264581][ T7786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 439.264611][ T7786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 439.270742][ T7786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 439.270761][ T7786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 439.270790][ T7786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 439.463137][ T7786] hsr_slave_0: entered promiscuous mode [ 439.465114][ T7786] hsr_slave_1: entered promiscuous mode [ 439.466802][ T7786] debugfs: 'hsr0' already exists in 'hsr' [ 439.466832][ T7786] Cannot create hsr debugfs directory [ 440.543583][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.581210][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.977400][ T7924] netlink: 48 bytes leftover after parsing attributes in process `syz.1.529'. [ 441.857842][ T1255] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 442.007575][ T1255] usb 2-1: Using ep0 maxpacket: 16 [ 442.010410][ T1255] usb 2-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 442.012150][ T1255] usb 2-1: config index 0 descriptor too short (expected 65, got 36) [ 442.012209][ T1255] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 442.012239][ T1255] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 442.012268][ T1255] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 442.012298][ T1255] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 442.012343][ T1255] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.108209][ T1255] usb 2-1: config 0 descriptor?? [ 442.108989][ T7930] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 442.242881][ T1255] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input27 [ 442.901137][ T1255] usb 2-1: USB disconnect, device number 20 [ 442.980868][ T994] bridge_slave_1: left allmulticast mode [ 442.980905][ T994] bridge_slave_1: left promiscuous mode [ 442.981169][ T994] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.581068][ T994] bridge_slave_0: left allmulticast mode [ 443.581110][ T994] bridge_slave_0: left promiscuous mode [ 443.581401][ T994] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.683922][ T7959] ecryptfs_validate_options: eCryptfs doesn't support cipher: aes [ 443.684008][ T7959] Error validating options; rc = [-22] [ 443.684458][ T977] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 443.834333][ T977] usb 4-1: Using ep0 maxpacket: 16 [ 443.837485][ T977] usb 4-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 443.839395][ T977] usb 4-1: config index 0 descriptor too short (expected 65, got 36) [ 443.839455][ T977] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 443.839484][ T977] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 443.839511][ T977] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 443.839548][ T977] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 443.839592][ T977] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.908287][ T7965] nvme_fabrics: unknown parameter or missing value 'tranuport=fc' in ctrl creation request [ 444.018634][ T977] usb 4-1: config 0 descriptor?? [ 444.019529][ T7946] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 444.096551][ T977] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input28 [ 444.134986][ T5963] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 444.310406][ T5963] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 444.425471][ T977] usb 4-1: USB disconnect, device number 26 [ 444.425581][ C1] pxrc 4-1:0.0: pxrc_usb_irq - usb_submit_urb failed with result: -19 [ 444.442591][ T5963] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.442622][ T5963] usb 3-1: Product: syz [ 444.442636][ T5963] usb 3-1: Manufacturer: syz [ 444.442651][ T5963] usb 3-1: SerialNumber: syz [ 444.556354][ T5963] usb 3-1: config 0 descriptor?? [ 444.570675][ T5963] ch341 3-1:0.0: ch341-uart converter detected [ 444.766481][ T5963] usb 3-1: failed to receive control message: -121 [ 444.766550][ T5963] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -121 [ 445.125347][ T994] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 445.196192][ T7975] /dev/nullb0: Can't open blockdev [ 445.224891][ T994] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 445.286682][ T994] bond0 (unregistering): Released all slaves [ 445.598472][ T5963] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 445.774362][ T5963] usb 4-1: Using ep0 maxpacket: 32 [ 445.775241][ T5963] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 445.776828][ T5963] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 445.776883][ T5963] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.837672][ T5963] usb 4-1: config 0 descriptor?? [ 445.885432][ T5963] hub 4-1:0.0: USB hub found [ 446.061613][ T5963] hub 4-1:0.0: 26 ports detected [ 446.062109][ T5963] hub 4-1:0.0: insufficient power available to use all downstream ports [ 446.114363][ T994] hsr_slave_0: left promiscuous mode [ 446.156040][ T994] hsr_slave_1: left promiscuous mode [ 446.157532][ T994] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 446.205354][ T994] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 446.394876][ T5726] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 446.544452][ T5726] usb 5-1: Using ep0 maxpacket: 16 [ 446.545888][ T5726] usb 5-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 446.550363][ T5726] usb 5-1: config index 0 descriptor too short (expected 65, got 36) [ 446.550428][ T5726] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 446.550460][ T5726] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 446.550490][ T5726] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 446.550520][ T5726] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 446.550566][ T5726] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.669108][ T5726] usb 5-1: config 0 descriptor?? [ 446.670010][ T7990] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 446.753648][ T5726] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input29 [ 447.170677][ T5704] usb 3-1: USB disconnect, device number 25 [ 447.178262][ T5963] hub 4-1:0.0: config failed, can't get hub status (err -32) [ 447.340514][ T5726] usb 5-1: USB disconnect, device number 11 [ 447.340609][ C0] pxrc 5-1:0.0: pxrc_usb_irq - usb_submit_urb failed with result: -19 [ 447.369177][ T5963] usbhid 4-1:0.0: can't add hid device: -32 [ 447.369410][ T5963] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 447.427528][ T4943] pxrc 5-1:0.0: pxrc_open - usb_submit_urb failed, error: -19 [ 447.489168][ T5704] ch341 3-1:0.0: device disconnected [ 450.494853][ T994] team0 (unregistering): Port device team_slave_1 removed [ 450.526306][ T994] team0 (unregistering): Port device team_slave_0 removed [ 453.030503][ T5707] usb 4-1: USB disconnect, device number 27 [ 453.324262][ T5704] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 453.434280][ T5726] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 453.459895][ T977] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 453.519598][ T7786] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 453.564698][ T5704] usb 2-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 453.620813][ T5704] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.620845][ T5704] usb 2-1: Product: syz [ 453.620862][ T5704] usb 2-1: Manufacturer: syz [ 453.620877][ T5704] usb 2-1: SerialNumber: syz [ 453.640469][ T5726] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 453.681607][ T977] usb 4-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 453.682512][ T5726] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.682540][ T5726] usb 5-1: Product: syz [ 453.682556][ T5726] usb 5-1: Manufacturer: syz [ 453.682572][ T5726] usb 5-1: SerialNumber: syz [ 453.684921][ T977] usb 4-1: config 0 has an invalid interface number: 117 but max is 0 [ 453.684946][ T977] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 453.684966][ T977] usb 4-1: config 0 has no interface number 0 [ 453.685012][ T977] usb 4-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 453.685038][ T977] usb 4-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 453.685059][ T977] usb 4-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 453.694561][ T977] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.694587][ T977] usb 4-1: Product: syz [ 453.694602][ T977] usb 4-1: Manufacturer: syz [ 453.694616][ T977] usb 4-1: SerialNumber: syz [ 453.707342][ T7786] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 453.715518][ T7786] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 453.908568][ T5726] usb 5-1: config 0 descriptor?? [ 453.921993][ T5704] r8152-cfgselector 2-1: Unknown version 0x0000 [ 453.922022][ T5704] r8152-cfgselector 2-1: config 0 descriptor?? [ 453.975147][ T5726] ch341 5-1:0.0: ch341-uart converter detected [ 454.041179][ T7786] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 454.049047][ T7786] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 454.127400][ T5726] usb 5-1: failed to receive control message: -121 [ 454.127469][ T5726] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -121 [ 454.159250][ T977] usb 4-1: config 0 descriptor?? [ 454.162019][ T7786] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 454.163262][ T7786] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 454.435801][ T7786] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 454.613866][ T977] usb 4-1: USB disconnect, device number 28 [ 454.938975][ T7786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 454.961713][ T7786] 8021q: adding VLAN 0 to HW filter on device team0 [ 455.012907][ T3337] bridge0: port 1(bridge_slave_0) entered blocking state [ 455.013217][ T3337] bridge0: port 1(bridge_slave_0) entered forwarding state [ 455.021336][ T3337] bridge0: port 2(bridge_slave_1) entered blocking state [ 455.021494][ T3337] bridge0: port 2(bridge_slave_1) entered forwarding state [ 456.604952][ T977] usb 5-1: USB disconnect, device number 12 [ 456.629019][ T977] ch341 5-1:0.0: device disconnected [ 458.011957][ T977] r8152-cfgselector 2-1: USB disconnect, device number 21 [ 459.145281][ T8072] netlink: 256 bytes leftover after parsing attributes in process `syz.4.557'. [ 459.276867][ T5726] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 459.454303][ T5726] usb 4-1: Using ep0 maxpacket: 16 [ 459.455254][ T5726] usb 4-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 459.456924][ T5726] usb 4-1: config index 0 descriptor too short (expected 65, got 36) [ 459.456985][ T5726] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 459.457015][ T5726] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 459.457044][ T5726] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 459.457074][ T5726] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 459.457120][ T5726] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.554095][ T5726] usb 4-1: config 0 descriptor?? [ 459.557367][ T8061] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 459.616967][ T5726] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input31 [ 459.989997][ T5726] usb 4-1: USB disconnect, device number 29 [ 460.000048][ T4943] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -19 [ 460.419023][ T1255] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 460.636985][ T1255] usb 2-1: unable to get BOS descriptor or descriptor too short [ 460.640083][ T1255] usb 2-1: not running at top speed; connect to a high speed hub [ 460.640126][ T1255] usb 2-1: New USB device found, idVendor=2013, idProduct=025c, bcdDevice=a4.f9 [ 460.656102][ T1255] usb 2-1: config 12 has an invalid interface number: 126 but max is 0 [ 460.656133][ T1255] usb 2-1: config 12 has no interface number 0 [ 460.656187][ T1255] usb 2-1: config 12 interface 126 has no altsetting 0 [ 460.711006][ T1255] usb 2-1: string descriptor 0 read error: -22 [ 460.711175][ T1255] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.051292][ T1255] dvb-usb: found a 'PCTV 2002e' in warm state. [ 461.494323][ T5605] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 461.535585][ T1255] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 461.538503][ T1255] dvbdev: DVB: registering new adapter (PCTV 2002e) [ 461.538674][ T1255] usb 2-1: media controller created [ 461.632678][ T1255] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 461.686218][ T5605] usb 3-1: not running at top speed; connect to a high speed hub [ 461.686267][ T5605] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 461.712726][ T5605] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 461.712789][ T5605] usb 3-1: config 1 interface 0 altsetting 200 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 461.712821][ T5605] usb 3-1: config 1 interface 0 has no altsetting 0 [ 461.751176][ T5605] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=19 [ 461.751209][ T5605] usb 3-1: Product: syz [ 461.751225][ T5605] usb 3-1: Manufacturer: syz [ 461.751242][ T5605] usb 3-1: SerialNumber: syz [ 463.150788][ T1255] DVB: Unable to find symbol dib7000p_attach() [ 463.150795][ T7786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 463.150837][ T1255] dvb-usb: no frontend was attached by 'PCTV 2002e' [ 463.150852][ T1255] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 463.184488][ T1255] dvbdev: DVB: registering new adapter (PCTV 2002e) [ 463.184637][ T1255] usb 2-1: media controller created [ 463.294982][ T1255] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 463.425446][ T8116] netlink: 7 bytes leftover after parsing attributes in process `syz.3.563'. [ 463.662315][ T1255] DVB: Unable to find symbol dib7000p_attach() [ 463.662329][ T1255] dvb-usb: no frontend was attached by 'PCTV 2002e' [ 463.835132][ T5605] cdc_ether 3-1:1.0: Descriptor too short [ 463.888722][ T5605] usb 3-1: USB disconnect, device number 26 [ 464.194250][ T1255] rc_core: IR keymap rc-dib0700-rc5 not found [ 464.194277][ T1255] Registered IR keymap rc-empty [ 464.231814][ T1255] dvb-usb: could not initialize remote control. [ 464.231834][ T1255] dvb-usb: PCTV 2002e successfully initialized and connected. [ 464.279407][ T1255] usb 2-1: USB disconnect, device number 22 [ 464.338992][ T1255] dvb-usb: PCTV 2002e successfully deinitialized and disconnected. [ 468.514199][ T8162] netlink: 48 bytes leftover after parsing attributes in process `syz.3.570'. [ 469.831792][ T7786] veth0_vlan: entered promiscuous mode [ 470.814296][ T5704] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 470.874836][ T1255] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 470.876420][ T7786] veth1_vlan: entered promiscuous mode [ 470.996365][ T5704] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 471.001898][ T5704] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.001917][ T5704] usb 2-1: Product: syz [ 471.001927][ T5704] usb 2-1: Manufacturer: syz [ 471.001936][ T5704] usb 2-1: SerialNumber: syz [ 471.030779][ T5704] usb 2-1: config 0 descriptor?? [ 471.034434][ T1255] usb 3-1: Using ep0 maxpacket: 16 [ 471.131974][ T5704] ch341 2-1:0.0: ch341-uart converter detected [ 471.656641][ T1255] usb 3-1: device descriptor read/all, error -71 [ 472.158640][ T7786] veth0_macvtap: entered promiscuous mode [ 472.330745][ T5704] usb 2-1: ch341-uart converter now attached to ttyUSB0 [ 472.339062][ T7786] veth1_macvtap: entered promiscuous mode [ 473.612684][ T7786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 473.669770][ T7786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 473.736416][ T5726] usb 2-1: USB disconnect, device number 23 [ 473.776285][ T5726] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0 [ 473.777159][ T5726] ch341 2-1:0.0: device disconnected [ 475.040298][ T8210] misc userio: No port type given on /dev/userio [ 475.144249][ T5963] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 475.336351][ T1276] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.336931][ T1276] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.337212][ T1276] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.504072][ T5963] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 475.567140][ T5963] usb 3-1: config 0 has an invalid interface number: 255 but max is 0 [ 475.567163][ T5963] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 475.567175][ T5963] usb 3-1: config 0 has no interface number 0 [ 475.567196][ T5963] usb 3-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 475.567221][ T5963] usb 3-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 475.567238][ T5963] usb 3-1: config 0 interface 255 has no altsetting 0 [ 475.567259][ T5963] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.624987][ T3337] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.626563][ T5963] usb 3-1: config 0 descriptor?? [ 475.934394][ T8205] dns_resolver: Unsupported content type (6) [ 477.147706][ T5963] usb 3-1: string descriptor 0 read error: -71 [ 477.221541][ T5963] usb 3-1: USB disconnect, device number 29 [ 477.484471][ T3337] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 477.484498][ T3337] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 478.025924][ T8223] netlink: 48 bytes leftover after parsing attributes in process `syz.1.583'. [ 481.092576][ T994] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 481.092604][ T994] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 481.277428][ T8234] netlink: 12 bytes leftover after parsing attributes in process `syz.2.588'. [ 481.741087][ T8234] bond1: entered promiscuous mode [ 481.741108][ T8234] bond1: entered allmulticast mode [ 484.244414][ T8245] misc userio: No port type given on /dev/userio [ 484.972696][ T4907] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 485.037811][ T4907] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 485.042373][ T4907] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 485.051637][ T4907] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 485.055378][ T4907] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 485.484436][ T5726] usb 3-1: new full-speed USB device number 30 using dummy_hcd [ 485.635079][ T5726] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 485.641094][ T5726] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.641125][ T5726] usb 3-1: Product: syz [ 485.641141][ T5726] usb 3-1: Manufacturer: syz [ 485.641158][ T5726] usb 3-1: SerialNumber: syz [ 485.738570][ T5726] usb 3-1: config 0 descriptor?? [ 485.762085][ T5726] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 486.865659][ T5726] gspca_stk1135: reg_w 0x2 err -110 [ 486.866713][ T5726] gspca_stk1135: serial bus timeout: status=0x00 [ 486.866728][ T5726] gspca_stk1135: Sensor write failed [ 486.866763][ T5726] gspca_stk1135: serial bus timeout: status=0x00 [ 486.866774][ T5726] gspca_stk1135: Sensor write failed [ 486.866808][ T5726] gspca_stk1135: serial bus timeout: status=0x00 [ 486.866819][ T5726] gspca_stk1135: Sensor read failed [ 486.866853][ T5726] gspca_stk1135: serial bus timeout: status=0x00 [ 486.866865][ T5726] gspca_stk1135: Sensor read failed [ 486.866873][ T5726] gspca_stk1135: Detected sensor type unknown (0x0) [ 486.866913][ T5726] gspca_stk1135: serial bus timeout: status=0x00 [ 486.866925][ T5726] gspca_stk1135: Sensor read failed [ 486.866958][ T5726] gspca_stk1135: serial bus timeout: status=0x00 [ 486.866969][ T5726] gspca_stk1135: Sensor read failed [ 486.867001][ T5726] gspca_stk1135: serial bus timeout: status=0x00 [ 486.867011][ T5726] gspca_stk1135: Sensor write failed [ 486.867038][ T5726] gspca_stk1135: serial bus timeout: status=0x00 [ 486.867049][ T5726] gspca_stk1135: Sensor write failed [ 486.867144][ T5726] stk1135 3-1:0.0: probe with driver stk1135 failed with error -110 [ 487.166150][ T31] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 487.204341][ T5599] Bluetooth: hci2: command tx timeout [ 488.355527][ T8269] netlink: 48 bytes leftover after parsing attributes in process `syz.3.596'. [ 488.384272][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 488.385306][ T31] usb 2-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 488.387098][ T31] usb 2-1: config index 0 descriptor too short (expected 65, got 36) [ 488.387157][ T31] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 488.387202][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 488.387233][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 488.387263][ T31] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 488.387310][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.632746][ T31] usb 2-1: config 0 descriptor?? [ 488.634148][ T8259] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 488.634659][ T5704] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 488.638505][ T5734] usb 3-1: USB disconnect, device number 30 [ 488.734837][ T31] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input33 [ 488.864049][ T5704] usb 5-1: Using ep0 maxpacket: 16 [ 488.870622][ T5704] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 488.876886][ T5704] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.074878][ T5704] usb 5-1: config 0 descriptor?? [ 490.566197][ T5599] Bluetooth: hci2: command tx timeout [ 490.673159][ T5704] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 490.687286][ T31] usb 2-1: USB disconnect, device number 24 [ 490.709433][ T4943] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -19 [ 490.904898][ T5704] usb 5-1: Detected FT232A [ 491.212056][ T5704] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 491.393048][ T5704] usb 5-1: USB disconnect, device number 13 [ 491.425632][ T5704] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 491.506945][ T5704] ftdi_sio 5-1:0.0: device disconnected [ 492.420240][ T994] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.675485][ T5599] Bluetooth: hci2: command tx timeout [ 494.066251][ T8295] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 494.066290][ T8295] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 495.701786][ T5599] Bluetooth: hci2: command tx timeout [ 496.773316][ T8301] netlink: 48 bytes leftover after parsing attributes in process `syz.4.607'. [ 498.679167][ T994] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.763738][ T994] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.781822][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.781896][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.870581][ T8335] misc userio: Invalid payload size [ 504.202296][ T994] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.724277][ T5903] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 504.833609][ T8249] bridge0: port 1(bridge_slave_0) entered blocking state [ 504.833844][ T8249] bridge0: port 1(bridge_slave_0) entered disabled state [ 504.834032][ T8249] bridge_slave_0: entered allmulticast mode [ 504.837184][ T8249] bridge_slave_0: entered promiscuous mode [ 504.840561][ T8249] bridge0: port 2(bridge_slave_1) entered blocking state [ 504.840767][ T8249] bridge0: port 2(bridge_slave_1) entered disabled state [ 504.840932][ T8249] bridge_slave_1: entered allmulticast mode [ 504.843661][ T8249] bridge_slave_1: entered promiscuous mode [ 504.875743][ T5903] usb 3-1: Using ep0 maxpacket: 16 [ 504.942370][ T5903] usb 3-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 504.957366][ T5903] usb 3-1: config index 0 descriptor too short (expected 65, got 36) [ 504.957442][ T5903] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 504.957472][ T5903] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 504.957500][ T5903] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 504.957529][ T5903] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 504.957578][ T5903] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.060356][ T8249] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 505.063316][ T5903] usb 3-1: config 0 descriptor?? [ 505.085233][ T8342] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 505.110854][ T8249] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 505.142269][ T5903] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input34 [ 505.323129][ T5734] usb 3-1: USB disconnect, device number 31 [ 505.323202][ C0] pxrc 3-1:0.0: pxrc_usb_irq - usb_submit_urb failed with result: -19 [ 507.111877][ T8249] team0: Port device team_slave_0 added [ 507.124695][ T4943] pxrc 3-1:0.0: pxrc_open - usb_submit_urb failed, error: -19 [ 507.284751][ T8249] team0: Port device team_slave_1 added [ 507.819011][ T8249] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 507.819034][ T8249] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 507.819064][ T8249] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 507.863889][ T8249] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 507.863909][ T8249] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 507.863936][ T8249] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 508.807219][ T8249] hsr_slave_0: entered promiscuous mode [ 508.812822][ T8249] hsr_slave_1: entered promiscuous mode [ 508.827661][ T8249] debugfs: 'hsr0' already exists in 'hsr' [ 508.827692][ T8249] Cannot create hsr debugfs directory [ 509.433058][ T8380] netlink: 48 bytes leftover after parsing attributes in process `syz.1.618'. [ 511.300232][ T994] bridge_slave_1: left allmulticast mode [ 511.300272][ T994] bridge_slave_1: left promiscuous mode [ 511.316783][ T994] bridge0: port 2(bridge_slave_1) entered disabled state [ 514.043081][ T994] bridge_slave_0: left allmulticast mode [ 514.043124][ T994] bridge_slave_0: left promiscuous mode [ 514.043396][ T994] bridge0: port 1(bridge_slave_0) entered disabled state [ 516.294256][ T31] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 516.455064][ T31] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 516.456737][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.506263][ T31] usb 4-1: config 0 descriptor?? [ 517.137058][ T994] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 517.309846][ T994] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 517.382382][ T994] bond0 (unregistering): Released all slaves [ 517.664068][ T8399] tipc: Started in network mode [ 517.664261][ T8399] tipc: Node identity ac1414aa, cluster identity 4711 [ 517.730995][ T8399] tipc: Enabling of bearer rejected, failed to enable media [ 517.911390][ T5253] 8021q: adding VLAN 0 to HW filter on device eth5 [ 518.411815][ T31] usb 4-1: Cannot set autoneg [ 518.412156][ T31] MOSCHIP usb-ethernet driver 4-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 518.422577][ T31] usb 4-1: USB disconnect, device number 30 [ 520.052596][ T8455] fuse: root generation should be zero [ 520.564262][ T5704] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 520.718801][ T5704] usb 5-1: Using ep0 maxpacket: 16 [ 520.723304][ T5704] usb 5-1: New USB device found, idVendor=1235, idProduct=8213, bcdDevice= 0.40 [ 520.735432][ T5704] usb 5-1: config 1 has an invalid interface association descriptor of length 5, skipping [ 520.735459][ T5704] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 520.735508][ T5704] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x9 has invalid maxpacket 14609, setting to 1024 [ 520.735535][ T5704] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 1024 [ 520.735559][ T5704] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 520.775871][ T5704] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.775901][ T5704] usb 5-1: Product: syz [ 520.775915][ T5704] usb 5-1: Manufacturer: syz [ 520.775930][ T5704] usb 5-1: SerialNumber: syz [ 520.792227][ T8463] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 521.297468][ T5704] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 521.297615][ T5704] usb 5-1: MIDIStreaming interface descriptor not found [ 521.867122][ T8477] netlink: 64 bytes leftover after parsing attributes in process `syz.1.650'. [ 521.999107][ T5253] 8021q: adding VLAN 0 to HW filter on device eth6 [ 522.194281][ T5704] usb 5-1: USB disconnect, device number 14 [ 522.217090][ T994] hsr_slave_0: left promiscuous mode [ 522.257186][ T994] hsr_slave_1: left promiscuous mode [ 522.258616][ T994] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 522.258644][ T994] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 522.351758][ T994] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 522.351790][ T994] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 522.645133][ T994] veth1_macvtap: left promiscuous mode [ 522.645258][ T994] veth0_macvtap: left promiscuous mode [ 522.645570][ T994] veth1_vlan: left promiscuous mode [ 522.645782][ T994] veth0_vlan: left promiscuous mode [ 523.189631][ T4907] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 523.232188][ T4907] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 523.265770][ T4907] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 523.299725][ T4907] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 523.303898][ T4907] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 523.674223][ T977] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 523.837268][ T977] usb 2-1: New USB device found, idVendor=04e6, idProduct=000f, bcdDevice=7e.d7 [ 523.840813][ T977] usb 2-1: config 192 has an invalid interface number: 197 but max is 0 [ 523.840844][ T977] usb 2-1: config 192 has an invalid descriptor of length 0, skipping remainder of the config [ 523.840866][ T977] usb 2-1: config 192 has no interface number 0 [ 523.852607][ T977] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 523.852636][ T977] usb 2-1: Product: syz [ 523.852650][ T977] usb 2-1: Manufacturer: syz [ 523.852666][ T977] usb 2-1: SerialNumber: syz [ 524.165131][ T977] usb-storage 2-1:192.197: USB Mass Storage device detected [ 524.461087][ T977] usb-storage 2-1:192.197: Quirks match for vid 04e6 pid 000f: 4 [ 524.565371][ T977] usb 2-1: USB disconnect, device number 25 [ 524.634609][ T8424] udevd[8424]: setting owner of /dev/bus/usb/002/025 to uid=0, gid=0 failed: No such file or directory [ 525.284379][ T977] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 525.365897][ T994] team0 (unregistering): Port device team_slave_1 removed [ 525.444807][ T977] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 525.446207][ T977] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 525.446236][ T977] usb 2-1: config 0 has no interface number 0 [ 525.446284][ T977] usb 2-1: config 0 interface 41 has no altsetting 0 [ 525.448964][ T977] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.448981][ T977] usb 2-1: Product: syz [ 525.448990][ T977] usb 2-1: Manufacturer: syz [ 525.448999][ T977] usb 2-1: SerialNumber: syz [ 525.506700][ T994] team0 (unregistering): Port device team_slave_0 removed [ 525.525588][ T977] usb 2-1: config 0 descriptor?? [ 525.684284][ T4907] Bluetooth: hci5: command tx timeout [ 526.205002][ T8510] netlink: 20 bytes leftover after parsing attributes in process `syz.4.660'. [ 526.366967][ T977] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 527.397196][ T977] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 527.397228][ T977] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to power up PHY: -71 [ 527.397488][ T977] CoreChips 2-1:0.41: probe with driver CoreChips failed with error -71 [ 527.431543][ T977] usb 2-1: USB disconnect, device number 26 [ 527.779864][ T4907] Bluetooth: hci5: command tx timeout [ 530.049405][ T4907] Bluetooth: hci5: command tx timeout [ 530.478372][ T1255] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 530.634240][ T1255] usb 2-1: Using ep0 maxpacket: 16 [ 530.635091][ T1255] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 530.636551][ T1255] usb 2-1: config 0 has an invalid interface number: 34 but max is 0 [ 530.636579][ T1255] usb 2-1: config 0 has no interface number 0 [ 530.636629][ T1255] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 530.636657][ T1255] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 530.706568][ T1255] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.706601][ T1255] usb 2-1: Product: syz [ 530.706619][ T1255] usb 2-1: Manufacturer: syz [ 530.706635][ T1255] usb 2-1: SerialNumber: syz [ 530.754521][ T1255] usb 2-1: config 0 descriptor?? [ 530.757882][ T8555] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 530.758596][ T8555] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 531.023716][ T8555] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 531.024029][ T8555] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 531.257985][ T1255] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 531.258298][ T1255] asix 2-1:0.34: probe with driver asix failed with error -71 [ 531.312251][ T1255] usb 2-1: USB disconnect, device number 27 [ 531.435597][ T8572] Invalid argument reading file caps for ./file0 [ 532.086506][ T4907] Bluetooth: hci5: command tx timeout [ 533.244287][ T1255] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 533.405771][ T1255] usb 4-1: Using ep0 maxpacket: 32 [ 533.406791][ T1255] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 533.408381][ T1255] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 533.408413][ T1255] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 533.408455][ T1255] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.479232][ T1255] usb 4-1: config 0 descriptor?? [ 533.983690][ T1255] savu 0003:1E7D:2D5A.0002: unknown main item tag 0x0 [ 533.983735][ T1255] savu 0003:1E7D:2D5A.0002: ignoring exceeding usage max [ 534.003552][ T1255] savu 0003:1E7D:2D5A.0002: item fetching failed at offset 4/8 [ 534.014966][ T1255] savu 0003:1E7D:2D5A.0002: parse failed [ 534.015043][ T1255] savu 0003:1E7D:2D5A.0002: probe with driver savu failed with error -22 [ 534.054256][ T5605] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 534.137908][ T1255] usb 4-1: USB disconnect, device number 31 [ 534.204211][ T5605] usb 5-1: Using ep0 maxpacket: 16 [ 534.205102][ T5605] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 534.206769][ T5605] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 534.206821][ T5605] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 118, changing to 7 [ 534.256990][ T5605] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 534.257021][ T5605] usb 5-1: Product: syz [ 534.257038][ T5605] usb 5-1: Manufacturer: syz [ 534.257053][ T5605] usb 5-1: SerialNumber: syz [ 535.098743][ T5605] usb 5-1: 1:1 : no UAC_FORMAT_TYPE desc [ 535.141475][ T5605] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 535.245494][ T5605] usb 5-1: USB disconnect, device number 15 [ 535.266473][ T1255] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 535.444204][ T1255] usb 4-1: Using ep0 maxpacket: 8 [ 535.447184][ T1255] usb 4-1: New USB device found, idVendor=054c, idProduct=042f, bcdDevice= 0.00 [ 535.452989][ T1255] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 535.453029][ T1255] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 535.453053][ T1255] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 535.453099][ T1255] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 535.560364][ T1255] usb 4-1: config 0 descriptor?? [ 535.569540][ T8249] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 535.882720][ T8249] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 536.411945][ T8424] udevd[8424]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 537.202050][ T8249] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 537.402915][ T1255] sony 0003:054C:042F.0003: can't set operational mode: step 1 [ 537.403047][ T1255] sony 0003:054C:042F.0003: Failed to set controller into operational mode [ 537.532154][ T8249] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 537.599368][ T1255] sony 0003:054C:042F.0003: hidraw0: USB HID v0.00 Joystick [HID 054c:042f] on usb-dummy_hcd.3-1/input0 [ 537.599408][ T1255] sony 0003:054C:042F.0003: failed to claim input [ 537.682457][ T1255] usb 4-1: USB disconnect, device number 32 [ 538.028388][ T8638] fido_id[8638]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 539.536441][ T8249] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 540.047281][ T8249] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 541.380673][ T8249] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 541.595455][ T8249] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 542.092111][ T8495] bridge0: port 1(bridge_slave_0) entered blocking state [ 542.092268][ T8495] bridge0: port 1(bridge_slave_0) entered disabled state [ 542.092505][ T8495] bridge_slave_0: entered allmulticast mode [ 542.121183][ T8495] bridge_slave_0: entered promiscuous mode [ 543.704457][ T8495] bridge0: port 2(bridge_slave_1) entered blocking state [ 543.704616][ T8495] bridge0: port 2(bridge_slave_1) entered disabled state [ 543.704849][ T8495] bridge_slave_1: entered allmulticast mode [ 543.709601][ T8495] bridge_slave_1: entered promiscuous mode [ 544.867759][ T8249] kthread_run failed with err -4 [ 544.961176][ T8495] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 544.976727][ T8495] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 545.047612][ T8495] team0: Port device team_slave_0 added [ 545.052261][ T8495] team0: Port device team_slave_1 added [ 545.118428][ T8495] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 545.118450][ T8495] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 545.118481][ T8495] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 545.170903][ T8495] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 545.171659][ T8495] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 545.171693][ T8495] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 545.341861][ T8495] hsr_slave_0: entered promiscuous mode [ 545.343394][ T8495] hsr_slave_1: entered promiscuous mode [ 545.356371][ T8495] debugfs: 'hsr0' already exists in 'hsr' [ 545.356404][ T8495] Cannot create hsr debugfs directory [ 547.073244][ T5599] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 547.123266][ T5599] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 547.133550][ T5599] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 547.158151][ T5599] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 547.159138][ T5599] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 550.501765][ T5599] Bluetooth: hci4: command tx timeout [ 552.565685][ T4907] Bluetooth: hci4: command tx timeout [ 554.646450][ T4907] Bluetooth: hci4: command tx timeout [ 555.144765][ T7300] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.896631][ T4907] Bluetooth: hci4: command tx timeout [ 557.636610][ T5726] usb 2-1: new low-speed USB device number 28 using dummy_hcd [ 557.783019][ T7300] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.800590][ T5726] usb 2-1: device descriptor read/64, error -71 [ 558.036824][ T5726] usb 2-1: new low-speed USB device number 29 using dummy_hcd [ 558.166401][ T5726] usb 2-1: device descriptor read/64, error -71 [ 558.274729][ T5726] usb usb2-port1: attempt power cycle [ 558.304433][ T5963] wiimote 0005:057E:0306.0004: hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 558.372665][ T5963] wiimote 0005:057E:0306.0004: New device registered [ 558.608717][ T7300] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.644424][ T5726] usb 2-1: new low-speed USB device number 30 using dummy_hcd [ 558.666211][ T5726] usb 2-1: device descriptor read/8, error -71 [ 558.696196][ T8495] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 558.804400][ T8495] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 558.882604][ T8495] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 558.904334][ T5726] usb 2-1: new low-speed USB device number 31 using dummy_hcd [ 558.926527][ T5726] usb 2-1: device descriptor read/8, error -71 [ 559.006673][ T8495] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 559.038002][ T5726] usb usb2-port1: unable to enumerate USB device [ 559.038030][ T8495] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 559.085373][ T8495] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 559.338486][ T7300] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.416561][ T8495] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 559.504209][ T8495] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 559.530815][ T5704] wiimote 0005:057E:0306.0004: detected device: Nintendo Wii Remote (Gen 1) [ 560.419401][ T8752] wiimote 0005:057E:0306.0004: Device removed [ 561.189132][ T5704] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.0004/input/input37 [ 561.522956][ T5704] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.0004/input/input38 [ 561.546261][ T5704] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.0004/input/input36 [ 561.982680][ T8795] veth0: entered promiscuous mode [ 562.062695][ T8796] netlink: 4 bytes leftover after parsing attributes in process `syz.3.727'. [ 562.774837][ T7300] bridge_slave_1: left allmulticast mode [ 562.774879][ T7300] bridge_slave_1: left promiscuous mode [ 562.775177][ T7300] bridge0: port 2(bridge_slave_1) entered disabled state [ 562.925408][ T7300] bridge_slave_0: left allmulticast mode [ 562.925451][ T7300] bridge_slave_0: left promiscuous mode [ 562.925655][ T7300] bridge0: port 1(bridge_slave_0) entered disabled state [ 563.210640][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.210724][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.376853][ T7300] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 564.435221][ T7300] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 564.487838][ T7300] bond0 (unregistering): Released all slaves [ 564.513432][ T7300] bond1 (unregistering): Released all slaves [ 564.781664][ T8495] 8021q: adding VLAN 0 to HW filter on device bond0 [ 564.782756][ T8677] bridge0: port 1(bridge_slave_0) entered blocking state [ 564.782832][ T8677] bridge0: port 1(bridge_slave_0) entered disabled state [ 564.782938][ T8677] bridge_slave_0: entered allmulticast mode [ 564.785266][ T8677] bridge_slave_0: entered promiscuous mode [ 564.820180][ T8677] bridge0: port 2(bridge_slave_1) entered blocking state [ 564.820333][ T8677] bridge0: port 2(bridge_slave_1) entered disabled state [ 564.820551][ T8677] bridge_slave_1: entered allmulticast mode [ 564.822315][ T8677] bridge_slave_1: entered promiscuous mode [ 564.933436][ T8677] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 564.987093][ T8677] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 565.380263][ T8677] team0: Port device team_slave_0 added [ 565.419425][ T8495] 8021q: adding VLAN 0 to HW filter on device team0 [ 565.426942][ T8677] team0: Port device team_slave_1 added [ 565.676622][ T8829] netlink: 8 bytes leftover after parsing attributes in process `syz.4.738'. [ 565.763343][ T3337] bridge0: port 1(bridge_slave_0) entered blocking state [ 565.763462][ T3337] bridge0: port 1(bridge_slave_0) entered forwarding state [ 566.343000][ T8677] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 566.343020][ T8677] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 566.343045][ T8677] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 566.496089][ T8677] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 566.496113][ T8677] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 566.496134][ T8677] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 566.597329][ T3337] bridge0: port 2(bridge_slave_1) entered blocking state [ 566.597488][ T3337] bridge0: port 2(bridge_slave_1) entered forwarding state [ 566.672176][ T5253] 8021q: adding VLAN 0 to HW filter on device eth5 [ 566.856182][ T7300] hsr_slave_0: left promiscuous mode [ 566.898013][ T7300] hsr_slave_1: left promiscuous mode [ 566.902085][ T7300] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 566.902117][ T7300] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 566.935950][ T7300] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 566.935983][ T7300] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 567.047682][ T7300] veth1_macvtap: left promiscuous mode [ 567.047765][ T7300] veth0_macvtap: left promiscuous mode [ 567.047932][ T7300] veth1_vlan: left promiscuous mode [ 567.048042][ T7300] veth0_vlan: left promiscuous mode [ 568.375006][ T7300] team0 (unregistering): Port device team_slave_1 removed [ 568.446212][ T7300] team0 (unregistering): Port device team_slave_0 removed [ 568.454245][ T36] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 568.615097][ T36] usb 4-1: New USB device found, idVendor=a94c, idProduct=75ab, bcdDevice=d6.e4 [ 568.616452][ T36] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 568.616509][ T36] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 568.618916][ T36] usb 4-1: New USB device strings: Mfr=140, Product=10, SerialNumber=171 [ 568.618942][ T36] usb 4-1: Product: syz [ 568.618955][ T36] usb 4-1: Manufacturer: syz [ 568.618965][ T36] usb 4-1: SerialNumber: syz [ 568.922248][ T36] usb-storage 4-1:1.0: USB Mass Storage device detected [ 569.111314][ T36] usb 4-1: USB disconnect, device number 33 [ 569.546814][ T8677] hsr_slave_0: entered promiscuous mode [ 569.548812][ T8677] hsr_slave_1: entered promiscuous mode [ 569.549925][ T8677] debugfs: 'hsr0' already exists in 'hsr' [ 569.549952][ T8677] Cannot create hsr debugfs directory [ 569.754485][ T5726] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 569.904199][ T5726] usb 2-1: Using ep0 maxpacket: 16 [ 569.905552][ T5726] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 569.907393][ T5726] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 569.907426][ T5726] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 569.907453][ T5726] usb 2-1: config 0 interface 0 has no altsetting 0 [ 569.907491][ T5726] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 569.913766][ T5726] usb 2-1: config 0 descriptor?? [ 570.654726][ T5605] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 570.668606][ T5734] usb 2-1: USB disconnect, device number 32 [ 570.804835][ T5605] usb 5-1: Using ep0 maxpacket: 8 [ 570.805701][ T5605] usb 5-1: New USB device found, idVendor=150a, idProduct=1201, bcdDevice= 0.00 [ 570.809053][ T5605] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 570.809087][ T5605] usb 5-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 570.809118][ T5605] usb 5-1: config 0 interface 0 has no altsetting 0 [ 570.809156][ T5605] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.881066][ T5605] usb 5-1: config 0 descriptor?? [ 571.448692][ T8899] netlink: 36 bytes leftover after parsing attributes in process `syz.4.758'. [ 571.692812][ T5605] usbhid 5-1:0.0: can't add hid device: -71 [ 571.692933][ T5605] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 571.735379][ T5605] usb 5-1: USB disconnect, device number 16 [ 572.279375][ T8931] kvm: requested 2514 ns i8254 timer period limited to 200000 ns [ 572.416965][ T5253] 8021q: adding VLAN 0 to HW filter on device eth6 [ 572.769747][ T8928] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 572.770164][ T8928] kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 572.770906][ T8928] kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 572.771455][ T8928] kvm: requested 85485 ns i8254 timer period limited to 200000 ns [ 572.771533][ T8928] kvm: requested 93028 ns i8254 timer period limited to 200000 ns [ 572.771577][ T8928] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 572.772922][ T8928] kvm: requested 10057 ns i8254 timer period limited to 200000 ns [ 572.773685][ T8928] kvm: requested 155047 ns i8254 timer period limited to 200000 ns [ 572.773736][ T8928] kvm: requested 160914 ns i8254 timer period limited to 200000 ns [ 574.218725][ T36] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 574.361460][ T8495] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 574.396905][ T36] usb 2-1: Using ep0 maxpacket: 32 [ 574.398141][ T36] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 574.402871][ T36] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 574.402901][ T36] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 574.402944][ T36] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 574.435592][ T37] kauditd_printk_skb: 38 callbacks suppressed [ 574.435614][ T37] audit: type=1800 audit(1789831444.274:55): pid=8977 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.771" name=08 dev="sda1" ino=2047 res=0 errno=0 [ 574.588129][ T36] usb 2-1: config 0 descriptor?? [ 574.764218][ T5253] 8021q: adding VLAN 0 to HW filter on device eth7 [ 574.979235][ T5605] usb 2-1: USB disconnect, device number 33 [ 575.704220][ T5605] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 575.856313][ T5605] usb 4-1: Using ep0 maxpacket: 32 [ 575.857308][ T5605] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 575.858856][ T5605] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 575.858883][ T5605] usb 4-1: config 0 has no interface number 0 [ 575.862486][ T5605] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 575.862513][ T5605] usb 4-1: Product: syz [ 575.862529][ T5605] usb 4-1: Manufacturer: syz [ 575.862544][ T5605] usb 4-1: SerialNumber: syz [ 575.944791][ T5605] usb 4-1: config 0 descriptor?? [ 576.338873][ T9006] netlink: 88 bytes leftover after parsing attributes in process `syz.4.774'. [ 576.387853][ T7300] bridge_slave_1: left allmulticast mode [ 576.387893][ T7300] bridge_slave_1: left promiscuous mode [ 576.388178][ T7300] bridge0: port 2(bridge_slave_1) entered disabled state [ 577.536018][ T7300] bridge_slave_0: left allmulticast mode [ 577.536047][ T7300] bridge_slave_0: left promiscuous mode [ 577.536327][ T7300] bridge0: port 1(bridge_slave_0) entered disabled state [ 577.625953][ T5605] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 577.625990][ T5605] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 577.677919][ T5605] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 577.678274][ T5605] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 577.707823][ T5605] usb 4-1: USB disconnect, device number 34 [ 578.196616][ T7300] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 578.328256][ T7300] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 578.409789][ T7300] bond0 (unregistering): Released all slaves [ 579.573479][ T5253] 8021q: adding VLAN 0 to HW filter on device eth8 [ 580.702657][ T7300] hsr_slave_0: left promiscuous mode [ 580.726629][ T7300] hsr_slave_1: left promiscuous mode [ 580.728583][ T7300] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 580.867481][ T7300] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 580.982459][ T977] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 581.155343][ T977] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 581.997026][ T7300] team0 (unregistering): Port device team_slave_1 removed [ 582.110144][ T7300] team0 (unregistering): Port device team_slave_0 removed [ 585.246209][ T9065] netlink: 8 bytes leftover after parsing attributes in process `syz.3.788'. [ 585.862669][ T8677] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 585.871446][ T5599] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 585.936977][ T5599] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 585.943971][ T5599] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 585.946039][ T5599] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 585.946823][ T5599] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 586.125431][ T8677] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 586.128052][ T8677] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 586.349787][ T8677] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 586.353307][ T8677] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 586.505808][ T8677] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 586.524893][ T8677] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 586.560553][ T8677] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 588.146076][ T8677] 8021q: adding VLAN 0 to HW filter on device bond0 [ 588.164826][ T5599] Bluetooth: hci2: command tx timeout [ 588.267828][ T8677] 8021q: adding VLAN 0 to HW filter on device team0 [ 588.389084][ T1276] bridge0: port 1(bridge_slave_0) entered blocking state [ 588.389269][ T1276] bridge0: port 1(bridge_slave_0) entered forwarding state [ 590.643484][ T5599] Bluetooth: hci2: command tx timeout [ 590.832494][ T1419] bridge0: port 2(bridge_slave_1) entered blocking state [ 590.841440][ T1419] bridge0: port 2(bridge_slave_1) entered forwarding state [ 591.770081][ T977] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 591.932916][ T977] usb 5-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 591.937027][ T977] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 591.937056][ T977] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 591.947809][ T977] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.947836][ T977] usb 5-1: Product: syz [ 591.947852][ T977] usb 5-1: Manufacturer: syz [ 591.947866][ T977] usb 5-1: SerialNumber: syz [ 592.010175][ T977] ums-sddr09 5-1:1.0: USB Mass Storage device detected [ 592.183339][ T977] ums-sddr09 5-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 592.183339][ T977] Please send a copy of this message to and [ 592.602219][ T9164] input: syz0 as /devices/virtual/input/input39 [ 592.648419][ T5599] Bluetooth: hci2: command tx timeout [ 592.723626][ T977] ums-sddr09 5-1:1.0: probe with driver ums-sddr09 failed with error -32 [ 593.707019][ T977] usb 5-1: USB disconnect, device number 17 [ 595.127812][ T5599] Bluetooth: hci2: command tx timeout [ 595.261704][ T5605] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 595.417939][ T5605] usb 2-1: Using ep0 maxpacket: 16 [ 595.418764][ T5605] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 595.423418][ T5605] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 595.423449][ T5605] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 595.423470][ T5605] usb 2-1: config 0 has no interface number 0 [ 595.471901][ T5605] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 595.471933][ T5605] usb 2-1: Product: syz [ 595.471948][ T5605] usb 2-1: Manufacturer: syz [ 595.471963][ T5605] usb 2-1: SerialNumber: syz [ 595.509577][ T5605] usb 2-1: config 0 descriptor?? [ 595.533874][ T5605] uvcvideo 2-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 595.533933][ T5605] uvcvideo 2-1:0.105: No valid video chain found. [ 595.720162][ T5605] usb 2-1: USB disconnect, device number 34 [ 596.661297][ T9213] LUN: removable file: (no medium) [ 598.119752][ T1255] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 600.458167][ T1255] usb 2-1: New USB device found, idVendor=0300, idProduct=8cfc, bcdDevice= 0.2c [ 600.462021][ T1255] usb 2-1: config 127 has an invalid interface number: 24 but max is 0 [ 600.462052][ T1255] usb 2-1: config 127 has no interface number 0 [ 600.494619][ T1255] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 600.494652][ T1255] usb 2-1: Product: syz [ 600.494668][ T1255] usb 2-1: Manufacturer: syz [ 600.494685][ T1255] usb 2-1: SerialNumber: syz [ 600.787999][ T1255] usb 2-1: can't set config #127, error -71 [ 600.826984][ T1255] usb 2-1: USB disconnect, device number 35 [ 600.868190][ T9067] bridge0: port 1(bridge_slave_0) entered blocking state [ 600.868391][ T9067] bridge0: port 1(bridge_slave_0) entered disabled state [ 600.868582][ T9067] bridge_slave_0: entered allmulticast mode [ 600.897971][ T9067] bridge_slave_0: entered promiscuous mode [ 600.962931][ T9067] bridge0: port 2(bridge_slave_1) entered blocking state [ 600.963355][ T9067] bridge0: port 2(bridge_slave_1) entered disabled state [ 600.963555][ T9067] bridge_slave_1: entered allmulticast mode [ 601.036248][ T9067] bridge_slave_1: entered promiscuous mode [ 601.122088][ T9067] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 601.147941][ T9067] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 601.230529][ T9067] team0: Port device team_slave_0 added [ 601.837194][ T9067] team0: Port device team_slave_1 added [ 601.995765][ T9231] workqueue: Failed to create a rescuer kthread for wq "kdmflush/248:0": -EINTR [ 602.118624][ T9245] binder: 9244:9245 ioctl c0306201 0 returned -14 [ 603.018447][ T3337] bridge_slave_1: left allmulticast mode [ 603.018502][ T3337] bridge_slave_1: left promiscuous mode [ 603.018875][ T3337] bridge0: port 2(bridge_slave_1) entered disabled state [ 604.835107][ T3337] bridge_slave_0: left allmulticast mode [ 604.835149][ T3337] bridge_slave_0: left promiscuous mode [ 604.835441][ T3337] bridge0: port 1(bridge_slave_0) entered disabled state [ 607.319682][ T9277] syz.3.829 (9277): attempted to duplicate a private mapping with mremap. This is not supported. [ 608.212826][ T4907] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 608.272790][ T4907] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 608.287603][ T4907] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 608.291386][ T4907] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 608.292323][ T4907] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 608.352530][ T3337] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 608.556018][ T3337] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 608.592697][ T3337] bond0 (unregistering): Released all slaves [ 610.472652][ T9067] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 610.472671][ T9067] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 610.472697][ T9067] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 610.499727][ T9067] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 610.499744][ T9067] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 610.499771][ T9067] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 610.564387][ T4907] Bluetooth: hci5: command tx timeout [ 610.742401][ T3337] hsr_slave_0: left promiscuous mode [ 610.786909][ T3337] hsr_slave_1: left promiscuous mode [ 610.790239][ T3337] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 611.923338][ T3337] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 612.644267][ T4907] Bluetooth: hci5: command tx timeout [ 612.888414][ T3337] team0 (unregistering): Port device team_slave_1 removed [ 612.944836][ T3337] team0 (unregistering): Port device team_slave_0 removed [ 613.214206][ T9332] netlink: 8 bytes leftover after parsing attributes in process `syz.3.840'. [ 613.864377][ T9067] hsr_slave_0: entered promiscuous mode [ 613.865865][ T9067] hsr_slave_1: entered promiscuous mode [ 613.866911][ T9067] debugfs: 'hsr0' already exists in 'hsr' [ 613.866938][ T9067] Cannot create hsr debugfs directory [ 614.634283][ T5719] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 614.724425][ T4907] Bluetooth: hci5: command tx timeout [ 614.784174][ T5719] usb 5-1: Using ep0 maxpacket: 8 [ 614.785214][ T5719] usb 5-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 614.786789][ T5719] usb 5-1: config 1 has an invalid descriptor of length 86, skipping remainder of the config [ 614.786815][ T5719] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 614.791249][ T5719] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 614.791276][ T5719] usb 5-1: Product: syz [ 614.791293][ T5719] usb 5-1: Manufacturer: syz [ 614.791309][ T5719] usb 5-1: SerialNumber: syz [ 616.065305][ T5719] usb 5-1: USB disconnect, device number 18 [ 617.778068][ T4907] Bluetooth: hci5: command tx timeout [ 618.156073][ T8424] udevd[8424]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 620.205663][ T5719] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 620.366662][ T5719] usb 5-1: not running at top speed; connect to a high speed hub [ 620.366712][ T5719] usb 5-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 620.369292][ T5719] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 620.369323][ T5719] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 620.369345][ T5719] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 620.369404][ T5719] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 620.493117][ T5719] uvcvideo 5-1:1.0: Found UVC 1.00 device (046d:0825) [ 620.493159][ T5719] uvcvideo 5-1:1.0: No valid video chain found. [ 620.763808][ T5253] 8021q: adding VLAN 0 to HW filter on device eth9 [ 620.764411][ T9283] bridge0: port 1(bridge_slave_0) entered blocking state [ 620.764614][ T9283] bridge0: port 1(bridge_slave_0) entered disabled state [ 620.764786][ T9283] bridge_slave_0: entered allmulticast mode [ 620.767783][ T9283] bridge_slave_0: entered promiscuous mode [ 620.775226][ T9283] bridge0: port 2(bridge_slave_1) entered blocking state [ 620.776671][ T9283] bridge0: port 2(bridge_slave_1) entered disabled state [ 620.776885][ T9283] bridge_slave_1: entered allmulticast mode [ 620.779772][ T9283] bridge_slave_1: entered promiscuous mode [ 621.391795][ T9413] syzkaller0: entered promiscuous mode [ 621.391816][ T9413] syzkaller0: entered allmulticast mode [ 621.422281][ T9283] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 621.535489][ T9283] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 621.783423][ T9283] team0: Port device team_slave_0 added [ 621.795229][ T9283] team0: Port device team_slave_1 added [ 622.168357][ T4907] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 622.525519][ T9430] overlayfs: failed to resolve './file1': -2 [ 622.542341][ T9283] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 622.542360][ T9283] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 622.542414][ T9283] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 622.589158][ T9283] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 622.589172][ T9283] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 622.589190][ T9283] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 622.960527][ T5719] usb 5-1: USB disconnect, device number 19 [ 624.660090][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.660173][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.605031][ T9283] hsr_slave_0: entered promiscuous mode [ 625.681293][ T9283] hsr_slave_1: entered promiscuous mode [ 625.687303][ T9283] debugfs: 'hsr0' already exists in 'hsr' [ 625.687336][ T9283] Cannot create hsr debugfs directory [ 634.038688][ T5734] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 634.714172][ T5734] usb 5-1: Using ep0 maxpacket: 32 [ 634.715230][ T5734] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 634.716799][ T5734] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 634.716827][ T5734] usb 5-1: config 0 has no interface number 0 [ 634.716880][ T5734] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 634.723326][ T5734] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 634.723356][ T5734] usb 5-1: Product: syz [ 634.723373][ T5734] usb 5-1: Manufacturer: syz [ 634.723390][ T5734] usb 5-1: SerialNumber: syz [ 635.003520][ T5734] usb 5-1: config 0 descriptor?? [ 635.012332][ T5734] usb 5-1: can't set config #0, error -71 [ 635.043547][ T5734] usb 5-1: USB disconnect, device number 20 [ 637.955682][ T9067] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 638.602382][ T9067] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 638.784704][ T9067] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 639.272629][ T9067] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 639.342176][ T9067] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 639.450662][ T9067] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 639.620057][ T9067] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 639.877889][ T9067] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 641.524472][ T3337] bridge_slave_1: left allmulticast mode [ 641.524514][ T3337] bridge_slave_1: left promiscuous mode [ 641.524797][ T3337] bridge0: port 2(bridge_slave_1) entered disabled state [ 641.675795][ T31] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 641.681452][ T3337] bridge_slave_0: left allmulticast mode [ 641.681491][ T3337] bridge_slave_0: left promiscuous mode [ 641.681809][ T3337] bridge0: port 1(bridge_slave_0) entered disabled state [ 641.727651][ T5734] usb 2-1: new full-speed USB device number 36 using dummy_hcd [ 643.381141][ T5599] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 643.442708][ T5599] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 643.456863][ T5599] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 643.457965][ T31] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 643.466328][ T31] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 643.466381][ T31] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 643.466741][ T5599] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 643.475898][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 643.475925][ T31] usb 4-1: Product: syz [ 643.475941][ T31] usb 4-1: Manufacturer: syz [ 643.475956][ T31] usb 4-1: SerialNumber: syz [ 643.535113][ T5599] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 643.688175][ T5734] usb 2-1: New USB device found, idVendor=05ac, idProduct=049c, bcdDevice=40.00 [ 643.752305][ T5734] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 643.752362][ T5734] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 643.752391][ T5734] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 643.752416][ T5734] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 643.824167][ T5734] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=23 [ 643.824198][ T5734] usb 2-1: SerialNumber: syz [ 643.872711][ T31] cdc_mbim 4-1:1.0: skipping garbage [ 643.882439][ T5734] usb 2-1: config 0 descriptor?? [ 644.005587][ T9542] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 645.386147][ T5734] usbhid 2-1:0.0: can't add hid device: -71 [ 645.386290][ T5734] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 645.411574][ T5734] usb 2-1: USB disconnect, device number 36 [ 646.087728][ T4907] Bluetooth: hci4: command tx timeout [ 646.088231][ T31] cdc_mbim 4-1:1.0: bind() failure [ 646.204475][ T1255] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 646.292003][ T1255] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 646.457804][ T31] cdc_ncm 4-1:1.1: probe with driver cdc_ncm failed with error -71 [ 646.462059][ T31] cdc_mbim 4-1:1.1: probe with driver cdc_mbim failed with error -71 [ 646.472819][ T31] usbtest 4-1:1.1: probe with driver usbtest failed with error -71 [ 646.550785][ T31] usb 4-1: USB disconnect, device number 35 [ 646.729971][ T9577] fido_id[9577]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 647.633173][ T37] audit: type=1326 audit(1789831517.474:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9586 comm="syz.4.897" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf188fe159 code=0x7ffc0000 [ 647.636054][ T37] audit: type=1326 audit(1789831517.474:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9586 comm="syz.4.897" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf188fe159 code=0x7ffc0000 [ 647.656553][ T37] audit: type=1326 audit(1789831517.494:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9586 comm="syz.4.897" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf188fe159 code=0x7ffc0000 [ 647.656614][ T37] audit: type=1326 audit(1789831517.504:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9586 comm="syz.4.897" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf188fe159 code=0x7ffc0000 [ 647.656916][ T37] audit: type=1326 audit(1789831517.504:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9586 comm="syz.4.897" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fdf188fe159 code=0x7ffc0000 [ 647.658421][ T37] audit: type=1326 audit(1789831517.504:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9586 comm="syz.4.897" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf188fe159 code=0x7ffc0000 [ 647.659562][ T37] audit: type=1326 audit(1789831517.504:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9586 comm="syz.4.897" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf188fe159 code=0x7ffc0000 [ 647.659619][ T37] audit: type=1326 audit(1789831517.504:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9586 comm="syz.4.897" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf188fe159 code=0x7ffc0000 [ 647.660185][ T37] audit: type=1326 audit(1789831517.504:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9586 comm="syz.4.897" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf188fe159 code=0x7ffc0000 [ 647.660231][ T37] audit: type=1326 audit(1789831517.504:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9586 comm="syz.4.897" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fdf188fe159 code=0x7ffc0000 [ 648.092376][ T9595] LUN: removable file: (no medium) [ 648.164803][ T4907] Bluetooth: hci4: command tx timeout [ 648.235349][ T3337] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 648.295740][ T3337] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 648.325854][ T3337] bond0 (unregistering): Released all slaves [ 649.492933][ T9604] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1514) ! [ 649.974512][ T3337] hsr_slave_0: left promiscuous mode [ 650.004232][ T3337] hsr_slave_1: left promiscuous mode [ 650.005709][ T3337] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 650.055522][ T3337] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 650.251562][ T4907] Bluetooth: hci4: command tx timeout [ 651.315137][ T3337] team0 (unregistering): Port device team_slave_1 removed [ 651.375983][ T3337] team0 (unregistering): Port device team_slave_0 removed [ 652.734361][ T4907] Bluetooth: hci4: command tx timeout [ 653.434467][ T5253] 8021q: adding VLAN 0 to HW filter on device eth9 [ 653.514195][ T36] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 653.701095][ T36] usb 5-1: Using ep0 maxpacket: 32 [ 653.703284][ T36] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 653.706306][ T36] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 653.706335][ T36] usb 5-1: config 0 has no interface number 0 [ 653.706397][ T36] usb 5-1: config 0 interface 184 has no altsetting 0 [ 653.710016][ T36] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 653.710172][ T36] usb 5-1: Product: syz [ 653.710190][ T36] usb 5-1: Manufacturer: syz [ 653.710207][ T36] usb 5-1: SerialNumber: syz [ 653.780744][ T36] usb 5-1: config 0 descriptor?? [ 654.257744][ T36] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 654.257780][ T36] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 654.257801][ T36] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 654.259265][ T36] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 654.328501][ T36] usb 5-1: USB disconnect, device number 21 [ 655.116420][ T9664] FAULT_INJECTION: forcing a failure. [ 655.116420][ T9664] name failslab, interval 1, probability 0, space 0, times 0 [ 655.116466][ T9664] CPU: 1 UID: 0 PID: 9664 Comm: syz.4.911 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 655.116499][ T9664] Tainted: [L]=SOFTLOCKUP [ 655.116508][ T9664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 655.116523][ T9664] Call Trace: [ 655.116534][ T9664] [ 655.116544][ T9664] dump_stack_lvl+0xe8/0x150 [ 655.116598][ T9664] should_fail_ex+0x46b/0x600 [ 655.116640][ T9664] should_failslab+0xa8/0x100 [ 655.116683][ T9664] kmem_cache_alloc_node_noprof+0xac/0x660 [ 655.116717][ T9664] ? __alloc_skb+0x1db/0x7a0 [ 655.116840][ T9664] ? __alloc_skb+0x1db/0x7a0 [ 655.116885][ T9664] __alloc_skb+0x1db/0x7a0 [ 655.116928][ T9664] ctrl_getfamily+0x3d0/0x5c0 [ 655.117018][ T9664] ? __pfx_ctrl_getfamily+0x10/0x10 [ 655.117055][ T9664] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 655.117102][ T9664] genl_family_rcv_msg_doit+0x233/0x340 [ 655.117151][ T9664] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 655.117207][ T9664] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 655.117256][ T9664] genl_rcv_msg+0x614/0x7a0 [ 655.117300][ T9664] ? __pfx_genl_rcv_msg+0x10/0x10 [ 655.117330][ T9664] ? ref_tracker_free+0x668/0x820 [ 655.117358][ T9664] ? __pfx_ctrl_getfamily+0x10/0x10 [ 655.117392][ T9664] ? __pfx_ref_tracker_free+0x10/0x10 [ 655.117424][ T9664] ? __asan_memcpy+0x40/0x70 [ 655.117451][ T9664] ? __skb_clone+0x5c/0x6c0 [ 655.117512][ T9664] netlink_rcv_skb+0x226/0x4a0 [ 655.117544][ T9664] ? __pfx_genl_rcv_msg+0x10/0x10 [ 655.117591][ T9664] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 655.117637][ T9664] ? netlink_deliver_tap+0x2e/0x1b0 [ 655.117667][ T9664] ? netlink_deliver_tap+0x2e/0x1b0 [ 655.117702][ T9664] genl_rcv+0x28/0x40 [ 655.117735][ T9664] netlink_unicast+0x7f5/0x990 [ 655.117776][ T9664] netlink_sendmsg+0x813/0xb40 [ 655.117818][ T9664] ? __pfx_netlink_sendmsg+0x10/0x10 [ 655.117851][ T9664] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 655.117901][ T9664] ? __pfx_netlink_sendmsg+0x10/0x10 [ 655.117930][ T9664] sock_sendmsg_nosec+0x13a/0x180 [ 655.117990][ T9664] __sys_sendto+0x41e/0x5d0 [ 655.118057][ T9664] ? __pfx___sys_sendto+0x10/0x10 [ 655.118131][ T9664] ? do_user_addr_fault+0xc4c/0x1340 [ 655.118164][ T9664] __x64_sys_sendto+0xde/0x100 [ 655.118207][ T9664] do_syscall_64+0x166/0x520 [ 655.118243][ T9664] ? trace_irq_disable+0x3b/0x140 [ 655.118271][ T9664] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 655.118295][ T9664] ? clear_bhb_loop+0x70/0xc0 [ 655.118325][ T9664] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 655.118349][ T9664] RIP: 0033:0x7fdf188be98e [ 655.118371][ T9664] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 655.118390][ T9664] RSP: 002b:00007fdf16b54e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 655.118415][ T9664] RAX: ffffffffffffffda RBX: 00007fdf16b566c0 RCX: 00007fdf188be98e [ 655.118432][ T9664] RDX: 0000000000000020 RSI: 00007fdf16b55000 RDI: 0000000000000005 [ 655.118448][ T9664] RBP: 0000000000000000 R08: 00007fdf16b54f04 R09: 000000000000000c [ 655.118462][ T9664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 655.118477][ T9664] R13: 00007fdf16b54f58 R14: 00007fdf16b55000 R15: 0000000000000000 [ 655.118517][ T9664] [ 663.182354][ T9722] FAULT_INJECTION: forcing a failure. [ 663.182354][ T9722] name failslab, interval 1, probability 0, space 0, times 0 [ 663.182401][ T9722] CPU: 0 UID: 60928 PID: 9722 Comm: syz.3.921 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 663.182436][ T9722] Tainted: [L]=SOFTLOCKUP [ 663.182445][ T9722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 663.182459][ T9722] Call Trace: [ 663.182469][ T9722] [ 663.182480][ T9722] dump_stack_lvl+0xe8/0x150 [ 663.182522][ T9722] should_fail_ex+0x46b/0x600 [ 663.182562][ T9722] should_failslab+0xa8/0x100 [ 663.182597][ T9722] ? alloc_vfsmnt+0x23/0x410 [ 663.182630][ T9722] kmem_cache_alloc_noprof+0x9e/0x690 [ 663.182663][ T9722] ? alloc_vfsmnt+0x23/0x410 [ 663.182704][ T9722] alloc_vfsmnt+0x23/0x410 [ 663.182740][ T9722] clone_mnt+0x4b/0x9b0 [ 663.182773][ T9722] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 663.182815][ T9722] copy_tree+0xde/0x940 [ 663.182849][ T9722] ? rwbase_write_lock+0x550/0x720 [ 663.182888][ T9722] copy_mnt_ns+0x3de/0xcc0 [ 663.182919][ T9722] ? rcu_is_watching+0x16/0xb0 [ 663.182993][ T9722] ? __pfx_copy_mnt_ns+0x10/0x10 [ 663.183015][ T9722] ? create_new_namespaces+0x33/0x6b0 [ 663.183061][ T9722] ? create_new_namespaces+0x33/0x6b0 [ 663.183102][ T9722] create_new_namespaces+0xcf/0x6b0 [ 663.183136][ T9722] ? bpf_lsm_capable+0x9/0x20 [ 663.183178][ T9722] ? security_capable+0x7e/0x2c0 [ 663.183231][ T9722] unshare_nsproxy_namespaces+0x149/0x190 [ 663.183269][ T9722] ksys_unshare+0x5a7/0x950 [ 663.183327][ T9722] ? __pfx_ksys_unshare+0x10/0x10 [ 663.183363][ T9722] ? rcu_is_watching+0x16/0xb0 [ 663.183412][ T9722] __x64_sys_unshare+0x38/0x50 [ 663.183445][ T9722] do_syscall_64+0x166/0x520 [ 663.183482][ T9722] ? trace_irq_disable+0x3b/0x140 [ 663.183512][ T9722] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 663.183537][ T9722] ? clear_bhb_loop+0x70/0xc0 [ 663.183567][ T9722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 663.183591][ T9722] RIP: 0033:0x7f5fbbe9e159 [ 663.183615][ T9722] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 663.183636][ T9722] RSP: 002b:00007f5fba0f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 663.183667][ T9722] RAX: ffffffffffffffda RBX: 00007f5fbc125fa0 RCX: 00007f5fbbe9e159 [ 663.183693][ T9722] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022020400 [ 663.183709][ T9722] RBP: 00007f5fbbf3506b R08: 0000000000000000 R09: 0000000000000000 [ 663.183724][ T9722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 663.183738][ T9722] R13: 00007f5fbc126038 R14: 00007f5fbc125fa0 R15: 00007ffc7a8de5f8 [ 663.183777][ T9722] [ 667.540740][ T9754] FAULT_INJECTION: forcing a failure. [ 667.540740][ T9754] name failslab, interval 1, probability 0, space 0, times 0 [ 667.540785][ T9754] CPU: 1 UID: 0 PID: 9754 Comm: syz.4.928 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 667.540820][ T9754] Tainted: [L]=SOFTLOCKUP [ 667.540829][ T9754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 667.540843][ T9754] Call Trace: [ 667.540853][ T9754] [ 667.540863][ T9754] dump_stack_lvl+0xe8/0x150 [ 667.540914][ T9754] should_fail_ex+0x46b/0x600 [ 667.540954][ T9754] should_failslab+0xa8/0x100 [ 667.540992][ T9754] __kmalloc_cache_noprof+0xa1/0x680 [ 667.541025][ T9754] ? register_netdevice+0x5a7/0x1ed0 [ 667.541130][ T9754] ? register_netdevice+0x5a7/0x1ed0 [ 667.541162][ T9754] register_netdevice+0x5a7/0x1ed0 [ 667.541191][ T9754] ? rcu_is_watching+0x16/0xb0 [ 667.541225][ T9754] ? alloc_netdev_mqs+0xd59/0x12c0 [ 667.541257][ T9754] ? alloc_netdev_mqs+0xd59/0x12c0 [ 667.541284][ T9754] ? __kvmalloc_node_noprof+0x5d4/0x890 [ 667.541322][ T9754] ? __pfx_register_netdevice+0x10/0x10 [ 667.541347][ T9754] ? alloc_netdev_mqs+0xd59/0x12c0 [ 667.541383][ T9754] ? alloc_netdev_mqs+0xf0e/0x12c0 [ 667.541409][ T9754] ? __ip_tunnel_create+0x3bb/0x550 [ 667.541496][ T9754] __ip_tunnel_create+0x3e8/0x550 [ 667.541528][ T9754] ? __pfx___ip_tunnel_create+0x10/0x10 [ 667.541557][ T9754] ? bpf_lsm_capable+0x9/0x20 [ 667.541595][ T9754] ip_tunnel_ctl+0x4fc/0xc50 [ 667.541625][ T9754] vti_tunnel_ctl+0x38e/0x4e0 [ 667.541704][ T9754] ? __pfx_vti_tunnel_ctl+0x10/0x10 [ 667.541727][ T9754] ? rt_mutex_slowlock+0x424/0x780 [ 667.541749][ T9754] ip_tunnel_siocdevprivate+0x125/0x1d0 [ 667.541768][ T9754] ? __pfx_ip_tunnel_siocdevprivate+0x10/0x10 [ 667.541788][ T9754] ? full_name_hash+0x92/0xe0 [ 667.541808][ T9754] dev_ifsioc+0xb56/0x1360 [ 667.541860][ T9754] dev_ioctl+0x84c/0x1150 [ 667.541883][ T9754] sock_ioctl+0x756/0x7f0 [ 667.541909][ T9754] ? __pfx_sock_ioctl+0x10/0x10 [ 667.541926][ T9754] ? __fget_files+0x3a8/0x420 [ 667.541940][ T9754] ? __fget_files+0x2a/0x420 [ 667.541956][ T9754] ? bpf_lsm_file_ioctl+0x9/0x20 [ 667.541976][ T9754] ? __pfx_sock_ioctl+0x10/0x10 [ 667.541992][ T9754] __se_sys_ioctl+0xff/0x170 [ 667.542012][ T9754] do_syscall_64+0x166/0x520 [ 667.542032][ T9754] ? trace_irq_disable+0x3b/0x140 [ 667.542049][ T9754] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 667.542063][ T9754] ? clear_bhb_loop+0x70/0xc0 [ 667.542079][ T9754] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 667.542092][ T9754] RIP: 0033:0x7fdf188fe159 [ 667.542107][ T9754] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 667.542119][ T9754] RSP: 002b:00007fdf16b56028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 667.542135][ T9754] RAX: ffffffffffffffda RBX: 00007fdf18b85fa0 RCX: 00007fdf188fe159 [ 667.542145][ T9754] RDX: 0000200000000440 RSI: 00000000000089f1 RDI: 0000000000000006 [ 667.542154][ T9754] RBP: 00007fdf1899506b R08: 0000000000000000 R09: 0000000000000000 [ 667.542163][ T9754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 667.542171][ T9754] R13: 00007fdf18b86038 R14: 00007fdf18b85fa0 R15: 00007ffc6874e6b8 [ 667.542192][ T9754] [ 667.943268][ T9551] bridge0: port 1(bridge_slave_0) entered blocking state [ 667.943554][ T9551] bridge0: port 1(bridge_slave_0) entered disabled state [ 667.943767][ T9551] bridge_slave_0: entered allmulticast mode [ 667.947253][ T9551] bridge_slave_0: entered promiscuous mode [ 667.950885][ T9551] bridge0: port 2(bridge_slave_1) entered blocking state [ 667.951125][ T9551] bridge0: port 2(bridge_slave_1) entered disabled state [ 667.951321][ T9551] bridge_slave_1: entered allmulticast mode [ 668.002083][ T9551] bridge_slave_1: entered promiscuous mode [ 668.500604][ T6951] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 669.333168][ T6951] usb 5-1: Using ep0 maxpacket: 8 [ 669.558081][ T5599] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 669.645619][ T5599] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 669.665680][ T5599] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 669.689412][ T5599] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 669.698931][ T5599] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 670.362975][ T9551] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 670.479157][ T9551] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 670.494232][ T36] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 670.569423][ T6951] usb 5-1: unable to get BOS descriptor or descriptor too short [ 670.569492][ T6951] usb 5-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 0.40 [ 670.570608][ T6951] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 670.570649][ T6951] usb 5-1: can't read configurations, error -71 [ 670.666852][ T36] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 670.668509][ T36] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 670.668532][ T36] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 670.669997][ T36] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 670.670024][ T36] usb 4-1: Manufacturer: syz [ 670.682623][ T36] usb 4-1: config 0 descriptor?? [ 672.164328][ T4907] Bluetooth: hci2: command tx timeout [ 673.634297][ T31] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 673.683474][ T9551] team0: Port device team_slave_0 added [ 673.701344][ T9551] team0: Port device team_slave_1 added [ 673.796995][ T36] uclogic 0003:256C:006D.0008: failed retrieving string descriptor #200: -71 [ 673.797133][ T36] uclogic 0003:256C:006D.0008: failed retrieving pen parameters: -71 [ 673.797155][ T36] uclogic 0003:256C:006D.0008: failed probing pen v2 parameters: -71 [ 673.797247][ T36] uclogic 0003:256C:006D.0008: failed probing parameters: -71 [ 673.797367][ T36] uclogic 0003:256C:006D.0008: probe with driver uclogic failed with error -71 [ 673.839151][ T36] usb 4-1: USB disconnect, device number 36 [ 673.839877][ T31] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 673.841347][ T31] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 673.841392][ T31] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 673.843838][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 673.843861][ T31] usb 2-1: Product: syz [ 673.843875][ T31] usb 2-1: Manufacturer: syz [ 673.843912][ T31] usb 2-1: SerialNumber: syz [ 673.999695][ T31] cdc_mbim 2-1:1.0: skipping garbage [ 674.055015][ T9551] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 674.055036][ T9551] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 674.055065][ T9551] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 674.057875][ T9551] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 674.057891][ T9551] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 674.057920][ T9551] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 674.230184][ T9820] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 674.244228][ T4907] Bluetooth: hci2: command tx timeout [ 674.507673][ C1] Illegal XDP return value 16128 on prog (id 78) dev lo, expect packet loss! [ 674.902481][ T9828] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 675.933393][ T31] cdc_mbim 2-1:1.0: bind() failure [ 675.970598][ T31] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 675.970655][ T31] cdc_ncm 2-1:1.1: bind() failure [ 676.003963][ T31] usb 2-1: USB disconnect, device number 37 [ 676.058988][ T9551] hsr_slave_0: entered promiscuous mode [ 676.071039][ T9551] hsr_slave_1: entered promiscuous mode [ 676.072159][ T9551] debugfs: 'hsr0' already exists in 'hsr' [ 676.072186][ T9551] Cannot create hsr debugfs directory [ 676.424714][ T4907] Bluetooth: hci2: command tx timeout [ 676.472705][ T9845] usb usb8: usbfs: process 9845 (syz.3.954) did not claim interface 0 before use [ 681.481673][ T4907] Bluetooth: hci2: command tx timeout [ 683.155589][ T3337] bridge_slave_1: left allmulticast mode [ 683.155629][ T3337] bridge_slave_1: left promiscuous mode [ 683.158285][ T3337] bridge0: port 2(bridge_slave_1) entered disabled state [ 683.274251][ T5903] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 683.293046][ T3337] bridge_slave_0: left allmulticast mode [ 683.293074][ T3337] bridge_slave_0: left promiscuous mode [ 683.293257][ T3337] bridge0: port 1(bridge_slave_0) entered disabled state [ 683.425155][ T5903] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 683.457714][ T5903] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 35451, setting to 1024 [ 683.457755][ T5903] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 683.457780][ T5903] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 683.499542][ T5903] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 683.499575][ T5903] usb 4-1: Product: syz [ 683.499592][ T5903] usb 4-1: Manufacturer: syz [ 683.499608][ T5903] usb 4-1: SerialNumber: syz [ 683.510172][ T9867] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 683.737073][ T5903] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 37 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 684.043361][ C0] usblp0: nonzero write bulk status received: -71 [ 684.046723][ T5903] usb 4-1: USB disconnect, device number 37 [ 684.075454][ T5903] usblp0: removed [ 684.176919][ T3337] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 684.445736][ T3337] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 684.576959][ T9880] LUN: removable file: (no medium) [ 684.832083][ T3337] bond0 (unregistering): Released all slaves [ 686.087407][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.087504][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 690.710526][ T3337] hsr_slave_0: left promiscuous mode [ 690.745482][ T3337] hsr_slave_1: left promiscuous mode [ 690.746314][ T3337] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 690.809632][ T3337] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 691.986502][ T3337] team0 (unregistering): Port device team_slave_1 removed [ 692.097647][ T9936] LUN: removable file: (no medium) [ 693.025093][ T3337] team0 (unregistering): Port device team_slave_0 removed [ 696.734913][ T5253] 8021q: adding VLAN 0 to HW filter on device eth9 [ 698.673304][ T9784] bridge0: port 1(bridge_slave_0) entered blocking state [ 698.676725][ T9784] bridge0: port 1(bridge_slave_0) entered disabled state [ 698.676961][ T9784] bridge_slave_0: entered allmulticast mode [ 698.724489][ T9784] bridge_slave_0: entered promiscuous mode [ 698.737505][ T9784] bridge0: port 2(bridge_slave_1) entered blocking state [ 698.737743][ T9784] bridge0: port 2(bridge_slave_1) entered disabled state [ 698.737993][ T9784] bridge_slave_1: entered allmulticast mode [ 698.762628][ T9784] bridge_slave_1: entered promiscuous mode [ 699.059996][ T9784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 700.175406][ T9784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 700.533974][ T9784] team0: Port device team_slave_0 added [ 700.561134][ T9784] team0: Port device team_slave_1 added [ 700.666851][ T9784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 700.666890][ T9784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 700.666922][ T9784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 700.669666][ T9784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 700.669682][ T9784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 700.669712][ T9784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 700.742597][ T9976] LUN: removable file: (no medium) [ 700.847437][ T9977] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1405703806 (2811407612 ns) > initial count (1104641648 ns). Using initial count to start timer. [ 700.980490][ T9784] hsr_slave_0: entered promiscuous mode [ 700.982103][ T9784] hsr_slave_1: entered promiscuous mode [ 700.983321][ T9784] debugfs: 'hsr0' already exists in 'hsr' [ 700.983348][ T9784] Cannot create hsr debugfs directory [ 707.900206][ T5599] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 707.956252][ T5599] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 707.971864][ T5599] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 707.973553][ T5599] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 707.989761][ T5599] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 710.254183][ T4907] Bluetooth: hci5: command tx timeout [ 710.254715][ T5963] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 710.574157][ T5963] usb 5-1: Using ep0 maxpacket: 32 [ 710.576712][ T5963] usb 5-1: unable to get BOS descriptor or descriptor too short [ 710.576777][ T5963] usb 5-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice= 0.40 [ 710.579701][ T5963] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 710.579742][ T5963] usb 5-1: can't read configurations, error -61 [ 710.985970][ T5963] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 711.705661][ T5963] usb 5-1: Using ep0 maxpacket: 32 [ 711.710855][ T5963] usb 5-1: unable to get BOS descriptor or descriptor too short [ 711.710921][ T5963] usb 5-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice= 0.40 [ 711.713352][ T5963] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 711.713390][ T5963] usb 5-1: can't read configurations, error -61 [ 711.855457][ T5963] usb usb5-port1: attempt power cycle [ 712.382880][ T4907] Bluetooth: hci5: command tx timeout [ 714.491872][ T4907] Bluetooth: hci5: command tx timeout [ 715.504565][ T5963] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 716.179684][ T5963] usb 5-1: New USB device found, idVendor=04dd, idProduct=8005, bcdDevice= 0.00 [ 716.181686][ T5963] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 716.181749][ T5963] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 716.235703][ T5963] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 716.235740][ T5963] usb 5-1: Product: syz [ 716.235756][ T5963] usb 5-1: Manufacturer: syz [ 716.235773][ T5963] usb 5-1: SerialNumber: syz [ 716.319764][ T5963] zaurus 5-1:1.0: probe with driver zaurus failed with error -22 [ 716.539633][ T5963] usb 5-1: USB disconnect, device number 27 [ 716.567911][ T4907] Bluetooth: hci5: command tx timeout [ 720.133193][ T3337] bridge_slave_1: left allmulticast mode [ 720.133239][ T3337] bridge_slave_1: left promiscuous mode [ 720.133561][ T3337] bridge0: port 2(bridge_slave_1) entered disabled state [ 720.309100][ T3337] bridge_slave_0: left allmulticast mode [ 720.309143][ T3337] bridge_slave_0: left promiscuous mode [ 720.309446][ T3337] bridge0: port 1(bridge_slave_0) entered disabled state [ 722.939735][ T3337] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 725.054997][ T3337] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 725.152242][ T3337] bond0 (unregistering): Released all slaves [ 725.270765][ T5253] 8021q: adding VLAN 0 to HW filter on device eth9 [ 727.435883][T10156] LUN: removable file: (no medium) [ 730.474193][ T3337] hsr_slave_0: left promiscuous mode [ 730.495461][ T3337] hsr_slave_1: left promiscuous mode [ 730.496916][ T3337] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 730.516800][ T3337] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 730.589995][ T5599] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 730.663364][ T5599] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 730.686383][ T5599] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 730.703660][ T5599] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 730.710348][ T5599] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 731.186662][ T3337] team0 (unregistering): Port device team_slave_1 removed [ 731.235510][ T3337] team0 (unregistering): Port device team_slave_0 removed [ 731.973261][T10163] bridge0: port 2(bridge_slave_1) entered disabled state [ 731.975509][T10163] bridge0: port 1(bridge_slave_0) entered disabled state [ 732.031185][T10171] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 732.034171][ C0] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 732.752661][ T5599] Bluetooth: hci4: command tx timeout [ 734.809541][ T5599] Bluetooth: hci4: command tx timeout [ 736.886951][ T5599] Bluetooth: hci4: command tx timeout [ 739.038952][ T5599] Bluetooth: hci4: command tx timeout [ 748.412906][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 748.567016][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 795.767055][ T4907] Bluetooth: hci2: command 0x0406 tx timeout [ 814.131048][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 814.148469][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 832.921119][ T8496] Bluetooth: hci5: command 0x0406 tx timeout [ 863.870011][T10188] Bluetooth: hci4: command tx timeout [ 870.820692][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.898972][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 874.913235][ T38] INFO: task syz-executor:10164 blocked for more than 143 seconds. [ 874.913386][ T38] Tainted: G L syzkaller #0 [ 874.913517][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 874.913660][ T38] task:syz-executor state:D stack:25800 pid:10164 tgid:10164 ppid:1 task_flags:0x400140 flags:0x00080002 [ 875.123443][ T38] Call Trace: [ 875.123598][ T38] [ 875.176472][ T38] __schedule+0x16d9/0x5700 [ 875.179013][ T38] ? __pfx___schedule+0x10/0x10 [ 875.180459][ T38] rt_mutex_schedule+0x76/0xf0 [ 875.180784][ T38] rt_mutex_slowlock_block+0x55e/0x690 [ 875.182483][ T38] rt_mutex_slowlock+0x2d4/0x780 [ 875.183206][ T38] ? rt_mutex_slowlock+0x1f2/0x780 [ 875.183375][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 875.183488][ T38] ? lock_acquire+0x115/0x350 [ 875.323680][ T38] ? inet_rtm_newaddr+0x470/0x19f0 [ 875.440716][ T38] ? inet_rtm_newaddr+0x470/0x19f0 [ 875.440903][ T38] mutex_lock_nested+0x168/0x1d0 [ 875.591623][ T38] inet_rtm_newaddr+0x470/0x19f0 [ 875.592030][ T38] ? __kernel_text_address+0xd/0x30 [ 875.592609][ T38] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 875.593548][ T38] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 875.597469][ T38] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 875.597695][ T38] rtnetlink_rcv_msg+0x802/0xc00 [ 875.597874][ T38] ? kmem_cache_alloc_node_noprof+0x3fc/0x660 [ 875.598414][ T38] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 875.598824][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 875.599541][ T38] ? __lock_acquire+0x747/0x2de0 [ 875.720096][ T38] netlink_rcv_skb+0x226/0x4a0 [ 875.720441][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 875.721009][ T38] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 875.839871][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 875.840410][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 875.841093][ T38] netlink_unicast+0x7f5/0x990 [ 876.147645][ T38] netlink_sendmsg+0x813/0xb40 [ 876.148846][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 876.149555][ T38] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 876.557786][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 876.558225][ T38] sock_sendmsg_nosec+0x13a/0x180 [ 876.558570][ T38] __sys_sendto+0x41e/0x5d0 [ 876.733633][ T38] ? __pfx___sys_sendto+0x10/0x10 [ 876.840526][ T38] ? do_user_addr_fault+0xc4c/0x1340 [ 876.955623][ T38] __x64_sys_sendto+0xde/0x100 [ 876.956297][ T38] do_syscall_64+0x166/0x520 [ 876.956608][ T38] ? trace_irq_disable+0x3b/0x140 [ 876.956890][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 876.957321][ T38] ? clear_bhb_loop+0x70/0xc0 [ 877.180695][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 877.181003][ T38] RIP: 0033:0x7ff192b2e98e [ 877.181501][ T38] RSP: 002b:00007ffc8b4dc6a8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 877.181876][ T38] RAX: ffffffffffffffda RBX: 00005555811a8500 RCX: 00007ff192b2e98e [ 877.181975][ T38] RDX: 0000000000000028 RSI: 00007ff193924670 RDI: 0000000000000003 [ 877.182011][ T38] RBP: 0000000000000001 R08: 00007ffc8b4dc724 R09: 000000000000000c [ 877.182055][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 877.384914][ T38] R13: 0000000000000000 R14: 00007ff193924670 R15: 0000000000000000 [ 877.577873][ T38] [ 877.578302][ T38] [ 877.578302][ T38] Showing all locks held in the system: [ 877.578539][ T38] locks held by kworker/u8:0/12: 7, last CPU#0: [ 877.578679][ T38] #0: ffff88813ff64138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 877.579064][ T38] #1: ffffc90000117c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 877.748609][ T38] #2: ffff888068220938 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 877.749544][ T38] #3: ffff8880b863c320 (&rq->__lock){-...}-{2:2}, at: raw_spin_rq_lock_nested+0x2d/0x160 [ 877.750693][ T38] #4: ffff8880b8624548 (psi_seq){-...}-{0:0}, at: psi_task_switch+0x57/0x790 [ 877.751086][ T38] #5: ffffffff92a7f568 (pvclock_gtod_data){-...}-{0:0}, at: notifier_call_chain+0x1a5/0x3d0 [ 877.751920][ T38] #6: ffffffff8e222398 (kcov_remote_lock.lock.wait_lock){....}-{2:2}, at: rt_mutex_slowunlock+0xbf/0xa30 [ 877.753100][ T38] locks held by ksoftirqd/0/15: 8, last CPU#0: [ 878.097538][ T38] #0: ffffffff8e059500 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 878.098371][ T38] #1: ffffffff8e1c3c80 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 878.099422][ T38] #2: ffff8880b86241a0 (tasklet_sync_callback.cb_lock){+...}-{3:3}, at: tasklet_action_common+0xc5/0x600 [ 878.280819][ T38] #3: ffffffff8e1c3c80 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 878.281780][ T38] #4: ffffffff8e1c3c80 (rcu_read_lock){....}-{1:3}, at: ieee80211_rx_napi+0xd1/0x3d0 [ 878.468000][ T38] #5: ffffffff8e059500 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 878.468581][ T38] #6: ffff8880632e0228 (&rdev->bss_lock){+...}-{3:3}, at: cfg80211_inform_single_bss_data+0xc22/0x1bf0 [ 878.469580][ T38] #7: ffff8880b863c320 (&rq->__lock){-...}-{2:2}, at: raw_spin_rq_lock_nested+0x2d/0x160 [ 878.469917][ T38] locks held by ksoftirqd/1/30: 8, last CPU#1: [ 878.469982][ T38] #0: ffffffff8e059500 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 878.470559][ T38] #1: ffffffff8e1c3c80 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 878.471430][ T38] #2: ffff8880b87241a0 (tasklet_sync_callback.cb_lock){+...}-{3:3}, at: tasklet_action_common+0xc5/0x600 [ 878.801029][ T38] #3: ffffffff8e1c3c80 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 878.801671][ T38] #4: ffffffff8e1c3c80 (rcu_read_lock){....}-{1:3}, at: ieee80211_rx_napi+0xd1/0x3d0 [ 878.802543][ T38] #5: ffffffff8e059500 (local_bh){.+.+}-{1:3}, at: rt_spin_trylock+0x10c/0x2b0 [ 879.079421][ T38] #6: ffff8880b873c320 (&rq->__lock){-...}-{2:2}, at: raw_spin_rq_lock_nested+0x2d/0x160 [ 879.080148][ T38] #7: ffff8880b8724548 (psi_seq){-...}-{0:0}, at: psi_task_switch+0x57/0x790 [ 879.081106][ T38] locks held by kworker/1:0/31: 8, last CPU#1: [ 879.081266][ T38] #0: ffff888037adb938 ((wq_completion)wg-crypt-wg0#3){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 879.081815][ T38] #1: ffffc90000a5fc40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 879.082802][ T38] #2: ffffffff8e1c3c80 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 879.083751][ T38] #3: ffffffff8e1c3c80 (rcu_read_lock){....}-{1:3}, at: process_backlog+0x261/0xc50 [ 879.192595][ T38] #4: ffffffff8e1c3c80 (rcu_read_lock){....}-{1:3}, at: ip6_input+0x23/0x270 [ 879.193374][ T38] #5: ffffffff8e059500 (local_bh){.+.+}-{1:3}, at: hrtimer_start_range_ns+0x8c/0x3f0 [ 879.481935][ T38] #6: ffffffff99b2e748 (&____s->seqcount#2){--..}-{0:0}, at: ktime_get+0x45/0x220 [ 879.482953][ T38] #7: ffff8880b873c320 (&rq->__lock){-...}-{2:2}, at: raw_spin_rq_lock_nested+0x2d/0x160 [ 879.486214][ T38] locks held by khungtaskd/38: 1, last CPU#1: [ 879.486271][ T38] #0: ffffffff8e1c3c80 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 879.486866][ T38] locks held by kworker/u8:2/42: 3, on CPU#0: [ 879.486986][ T38] #0: ffff88813ff64138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 879.488001][ T38] #1: ffffc90000b37c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 879.489082][ T38] #2: ffff8880688d0938 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 879.489520][ T38] locks held by kworker/u8:3/57: 6, last CPU#0: [ 879.489624][ T38] #0: ffff88813ff64138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 879.810831][ T38] #1: ffffc9000123fc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 879.811935][ T38] #2: ffff88803aba4310 (&devlink->lock_key){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xcb0 [ 879.813037][ T38] #3: ffff888062152520 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1e0/0xcb0 [ 879.813503][ T38] #4: ffffffff8e1c3c80 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 880.104570][ T38] #5: ffffffff8e1c3c80 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 880.105634][ T38] locks held by kworker/u8:8/994: 6, on CPU#0: [ 880.105799][ T38] #0: ffff88813ff64138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 880.106942][ T38] #1: ffffc90006327c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 880.107335][ T38] #2: ffff8880632e0938 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 880.326252][ T38] #3: ffffffff8e059500 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 880.327295][ T38] #4: ffffffff8e1c3c80 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 880.328502][ T38] #5: ffff8880632e0228 (&rdev->bss_lock){+...}-{3:3}, at: cfg80211_inform_single_bss_data+0xc22/0x1bf0 [ 880.329044][ T38] locks held by kworker/u8:10/1168: 3, on CPU#0: [ 880.329123][ T38] #0: ffff88813ff64138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 880.329839][ T38] #1: ffffc90006957c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 880.502169][ T38] #2: ffffffff8f5d43f8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 880.503150][ T38] locks held by kworker/u8:16/1856: 5, last CPU#0: [ 880.503204][ T38] #0: ffff888033a66938 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 880.503735][ T38] #1: ffffc90007857c40 ((work_completion)(&(&bat_priv->tt.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 880.624828][ T38] #2: ffffffff8e059500 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 880.625831][ T38] #3: ffffffff8e1c3c80 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 880.631405][ T38] #4: ffff888061332358 (key#17){+...}-{3:3}, at: batadv_tt_local_purge+0x13e/0x380 [ 880.632727][ T38] locks held by kworker/u8:17/1886: 5, on CPU#1: [ 880.632928][ T38] #0: ffff88813ff64138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 880.633553][ T38] #1: ffffc900077e7c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 880.814793][ T38] #2: ffff888068060938 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 880.815391][ T38] #3: ffffffff8e1c3c80 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 880.816896][ T38] #4: ffff8880b87241a0 (tasklet_sync_callback.cb_lock){+...}-{3:3}, at: tasklet_action_common+0xc5/0x600 [ 880.817627][ T38] locks held by kworker/u8:18/1890: 6, last CPU#0: [ 880.817696][ T38] #0: ffff88813ff64138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 880.818344][ T38] #1: ffffc90007877c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 881.060418][ T38] #2: ffff888035d76310 (&devlink->lock_key#3){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xcb0 [ 881.061935][ T38] #3: ffff888020761120 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1e0/0xcb0 [ 881.062734][ T38] #4: ffffffff8e1c3c80 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 881.063900][ T38] #5: ffff8880b8637350 ((crngs.lock)){+.+.}-{3:3}, at: crng_make_state+0x15b/0x5d0 [ 881.066804][ T38] locks held by kworker/u8:19/1891: 7, last CPU#0: [ 881.066882][ T38] #0: ffff88813ff64138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 881.244891][ T38] #1: ffffc900078a7c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 881.245997][ T38] #2: ffff8880442a0938 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 881.335105][ T38] #3: ffff8880b863c320 (&rq->__lock){-...}-{2:2}, at: raw_spin_rq_lock_nested+0x2d/0x160 [ 881.336307][ T38] #4: ffff8880b8624548 (psi_seq){-...}-{0:0}, at: psi_task_switch+0x57/0x790 [ 881.336729][ T38] #5: ffff8880b863c320 (&rq->__lock){-...}-{2:2}, at: raw_spin_rq_lock_nested+0x2d/0x160 [ 881.337573][ T38] #6: ffff8880442a01e8 (_T->lock){....}-{2:2}, at: debug_object_activate+0xa8/0x3b0 [ 881.659663][ T38] locks held by kworker/R-ipv6_/3226: 3, on CPU#0: [ 881.659835][ T38] #0: ffff8880334f2138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 881.660700][ T38] #1: ffffc9000ee0fc20 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 881.661195][ T38] #2: ffffffff8f5d43f8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 881.872134][ T38] locks held by kworker/u8:21/3337: 4, on CPU#1: [ 881.872304][ T38] #0: ffff88801aeb0938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 881.873313][ T38] #1: ffffc9000f1bfc40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 881.873769][ T38] #2: ffffffff8f5c5ba0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810 [ 882.179838][ T38] #3: ffffffff8f5d43f8 (rtnl_mutex){+.+.}-{4:4}, at: wg_destruct+0x25/0x310 [ 882.180809][ T38] locks held by kworker/u9:1/4907: 5, on CPU#1: [ 882.180900][ T38] #0: ffff88806e05b138 ((wq_completion)hci5){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 882.181701][ T38] #1: ffffc900113e7c40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 882.182856][ T38] #2: ffff888061d84f80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1cb/0x3f0 [ 882.183532][ T38] #3: ffff888061d840b0 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0xa6f/0x1190 [ 882.189862][ T38] #4: ffffffff8f7579d8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x17f/0x370 [ 882.190218][ T38] locks held by klogd/4947: 2, last CPU#0: [ 882.190294][ T38] #0: ffffffff8e311730 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 882.190998][ T38] #1: ffffffff8e1c3c80 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 882.192114][ T38] locks held by dhcpcd/5253: 2, on CPU#1: [ 882.192283][ T38] #0: ffff88806e30a928 (nlk_cb_mutex-ROUTE){+.+.}-{4:4}, at: netlink_dump+0xe7/0xee0 [ 882.480680][ T38] #1: ffffffff8f5d43f8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dump_ifinfo+0xa74/0x14b0 [ 882.481046][ T38] locks held by getty/5347: 2, on CPU#1: [ 882.481138][ T38] #0: ffff888029fc20a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 882.777097][ T38] #1: ffffc900044b62e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x460/0x1360 [ 882.778044][ T38] locks held by kworker/u9:2/5599: 6, on CPU#1: [ 882.778268][ T38] #0: ffff88802a46c938 ((wq_completion)hci2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 882.779088][ T38] #1: ffffc9000574fc40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 882.779627][ T38] #2: ffff88803dd8cf80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1cb/0x3f0 [ 882.780560][ T38] #3: ffff88803dd8c0b0 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0xa6f/0x1190 [ 883.071728][ T38] #4: ffffffff8f7579d8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x17f/0x370 [ 883.072321][ T38] #5: ffff88803d0f8370 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x9f/0x550 [ 883.079234][ T38] locks held by kworker/0:3/5605: 2, last CPU#0: [ 883.079272][ T38] #0: ffff88813ff26538 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 883.079690][ T38] #1: ffffc900057bfc40 ((gc_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 883.080486][ T38] locks held by napi/wg1-0/5708: 2, last CPU#0: [ 883.290279][ T38] #0: ffff8880b863c320 (&rq->__lock){-...}-{2:2}, at: raw_spin_rq_lock_nested+0x2d/0x160 [ 883.290747][ T38] #1: ffff8880b8624548 (psi_seq){-...}-{0:0}, at: psi_task_switch+0x57/0x790 [ 883.291491][ T38] locks held by kworker/0:5/5719: 3, last CPU#0: [ 883.291627][ T38] #0: ffff88813ff26538 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 883.472272][ T38] #1: ffffc90005befc40 ((work_completion)(&(&gc_work->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 883.473185][ T38] #2: ffffffff8e1c3c80 (rcu_read_lock){....}-{1:3}, at: gc_worker+0x274/0x18b0 [ 883.479932][ T38] locks held by kworker/1:6/5734: 3, on CPU#1: [ 883.480022][ T38] #0: ffff88813ff27938 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 883.632562][ T38] #1: ffffc90005c7fc40 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 883.633208][ T38] #2: ffffffff8f5d43f8 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 883.797174][ T38] locks held by kworker/1:7/5963: 3, on CPU#1: [ 883.797260][ T38] #0: ffff88813ff27938 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 883.798334][ T38] #1: ffffc90006457c40 (netdev_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 883.799576][ T38] #2: ffffffff8f5d43f8 (rtnl_mutex){+.+.}-{4:4}, at: netdev_work_proc+0x72/0x7f0 [ 883.800616][ T38] locks held by kworker/0:8/6951: 3, on CPU#0: [ 883.800757][ T38] #0: ffff88813ff25538 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 883.801885][ T38] #1: ffffc9000e90fc40 ((work_completion)(&(&ssp->srcu_sup->work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 883.802695][ T38] #2: ffffffff8e226398 (&ssp->srcu_sup->srcu_gp_mutex){+.+.}-{4:4}, at: process_srcu+0x6c/0x16f0 [ 883.803248][ T38] locks held by kworker/u8:4/7300: 5, last CPU#0: [ 883.803369][ T38] #0: ffff88813ff64138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 884.087710][ T38] #1: ffffc90007687c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 884.088306][ T38] #2: ffff888021baa310 (&devlink->lock_key#2){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xcb0 [ 884.089472][ T38] #3: ffff88804d14f120 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1e0/0xcb0 [ 884.090513][ T38] #4: ffffffff8e1c3c80 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 884.090971][ T38] locks held by kworker/u9:0/8496: 5, on CPU#1: [ 884.091080][ T38] #0: ffff88804ed2d138 ((wq_completion)hci4){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 884.092052][ T38] #1: ffffc9000578fc40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 884.092778][ T38] #2: ffff888059c50f80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1cb/0x3f0 [ 884.093504][ T38] #3: ffff888059c500b0 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0xa6f/0x1190 [ 884.544729][ T38] #4: ffffffff8f7579d8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x17f/0x370 [ 884.545422][ T38] locks held by kworker/u8:1/9559: 5, on CPU#0: [ 884.545584][ T38] #0: ffff888033ca5138 ((wq_completion)wg-kex-wg2#5){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 884.552469][ T38] #1: ffffc900040ffc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 884.553045][ T38] #2: ffff8880360f17b8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 884.752915][ T38] #3: ffff8880345503f8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 884.753317][ T38] #4: ffff8880b8637350 ((crngs.lock)){+.+.}-{3:3}, at: crng_make_state+0x15b/0x5d0 [ 884.905496][ T38] locks held by kworker/u8:6/9561: 4, last CPU#0: [ 884.905588][ T38] #0: ffff88813ff64138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630