last executing test programs: 19m32.795991344s ago: executing program 1 (id=77): fsopen(0x0, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x20002, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r1 = getpgrp(0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x4014001}, 0x9590f6cc3ea35512) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x6) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet(r0, 0x0, 0x0) write(r0, 0x0, 0x0) 19m31.490265207s ago: executing program 1 (id=78): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(0x0, 0x0, 0x0) syz_create_resource$binfmt(&(0x7f0000000080)='./file0/file0\x00') r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)=[{0x0, 0x6c}], 0x1}, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x83, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, 0x0, 0x404c000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x9, 0xc9, &(0x7f0000000080)=""/201, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) socket(0x200000000000011, 0x4000000000080002, 0x0) r3 = syz_open_dev$video(0x0, 0x7, 0x40) ioctl$VIDIOC_CROPCAP(r3, 0xc02c563a, &(0x7f0000000080)={0x9, {0x400, 0x81, 0x101, 0xffffffe1}, {0x8, 0x7, 0x1, 0x7ff}, {0x1}}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'lo\x00'}) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/asound/seq/clients\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000000600)={0x2020}, 0x2020) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f00000001c0)={0x0, @aes128, 0x0, @desc4}) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000000)="ddcffac9268638a297ce1a31dc456cae857c5eb885dda19dd7dd3aa01973d45b27af9af8493a85fe025033f8aa01585184125b7d3ff0e05e986804b49b4c5ebb4b1cd23d15e7a8771d8ce34f21cf0151ca62be867e8f3bd3dbdf6c6c9a92f8bc7e151e72145711465818093821d27566d9") 19m24.802524173s ago: executing program 1 (id=89): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x5, 0x87, 0x7ffc0201}]}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000001, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) clock_nanosleep(0x9, 0x2000000, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000002204000000000000000000850000007b00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000080)=r1, 0x4) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r2 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$sock_int(r2, 0x1, 0x3519d7f4cc363fbd, 0x0, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0) sendfile(r3, r3, 0x0, 0x4) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000006200)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000034c0)=[@prinfo={0x18, 0x84, 0x5, {0x30, 0x3}}, @sndinfo={0x20, 0x84, 0x2, {0x7, 0x200, 0x9, 0x2}}], 0x38, 0x24040010}], 0x1, 0x14) mmap$xdp(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x40010, 0xffffffffffffffff, 0x80000000) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x4) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) r4 = socket$nl_generic(0x10, 0x3, 0x10) newfstatat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', &(0x7f0000000100), 0x800) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f00000002c0)=0x1, 0x4) 19m20.209090182s ago: executing program 1 (id=94): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="280100000000000001000000"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x10}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xb8}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x8000, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 19m18.790929657s ago: executing program 1 (id=97): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0x8000}, 0x50) add_key(0x0, 0x0, &(0x7f0000000100), 0x0, 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f00000003c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000100)='GPL\x00', 0x2, 0x103, &(0x7f0000000140)=""/259, 0x0, 0x4}, 0x94) r2 = getpid() timer_create(0x3, 0x0, &(0x7f0000044000)) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{0x77359400}, {0x0, 0x9}}, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffff7ffffffd]}, 0x0, 0x8) sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x47, &(0x7f0000000200)=0x7) gettid() r5 = socket(0x10, 0x3, 0x4) setuid(0xee01) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=@newqdisc={0x38, 0x14, 0xf0b, 0x4, 0x0, {0x2, 0x0, 0x0, 0x0, {0x4}, {0xb, 0xc}, {0x0, 0x7}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0xffffff6a}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) 19m16.877995152s ago: executing program 1 (id=98): syz_open_dev$loop(&(0x7f0000000000), 0xffff, 0x14f600) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') symlinkat(&(0x7f0000001900)='./file0\x00', r0, &(0x7f0000001940)='./file0\x00') mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = syz_open_dev$media(&(0x7f0000000380), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000300)={0x80000000, 0x0, &(0x7f0000001640)}) bind$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4e24}, 0x6e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd67da7120001868e37d9c080cf76cc666cfa6c9c61101fc02000000000000000000000000000100000000000000000000ffff000000004e23080000ff0700"/92], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x7, 0x0, 0x2, 0x89, 0x8, 0xb319, 0x3}, 0x0) socket$kcm(0x10, 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x6000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x2, @empty, 0x8ac2d78a}}, 0x0, 0x0, 0x43, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) setsockopt$inet6_IPV6_ADDRFORM(r4, 0x29, 0x1, &(0x7f0000000180), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) r5 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r5, &(0x7f0000000480)={0x2, 0x4e04, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) r6 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x10}, 0x4e20, 0x3, 'lblc\x00', 0x1a, 0x40c, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000200)={{0x84, @empty, 0x4e21, 0x3, 'rr\x00', 0xc, 0x5, 0x63}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4623, 0x3, 0x100000cd, 0x12d5f, 0x3}}, 0x44) sendmmsg$sock(r5, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)=[@mark={{0x10, 0x1, 0x24, 0x3}}], 0x10}}], 0x1, 0x20000000) ioctl$int_in(r4, 0x5421, &(0x7f0000000140)=0xffff) 18m59.695411083s ago: executing program 32 (id=98): syz_open_dev$loop(&(0x7f0000000000), 0xffff, 0x14f600) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') symlinkat(&(0x7f0000001900)='./file0\x00', r0, &(0x7f0000001940)='./file0\x00') mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = syz_open_dev$media(&(0x7f0000000380), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000300)={0x80000000, 0x0, &(0x7f0000001640)}) bind$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4e24}, 0x6e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd67da7120001868e37d9c080cf76cc666cfa6c9c61101fc02000000000000000000000000000100000000000000000000ffff000000004e23080000ff0700"/92], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x7, 0x0, 0x2, 0x89, 0x8, 0xb319, 0x3}, 0x0) socket$kcm(0x10, 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x6000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x2, @empty, 0x8ac2d78a}}, 0x0, 0x0, 0x43, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) setsockopt$inet6_IPV6_ADDRFORM(r4, 0x29, 0x1, &(0x7f0000000180), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) r5 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r5, &(0x7f0000000480)={0x2, 0x4e04, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) r6 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x10}, 0x4e20, 0x3, 'lblc\x00', 0x1a, 0x40c, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000200)={{0x84, @empty, 0x4e21, 0x3, 'rr\x00', 0xc, 0x5, 0x63}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4623, 0x3, 0x100000cd, 0x12d5f, 0x3}}, 0x44) sendmmsg$sock(r5, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)=[@mark={{0x10, 0x1, 0x24, 0x3}}], 0x10}}], 0x1, 0x20000000) ioctl$int_in(r4, 0x5421, &(0x7f0000000140)=0xffff) 18m58.081878852s ago: executing program 0 (id=118): sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) 18m53.197952596s ago: executing program 0 (id=122): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e26, 0x8, @mcast2, 0xa}, 0x1c) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000000)='wg0\x00', 0x4) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 18m51.421879552s ago: executing program 0 (id=125): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x38, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2000}]}]}, 0x38}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, '01234567890123456789'}}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_KEY_FLUSH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, '01234567890123456789'}}]}]}, 0x54}}, 0x0) 18m46.764745881s ago: executing program 0 (id=131): sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) 18m41.983443328s ago: executing program 0 (id=134): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x10010, 0xffffffffffffffff, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x1000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) readlink(&(0x7f0000000540)='./cgroup\x00', &(0x7f0000000ac0)=""/157, 0x9d) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf250100"], 0x18}}, 0x0) recvmmsg(r0, &(0x7f0000004ac0)=[{{0x0, 0x0, 0x0}, 0x3fffff}, {{0x0, 0x0, 0x0}, 0x54569dba}, {{0x0, 0x0, 0x0}, 0xb91b}, {{0x0, 0x0, &(0x7f0000002280)=[{&(0x7f0000000ac0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000003900)=""/135, 0x87}, {0x0}, {0x0}], 0x5}, 0x8004}], 0x4, 0x0, 0x0) 18m40.808314778s ago: executing program 0 (id=137): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=0x0) r1 = fcntl$getown(0xffffffffffffffff, 0x9) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x10401, 0x4, r1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000006c0)={@map, 0xffffffffffffffff, 0x7}, 0x10) syz_io_uring_setup(0x8b2, &(0x7f0000000100)={0x0, 0x2453, 0x8204, 0x1, 0x21}, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x68, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x37c13, 0x51a23}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x34, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @loopback={0xff00000000000000, 0xfffffffffffffffe}}, @IFLA_GRE_LOCAL={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IFLA_GRE_LINK={0x8, 0x1, r3}]}}}]}, 0x68}, 0x1, 0x0, 0x0, 0x4048875}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, &(0x7f0000000300)={0x2, {{0x2, 0x2, @multicast2}}, 0x1, 0x1, [{{0x2, 0x4e24, @multicast1}}]}, 0x110) close(0x3) recvfrom$inet(r4, &(0x7f0000000240)=""/153, 0x99, 0x62, &(0x7f0000000440)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 18m25.670591099s ago: executing program 33 (id=137): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=0x0) r1 = fcntl$getown(0xffffffffffffffff, 0x9) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x10401, 0x4, r1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000006c0)={@map, 0xffffffffffffffff, 0x7}, 0x10) syz_io_uring_setup(0x8b2, &(0x7f0000000100)={0x0, 0x2453, 0x8204, 0x1, 0x21}, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x68, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x37c13, 0x51a23}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x34, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @loopback={0xff00000000000000, 0xfffffffffffffffe}}, @IFLA_GRE_LOCAL={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IFLA_GRE_LINK={0x8, 0x1, r3}]}}}]}, 0x68}, 0x1, 0x0, 0x0, 0x4048875}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, &(0x7f0000000300)={0x2, {{0x2, 0x2, @multicast2}}, 0x1, 0x1, [{{0x2, 0x4e24, @multicast1}}]}, 0x110) close(0x3) recvfrom$inet(r4, &(0x7f0000000240)=""/153, 0x99, 0x62, &(0x7f0000000440)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 15.96733954s ago: executing program 3 (id=1773): socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000b40)=0xe) socket$netlink(0x10, 0x3, 0x8000000004) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mount(0x0, 0x0, &(0x7f0000000100)='proc\x00', 0x8000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000000)='3', 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$set_reqkey_keyring(0xe, 0x7) request_key(&(0x7f0000000040)='dns_resolver\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='y\xa9n::e\x00\x00\x05\x00\x00\x00\x00\x00H\x00\x00\x00', 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000640)={{0x9, 0x4, 0x7, 0x3, 'syz0\x00', 0x4}, 0x0, [0x5, 0x5, 0x1, 0x8, 0x6, 0x720, 0x4, 0x7, 0x8, 0x6, 0x4, 0x6, 0x7e, 0x3ff, 0x1, 0x7, 0xa9, 0x1000, 0x19564bd4, 0x3, 0x1, 0x80, 0x3, 0x8, 0x8000000040, 0x2, 0x4, 0x1, 0x0, 0x9, 0x1, 0x3, 0x2, 0x3, 0x100000000, 0x4, 0x3, 0x7, 0x7, 0x2, 0x6f, 0x800, 0x7, 0x20006, 0x6, 0x2, 0x9, 0x8000000000000000, 0x10001, 0x4, 0xfffffffffffffff6, 0x9, 0x0, 0x2, 0x8000000000000001, 0x0, 0x7fffffffffffffff, 0x1, 0x8, 0x8, 0x8, 0x6, 0x7, 0x3, 0x81, 0x65c, 0x4, 0x2, 0xb3, 0x400, 0x0, 0x9, 0x6f, 0x0, 0x6, 0x81, 0x0, 0x4, 0x2, 0xffff, 0x1, 0x80000001, 0x7, 0xfece, 0x201d1db0, 0x8, 0x9, 0x3, 0xffff, 0x1, 0x2, 0x40, 0xb, 0x4, 0x3, 0x0, 0x5, 0x800, 0x5, 0x1, 0x2, 0x1d, 0xefffffffffff8000, 0x0, 0x1, 0x4, 0x3, 0x75c, 0x4, 0x0, 0x7, 0x3, 0x3, 0x0, 0xa, 0xfffffffffffffff8, 0x5, 0x2, 0xffffffffffff0262, 0x7ddb, 0x1, 0x7ff, 0x6, 0x10000, 0x4, 0x750d, 0x6]}) close_range(r0, 0xffffffffffffffff, 0x0) 14.492132046s ago: executing program 3 (id=1775): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x4c}, 0x1, 0x0, 0x0, 0x20040001}, 0x2400c014) 14.199903973s ago: executing program 3 (id=1776): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r3, r1, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)}) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r3, r4, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r0, 0x3b8d, &(0x7f0000000280)={0x20, r5, &(0x7f00000002c0)=[{}], 0xdeadbeef, 0x8, 0x1}) ioctl$IOMMU_DESTROY$hwpt(r0, 0x3b80, &(0x7f0000000300)={0x8, r5}) ioctl$IOMMU_DESTROY$hwpt(r0, 0x3b80, &(0x7f0000000340)={0x8, r5}) syz_usb_connect$uac3(0x3, 0x80, &(0x7f00000005c0)=ANY=[@ANYBLOB="12011003000000108205820540000102240109026ec46473c7b849000301054005080b0001012530030904000000010130000a2401040a000000000009040100000102300009040101010102300009050109080007f9810a2525020000000405000904020000010230000904020101010230000905820940000203000aea5b60252500000000"], &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x2, &(0x7f0000001580)=ANY=[@ANYRESHEX=r2]}, {0x0, 0x0}, {0x16, &(0x7f0000000400)=ANY=[@ANYBLOB="160b820003a4a56f6003102bc7a2e9014b41cb5a3500"]}]}) ioctl$IOMMU_GET_HW_INFO(r0, 0x3b8a, &(0x7f0000000380)={0x24, 0x0, r3, 0x1c, &(0x7f00000003c0)=""/28}) 11.862293519s ago: executing program 3 (id=1778): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c00000002060b0100000000000000000000000005000100070000000900020073797a30000000000c00078008000640000000000500050002000000050004000000000016000300686173683a6e6574"], 0x5c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000080)={@hyper}) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000070601080008000000000000000000000500010006"], 0x1c}}, 0x8050) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x2, 0x300) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x4c}}, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f0000050007008800000006000540b37bcca8"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) recvmsg(r1, &(0x7f0000003400)={0x0, 0x0, 0x0}, 0x10000) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x1}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000007680)={0x6, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000009000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7", @ANYRES32, @ANYBLOB="0000000085"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x22, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000004c0)={[0x8aba, 0x100d, 0x4, 0x804, 0x7ffd, 0xf, 0x120000, 0x9, 0x1, 0x100000001, 0x8000000000000000, 0x1, 0x1, 0xfb, 0x3, 0x1], 0x41000, 0x141200}) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4400ae8f, &(0x7f0000000100)=@x86={0x8, 0x2, 0x50, 0x0, 0x2000000b, 0x7, 0x2, 0x9, 0x1, 0x8, 0x0, 0x51, 0x0, 0x40004, 0x10, 0xff, 0xb, 0x2, 0xf, '\x00', 0x2, 0x4080000000000005}) r8 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r8, 0xc0505510, &(0x7f00000002c0)={0x4, 0x1, 0x6, 0x7, &(0x7f0000000540)=[{}]}) close_range(r4, 0xffffffffffffffff, 0x600000000000000) 7.678475854s ago: executing program 2 (id=1781): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xff, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) socket$packet(0x11, 0x2, 0x300) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x4004662b, 0x0) 6.895431877s ago: executing program 4 (id=1782): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x240007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000c80)="91f8a984851bdef38491bbc4173c3c6f357d028feff84ab17c417789f9fc9b8572c98172b7319130feaab952ac4703cad04be6890ee50e997fc26e0000ea4feb931647fc5393de25000000000000000000f4922da20bf1f802970c30f03cc271337e892c99bda9475d51361f8b78938a6a68ba85987219000000eb52c9ff439180b413ec4d4fe130b41d113ce7efb5e9838379c5a554eb896f7808d5904cd8da06fd5159085c9275f49e775e92fb106c2f10442d508891e58a3f117fc203f787901de99a6a1b851ff5c85244beacba25d854577d68ca555e88fc249340ab9bdd8680abbbde02b0307ef45cb7ffffffff984c7bbb7bb3c689ef8daa63ca62e496be091cc1", 0x104}], 0x1}}], 0x1, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4) writev(r0, &(0x7f00000007c0)=[{&(0x7f0000000140)="6c988855d6f7ee87c14169555d04716c2492a39f83707c2efe841c8aa2bd8fbf60180b65b12ebf7602986f8dc37931c1a60e45afb52fd9e1194a7216a8f86e902b921a5015cd84eed2b851e6368cf3e55c2a08e6d078b15d1021445cb199bc7e89a072f5aa6e1d07ec7a6416910f142fac825e6f8304c5e0a52de88cf4b154736689b4c556a5b59bb73c9b8817a17618604f98090fad1948f8502772233a7e66993184286c74081ce947bb1253e571f7e251afed056fba5cbb8705ce8e8b607e0c72ddedd5dbc5d6fadc8a8b4a9b92f7f645278428653770c5b0faf353", 0xdd}, {&(0x7f00000002c0)="e6ed7e297fddb5fa64e59ae5c39948c92fa802f2fcda7c14b765100354e31c83b3651512112d48b2921e61371e4e65ec6ae0e5deaf65e50086328f35e33659f82475728a7590ac3606f7f3267c9b6400bdc0b3a130204e3e89103adafd5cb545a854f062056ab7943c9174d79c04995427c57bb98c31edbff2db1152484e1e790b5d217daee4fdbcfd11e35a77", 0x8d}, {&(0x7f0000000380)="b704ee9d685bdef1565e991eeb07c007a81af7ced96e9fbcf855d88a21dbb4a1f2653dd18367c8f404914d85a8cfc547b87bf23abacdc8e41db9607a94f6617f682d264413688b978b90e1607f761c2c77c56299d20ca546", 0x58}, {&(0x7f0000000400)="3fe3a3a70465018d6f66510bf4b02f53608791072afecedf59abfc74291a75baed28d67be03c956b10e2eeb57be2ca07d7fef7f46585c12d7c71939ff3919741216b05e112abb262e512", 0x4a}, {&(0x7f0000000500)="72bef51f42bcd387eaafff845220df654188287b3df95e6bccb67b8c8fffe4016650ebb37fac50e9457ba3c8040d6b719f26", 0x32}, {0x0}], 0x6) write(r0, &(0x7f0000001e00)="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", 0x3de) 6.551568197s ago: executing program 4 (id=1783): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r3, r1, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)}) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r3, r4, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r0, 0x3b8d, &(0x7f0000000280)={0x20, r5, &(0x7f00000002c0)=[{}], 0xdeadbeef, 0x8, 0x1}) ioctl$IOMMU_DESTROY$hwpt(r0, 0x3b80, &(0x7f0000000300)={0x8, r5}) ioctl$IOMMU_DESTROY$hwpt(r0, 0x3b80, &(0x7f0000000340)={0x8, r5}) syz_usb_connect$uac3(0x3, 0x80, &(0x7f00000005c0)=ANY=[@ANYBLOB="12011003000000108205820540000102240109026ec46473c7b849000301054005080b0001012530030904000000010130000a2401040a000000000009040100000102300009040101010102300009050109080007f9810a2525020000000405000904020000010230000904020101010230000905820940000203000aea5b60252500000000"], &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x2, &(0x7f0000001580)=ANY=[@ANYRESHEX=r2]}, {0x0, 0x0}, {0x16, &(0x7f0000000400)=ANY=[@ANYBLOB="160b820003a4a56f6003102bc7a2e9014b41cb5a3500"]}]}) ioctl$IOMMU_GET_HW_INFO(r0, 0x3b8a, &(0x7f0000000380)={0x24, 0x0, r3, 0x1c, &(0x7f00000003c0)=""/28}) ioctl$IOMMU_DESTROY$stdev(r0, 0x3b80, &(0x7f0000000400)={0x8, r2}) ioctl$IOMMU_DESTROY$ioas(r0, 0x3b80, &(0x7f0000000440)={0x8, r1}) 6.455429095s ago: executing program 2 (id=1784): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x240007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000c80)="91f8a984851bdef38491bbc4173c3c6f357d028feff84ab17c417789f9fc9b8572c98172b7319130feaab952ac4703cad04be6890ee50e997fc26e0000ea4feb931647fc5393de25000000000000000000f4922da20bf1f802970c30f03cc271337e892c99bda9475d51361f8b78938a6a68ba85987219000000eb52c9ff439180b413ec4d4fe130b41d113ce7efb5e9838379c5a554eb896f7808d5904cd8da06fd5159085c9275f49e775e92fb106c2f10442d508891e58a3f117fc203f787901de99a6a1b851ff5c85244beacba25d854577d68ca555e88fc249340ab9bdd8680abbbde02b0307ef45cb7ffffffff984c7bbb7bb3", 0xf6}], 0x1}}], 0x1, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4) writev(r0, &(0x7f00000007c0)=[{&(0x7f0000000140)="6c988855d6f7ee87c14169555d04716c2492a39f83707c2efe841c8aa2bd8fbf60180b65b12ebf7602986f8dc37931c1a60e45afb52fd9e1194a7216a8f86e902b921a5015cd84eed2b851e6368cf3e55c2a08e6d078b15d1021445cb199bc7e89a072f5aa6e1d07ec7a6416910f142fac825e6f8304c5e0a52de88cf4b154736689b4c556a5b59bb73c9b8817a17618604f98090fad1948f8502772233a7e66993184286c74081ce947bb1253e571f7e251afed056fba5cbb8705ce8e8b607e0c72ddedd5dbc5d6fadc8a8b4a9b92f7f645278428653770c5b0faf353", 0xdd}, {&(0x7f00000002c0)="e6ed7e297fddb5fa64e59ae5c39948c92fa802f2fcda7c14b765100354e31c83b3651512112d48b2921e61371e4e65ec6ae0e5deaf65e50086328f35e33659f82475728a7590ac3606f7f3267c9b6400bdc0b3a130204e3e89103adafd5cb545a854f062056ab7943c9174d79c04995427c57bb98c31edbff2db1152484e1e790b5d217daee4fdbcfd11e35a77", 0x8d}, {0x0}, {&(0x7f0000000400)="3fe3a3a70465018d6f66510bf4b02f53608791072afecedf59abfc74291a75baed28d67be03c956b10e2eeb57be2ca07d7fef7f46585c12d7c71939ff3919741216b05e112abb262e512", 0x4a}, {&(0x7f0000000500)="72bef51f42bcd3", 0x7}], 0x5) write(r0, &(0x7f0000001e00)="39270725d93c4ab6cb559938ef75d3d7fd5c06a228a59b717b6934bdefb8b8e2dfca955f26b8cab29bdfdce27e4f9cb112fe41e0a6799578f252519cd4a289985be050d209b4c9617cfb94f1bed81696b0c741f6d366efd7ad3dc7cef66647abaf4108076fdffecb7457f5b6b01835a3c79b873f6ebbcb5ee659861a7b4cce43711bbd6b13c941fbb38ef7e1fe0c70fa4aa49b98b43615605d51cc4d742b364a4e7a2f3dee73b86af3fa4ca8f616eaaedcf155820e1767f7d66ecd818ece03f32c3367bbd9ce6656123f394b7f26f1e0420a9ac4cb25638c75fc3c487ba76fd64c26da6d7ce7f1ee8f49d6e9cc95f5c94bf93183ebf8e6be081e0b9f34bd6c2fe5f895dc1cc01e3018cef11ad9e2e1baf35254258efbaf3e8898f561bdb5c4c49f9d3146503df48e194ea3d06396e970ea9fc7c47eb9988477ed1a7e8641dfeea7b57b5a9967c58762574262efde8795f20f2d45e964ede39c7a6502c03f863e6a21a33ba324e6474d4f0495054745f3a80e6554d4d1fd5ddbca11c5e3e6f9087ca1981a14baa3a2956faa8f6b1652e8cf30d7c37a060bc6c836862451c4e76fc9cb221db8d4b449c27aa44564cb33ef144ed0c51bdd66675302692d979297f30e2d9523f85afbbf54c5b5e2261f8b792f83b33cca78c44a5c4e6ff96273979acbb447d49c0502cc9f8991e9bc784a2e978912d8102d867b631d54269936f54bb20ee57e2b4ba4b6c44e767aef24f6c3a8bb5a3b2084d793082e4c5e517694b220e35ac140913e0e55257af03c4dcf376f24773642c14279e2b55906b0b8a4a34fa4d73f37a5feeca1cf93395b998ddcc557d0e2ae112cf1566f7097e7acb6c0bdf9350781341bb83936b355779417839a70c3cbe13e9561b0820df44dbd2a24bd3d6d8b0d9e83983cb7ad8f147f980b06be823e93a93395f5e60b7f31f5aeadc81f02e177446888c15d2845fd675b98360ac2f584a8ab618789499babac77e3311c563fa519a8dbbe49b91a46cc355f8e956c04dfc3b8e218dbe0302ff463fc94eceec7050b7477d9542f6d05d36ee13e664dfc0bb165601e6bd70615f3c299a9c7c7004cc9987a76afc54b3c83e5d23c0790f39593437b2592cf0548f21823f61076340a87dae9d3427acc844357d6bdbba726e7a41eb30a916df698ab241b5e4991f41d34afd2c2b99f259ca582f09c8027c3381e64070aad6ec7f7c7c973d55a33eca3cc4245bf488a497ac966aa13111ec3033172a3512e97700b3b58b621ccb71309d6ccafb05352718a362d14c38501ec45a522fb86563533d1f46e3fc182181ca5583096ec3849fb5db88ba0bcf565ec4665280402275fe98483a6c6b9da4665196aeff9b18c1e4fe3f19f1ff296702a10a27684a6cf0f9c003f", 0x3de) 4.918771015s ago: executing program 2 (id=1785): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x48040) 4.699773317s ago: executing program 4 (id=1786): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, 0x0, 0x0, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) mremap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) 4.231054258s ago: executing program 4 (id=1787): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x8, &(0x7f0000000740)=0x610000002) ioctl$BLKGETZONESZ(0xffffffffffffffff, 0x80041284, &(0x7f00000000c0)=0x80) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000010880)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000c) write(r2, &(0x7f0000000000)='4', 0x1) 3.633297394s ago: executing program 2 (id=1788): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) mremap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) 2.485607323s ago: executing program 3 (id=1789): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x3, 0x10000004, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0x230}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x0, 0x1f0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc48f, 0x8200, 0x2, 0x250}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0xce7, 0x0, 0x0}}, 0x0) 1.88403597s ago: executing program 2 (id=1790): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddb, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0x1c}}, 0x60800) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$mtd(&(0x7f0000000900), 0x46, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$MEMREADOOB64(r0, 0x1269, &(0x7f00000000c0)={0x1}) 619.355272ms ago: executing program 4 (id=1791): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x10}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xd0}, 0x80) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2}, &(0x7f0000000080), &(0x7f0000000200)=r3}, 0x20) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, 0x0, 0x0, 0x1, 0x0, 0x0) 292.217927ms ago: executing program 2 (id=1792): r0 = syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000680)={0x34, &(0x7f0000000700)={0x0, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f0000000140)={0x40, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 24.90646ms ago: executing program 3 (id=1793): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 0s ago: executing program 4 (id=1794): openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101401, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socket(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udp(0x2, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00"/11], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000207b8ae8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) kernel console output (not intermixed with test programs): 22 using dummy_hcd [ 702.937614][ T10] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 703.009839][ T10] usb 3-1: config index 0 descriptor too short (expected 45, got 36) [ 703.009874][ T10] usb 3-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 703.009936][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 703.009981][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 703.388328][ T10] usb 3-1: config 0 descriptor?? [ 703.408997][ T10] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 703.482170][ T2168] hsr_slave_0: left promiscuous mode [ 703.535281][ T2168] hsr_slave_1: left promiscuous mode [ 703.538431][ T2168] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 703.597880][ T2168] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 705.968609][ T2168] team0 (unregistering): Port device team_slave_1 removed [ 706.038345][ T2168] team0 (unregistering): Port device team_slave_0 removed [ 706.461100][ T1000] usb 3-1: USB disconnect, device number 22 [ 706.712449][ T9788] hsr_slave_0: entered promiscuous mode [ 706.714277][ T9788] hsr_slave_1: entered promiscuous mode [ 706.716812][ T9788] debugfs: 'hsr0' already exists in 'hsr' [ 706.716849][ T9788] Cannot create hsr debugfs directory [ 710.156329][T10102] FAULT_INJECTION: forcing a failure. [ 710.156329][T10102] name fail_futex, interval 1, probability 0, space 0, times 1 [ 710.156370][T10102] CPU: 0 UID: 0 PID: 10102 Comm: syz.4.828 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 710.156391][T10102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 710.156402][T10102] Call Trace: [ 710.156409][T10102] [ 710.156416][T10102] dump_stack_lvl+0xe8/0x150 [ 710.156451][T10102] should_fail_ex+0x46b/0x600 [ 710.156487][T10102] get_futex_key+0xf12/0x1580 [ 710.156536][T10102] ? __pfx_get_futex_key+0x10/0x10 [ 710.156584][T10102] futex_wake+0x119/0x600 [ 710.156618][T10102] ? __pfx_futex_wake+0x10/0x10 [ 710.156642][T10102] ? do_raw_spin_lock+0x12b/0x2f0 [ 710.156686][T10102] do_futex+0x458/0x4e0 [ 710.156715][T10102] ? __pfx_do_futex+0x10/0x10 [ 710.156743][T10102] ? __might_fault+0xaf/0x130 [ 710.156779][T10102] mm_exit_exec_release+0x10d/0x290 [ 710.156849][T10102] exit_mm+0x50/0x240 [ 710.156876][T10102] do_exit+0x6cd/0x2360 [ 710.156899][T10102] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 710.156974][T10102] ? __pfx_do_exit+0x10/0x10 [ 710.156992][T10102] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 710.157043][T10102] ? rt_spin_unlock+0x159/0x200 [ 710.157068][T10102] do_group_exit+0x22d/0x2f0 [ 710.157086][T10102] ? rt_spin_unlock+0x165/0x200 [ 710.157111][T10102] get_signal+0x121b/0x12c0 [ 710.157151][T10102] arch_do_signal_or_restart+0xbb/0x860 [ 710.157192][T10102] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 710.157233][T10102] exit_to_user_mode_loop+0x10e/0x770 [ 710.157257][T10102] ? rcu_is_watching+0x16/0xb0 [ 710.157286][T10102] do_syscall_64+0x328/0x520 [ 710.157305][T10102] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 710.157322][T10102] ? clear_bhb_loop+0x70/0xc0 [ 710.157344][T10102] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 710.157361][T10102] RIP: 0033:0x7f45cf45e159 [ 710.157379][T10102] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 710.157394][T10102] RSP: 002b:00007f45cd6740e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 710.157414][T10102] RAX: fffffffffffffe00 RBX: 00007f45cf6e6188 RCX: 00007f45cf45e159 [ 710.157427][T10102] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f45cf6e6188 [ 710.157438][T10102] RBP: 00007f45cf6e6180 R08: 0000000000000000 R09: 0000000000000000 [ 710.157449][T10102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 710.157459][T10102] R13: 00007f45cf6e6218 R14: 00007fff38dd9940 R15: 00007fff38dd9a28 [ 710.157495][T10102] [ 712.151022][ T9954] bridge0: port 1(bridge_slave_0) entered blocking state [ 712.151274][ T9954] bridge0: port 1(bridge_slave_0) entered disabled state [ 712.151510][ T9954] bridge_slave_0: entered allmulticast mode [ 712.162465][ T9954] bridge_slave_0: entered promiscuous mode [ 715.454038][ T9954] bridge0: port 2(bridge_slave_1) entered blocking state [ 715.454205][ T9954] bridge0: port 2(bridge_slave_1) entered disabled state [ 715.454427][ T9954] bridge_slave_1: entered allmulticast mode [ 715.458519][ T9954] bridge_slave_1: entered promiscuous mode [ 715.603379][ T5247] 8021q: adding VLAN 0 to HW filter on device eth13 [ 716.500205][ T2168] bridge_slave_1: left allmulticast mode [ 716.500370][ T2168] bridge_slave_1: left promiscuous mode [ 716.568750][ T2168] bridge0: port 2(bridge_slave_1) entered disabled state [ 717.237718][ T2168] bridge_slave_0: left allmulticast mode [ 717.237765][ T2168] bridge_slave_0: left promiscuous mode [ 717.238074][ T2168] bridge0: port 1(bridge_slave_0) entered disabled state [ 719.156413][ T2168] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 719.406458][ T2168] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 719.504180][ T2168] bond0 (unregistering): Released all slaves [ 719.816818][ T9954] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 719.831529][ T9954] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 720.340007][ T9954] team0: Port device team_slave_0 added [ 720.628452][ T2168] hsr_slave_0: left promiscuous mode [ 720.666775][ T2168] hsr_slave_1: left promiscuous mode [ 720.668215][ T2168] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 720.696141][ T2168] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 721.463317][ T60] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 721.513206][ T60] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 721.532797][ T60] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 721.569352][ T60] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 721.570946][ T60] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 723.043848][ T2168] team0 (unregistering): Port device team_slave_1 removed [ 723.685582][ T2168] team0 (unregistering): Port device team_slave_0 removed [ 723.801487][ T5596] Bluetooth: hci5: command tx timeout [ 726.646282][ T5596] Bluetooth: hci5: command tx timeout [ 727.171451][ T9954] team0: Port device team_slave_1 added [ 728.320050][ T9954] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 728.320064][ T9954] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 728.320081][ T9954] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 728.324303][ T9954] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 728.324317][ T9954] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 728.324333][ T9954] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 728.655086][ T60] Bluetooth: hci5: command tx timeout [ 728.763262][ T9954] hsr_slave_0: entered promiscuous mode [ 728.767268][ T9954] hsr_slave_1: entered promiscuous mode [ 728.774711][ T9954] debugfs: 'hsr0' already exists in 'hsr' [ 728.774742][ T9954] Cannot create hsr debugfs directory [ 730.747674][ T60] Bluetooth: hci5: command tx timeout [ 731.205068][ T10] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 731.378961][ T10] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 731.398892][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 731.546426][ T10] usb 3-1: config 0 descriptor?? [ 732.951845][ T10] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 732.952395][ T10] [drm:udl_init] *ERROR* Selecting channel failed [ 733.023518][ T10] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 1 [ 733.023549][ T10] [drm] Initialized udl on minor 1 [ 733.045183][ T10] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 733.045763][ T10] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 733.072421][ T10] usb 3-1: USB disconnect, device number 23 [ 733.090221][ T6789] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 733.124413][ T6789] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 733.184315][ T6789] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 733.625042][ T31] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 733.847236][ T31] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 733.853410][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 733.879911][ T31] usb 5-1: config 0 descriptor?? [ 734.144599][ T37] kauditd_printk_skb: 22 callbacks suppressed [ 734.144622][ T37] audit: type=1326 audit(1790811288.187:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10262 comm="syz.2.859" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe60472e159 code=0x7ffc0000 [ 734.144736][ T37] audit: type=1326 audit(1790811288.187:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10262 comm="syz.2.859" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe60472e159 code=0x7ffc0000 [ 734.159244][ T37] audit: type=1326 audit(1790811288.207:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10262 comm="syz.2.859" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe60472e159 code=0x7ffc0000 [ 734.161836][ T37] audit: type=1326 audit(1790811288.207:960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10262 comm="syz.2.859" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe60472e159 code=0x7ffc0000 [ 734.162987][ T37] audit: type=1326 audit(1790811288.207:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10262 comm="syz.2.859" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe60472e159 code=0x7ffc0000 [ 734.164040][ T37] audit: type=1326 audit(1790811288.207:962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10262 comm="syz.2.859" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe60472e159 code=0x7ffc0000 [ 734.164490][ T37] audit: type=1326 audit(1790811288.207:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10262 comm="syz.2.859" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe60472e159 code=0x7ffc0000 [ 734.166143][ T37] audit: type=1326 audit(1790811288.207:964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10262 comm="syz.2.859" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe60472e159 code=0x7ffc0000 [ 734.169002][ T37] audit: type=1326 audit(1790811288.217:965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10262 comm="syz.2.859" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe60472e159 code=0x7ffc0000 [ 734.170789][ T37] audit: type=1326 audit(1790811288.217:966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10262 comm="syz.2.859" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe60472e159 code=0x7ffc0000 [ 734.334757][ T31] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 734.336781][ T31] [drm:udl_init] *ERROR* Selecting channel failed [ 734.633781][ T31] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 1 [ 734.633810][ T31] [drm] Initialized udl on minor 1 [ 734.638779][ T31] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 734.639509][ T31] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 734.758014][ T1000] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 734.769654][ T1000] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 734.769910][ T1000] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 734.788751][ T31] usb 5-1: USB disconnect, device number 19 [ 738.615298][ T67] bridge_slave_1: left allmulticast mode [ 738.615346][ T67] bridge_slave_1: left promiscuous mode [ 738.615681][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 738.769425][ T67] bridge_slave_0: left allmulticast mode [ 738.769472][ T67] bridge_slave_0: left promiscuous mode [ 738.771336][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 739.266030][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 739.372983][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 739.429000][ T67] bond0 (unregistering): Released all slaves [ 739.529727][T10303] syzkaller0: entered promiscuous mode [ 739.529760][T10303] syzkaller0: entered allmulticast mode [ 740.416491][T10318] overlayfs: missing 'workdir' [ 740.583966][T10319] FAULT_INJECTION: forcing a failure. [ 740.583966][T10319] name failslab, interval 1, probability 0, space 0, times 0 [ 740.584064][T10319] CPU: 1 UID: 0 PID: 10319 Comm: syz.2.873 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 740.584093][T10319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 740.584108][T10319] Call Trace: [ 740.584118][T10319] [ 740.584129][T10319] dump_stack_lvl+0xe8/0x150 [ 740.584171][T10319] should_fail_ex+0x46b/0x600 [ 740.584211][T10319] should_failslab+0xa8/0x100 [ 740.584238][T10319] __kmalloc_noprof+0xfb/0x790 [ 740.584271][T10319] ? alloc_pipe_info+0x1f9/0x4c0 [ 740.584304][T10319] ? alloc_pipe_info+0x1f9/0x4c0 [ 740.584343][T10319] alloc_pipe_info+0x1f9/0x4c0 [ 740.584391][T10319] splice_direct_to_actor+0xa52/0xcc0 [ 740.584421][T10319] ? __lock_acquire+0x747/0x2de0 [ 740.584459][T10319] ? __pfx_futex_wake_mark+0x10/0x10 [ 740.584494][T10319] ? try_to_wake_up+0x887/0x1430 [ 740.584519][T10319] ? __pfx_direct_splice_actor+0x10/0x10 [ 740.584541][T10319] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 740.584571][T10319] do_splice_direct+0x19b/0x2a0 [ 740.584595][T10319] ? __pfx_do_splice_direct+0x10/0x10 [ 740.584617][T10319] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 740.584646][T10319] ? rw_verify_area+0x209/0x4d0 [ 740.584671][T10319] do_sendfile+0x540/0x7e0 [ 740.584705][T10319] ? __pfx_do_sendfile+0x10/0x10 [ 740.584742][T10319] __se_sys_sendfile64+0xdf/0x1a0 [ 740.584769][T10319] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 740.584805][T10319] do_syscall_64+0x166/0x520 [ 740.584830][T10319] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 740.584852][T10319] ? clear_bhb_loop+0x70/0xc0 [ 740.584877][T10319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 740.584896][T10319] RIP: 0033:0x7fe60472e159 [ 740.584914][T10319] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 740.584930][T10319] RSP: 002b:00007fe602521028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 740.584951][T10319] RAX: ffffffffffffffda RBX: 00007fe6049b6270 RCX: 00007fe60472e159 [ 740.584965][T10319] RDX: 0000200000000080 RSI: 0000000000000005 RDI: 0000000000000005 [ 740.584978][T10319] RBP: 00007fe6047c506b R08: 0000000000000000 R09: 0000000000000000 [ 740.584990][T10319] R10: 0000000000007f03 R11: 0000000000000246 R12: 0000000000000000 [ 740.585001][T10319] R13: 00007fe6049b6308 R14: 00007fe6049b6270 R15: 00007fff42bf4ec8 [ 740.585029][T10319] [ 743.335245][ T67] hsr_slave_0: left promiscuous mode [ 743.390262][ T67] hsr_slave_1: left promiscuous mode [ 743.394497][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 743.430660][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 744.791150][ T67] team0 (unregistering): Port device team_slave_1 removed [ 744.865970][ T67] team0 (unregistering): Port device team_slave_0 removed [ 745.616129][T10359] netlink: 36 bytes leftover after parsing attributes in process `syz.3.885'. [ 747.879532][T10390] netlink: 36 bytes leftover after parsing attributes in process `syz.4.891'. [ 748.051188][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 748.051276][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 750.923870][T10177] bridge0: port 1(bridge_slave_0) entered blocking state [ 750.926091][T10177] bridge0: port 1(bridge_slave_0) entered disabled state [ 750.926338][T10177] bridge_slave_0: entered allmulticast mode [ 750.964771][T10177] bridge_slave_0: entered promiscuous mode [ 750.986851][T10177] bridge0: port 2(bridge_slave_1) entered blocking state [ 750.987095][T10177] bridge0: port 2(bridge_slave_1) entered disabled state [ 750.987316][T10177] bridge_slave_1: entered allmulticast mode [ 750.990345][T10177] bridge_slave_1: entered promiscuous mode [ 751.732385][T10177] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 751.800228][ T5596] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 751.892639][ T5596] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 751.936556][ T5596] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 751.954809][ T5596] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 751.960042][ T5596] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 752.687949][T10177] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 753.076637][ T67] bridge_slave_1: left allmulticast mode [ 753.076704][ T67] bridge_slave_1: left promiscuous mode [ 753.077011][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 753.292295][ T67] bridge_slave_0: left allmulticast mode [ 753.292341][ T67] bridge_slave_0: left promiscuous mode [ 753.293767][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 754.095002][ T5596] Bluetooth: hci1: command tx timeout [ 754.195318][ T1000] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 754.344991][ T1000] usb 3-1: Using ep0 maxpacket: 32 [ 754.348558][ T1000] usb 3-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 754.351062][ T1000] usb 3-1: config 0 has an invalid interface number: 196 but max is 0 [ 754.351101][ T1000] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 754.351124][ T1000] usb 3-1: config 0 has no interface number 0 [ 754.351173][ T1000] usb 3-1: config 0 interface 196 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 754.351202][ T1000] usb 3-1: config 0 interface 196 has no altsetting 0 [ 754.433412][ T1000] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 754.433445][ T1000] usb 3-1: Product: syz [ 754.433460][ T1000] usb 3-1: Manufacturer: syz [ 754.433476][ T1000] usb 3-1: SerialNumber: syz [ 754.486793][ T1000] usb 3-1: config 0 descriptor?? [ 754.548395][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 754.683532][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 754.720714][ T1000] usb 3-1: USB disconnect, device number 24 [ 754.812565][ T67] bond0 (unregistering): Released all slaves [ 754.902496][T10177] team0: Port device team_slave_0 added [ 755.055279][T10448] syzkaller0: entered promiscuous mode [ 755.055312][T10448] syzkaller0: entered allmulticast mode [ 755.589571][T10177] team0: Port device team_slave_1 added [ 755.746027][ T67] hsr_slave_0: left promiscuous mode [ 755.812204][ T67] hsr_slave_1: left promiscuous mode [ 755.813603][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 755.857437][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 756.175093][ T5596] Bluetooth: hci1: command tx timeout [ 757.417181][ T67] team0 (unregistering): Port device team_slave_1 removed [ 757.449120][T10528] FAULT_INJECTION: forcing a failure. [ 757.449120][T10528] name fail_futex, interval 1, probability 0, space 0, times 0 [ 757.449166][T10528] CPU: 0 UID: 0 PID: 10528 Comm: syz.3.910 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 757.449194][T10528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 757.449208][T10528] Call Trace: [ 757.449218][T10528] [ 757.449229][T10528] dump_stack_lvl+0xe8/0x150 [ 757.449272][T10528] should_fail_ex+0x46b/0x600 [ 757.449312][T10528] get_futex_key+0x1b4/0x1580 [ 757.449353][T10528] ? __lock_acquire+0x747/0x2de0 [ 757.449391][T10528] ? __pfx_get_futex_key+0x10/0x10 [ 757.449427][T10528] ? __cgroup_account_cputime+0xe8/0x120 [ 757.449475][T10528] futex_wait_setup+0x4a/0x590 [ 757.449520][T10528] ? __futex_wait+0xe1/0x410 [ 757.449555][T10528] __futex_wait+0x161/0x410 [ 757.449591][T10528] ? __pfx___futex_wait+0x10/0x10 [ 757.449625][T10528] ? __pfx_futex_wake_mark+0x10/0x10 [ 757.449661][T10528] ? try_to_wake_up+0x84b/0x1430 [ 757.449702][T10528] futex_wait+0x121/0x390 [ 757.449735][T10528] ? __pfx_futex_wait+0x10/0x10 [ 757.449784][T10528] do_futex+0x3e7/0x4e0 [ 757.449814][T10528] ? __pfx_do_futex+0x10/0x10 [ 757.449836][T10528] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 757.449877][T10528] __se_sys_futex+0x3a8/0x450 [ 757.449907][T10528] ? ksys_write+0x248/0x270 [ 757.449937][T10528] ? __pfx___se_sys_futex+0x10/0x10 [ 757.449962][T10528] ? __pfx_ksys_write+0x10/0x10 [ 757.449996][T10528] ? __x64_sys_futex+0x21/0xf0 [ 757.450022][T10528] do_syscall_64+0x166/0x520 [ 757.450047][T10528] ? trace_irq_disable+0x3b/0x140 [ 757.450078][T10528] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 757.450102][T10528] ? clear_bhb_loop+0x70/0xc0 [ 757.450132][T10528] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 757.450156][T10528] RIP: 0033:0x7f30006fe159 [ 757.450179][T10528] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 757.450199][T10528] RSP: 002b:00007f2ffe9560e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 757.450226][T10528] RAX: ffffffffffffffda RBX: 00007f3000985fa8 RCX: 00007f30006fe159 [ 757.450243][T10528] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f3000985fa8 [ 757.450259][T10528] RBP: 00007f3000985fa0 R08: 0000000000000000 R09: 0000000000000000 [ 757.450273][T10528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 757.450287][T10528] R13: 00007f3000986038 R14: 00007ffc2753c5f0 R15: 00007ffc2753c6d8 [ 757.450324][T10528] [ 757.654941][T10531] futex_wake_op: syz.2.909 tries to shift op by 144; fix this program [ 758.682800][ T5596] Bluetooth: hci1: command tx timeout [ 758.963502][ T67] team0 (unregistering): Port device team_slave_0 removed [ 759.038804][T10528] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 759.522515][T10177] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 759.522539][T10177] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 759.522568][T10177] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 759.629823][T10177] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 759.629843][T10177] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 759.629870][T10177] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 759.765202][ T31] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 759.792316][ T5798] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 759.995059][ T5798] usb 4-1: Using ep0 maxpacket: 32 [ 759.996953][ T5798] usb 4-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 759.998995][ T5798] usb 4-1: config 0 has an invalid interface number: 196 but max is 0 [ 759.999028][ T5798] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 759.999048][ T5798] usb 4-1: config 0 has no interface number 0 [ 759.999095][ T5798] usb 4-1: config 0 interface 196 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 759.999134][ T5798] usb 4-1: config 0 interface 196 has no altsetting 0 [ 760.002951][ T5798] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 760.002988][ T5798] usb 4-1: Product: syz [ 760.003004][ T5798] usb 4-1: Manufacturer: syz [ 760.003019][ T5798] usb 4-1: SerialNumber: syz [ 760.065767][ T31] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 760.067990][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 760.167006][ T5798] usb 4-1: config 0 descriptor?? [ 760.255151][ T6789] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 760.291941][ T31] usb 3-1: config 0 descriptor?? [ 760.403240][ T5798] usb 4-1: USB disconnect, device number 24 [ 760.445855][ T6789] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 760.448942][ T6789] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 760.477664][ T6789] usb 5-1: config 0 descriptor?? [ 760.514951][T10177] hsr_slave_0: entered promiscuous mode [ 760.620841][T10177] hsr_slave_1: entered promiscuous mode [ 760.646551][T10177] debugfs: 'hsr0' already exists in 'hsr' [ 760.670781][T10177] Cannot create hsr debugfs directory [ 760.735403][ T5596] Bluetooth: hci1: command tx timeout [ 760.767363][ T6789] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 760.767841][ T6789] [drm:udl_init] *ERROR* Selecting channel failed [ 760.845060][ T31] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 760.845618][ T31] [drm:udl_init] *ERROR* Selecting channel failed [ 761.285694][ T31] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 1 [ 761.285733][ T31] [drm] Initialized udl on minor 1 [ 761.287733][ T31] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 761.288341][ T31] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 761.301888][ T31] usb 3-1: USB disconnect, device number 25 [ 761.335482][ T6789] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 761.335511][ T6789] [drm] Initialized udl on minor 2 [ 761.343389][ T6789] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 761.343942][ T6789] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 761.432583][ T5798] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 761.607719][ T5798] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 761.608006][ T5798] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 761.614147][ T6789] usb 5-1: USB disconnect, device number 20 [ 766.032297][T10422] bridge0: port 1(bridge_slave_0) entered blocking state [ 766.032532][T10422] bridge0: port 1(bridge_slave_0) entered disabled state [ 766.032758][T10422] bridge_slave_0: entered allmulticast mode [ 766.045418][T10422] bridge_slave_0: entered promiscuous mode [ 766.058937][T10422] bridge0: port 2(bridge_slave_1) entered blocking state [ 766.059376][T10422] bridge0: port 2(bridge_slave_1) entered disabled state [ 766.079280][T10422] bridge_slave_1: entered allmulticast mode [ 766.086348][T10422] bridge_slave_1: entered promiscuous mode [ 768.060561][T10630] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[5583] was attempted by "ci-upstream-kasan-gce-smack-root/syz-executor exec"[10630] [ 768.811460][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 769.307282][T10422] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 769.370211][T10422] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 769.737647][T10642] netlink: 28 bytes leftover after parsing attributes in process `syz.4.932'. [ 770.060832][T10638] FAULT_INJECTION: forcing a failure. [ 770.060832][T10638] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 770.060888][T10638] CPU: 1 UID: 0 PID: 10638 Comm: syz.3.931 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 770.060918][T10638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 770.060933][T10638] Call Trace: [ 770.060946][T10638] [ 770.060958][T10638] dump_stack_lvl+0xe8/0x150 [ 770.061005][T10638] should_fail_ex+0x46b/0x600 [ 770.061048][T10638] _copy_to_user+0x31/0xb0 [ 770.061123][T10638] snd_seq_ioctl+0x36a/0x490 [ 770.061272][T10638] ? smk_tskacc+0x2fb/0x370 [ 770.061307][T10638] ? __pfx_snd_seq_ioctl+0x10/0x10 [ 770.061336][T10638] ? smack_file_ioctl+0x2c4/0x370 [ 770.061387][T10638] ? __fget_files+0x3a8/0x420 [ 770.061416][T10638] ? __fget_files+0x2a/0x420 [ 770.061449][T10638] ? bpf_lsm_file_ioctl+0x9/0x20 [ 770.061501][T10638] ? __pfx_snd_seq_ioctl+0x10/0x10 [ 770.061533][T10638] __se_sys_ioctl+0xff/0x170 [ 770.061570][T10638] do_syscall_64+0x166/0x520 [ 770.061596][T10638] ? trace_irq_disable+0x3b/0x140 [ 770.061629][T10638] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 770.061652][T10638] ? clear_bhb_loop+0x70/0xc0 [ 770.061682][T10638] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 770.061706][T10638] RIP: 0033:0x7f30006fe159 [ 770.061730][T10638] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 770.061751][T10638] RSP: 002b:00007f2ffe956028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 770.061781][T10638] RAX: ffffffffffffffda RBX: 00007f3000985fa0 RCX: 00007f30006fe159 [ 770.061799][T10638] RDX: 0000200000000380 RSI: 00000000c08c5332 RDI: 0000000000000004 [ 770.061815][T10638] RBP: 00007f300079506b R08: 0000000000000000 R09: 0000000000000000 [ 770.061830][T10638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 770.061845][T10638] R13: 00007f3000986038 R14: 00007f3000985fa0 R15: 00007ffc2753c6d8 [ 770.061945][T10638] [ 770.162772][T10422] team0: Port device team_slave_0 added [ 770.197922][T10422] team0: Port device team_slave_1 added [ 770.879720][T10422] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 770.879744][T10422] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 770.879775][T10422] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 770.883232][T10177] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 771.048092][T10177] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 771.124916][T10422] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 771.124940][T10422] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 771.125063][T10422] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 771.306879][T10177] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 771.433047][T10659] netlink: 20 bytes leftover after parsing attributes in process `syz.3.935'. [ 771.469741][T10177] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 771.917218][ T6789] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 771.917430][T10177] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 772.112562][T10177] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 772.146473][T10177] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 772.537674][T10177] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 772.656483][ T6789] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 772.728966][T10685] netlink: 52 bytes leftover after parsing attributes in process `syz.3.939'. [ 775.886554][T10422] hsr_slave_0: entered promiscuous mode [ 775.903353][T10422] hsr_slave_1: entered promiscuous mode [ 775.903905][T10422] debugfs: 'hsr0' already exists in 'hsr' [ 775.903922][T10422] Cannot create hsr debugfs directory [ 776.482385][T10713] netlink: 28 bytes leftover after parsing attributes in process `syz.2.942'. [ 781.617193][T10735] FAULT_INJECTION: forcing a failure. [ 781.617193][T10735] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 781.618955][T10735] CPU: 0 UID: 0 PID: 10735 Comm: syz.4.947 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 781.618989][T10735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 781.619005][T10735] Call Trace: [ 781.619016][T10735] [ 781.619029][T10735] dump_stack_lvl+0xe8/0x150 [ 781.619074][T10735] should_fail_ex+0x46b/0x600 [ 781.619114][T10735] _copy_from_user+0x2d/0xb0 [ 781.619161][T10735] bpf_vlog_reverse_ubuf+0xb1/0x3e0 [ 781.619239][T10735] bpf_vlog_finalize+0x189/0x3f0 [ 781.619275][T10735] bpf_log_attr_finalize+0x80/0x1e0 [ 781.619309][T10735] ? __pfx_bpf_log_attr_finalize+0x10/0x10 [ 781.619363][T10735] btf_new_fd+0x36c/0xc70 [ 781.619408][T10735] __sys_bpf+0xd2e/0xd90 [ 781.619454][T10735] ? __pfx___sys_bpf+0x10/0x10 [ 781.619493][T10735] ? do_futex+0x458/0x4e0 [ 781.619551][T10735] ? rcu_is_watching+0x16/0xb0 [ 781.619595][T10735] __x64_sys_bpf+0xba/0xd0 [ 781.619630][T10735] do_syscall_64+0x166/0x520 [ 781.619655][T10735] ? trace_irq_disable+0x3b/0x140 [ 781.619686][T10735] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 781.619709][T10735] ? clear_bhb_loop+0x70/0xc0 [ 781.619736][T10735] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 781.619758][T10735] RIP: 0033:0x7f45cf45e159 [ 781.619780][T10735] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 781.619799][T10735] RSP: 002b:00007f45cd6b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 781.619826][T10735] RAX: ffffffffffffffda RBX: 00007f45cf6e5fa0 RCX: 00007f45cf45e159 [ 781.619843][T10735] RDX: 0000000000000028 RSI: 0000200000001b40 RDI: 0000000000000012 [ 781.619858][T10735] RBP: 00007f45cf4f506b R08: 0000000000000000 R09: 0000000000000000 [ 781.619873][T10735] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 781.619892][T10735] R13: 00007f45cf6e6038 R14: 00007f45cf6e5fa0 R15: 00007fff38dd9a28 [ 781.619929][T10735] [ 784.129988][T10758] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[5585] was attempted by "ci-upstream-kasan-gce-smack-root/syz-executor exec"[10758] [ 784.549676][T10748] kvm_pr_unimpl_wrmsr: 79 callbacks suppressed [ 784.549704][T10748] kvm [10747]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x16ff [ 784.837601][ T60] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 784.912157][ T60] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 784.945352][ T60] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 784.947572][ T60] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 784.949448][ T60] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 785.410692][T10765] FAULT_INJECTION: forcing a failure. [ 785.410692][T10765] name failslab, interval 1, probability 0, space 0, times 0 [ 785.410736][T10765] CPU: 1 UID: 0 PID: 10765 Comm: syz.2.951 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 785.410772][T10765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 785.410787][T10765] Call Trace: [ 785.410797][T10765] [ 785.410806][T10765] dump_stack_lvl+0xe8/0x150 [ 785.410848][T10765] should_fail_ex+0x46b/0x600 [ 785.410897][T10765] should_failslab+0xa8/0x100 [ 785.410923][T10765] __kmalloc_cache_noprof+0xa1/0x680 [ 785.410961][T10765] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 785.410987][T10765] ? snd_hrtimer_open+0x4f/0xd0 [ 785.411083][T10765] ? snd_hrtimer_open+0x4f/0xd0 [ 785.411118][T10765] snd_hrtimer_open+0x4f/0xd0 [ 785.411149][T10765] snd_timer_open+0xee0/0x1350 [ 785.411188][T10765] snd_seq_timer_open+0x2de/0x620 [ 785.411246][T10765] ? __pfx_snd_seq_timer_open+0x10/0x10 [ 785.411277][T10765] ? rt_spin_unlock+0x159/0x200 [ 785.411321][T10765] ? rt_spin_unlock+0x165/0x200 [ 785.411353][T10765] snd_seq_queue_alloc+0x3c6/0x730 [ 785.411393][T10765] snd_seq_ioctl_create_queue+0x7f/0x3c0 [ 785.411427][T10765] snd_seq_ioctl+0x295/0x490 [ 785.411455][T10765] ? smk_tskacc+0x2fb/0x370 [ 785.411483][T10765] ? __pfx_snd_seq_ioctl+0x10/0x10 [ 785.411508][T10765] ? smack_file_ioctl+0x2c4/0x370 [ 785.411556][T10765] ? __fget_files+0x3a8/0x420 [ 785.411594][T10765] ? __fget_files+0x2a/0x420 [ 785.411624][T10765] ? bpf_lsm_file_ioctl+0x9/0x20 [ 785.411653][T10765] ? __pfx_snd_seq_ioctl+0x10/0x10 [ 785.411686][T10765] __se_sys_ioctl+0xff/0x170 [ 785.411719][T10765] do_syscall_64+0x166/0x520 [ 785.411742][T10765] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 785.411762][T10765] ? clear_bhb_loop+0x70/0xc0 [ 785.411788][T10765] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 785.411811][T10765] RIP: 0033:0x7fe60472e159 [ 785.411832][T10765] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 785.411851][T10765] RSP: 002b:00007fe602986028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 785.411877][T10765] RAX: ffffffffffffffda RBX: 00007fe6049b5fa0 RCX: 00007fe60472e159 [ 785.411898][T10765] RDX: 0000200000000380 RSI: 00000000c08c5332 RDI: 0000000000000004 [ 785.411912][T10765] RBP: 00007fe6047c506b R08: 0000000000000000 R09: 0000000000000000 [ 785.411927][T10765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 785.411941][T10765] R13: 00007fe6049b6038 R14: 00007fe6049b5fa0 R15: 00007fff42bf4ec8 [ 785.411977][T10765] [ 787.086298][T10422] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 787.330988][ T5596] Bluetooth: hci4: command tx timeout [ 787.353160][T10778] futex_wake_op: syz.4.954 tries to shift op by 144; fix this program [ 788.128534][T10422] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 788.149234][T10422] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 788.261069][T10422] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 788.355886][T10785] FAULT_INJECTION: forcing a failure. [ 788.355886][T10785] name failslab, interval 1, probability 0, space 0, times 0 [ 788.355931][T10785] CPU: 0 UID: 0 PID: 10785 Comm: syz.4.956 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 788.355958][T10785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 788.355971][T10785] Call Trace: [ 788.355981][T10785] [ 788.355992][T10785] dump_stack_lvl+0xe8/0x150 [ 788.356038][T10785] should_fail_ex+0x46b/0x600 [ 788.356079][T10785] ? sock_alloc_inode+0x2c/0x1a0 [ 788.356233][T10785] should_failslab+0xa8/0x100 [ 788.356261][T10785] kmem_cache_alloc_lru_noprof+0xa2/0x680 [ 788.356299][T10785] ? sock_alloc_inode+0x2c/0x1a0 [ 788.356337][T10785] ? __pfx_sock_alloc_inode+0x10/0x10 [ 788.356369][T10785] sock_alloc_inode+0x2c/0x1a0 [ 788.356402][T10785] ? __pfx_sock_alloc_inode+0x10/0x10 [ 788.356438][T10785] alloc_inode+0x6a/0x1b0 [ 788.356465][T10785] __sock_create+0x12d/0x9d0 [ 788.356534][T10785] __sys_socket+0xd6/0x1b0 [ 788.356570][T10785] __x64_sys_socket+0x7a/0x90 [ 788.356607][T10785] do_syscall_64+0x166/0x520 [ 788.356635][T10785] ? trace_irq_disable+0x3b/0x140 [ 788.356669][T10785] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 788.356694][T10785] ? clear_bhb_loop+0x70/0xc0 [ 788.356723][T10785] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 788.356747][T10785] RIP: 0033:0x7f45cf45e159 [ 788.356770][T10785] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 788.356791][T10785] RSP: 002b:00007f45cd6b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 788.356817][T10785] RAX: ffffffffffffffda RBX: 00007f45cf6e5fa0 RCX: 00007f45cf45e159 [ 788.356835][T10785] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 788.356849][T10785] RBP: 00007f45cf4f506b R08: 0000000000000000 R09: 0000000000000000 [ 788.356864][T10785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 788.356877][T10785] R13: 00007f45cf6e6038 R14: 00007f45cf6e5fa0 R15: 00007fff38dd9a28 [ 788.356913][T10785] [ 788.356943][T10785] socket: no more sockets [ 788.506678][ T5718] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 789.604998][ T5718] usb 3-1: Using ep0 maxpacket: 32 [ 789.665460][ T5596] Bluetooth: hci4: command tx timeout [ 789.795443][ T5718] usb 3-1: device descriptor read/all, error -71 [ 789.851579][T10785] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 790.242979][T10791] kvm [10789]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0xb7ff [ 791.695307][ T5596] Bluetooth: hci4: command tx timeout [ 792.336301][T10804] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[5586] was attempted by "ci-upstream-kasan-gce-smack-root/syz-executor exec"[10804] [ 793.315627][T10797] kvm [10796]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x80000000cfff [ 793.487190][T10422] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 793.600719][T10422] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 793.613018][T10422] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 793.705537][T10422] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 793.786318][ T5596] Bluetooth: hci4: command tx timeout [ 793.947934][T10820] netlink: 36 bytes leftover after parsing attributes in process `syz.3.963'. [ 795.889719][T10821] syzkaller0: entered promiscuous mode [ 795.889753][T10821] syzkaller0: entered allmulticast mode [ 796.815073][ T6789] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 796.925721][ T10] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 796.977140][ T6789] usb 3-1: unable to get BOS descriptor or descriptor too short [ 796.977774][ T6789] usb 3-1: not running at top speed; connect to a high speed hub [ 796.977814][ T6789] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 796.989351][ T6789] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 796.989455][ T6789] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 147, changing to 4 [ 796.989503][ T6789] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 796.989531][ T6789] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 255, setting to 64 [ 797.073406][ T6789] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 797.073438][ T6789] usb 3-1: Product: syz [ 797.073450][ T6789] usb 3-1: Manufacturer: syz [ 797.073458][ T6789] usb 3-1: SerialNumber: syz [ 797.131197][T10846] kvm [10844]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0xb7ff [ 797.166673][ T10] usb 4-1: device descriptor read/64, error -71 [ 797.435092][ T10] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 797.595165][ T10] usb 4-1: device descriptor read/64, error -71 [ 797.822965][ T10] usb usb4-port1: attempt power cycle [ 797.924021][T10422] 8021q: adding VLAN 0 to HW filter on device bond0 [ 798.103532][T10422] 8021q: adding VLAN 0 to HW filter on device team0 [ 798.253973][ T10] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 798.269520][ T10] usb 4-1: device descriptor read/8, error -71 [ 798.275953][ T151] bridge0: port 1(bridge_slave_0) entered blocking state [ 798.276169][ T151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 798.566457][ T151] bridge0: port 2(bridge_slave_1) entered blocking state [ 798.568437][ T151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 798.600733][ T10] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 798.623637][ T10] usb 4-1: device descriptor read/8, error -71 [ 798.760937][ T10] usb usb4-port1: unable to enumerate USB device [ 798.837086][T10760] bridge0: port 1(bridge_slave_0) entered blocking state [ 798.837235][T10760] bridge0: port 1(bridge_slave_0) entered disabled state [ 798.837865][T10760] bridge_slave_0: entered allmulticast mode [ 798.847312][T10760] bridge_slave_0: entered promiscuous mode [ 798.893434][T10858] netlink: 20 bytes leftover after parsing attributes in process `syz.4.970'. [ 798.928174][T10760] bridge0: port 2(bridge_slave_1) entered blocking state [ 798.928347][T10760] bridge0: port 2(bridge_slave_1) entered disabled state [ 798.928886][T10760] bridge_slave_1: entered allmulticast mode [ 798.946892][T10760] bridge_slave_1: entered promiscuous mode [ 799.648663][T10760] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 799.719672][T10760] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 800.121599][ T6789] usb 3-1: USB disconnect, device number 28 [ 800.645769][ T36] usb 4-1: new full-speed USB device number 29 using dummy_hcd [ 800.775714][T10876] netlink: 52 bytes leftover after parsing attributes in process `syz.2.975'. [ 800.822937][T10746] udevd[10746]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 800.827523][ T36] usb 4-1: unable to get BOS descriptor or descriptor too short [ 800.829100][ T36] usb 4-1: not running at top speed; connect to a high speed hub [ 800.829138][ T36] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 800.833233][ T36] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 800.833346][ T36] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 147, changing to 4 [ 800.833389][ T36] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 800.833414][ T36] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 255, setting to 64 [ 801.157249][ T36] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 801.157286][ T36] usb 4-1: Product: syz [ 801.157302][ T36] usb 4-1: Manufacturer: syz [ 801.157318][ T36] usb 4-1: SerialNumber: syz [ 802.399356][T10760] team0: Port device team_slave_0 added [ 802.630907][T10760] team0: Port device team_slave_1 added [ 802.793099][T10760] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 802.793121][T10760] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 802.793152][T10760] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 802.882502][T10760] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 802.882525][T10760] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 802.882555][T10760] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 803.138803][ T36] usb 4-1: USB disconnect, device number 29 [ 803.352254][T10746] udevd[10746]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 803.934780][T10884] FAULT_INJECTION: forcing a failure. [ 803.934780][T10884] name failslab, interval 1, probability 0, space 0, times 0 [ 803.935025][T10884] CPU: 1 UID: 0 PID: 10884 Comm: syz.4.977 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 803.935055][T10884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 803.935069][T10884] Call Trace: [ 803.935079][T10884] [ 803.935090][T10884] dump_stack_lvl+0xe8/0x150 [ 803.935135][T10884] should_fail_ex+0x46b/0x600 [ 803.935172][T10884] ? sock_alloc_inode+0x2c/0x1a0 [ 803.935206][T10884] should_failslab+0xa8/0x100 [ 803.935231][T10884] kmem_cache_alloc_lru_noprof+0xa2/0x680 [ 803.935267][T10884] ? sock_alloc_inode+0x2c/0x1a0 [ 803.935318][T10884] ? __pfx_sock_alloc_inode+0x10/0x10 [ 803.935349][T10884] sock_alloc_inode+0x2c/0x1a0 [ 803.935382][T10884] ? __pfx_sock_alloc_inode+0x10/0x10 [ 803.935413][T10884] alloc_inode+0x6a/0x1b0 [ 803.935440][T10884] __sock_create+0x12d/0x9d0 [ 803.935486][T10884] __sys_socket+0xd6/0x1b0 [ 803.935526][T10884] __x64_sys_socket+0x7a/0x90 [ 803.935587][T10884] do_syscall_64+0x166/0x520 [ 803.935614][T10884] ? trace_irq_disable+0x3b/0x140 [ 803.935646][T10884] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 803.935670][T10884] ? clear_bhb_loop+0x70/0xc0 [ 803.935701][T10884] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 803.935724][T10884] RIP: 0033:0x7f45cf45e159 [ 803.935755][T10884] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 803.935773][T10884] RSP: 002b:00007f45cd6b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 803.935799][T10884] RAX: ffffffffffffffda RBX: 00007f45cf6e5fa0 RCX: 00007f45cf45e159 [ 803.935815][T10884] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 803.935829][T10884] RBP: 00007f45cf4f506b R08: 0000000000000000 R09: 0000000000000000 [ 803.935843][T10884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 803.935856][T10884] R13: 00007f45cf6e6038 R14: 00007f45cf6e5fa0 R15: 00007fff38dd9a28 [ 803.935892][T10884] [ 803.935905][T10884] socket: no more sockets [ 804.405613][ T2168] bridge_slave_1: left allmulticast mode [ 804.405660][ T2168] bridge_slave_1: left promiscuous mode [ 804.406204][ T2168] bridge0: port 2(bridge_slave_1) entered disabled state [ 804.414238][T10892] netlink: 20 bytes leftover after parsing attributes in process `syz.2.978'. [ 804.414526][T10884] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 804.637609][ T2168] bridge_slave_0: left allmulticast mode [ 804.637650][ T2168] bridge_slave_0: left promiscuous mode [ 804.642212][ T2168] bridge0: port 1(bridge_slave_0) entered disabled state [ 807.446214][T10910] netlink: 52 bytes leftover after parsing attributes in process `syz.4.980'. [ 809.378668][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.378762][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 810.066310][ T2168] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 810.175806][ T2168] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 810.247387][ T2168] bond0 (unregistering): Released all slaves [ 810.294128][T10760] hsr_slave_0: entered promiscuous mode [ 810.297728][T10760] hsr_slave_1: entered promiscuous mode [ 810.298861][T10760] debugfs: 'hsr0' already exists in 'hsr' [ 810.298887][T10760] Cannot create hsr debugfs directory [ 810.510932][ T5247] 8021q: adding VLAN 0 to HW filter on device eth9 [ 810.551980][T10910] bridge0: port 3(bond0) entered disabled state [ 810.553270][T10910] bridge0: port 2(bridge_slave_1) entered disabled state [ 810.553684][T10910] bridge0: port 1(bridge_slave_0) entered disabled state [ 812.827446][ T2168] hsr_slave_0: left promiscuous mode [ 812.935590][ T2168] hsr_slave_1: left promiscuous mode [ 812.956627][ T2168] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 812.989760][ T2168] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 814.951500][ T60] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 815.046556][ T60] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 815.051468][ T60] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 815.052590][ T2168] team0 (unregistering): Port device team_slave_1 removed [ 815.103802][ T60] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 815.134417][ T60] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 815.404298][ T2168] team0 (unregistering): Port device team_slave_0 removed [ 817.418573][T10950] syzkaller1: entered promiscuous mode [ 817.418608][T10950] syzkaller1: entered allmulticast mode [ 817.639174][T10959] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 817.695175][ T60] Bluetooth: hci1: command tx timeout [ 818.295032][ T6789] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 818.444939][ T6789] usb 3-1: Using ep0 maxpacket: 32 [ 818.446166][ T6789] usb 3-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 818.447915][ T6789] usb 3-1: config 0 has an invalid interface number: 196 but max is 0 [ 818.447947][ T6789] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 818.447967][ T6789] usb 3-1: config 0 has no interface number 0 [ 818.448015][ T6789] usb 3-1: config 0 interface 196 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 818.448039][ T6789] usb 3-1: config 0 interface 196 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 818.448079][ T6789] usb 3-1: config 0 interface 196 has no altsetting 0 [ 818.893780][ T6789] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 818.893813][ T6789] usb 3-1: Product: syz [ 818.893828][ T6789] usb 3-1: Manufacturer: syz [ 818.893843][ T6789] usb 3-1: SerialNumber: syz [ 820.076857][ T60] Bluetooth: hci1: command tx timeout [ 821.373288][ T6789] usb 3-1: config 0 descriptor?? [ 821.469605][ T6789] usb 3-1: can't set config #0, error -71 [ 822.476569][ T60] Bluetooth: hci1: command tx timeout [ 822.573970][ T6789] usb 3-1: USB disconnect, device number 29 [ 823.287071][ T5685] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 823.490999][ T5685] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 823.531060][ T5685] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 823.554705][ T5685] usb 4-1: config 0 descriptor?? [ 824.091306][ T5685] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 824.091847][ T5685] [drm:udl_init] *ERROR* Selecting channel failed [ 824.273210][ T5685] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 1 [ 824.273246][ T5685] [drm] Initialized udl on minor 1 [ 824.304769][ T5685] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 824.305602][ T5685] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 824.332673][ T5692] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 824.333577][ T5692] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 824.333821][ T5692] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 824.355091][ T5685] usb 4-1: USB disconnect, device number 30 [ 824.607418][ T60] Bluetooth: hci1: command tx timeout [ 824.619658][T11003] futex_wake_op: syz.2.995 tries to shift op by 144; fix this program [ 826.279222][ T5247] 8021q: adding VLAN 0 to HW filter on device eth10 [ 827.661303][T11017] syzkaller1: entered promiscuous mode [ 827.661337][T11017] syzkaller1: entered allmulticast mode [ 829.065032][ T6789] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 829.266086][ T6789] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 829.272560][ T6789] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 829.272605][ T6789] usb 4-1: can't read configurations, error -61 [ 829.435023][ T6789] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 829.589150][ T6789] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 829.620255][ T6789] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 829.620297][ T6789] usb 4-1: can't read configurations, error -61 [ 829.620734][ T6789] usb usb4-port1: attempt power cycle [ 829.955487][ T6789] usb 4-1: new full-speed USB device number 33 using dummy_hcd [ 829.977551][ T6789] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 830.048455][ T6789] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 830.048581][ T6789] usb 4-1: can't read configurations, error -61 [ 830.175252][ T6789] usb 4-1: new full-speed USB device number 34 using dummy_hcd [ 830.277163][ T6789] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 830.308798][ T6789] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 830.308845][ T6789] usb 4-1: can't read configurations, error -61 [ 830.309310][ T6789] usb usb4-port1: unable to enumerate USB device [ 839.470148][T11068] FAULT_INJECTION: forcing a failure. [ 839.470148][T11068] name failslab, interval 1, probability 0, space 0, times 0 [ 839.470190][T11068] CPU: 0 UID: 0 PID: 11068 Comm: syz.3.1010 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 839.470218][T11068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 839.470232][T11068] Call Trace: [ 839.470241][T11068] [ 839.470252][T11068] dump_stack_lvl+0xe8/0x150 [ 839.470296][T11068] should_fail_ex+0x46b/0x600 [ 839.470337][T11068] should_failslab+0xa8/0x100 [ 839.470362][T11068] __kmalloc_cache_noprof+0xa1/0x680 [ 839.470406][T11068] ? fwnode_create_software_node+0xeb/0x1f0 [ 839.470537][T11068] ? fwnode_create_software_node+0xeb/0x1f0 [ 839.470580][T11068] fwnode_create_software_node+0xeb/0x1f0 [ 839.470622][T11068] device_create_managed_software_node+0xce/0x1f0 [ 839.470663][T11068] iommufd_test+0x38a8/0x6370 [ 839.470751][T11068] ? __lock_acquire+0x747/0x2de0 [ 839.470784][T11068] ? __pfx_iommufd_test+0x10/0x10 [ 839.470824][T11068] ? tomoyo_path_number_perm+0x219/0x5f0 [ 839.470860][T11068] ? tomoyo_path_number_perm+0x219/0x5f0 [ 839.470894][T11068] ? lock_acquire+0x115/0x350 [ 839.470952][T11068] iommufd_fops_ioctl+0x468/0x600 [ 839.471016][T11068] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 839.471062][T11068] ? __fget_files+0x2a/0x420 [ 839.471093][T11068] ? bpf_lsm_file_ioctl+0x9/0x20 [ 839.471124][T11068] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 839.471157][T11068] __se_sys_ioctl+0xff/0x170 [ 839.471193][T11068] do_syscall_64+0x166/0x520 [ 839.471220][T11068] ? trace_irq_disable+0x3b/0x140 [ 839.471252][T11068] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 839.471275][T11068] ? clear_bhb_loop+0x70/0xc0 [ 839.471305][T11068] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 839.471329][T11068] RIP: 0033:0x7f30006fe159 [ 839.471352][T11068] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 839.471372][T11068] RSP: 002b:00007f2ffe956028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 839.471410][T11068] RAX: ffffffffffffffda RBX: 00007f3000985fa0 RCX: 00007f30006fe159 [ 839.471428][T11068] RDX: 0000200000000200 RSI: 0000000000003ba0 RDI: 0000000000000003 [ 839.471443][T11068] RBP: 00007f300079506b R08: 0000000000000000 R09: 0000000000000000 [ 839.471458][T11068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 839.471472][T11068] R13: 00007f3000986038 R14: 00007f3000985fa0 R15: 00007ffc2753c6d8 [ 839.471510][T11068] [ 839.544950][T11068] iommufd_mock iommufd_mock0: add pasid-num-bits property failed, rc: -12 [ 842.710806][T11074] Illegal XDP return value 302436395 on prog (id 49) dev N/A, expect packet loss! [ 845.405078][ T199] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 845.617388][T10856] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 846.534689][ T199] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 846.716027][T10856] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 846.719198][T10856] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 846.729878][T10856] usb 4-1: config 0 descriptor?? [ 847.158934][T10856] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 847.159895][T10856] [drm:udl_init] *ERROR* Selecting channel failed [ 847.240229][T10856] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 1 [ 847.240262][T10856] [drm] Initialized udl on minor 1 [ 847.275864][T10856] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 847.276489][T10856] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 847.293813][T10856] usb 4-1: USB disconnect, device number 35 [ 847.687293][T11103] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 847.777444][T11103] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 847.779548][T11103] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 848.330876][ T199] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 848.330924][ T199] usb 5-1: can't read configurations, error -71 [ 848.593452][ T5596] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 848.594406][ T5596] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 850.293023][T10932] bridge0: port 1(bridge_slave_0) entered blocking state [ 850.294760][T10932] bridge0: port 1(bridge_slave_0) entered disabled state [ 850.313923][T10932] bridge_slave_0: entered allmulticast mode [ 850.358277][T10932] bridge_slave_0: entered promiscuous mode [ 850.373675][T10932] bridge0: port 2(bridge_slave_1) entered blocking state [ 850.373930][T10932] bridge0: port 2(bridge_slave_1) entered disabled state [ 850.374169][T10932] bridge_slave_1: entered allmulticast mode [ 850.426564][T10932] bridge_slave_1: entered promiscuous mode [ 850.833210][ T5596] Bluetooth: hci5: command tx timeout [ 851.778154][T11135] FAULT_INJECTION: forcing a failure. [ 851.778154][T11135] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 851.778197][T11135] CPU: 1 UID: 0 PID: 11135 Comm: syz.3.1023 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 851.778225][T11135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 851.778240][T11135] Call Trace: [ 851.778249][T11135] [ 851.778260][T11135] dump_stack_lvl+0xe8/0x150 [ 851.778302][T11135] should_fail_ex+0x46b/0x600 [ 851.778344][T11135] _copy_from_user+0x2d/0xb0 [ 851.778382][T11135] bpf_vlog_reverse_ubuf+0xb1/0x3e0 [ 851.778420][T11135] bpf_vlog_finalize+0x154/0x3f0 [ 851.778453][T11135] bpf_log_attr_finalize+0x80/0x1e0 [ 851.778486][T11135] ? __pfx_bpf_log_attr_finalize+0x10/0x10 [ 851.778527][T11135] btf_new_fd+0x36c/0xc70 [ 851.778572][T11135] __sys_bpf+0xd2e/0xd90 [ 851.778614][T11135] ? __pfx___sys_bpf+0x10/0x10 [ 851.778644][T11135] ? rt_mutex_slowunlock+0x4ee/0xa30 [ 851.778678][T11135] ? do_futex+0x3e7/0x4e0 [ 851.778746][T11135] ? rcu_is_watching+0x16/0xb0 [ 851.778790][T11135] __x64_sys_bpf+0xba/0xd0 [ 851.778825][T11135] do_syscall_64+0x166/0x520 [ 851.778851][T11135] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 851.778875][T11135] ? clear_bhb_loop+0x70/0xc0 [ 851.778902][T11135] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 851.778923][T11135] RIP: 0033:0x7f30006fe159 [ 851.778946][T11135] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 851.778963][T11135] RSP: 002b:00007f2ffe956028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 851.778987][T11135] RAX: ffffffffffffffda RBX: 00007f3000985fa0 RCX: 00007f30006fe159 [ 851.779004][T11135] RDX: 0000000000000028 RSI: 0000200000001b40 RDI: 0000000000000012 [ 851.779019][T11135] RBP: 00007f300079506b R08: 0000000000000000 R09: 0000000000000000 [ 851.779034][T11135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 851.779047][T11135] R13: 00007f3000986038 R14: 00007f3000985fa0 R15: 00007ffc2753c6d8 [ 851.779083][T11135] [ 852.614418][T11150] futex_wake_op: syz.4.1026 tries to shift op by 144; fix this program [ 852.666797][ T6789] usb 4-1: new full-speed USB device number 36 using dummy_hcd [ 852.829396][ T6789] usb 4-1: unable to get BOS descriptor or descriptor too short [ 852.830217][ T6789] usb 4-1: not running at top speed; connect to a high speed hub [ 852.830255][ T6789] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 852.832733][ T6789] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 852.832825][ T6789] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 147, changing to 4 [ 852.832871][ T6789] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 852.832899][ T6789] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 255, setting to 64 [ 852.895417][ T5596] Bluetooth: hci5: command tx timeout [ 852.953310][ T6789] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 852.953343][ T6789] usb 4-1: Product: syz [ 852.953359][ T6789] usb 4-1: Manufacturer: syz [ 852.953375][ T6789] usb 4-1: SerialNumber: syz [ 853.035635][T10932] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 853.060116][T10932] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 853.847906][ T6789] usb 4-1: USB disconnect, device number 36 [ 853.870262][T10932] team0: Port device team_slave_0 added [ 853.935520][T10932] team0: Port device team_slave_1 added [ 854.343765][T10932] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 854.343788][T10932] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 854.343816][T10932] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 854.422381][T10932] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 854.422403][T10932] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 854.422430][T10932] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 854.632375][T11082] udevd[11082]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 854.980465][ T5596] Bluetooth: hci5: command tx timeout [ 855.688817][T10932] hsr_slave_0: entered promiscuous mode [ 855.697866][T10932] hsr_slave_1: entered promiscuous mode [ 855.722425][T10932] debugfs: 'hsr0' already exists in 'hsr' [ 855.722486][T10932] Cannot create hsr debugfs directory [ 857.337755][ T5596] Bluetooth: hci5: command tx timeout [ 859.729246][T11217] futex_wake_op: syz.3.1035 tries to shift op by 144; fix this program [ 859.919864][ T2168] bridge_slave_1: left allmulticast mode [ 859.919913][ T2168] bridge_slave_1: left promiscuous mode [ 859.920277][ T2168] bridge0: port 2(bridge_slave_1) entered disabled state [ 861.221476][ T2168] bridge_slave_0: left allmulticast mode [ 861.221523][ T2168] bridge_slave_0: left promiscuous mode [ 861.221825][ T2168] bridge0: port 1(bridge_slave_0) entered disabled state [ 862.584415][ T5685] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 862.738267][ T5685] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 862.741568][ T5685] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 862.759281][ T5685] usb 3-1: config 0 descriptor?? [ 863.274424][ T5685] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 863.275164][ T5685] [drm:udl_init] *ERROR* Selecting channel failed [ 863.506511][ T5685] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 1 [ 863.506542][ T5685] [drm] Initialized udl on minor 1 [ 863.526101][ T5685] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 863.526678][ T5685] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 863.616237][ T5685] usb 3-1: USB disconnect, device number 30 [ 864.445490][ T2168] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 864.555561][ T2168] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 864.607932][ T2168] bond0 (unregistering): Released all slaves [ 866.245211][ T2168] hsr_slave_0: left promiscuous mode [ 866.347996][ T2168] hsr_slave_1: left promiscuous mode [ 866.349113][ T2168] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 866.446736][ T2168] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 866.597026][T11268] futex_wake_op: syz.4.1047 tries to shift op by 144; fix this program [ 867.435805][ T2168] team0 (unregistering): Port device team_slave_1 removed [ 867.495837][ T2168] team0 (unregistering): Port device team_slave_0 removed [ 870.817245][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 870.827416][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.827496][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.560910][T11321] futex_wake_op: syz.2.1055 tries to shift op by 144; fix this program [ 872.815214][T11315] bridge0: port 1(bridge_slave_0) entered disabled state [ 872.838913][T11100] bridge0: port 1(bridge_slave_0) entered blocking state [ 872.839062][T11100] bridge0: port 1(bridge_slave_0) entered disabled state [ 872.839286][T11100] bridge_slave_0: entered allmulticast mode [ 872.862049][T11100] bridge_slave_0: entered promiscuous mode [ 872.889165][T11100] bridge0: port 2(bridge_slave_1) entered blocking state [ 872.889423][T11100] bridge0: port 2(bridge_slave_1) entered disabled state [ 872.889647][T11100] bridge_slave_1: entered allmulticast mode [ 872.912763][T11100] bridge_slave_1: entered promiscuous mode [ 873.485109][ T5685] usb 3-1: new full-speed USB device number 31 using dummy_hcd [ 873.758060][ T5685] usb 3-1: unable to get BOS descriptor or descriptor too short [ 873.787644][ T5685] usb 3-1: not running at top speed; connect to a high speed hub [ 873.787793][ T5685] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 873.859722][ T5685] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 873.859786][ T5685] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 147, changing to 4 [ 873.859812][ T5685] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 873.859828][ T5685] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 255, setting to 64 [ 873.889531][ T5685] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 873.889563][ T5685] usb 3-1: Product: syz [ 873.889577][ T5685] usb 3-1: Manufacturer: syz [ 873.889592][ T5685] usb 3-1: SerialNumber: syz [ 874.113169][T11337] FAULT_INJECTION: forcing a failure. [ 874.113169][T11337] name failslab, interval 1, probability 0, space 0, times 0 [ 874.113218][T11337] CPU: 0 UID: 0 PID: 11337 Comm: syz.3.1059 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 874.113244][T11337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 874.113258][T11337] Call Trace: [ 874.113267][T11337] [ 874.113278][T11337] dump_stack_lvl+0xe8/0x150 [ 874.113322][T11337] should_fail_ex+0x46b/0x600 [ 874.113362][T11337] should_failslab+0xa8/0x100 [ 874.113387][T11337] kmem_cache_alloc_node_noprof+0xac/0x660 [ 874.113419][T11337] ? __alloc_skb+0x1db/0x7a0 [ 874.113505][T11337] ? __alloc_skb+0x1db/0x7a0 [ 874.113535][T11337] __alloc_skb+0x1db/0x7a0 [ 874.113561][T11337] alloc_uevent_skb+0x7d/0x230 [ 874.113664][T11337] kobject_uevent_net_broadcast+0x2fd/0x560 [ 874.113701][T11337] kobject_uevent_env+0x569/0x9e0 [ 874.113740][T11337] swnode_register+0x4f2/0x590 [ 874.113778][T11337] fwnode_create_software_node+0x194/0x1f0 [ 874.113816][T11337] device_create_managed_software_node+0xce/0x1f0 [ 874.113858][T11337] iommufd_test+0x38a8/0x6370 [ 874.113894][T11337] ? __lock_acquire+0x747/0x2de0 [ 874.113923][T11337] ? __pfx_iommufd_test+0x10/0x10 [ 874.113961][T11337] ? tomoyo_path_number_perm+0x219/0x5f0 [ 874.113995][T11337] ? tomoyo_path_number_perm+0x219/0x5f0 [ 874.114028][T11337] ? lock_acquire+0x115/0x350 [ 874.114086][T11337] iommufd_fops_ioctl+0x468/0x600 [ 874.114123][T11337] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 874.114170][T11337] ? __fget_files+0x2a/0x420 [ 874.114209][T11337] ? bpf_lsm_file_ioctl+0x9/0x20 [ 874.114236][T11337] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 874.114266][T11337] __se_sys_ioctl+0xff/0x170 [ 874.114301][T11337] do_syscall_64+0x166/0x520 [ 874.114325][T11337] ? trace_irq_disable+0x3b/0x140 [ 874.114354][T11337] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 874.114378][T11337] ? clear_bhb_loop+0x70/0xc0 [ 874.114407][T11337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 874.114431][T11337] RIP: 0033:0x7f30006fe159 [ 874.114453][T11337] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 874.114474][T11337] RSP: 002b:00007f2ffe956028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 874.114501][T11337] RAX: ffffffffffffffda RBX: 00007f3000985fa0 RCX: 00007f30006fe159 [ 874.114519][T11337] RDX: 0000200000000200 RSI: 0000000000003ba0 RDI: 0000000000000003 [ 874.114534][T11337] RBP: 00007f300079506b R08: 0000000000000000 R09: 0000000000000000 [ 874.114548][T11337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 874.114562][T11337] R13: 00007f3000986038 R14: 00007f3000985fa0 R15: 00007ffc2753c6d8 [ 874.114599][T11337] [ 874.442584][T11337] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 874.891445][T11100] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 874.979344][T11100] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 875.216247][ T2168] bridge_slave_1: left allmulticast mode [ 875.216289][ T2168] bridge_slave_1: left promiscuous mode [ 875.216613][ T2168] bridge0: port 2(bridge_slave_1) entered disabled state [ 875.416975][ T5685] usb 3-1: USB disconnect, device number 31 [ 875.546688][ T2168] bridge_slave_0: left allmulticast mode [ 875.546733][ T2168] bridge_slave_0: left promiscuous mode [ 875.546983][ T2168] bridge0: port 1(bridge_slave_0) entered disabled state [ 876.013823][T11082] udevd[11082]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 879.313597][ T60] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 879.398922][ T60] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 879.415448][ T60] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 879.420959][ T60] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 879.438143][ T60] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 879.698615][T11360] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1065'. [ 880.580094][ T2168] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 880.631074][T11369] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 conventional PCI endpoint [ 880.709660][ T2168] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 880.795572][ T2168] bond0 (unregistering): Released all slaves [ 881.276106][T11100] team0: Port device team_slave_0 added [ 881.310092][T11100] team0: Port device team_slave_1 added [ 881.695255][ T60] Bluetooth: hci4: command tx timeout [ 881.816147][T11100] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 881.816169][T11100] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 881.816196][T11100] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 881.820398][T11100] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 881.820418][T11100] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 881.820446][T11100] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 883.499437][ T2168] hsr_slave_0: left promiscuous mode [ 883.561417][ T2168] hsr_slave_1: left promiscuous mode [ 883.562950][ T2168] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 883.605607][ T2168] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 883.775146][ T60] Bluetooth: hci4: command tx timeout [ 885.092172][ T2168] team0 (unregistering): Port device team_slave_1 removed [ 885.357714][ T2168] team0 (unregistering): Port device team_slave_0 removed [ 885.620771][T11393] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 conventional PCI endpoint [ 885.855325][ T60] Bluetooth: hci4: command tx timeout [ 886.410268][T11100] hsr_slave_0: entered promiscuous mode [ 886.413967][T11100] hsr_slave_1: entered promiscuous mode [ 886.419102][T11100] debugfs: 'hsr0' already exists in 'hsr' [ 886.419138][T11100] Cannot create hsr debugfs directory [ 887.934982][ T60] Bluetooth: hci4: command tx timeout [ 891.866404][ T2168] bridge_slave_1: left allmulticast mode [ 891.866449][ T2168] bridge_slave_1: left promiscuous mode [ 891.866785][ T2168] bridge0: port 2(bridge_slave_1) entered disabled state [ 892.100978][ T2168] bridge_slave_0: left allmulticast mode [ 892.101022][ T2168] bridge_slave_0: left promiscuous mode [ 892.101329][ T2168] bridge0: port 1(bridge_slave_0) entered disabled state [ 894.170805][ T2168] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 894.372537][ T2168] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 902.999271][T11482] futex_wake_op: syz.3.1087 tries to shift op by 144; fix this program [ 903.353567][ T2168] bond0 (unregistering): Released all slaves [ 904.253413][T11499] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1090'. [ 907.115976][ T2168] hsr_slave_0: left promiscuous mode [ 907.138139][ T2168] hsr_slave_1: left promiscuous mode [ 907.139870][ T2168] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 907.185721][ T2168] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 907.861475][ T2168] team0 (unregistering): Port device team_slave_1 removed [ 907.937266][ T2168] team0 (unregistering): Port device team_slave_0 removed [ 908.549126][ T5596] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 908.621271][ T5596] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 908.636217][ T5596] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 908.643765][ T5596] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 908.644601][ T5596] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 911.694435][ T60] Bluetooth: hci1: command tx timeout [ 912.172395][T11553] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1100'. [ 913.975956][ T60] Bluetooth: hci1: command tx timeout [ 914.861905][T11348] bridge0: port 1(bridge_slave_0) entered blocking state [ 914.862052][T11348] bridge0: port 1(bridge_slave_0) entered disabled state [ 914.862439][T11348] bridge_slave_0: entered allmulticast mode [ 914.889758][T11348] bridge_slave_0: entered promiscuous mode [ 914.916441][T11348] bridge0: port 2(bridge_slave_1) entered blocking state [ 914.918214][T11348] bridge0: port 2(bridge_slave_1) entered disabled state [ 914.918436][T11348] bridge_slave_1: entered allmulticast mode [ 914.998613][T11348] bridge_slave_1: entered promiscuous mode [ 915.341825][T11348] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 915.358594][T11348] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 915.779898][T11348] team0: Port device team_slave_0 added [ 915.783941][T11348] team0: Port device team_slave_1 added [ 915.853726][T11348] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 915.853765][T11348] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 915.853793][T11348] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 915.988849][T11348] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 915.988873][T11348] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 915.988904][T11348] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 916.014942][ T60] Bluetooth: hci1: command tx timeout [ 916.196654][T11348] hsr_slave_0: entered promiscuous mode [ 916.198173][T11348] hsr_slave_1: entered promiscuous mode [ 916.198896][T11348] debugfs: 'hsr0' already exists in 'hsr' [ 916.198919][T11348] Cannot create hsr debugfs directory [ 918.094973][ T60] Bluetooth: hci1: command tx timeout [ 918.240884][T11596] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1108'. [ 922.939867][T11630] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1117'. [ 923.293888][T11639] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1120'. [ 923.828306][T11348] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 925.031937][T11348] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 925.495282][T11348] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 926.841471][T11348] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 926.907880][T11348] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 927.019709][T11348] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 927.211535][T11348] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 927.360396][T11348] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 927.522980][T11526] bridge0: port 1(bridge_slave_0) entered blocking state [ 927.523115][T11526] bridge0: port 1(bridge_slave_0) entered disabled state [ 927.523338][T11526] bridge_slave_0: entered allmulticast mode [ 927.537698][T11526] bridge_slave_0: entered promiscuous mode [ 927.608955][T11526] bridge0: port 2(bridge_slave_1) entered blocking state [ 927.609111][T11526] bridge0: port 2(bridge_slave_1) entered disabled state [ 927.609360][T11526] bridge_slave_1: entered allmulticast mode [ 927.626516][T11526] bridge_slave_1: entered promiscuous mode [ 928.015106][T11526] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 928.037038][T11673] netlink: 120 bytes leftover after parsing attributes in process `syz.2.1126'. [ 928.190851][T11526] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 928.560697][T11526] team0: Port device team_slave_0 added [ 930.266162][T11526] team0: Port device team_slave_1 added [ 930.572153][T11526] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 930.572175][T11526] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 930.572203][T11526] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 930.619587][T11526] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 930.619607][T11526] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 930.619633][T11526] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 930.850717][T11695] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 conventional PCI endpoint [ 931.521138][T11526] hsr_slave_0: entered promiscuous mode [ 931.526631][T11526] hsr_slave_1: entered promiscuous mode [ 931.531615][T11526] debugfs: 'hsr0' already exists in 'hsr' [ 931.531646][T11526] Cannot create hsr debugfs directory [ 931.766934][ T13] bridge_slave_1: left allmulticast mode [ 931.766981][ T13] bridge_slave_1: left promiscuous mode [ 931.767295][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 931.895198][ T13] bridge_slave_0: left allmulticast mode [ 931.895245][ T13] bridge_slave_0: left promiscuous mode [ 931.896122][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 932.259687][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.259770][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.682361][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 932.804283][T11719] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 conventional PCI endpoint [ 932.824229][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 933.055902][ T13] bond0 (unregistering): Released all slaves [ 935.887457][ T13] hsr_slave_0: left promiscuous mode [ 935.925324][ T13] hsr_slave_1: left promiscuous mode [ 935.927397][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 935.976950][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 936.706813][ T13] team0 (unregistering): Port device team_slave_1 removed [ 936.765854][ T13] team0 (unregistering): Port device team_slave_0 removed [ 937.025366][ T5247] 8021q: adding VLAN 0 to HW filter on device eth9 [ 937.981378][ T5596] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 938.050702][ T5596] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 938.052620][ T5596] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 938.225634][ T5596] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 938.229703][ T5596] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 938.598491][T11789] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 conventional PCI endpoint [ 940.495793][ T60] Bluetooth: hci5: command tx timeout [ 943.726395][T11817] fuse: Unknown parameter 'grou00000000000000000000' [ 943.771805][ T60] Bluetooth: hci5: command tx timeout [ 944.104915][T10856] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 944.460397][T10856] usb 5-1: unable to get BOS descriptor or descriptor too short [ 944.461212][T10856] usb 5-1: not running at top speed; connect to a high speed hub [ 944.461255][T10856] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 944.463175][T10856] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 944.463272][T10856] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 147, changing to 4 [ 944.463338][T10856] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 944.463370][T10856] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 255, setting to 64 [ 944.466805][T10856] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 944.466837][T10856] usb 5-1: Product: syz [ 944.466854][T10856] usb 5-1: Manufacturer: syz [ 944.466870][T10856] usb 5-1: SerialNumber: syz [ 944.637618][ T5247] 8021q: adding VLAN 0 to HW filter on device eth10 [ 945.056902][T11827] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 conventional PCI endpoint [ 945.417710][T10856] usb 5-1: USB disconnect, device number 23 [ 945.646863][T11795] udevd[11795]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 945.855179][ T60] Bluetooth: hci5: command tx timeout [ 948.832123][ T60] Bluetooth: hci5: command tx timeout [ 952.033462][T11912] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 952.381821][T11914] warning: `syz.3.1165' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 954.268768][T11946] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1169'. [ 957.344584][T11979] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1174'. [ 958.788566][T11526] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 959.055428][T11526] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 959.140898][T11526] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 959.231602][T11526] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 959.387321][T11526] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 959.504444][T11526] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 960.518136][T11526] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 960.775723][T11526] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 960.892309][T12027] fuse: Bad value for 'fd' [ 961.225024][ T9] usb 5-1: new full-speed USB device number 24 using dummy_hcd [ 961.398753][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 961.401422][ T9] usb 5-1: not running at top speed; connect to a high speed hub [ 961.401469][ T9] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 961.405549][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 961.405632][ T9] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 147, changing to 4 [ 961.405674][ T9] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 961.405698][ T9] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 255, setting to 64 [ 961.410529][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 961.410559][ T9] usb 5-1: Product: syz [ 961.410573][ T9] usb 5-1: Manufacturer: syz [ 961.410587][ T9] usb 5-1: SerialNumber: syz [ 962.113396][T12049] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 962.259274][ T9] usb 5-1: USB disconnect, device number 24 [ 962.756630][ T13] bridge_slave_1: left allmulticast mode [ 962.756673][ T13] bridge_slave_1: left promiscuous mode [ 962.756966][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 962.940131][ T13] bridge_slave_0: left allmulticast mode [ 962.940174][ T13] bridge_slave_0: left promiscuous mode [ 962.940484][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 963.531750][T12081] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 conventional PCI endpoint [ 964.740120][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 964.806819][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 964.873765][ T13] bond0 (unregistering): Released all slaves [ 965.085133][T11779] bridge0: port 1(bridge_slave_0) entered blocking state [ 965.085290][T11779] bridge0: port 1(bridge_slave_0) entered disabled state [ 965.085604][T11779] bridge_slave_0: entered allmulticast mode [ 965.088880][T11779] bridge_slave_0: entered promiscuous mode [ 965.416862][T11779] bridge0: port 2(bridge_slave_1) entered blocking state [ 965.417031][T11779] bridge0: port 2(bridge_slave_1) entered disabled state [ 965.417275][T11779] bridge_slave_1: entered allmulticast mode [ 965.421577][T11779] bridge_slave_1: entered promiscuous mode [ 968.575275][ T13] hsr_slave_0: left promiscuous mode [ 968.617030][ T13] hsr_slave_1: left promiscuous mode [ 968.618414][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 968.667595][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 969.098456][ T13] team0 (unregistering): Port device team_slave_1 removed [ 969.145693][ T13] team0 (unregistering): Port device team_slave_0 removed [ 969.371609][T11779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 969.411488][T11779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 969.497001][T11779] team0: Port device team_slave_0 added [ 969.501508][T11779] team0: Port device team_slave_1 added [ 969.774206][T11779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 969.774226][T11779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 969.774253][T11779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 969.836718][T11779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 969.836740][T11779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 969.836770][T11779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 969.996040][T11779] hsr_slave_0: entered promiscuous mode [ 969.997613][T11779] hsr_slave_1: entered promiscuous mode [ 969.998638][T11779] debugfs: 'hsr0' already exists in 'hsr' [ 969.998667][T11779] Cannot create hsr debugfs directory [ 970.338301][ T5596] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 970.436491][ T5596] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 970.475556][ T5596] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 970.495280][ T5596] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 970.530227][ T5596] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 972.951458][ T5596] Bluetooth: hci4: command tx timeout [ 974.280437][ T37] kauditd_printk_skb: 57 callbacks suppressed [ 974.280459][ T37] audit: type=1326 audit(1790811528.327:1024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12180 comm="syz.3.1204" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30006fe159 code=0x7ffc0000 [ 974.333362][ T37] audit: type=1326 audit(1790811528.327:1025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12180 comm="syz.3.1204" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30006fe159 code=0x7ffc0000 [ 974.380881][ T37] audit: type=1326 audit(1790811528.427:1026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12180 comm="syz.3.1204" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f30006fe159 code=0x7ffc0000 [ 974.419050][ T37] audit: type=1326 audit(1790811528.427:1027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12180 comm="syz.3.1204" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30006fe159 code=0x7ffc0000 [ 974.419768][ T37] audit: type=1326 audit(1790811528.467:1028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12180 comm="syz.3.1204" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30006fe159 code=0x7ffc0000 [ 974.446951][ T37] audit: type=1326 audit(1790811528.497:1029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12180 comm="syz.3.1204" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f30006fe159 code=0x7ffc0000 [ 974.447369][ T37] audit: type=1326 audit(1790811528.497:1030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12180 comm="syz.3.1204" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30006fe159 code=0x7ffc0000 [ 974.456491][ T37] audit: type=1326 audit(1790811528.497:1031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12180 comm="syz.3.1204" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30006fe159 code=0x7ffc0000 [ 974.456813][ T37] audit: type=1326 audit(1790811528.507:1032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12180 comm="syz.3.1204" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f30006fe159 code=0x7ffc0000 [ 974.457351][ T37] audit: type=1326 audit(1790811528.507:1033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12180 comm="syz.3.1204" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30006fe159 code=0x7ffc0000 [ 974.975069][ T5596] Bluetooth: hci4: command tx timeout [ 976.068245][T12203] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 conventional PCI endpoint [ 977.054950][ T5596] Bluetooth: hci4: command tx timeout [ 977.553448][ T5247] 8021q: adding VLAN 0 to HW filter on device eth9 [ 977.623056][ T1773] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 978.330050][ T1773] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 978.330293][ T1773] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 978.330419][ T1773] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 979.148476][ T5596] Bluetooth: hci4: command tx timeout [ 984.040087][T12289] syzkaller0: entered promiscuous mode [ 984.040111][T12289] syzkaller0: entered allmulticast mode [ 988.063252][ T5685] usb 4-1: new full-speed USB device number 37 using dummy_hcd [ 988.838371][ T5685] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 988.841940][ T5685] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 988.841968][ T5685] usb 4-1: can't read configurations, error -61 [ 989.028400][ T5685] usb 4-1: new full-speed USB device number 38 using dummy_hcd [ 989.909909][ T5685] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 989.912825][ T5685] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 989.912868][ T5685] usb 4-1: can't read configurations, error -61 [ 989.947034][ T5685] usb usb4-port1: attempt power cycle [ 990.463333][ T5685] usb 4-1: new full-speed USB device number 39 using dummy_hcd [ 990.505328][ T5685] usb 4-1: device descriptor read/8, error -71 [ 991.913866][T12346] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 conventional PCI endpoint [ 993.697679][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.697758][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 994.991379][T12364] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1238'. [ 999.405382][T12120] bridge0: port 1(bridge_slave_0) entered blocking state [ 999.405611][T12120] bridge0: port 1(bridge_slave_0) entered disabled state [ 999.405819][T12120] bridge_slave_0: entered allmulticast mode [ 999.414576][T12120] bridge_slave_0: entered promiscuous mode [ 999.641139][T12120] bridge0: port 2(bridge_slave_1) entered blocking state [ 999.641392][T12120] bridge0: port 2(bridge_slave_1) entered disabled state [ 999.641659][T12120] bridge_slave_1: entered allmulticast mode [ 999.656728][T12120] bridge_slave_1: entered promiscuous mode [ 1002.591059][T11103] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1002.771279][T11103] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1002.791532][T11103] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1002.801133][T11103] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1002.823019][T11103] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1003.242025][T12120] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1003.359400][T12120] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1005.215224][T11103] Bluetooth: hci1: command tx timeout [ 1005.554330][T12120] team0: Port device team_slave_0 added [ 1005.646395][T12120] team0: Port device team_slave_1 added [ 1005.725920][T12464] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1005.766851][ T13] bridge_slave_1: left allmulticast mode [ 1005.766891][ T13] bridge_slave_1: left promiscuous mode [ 1005.767188][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1007.304260][T11103] Bluetooth: hci1: command tx timeout [ 1007.717636][ T13] bridge_slave_0: left allmulticast mode [ 1007.717667][ T13] bridge_slave_0: left promiscuous mode [ 1007.719385][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1008.091211][T12480] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 conventional PCI endpoint [ 1008.570719][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1008.679193][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1008.770433][ T13] bond0 (unregistering): Released all slaves [ 1009.390146][T12120] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1009.390189][T12120] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1009.391021][T12120] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1009.403876][T12120] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1009.403915][T12120] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1009.403961][T12120] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1009.454269][T11103] Bluetooth: hci1: command tx timeout [ 1010.029031][T12120] hsr_slave_0: entered promiscuous mode [ 1010.053911][T12120] hsr_slave_1: entered promiscuous mode [ 1010.121336][T12120] debugfs: 'hsr0' already exists in 'hsr' [ 1010.121373][T12120] Cannot create hsr debugfs directory [ 1010.145400][T12493] netlink: 500 bytes leftover after parsing attributes in process `syz.3.1262'. [ 1011.444950][ T13] hsr_slave_0: left promiscuous mode [ 1011.463598][ T13] hsr_slave_1: left promiscuous mode [ 1011.472225][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1011.495977][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1011.626906][T11103] Bluetooth: hci1: command tx timeout [ 1013.518150][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1013.659775][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1013.861501][T12517] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1267'. [ 1015.122407][T12538] FAULT_INJECTION: forcing a failure. [ 1015.122407][T12538] name failslab, interval 1, probability 0, space 0, times 0 [ 1015.122452][T12538] CPU: 1 UID: 0 PID: 12538 Comm: syz.4.1270 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1015.122486][T12538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1015.122501][T12538] Call Trace: [ 1015.122511][T12538] [ 1015.122521][T12538] dump_stack_lvl+0xe8/0x150 [ 1015.122597][T12538] should_fail_ex+0x46b/0x600 [ 1015.122636][T12538] ? sock_alloc_inode+0x2c/0x1a0 [ 1015.122674][T12538] should_failslab+0xa8/0x100 [ 1015.122702][T12538] kmem_cache_alloc_lru_noprof+0xa2/0x680 [ 1015.122739][T12538] ? sock_alloc_inode+0x2c/0x1a0 [ 1015.122777][T12538] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1015.122809][T12538] sock_alloc_inode+0x2c/0x1a0 [ 1015.122842][T12538] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1015.122872][T12538] alloc_inode+0x6a/0x1b0 [ 1015.122898][T12538] __sock_create+0x12d/0x9d0 [ 1015.122943][T12538] __sys_socket+0xd6/0x1b0 [ 1015.122980][T12538] __x64_sys_socket+0x7a/0x90 [ 1015.123014][T12538] do_syscall_64+0x166/0x520 [ 1015.123044][T12538] ? trace_irq_disable+0x3b/0x140 [ 1015.123261][T12538] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1015.123287][T12538] ? clear_bhb_loop+0x70/0xc0 [ 1015.123315][T12538] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1015.123340][T12538] RIP: 0033:0x7f45cf45e159 [ 1015.123364][T12538] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1015.123383][T12538] RSP: 002b:00007f45cd6b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1015.123410][T12538] RAX: ffffffffffffffda RBX: 00007f45cf6e5fa0 RCX: 00007f45cf45e159 [ 1015.123440][T12538] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 1015.123454][T12538] RBP: 00007f45cf4f506b R08: 0000000000000000 R09: 0000000000000000 [ 1015.123470][T12538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1015.123483][T12538] R13: 00007f45cf6e6038 R14: 00007f45cf6e5fa0 R15: 00007fff38dd9a28 [ 1015.123526][T12538] [ 1015.123559][T12538] socket: no more sockets [ 1015.186872][T12538] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1015.681449][ T5247] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1016.430160][T12547] netlink: 500 bytes leftover after parsing attributes in process `syz.3.1273'. [ 1018.283507][T12562] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1276'. [ 1020.725142][ T5247] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1021.253042][T12593] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input15 [ 1024.066237][T12627] netlink: 'syz.3.1286': attribute type 23 has an invalid length. [ 1025.927250][T12443] bridge0: port 1(bridge_slave_0) entered blocking state [ 1025.930228][T12443] bridge0: port 1(bridge_slave_0) entered disabled state [ 1025.930485][T12443] bridge_slave_0: entered allmulticast mode [ 1026.087660][T12443] bridge_slave_0: entered promiscuous mode [ 1027.147449][T12443] bridge0: port 2(bridge_slave_1) entered blocking state [ 1027.147536][T12443] bridge0: port 2(bridge_slave_1) entered disabled state [ 1027.147719][T12443] bridge_slave_1: entered allmulticast mode [ 1027.149726][T12443] bridge_slave_1: entered promiscuous mode [ 1029.879546][T12443] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1029.941530][T12443] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1030.097172][T12443] team0: Port device team_slave_0 added [ 1030.100928][T12443] team0: Port device team_slave_1 added [ 1030.318090][T12443] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1030.318113][T12443] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1030.318144][T12443] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1030.323934][T12443] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1030.323955][T12443] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1030.323986][T12443] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1030.532633][T12443] hsr_slave_0: entered promiscuous mode [ 1030.537345][T12443] hsr_slave_1: entered promiscuous mode [ 1030.569204][T12443] debugfs: 'hsr0' already exists in 'hsr' [ 1030.569241][T12443] Cannot create hsr debugfs directory [ 1033.582810][ T5596] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1033.610571][ T5596] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1033.613573][ T5596] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1033.633626][ T5596] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1033.643952][ T5596] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1035.274313][T12730] tipc: Enabling of bearer rejected, failed to enable media [ 1035.658792][T12746] syzkaller0: entered promiscuous mode [ 1035.658816][T12746] syzkaller0: entered allmulticast mode [ 1035.937179][ T5596] Bluetooth: hci4: command tx timeout [ 1036.167812][T12751] tipc: Started in network mode [ 1036.167849][T12751] tipc: Node identity da619c2b98aa, cluster identity 4711 [ 1036.168244][T12751] tipc: Enabled bearer , priority 0 [ 1036.260770][T12745] tipc: Resetting bearer [ 1036.549211][T12745] tipc: Disabling bearer [ 1037.070937][ T13] bridge_slave_1: left allmulticast mode [ 1037.070980][ T13] bridge_slave_1: left promiscuous mode [ 1037.071301][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1037.607513][ T13] bridge_slave_0: left allmulticast mode [ 1037.607557][ T13] bridge_slave_0: left promiscuous mode [ 1037.612945][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1037.709745][T12770] netlink: 'syz.2.1309': attribute type 23 has an invalid length. [ 1038.073253][ T5596] Bluetooth: hci4: command tx timeout [ 1040.106269][ T5596] Bluetooth: hci4: command tx timeout [ 1040.435322][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1040.516385][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1040.607637][ T13] bond0 (unregistering): Released all slaves [ 1040.828308][ T5247] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1042.148245][T11937] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 1042.193434][ T5596] Bluetooth: hci4: command tx timeout [ 1042.366267][T11937] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1042.367061][T11937] usb 5-1: not running at top speed; connect to a high speed hub [ 1042.367102][T11937] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1042.368673][T11937] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1042.368760][T11937] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 147, changing to 4 [ 1042.368807][T11937] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1042.368835][T11937] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 255, setting to 64 [ 1042.372074][T11937] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1042.372104][T11937] usb 5-1: Product: syz [ 1042.372120][T11937] usb 5-1: Manufacturer: syz [ 1042.372136][T11937] usb 5-1: SerialNumber: syz [ 1044.211747][T11937] usb 5-1: USB disconnect, device number 25 [ 1044.353049][T12818] netlink: 'syz.4.1322': attribute type 1 has an invalid length. [ 1044.357631][T12575] udevd[12575]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1044.406348][ T13] hsr_slave_0: left promiscuous mode [ 1044.446627][ T13] hsr_slave_1: left promiscuous mode [ 1044.448858][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1044.538073][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1044.597845][T12826] fuse: Bad value for 'fd' [ 1046.342221][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1046.417522][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1046.812405][T12818] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1049.939714][T12852] fuse: Bad value for 'fd' [ 1055.504402][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 1055.504487][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 1056.885793][T12900] FAULT_INJECTION: forcing a failure. [ 1056.885793][T12900] name failslab, interval 1, probability 0, space 0, times 0 [ 1056.885837][T12900] CPU: 1 UID: 0 PID: 12900 Comm: syz.3.1342 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1056.885872][T12900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1056.885886][T12900] Call Trace: [ 1056.885896][T12900] [ 1056.885906][T12900] dump_stack_lvl+0xe8/0x150 [ 1056.886043][T12900] should_fail_ex+0x46b/0x600 [ 1056.886085][T12900] should_failslab+0xa8/0x100 [ 1056.886110][T12900] ? vm_area_dup+0x28/0x750 [ 1056.886146][T12900] kmem_cache_alloc_noprof+0x9e/0x690 [ 1056.886178][T12900] ? trace_hrtimer_start+0x82/0x200 [ 1056.886210][T12900] ? vm_area_dup+0x28/0x750 [ 1056.886252][T12900] vm_area_dup+0x28/0x750 [ 1056.886296][T12900] ? __split_vma+0x1b7/0xa00 [ 1056.886329][T12900] __split_vma+0x1d7/0xa00 [ 1056.886360][T12900] ? finish_task_switch+0x40e/0xc60 [ 1056.886392][T12900] ? lockdep_hardirqs_on+0x7b/0x110 [ 1056.886480][T12900] ? __pfx___split_vma+0x10/0x10 [ 1056.886518][T12900] ? __lock_acquire+0x747/0x2de0 [ 1056.886566][T12900] vma_modify+0x8b7/0x2060 [ 1056.886610][T12900] vma_modify_flags+0x2a4/0x3c0 [ 1056.886641][T12900] ? __pfx_vma_modify_flags+0x10/0x10 [ 1056.886689][T12900] ? __lock_acquire+0x747/0x2de0 [ 1056.886721][T12900] ? mprotect_fixup+0xf9/0xad0 [ 1056.886750][T12900] mprotect_fixup+0x51a/0xad0 [ 1056.886779][T12900] ? __pfx_mprotect_fixup+0x10/0x10 [ 1056.886817][T12900] ? mas_next_slot+0xc94/0xd70 [ 1056.886873][T12900] do_mprotect_pkey+0x8e7/0xd10 [ 1056.886915][T12900] ? __pfx_do_mprotect_pkey+0x10/0x10 [ 1056.886975][T12900] ? rcu_is_watching+0x16/0xb0 [ 1056.887023][T12900] __x64_sys_mprotect+0x80/0x90 [ 1056.887049][T12900] do_syscall_64+0x166/0x520 [ 1056.887074][T12900] ? trace_irq_disable+0x3b/0x140 [ 1056.887105][T12900] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1056.887130][T12900] ? clear_bhb_loop+0x70/0xc0 [ 1056.887161][T12900] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1056.887185][T12900] RIP: 0033:0x7f30006fe159 [ 1056.887210][T12900] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1056.887242][T12900] RSP: 002b:00007f2ffe956028 EFLAGS: 00000246 ORIG_RAX: 000000000000000a [ 1056.887269][T12900] RAX: ffffffffffffffda RBX: 00007f3000985fa0 RCX: 00007f30006fe159 [ 1056.887297][T12900] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000200000ffd000 [ 1056.887313][T12900] RBP: 00007f300079506b R08: 0000000000000000 R09: 0000000000000000 [ 1056.887329][T12900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1056.887344][T12900] R13: 00007f3000986038 R14: 00007f3000985fa0 R15: 00007ffc2753c6d8 [ 1056.887383][T12900] [ 1058.885800][T12925] netlink: 'syz.3.1344': attribute type 23 has an invalid length. [ 1060.125191][ T13] bridge_slave_1: left allmulticast mode [ 1060.125241][ T13] bridge_slave_1: left promiscuous mode [ 1060.125551][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1060.281696][ T13] bridge_slave_0: left allmulticast mode [ 1060.281742][ T13] bridge_slave_0: left promiscuous mode [ 1060.282108][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1060.876674][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1060.956229][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1061.016577][ T13] bond0 (unregistering): Released all slaves [ 1061.042279][T12923] syzkaller0: entered promiscuous mode [ 1061.042304][T12923] syzkaller0: entered allmulticast mode [ 1061.060130][T12928] tipc: Started in network mode [ 1061.060163][T12928] tipc: Node identity 3ed0bdbdf8ff, cluster identity 4711 [ 1061.060951][T12928] tipc: Enabled bearer , priority 0 [ 1061.125360][T12922] tipc: Resetting bearer [ 1061.646509][T12922] tipc: Disabling bearer [ 1062.714402][T11103] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1062.796815][T11103] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1062.827208][T11103] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1062.844643][T11103] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1062.858228][T11103] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1063.143038][ T5692] tipc: Node number set to 3325017533 [ 1064.894943][T11103] Bluetooth: hci5: command tx timeout [ 1065.495318][T12976] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 conventional PCI endpoint [ 1067.054821][T11103] Bluetooth: hci5: command tx timeout [ 1067.279771][ T13] hsr_slave_0: left promiscuous mode [ 1067.302772][ T13] hsr_slave_1: left promiscuous mode [ 1067.311932][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1067.335940][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1069.174418][T11103] Bluetooth: hci5: command tx timeout [ 1070.000792][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1070.075827][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1070.439107][T13004] netlink: 'syz.3.1359': attribute type 23 has an invalid length. [ 1070.677059][T12704] bridge0: port 1(bridge_slave_0) entered blocking state [ 1070.677326][T12704] bridge0: port 1(bridge_slave_0) entered disabled state [ 1070.677537][T12704] bridge_slave_0: entered allmulticast mode [ 1070.720602][T12704] bridge_slave_0: entered promiscuous mode [ 1070.859263][T12704] bridge0: port 2(bridge_slave_1) entered blocking state [ 1070.859372][T12704] bridge0: port 2(bridge_slave_1) entered disabled state [ 1070.859507][T12704] bridge_slave_1: entered allmulticast mode [ 1070.928208][T12704] bridge_slave_1: entered promiscuous mode [ 1071.061937][T10856] logitech-hidpp-device 0005:046D:B012.000A: item fetching failed at offset 3/4 [ 1071.252958][T11103] Bluetooth: hci5: command tx timeout [ 1071.418082][T10856] logitech-hidpp-device 0005:046D:B012.000A: hidpp_probe:parse failed [ 1071.543046][T10856] logitech-hidpp-device 0005:046D:B012.000A: probe with driver logitech-hidpp-device failed with error -22 [ 1075.899488][T12704] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1075.947714][T12704] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1076.514478][T12704] team0: Port device team_slave_0 added [ 1076.544040][T12704] team0: Port device team_slave_1 added [ 1076.594907][T13036] netlink: 'syz.4.1366': attribute type 23 has an invalid length. [ 1078.196435][ T5685] logitech-hidpp-device 0005:046D:B012.000B: item fetching failed at offset 3/4 [ 1078.232415][ T5685] logitech-hidpp-device 0005:046D:B012.000B: hidpp_probe:parse failed [ 1078.232479][ T5685] logitech-hidpp-device 0005:046D:B012.000B: probe with driver logitech-hidpp-device failed with error -22 [ 1081.701343][T12704] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1081.701366][T12704] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1081.701392][T12704] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1081.739120][T12704] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1081.739140][T12704] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1081.739165][T12704] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1082.053760][T12704] hsr_slave_0: entered promiscuous mode [ 1082.065255][T12704] hsr_slave_1: entered promiscuous mode [ 1082.066678][T12704] debugfs: 'hsr0' already exists in 'hsr' [ 1082.066711][T12704] Cannot create hsr debugfs directory [ 1086.284955][ T5685] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 1086.445806][ T5685] usb 4-1: Using ep0 maxpacket: 8 [ 1086.446973][ T5685] usb 4-1: New USB device found, idVendor=054c, idProduct=042f, bcdDevice= 0.00 [ 1086.447973][ T5685] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1086.447996][ T5685] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1086.448012][ T5685] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1086.448039][ T5685] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1086.538995][ T5685] usb 4-1: config 0 descriptor?? [ 1087.128099][T13070] netlink: 'syz.2.1375': attribute type 29 has an invalid length. [ 1087.128130][T13070] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1375'. [ 1087.261171][ T5685] sony 0003:054C:042F.000C: failed to retrieve feature report 0xf2 with the Sixaxis MAC address [ 1087.367643][T13070] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 1087.994204][ T5685] sony 0003:054C:042F.000C: hidraw0: USB HID v0.00 Joystick [HID 054c:042f] on usb-dummy_hcd.3-1/input0 [ 1087.994231][ T5685] sony 0003:054C:042F.000C: failed to claim input [ 1088.185099][ T5685] usb 4-1: USB disconnect, device number 41 [ 1088.591327][T13073] fido_id[13073]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1091.083980][T13088] tipc: Started in network mode [ 1091.084017][T13088] tipc: Node identity 66f31402c04f, cluster identity 4711 [ 1091.243814][T13088] tipc: Enabled bearer , priority 0 [ 1091.244266][T13084] syzkaller0: entered promiscuous mode [ 1091.244294][T13084] syzkaller0: entered allmulticast mode [ 1091.473225][T13079] tipc: Resetting bearer [ 1091.671792][T13079] tipc: Disabling bearer [ 1097.912606][ T5596] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1097.994126][ T5596] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1098.045061][ T5596] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1098.060825][ T5596] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1098.082482][ T5596] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1101.552340][T11103] Bluetooth: hci1: command tx timeout [ 1103.153360][T13154] netlink: 'syz.2.1389': attribute type 29 has an invalid length. [ 1103.153379][T13154] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1389'. [ 1103.304876][T13154] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 1103.617642][T11103] Bluetooth: hci1: command tx timeout [ 1103.627996][T13163] ======================================================= [ 1103.627996][T13163] WARNING: The mand mount option has been deprecated and [ 1103.627996][T13163] and is ignored by this kernel. Remove the mand [ 1103.627996][T13163] option from the mount to silence this warning. [ 1103.627996][T13163] ======================================================= [ 1103.854894][T11937] usb 4-1: new full-speed USB device number 42 using dummy_hcd [ 1104.748399][T12959] bridge0: port 1(bridge_slave_0) entered blocking state [ 1104.748536][T12959] bridge0: port 1(bridge_slave_0) entered disabled state [ 1104.748729][T12959] bridge_slave_0: entered allmulticast mode [ 1104.807758][T12959] bridge_slave_0: entered promiscuous mode [ 1104.832160][T11937] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1104.833946][T11937] usb 4-1: not running at top speed; connect to a high speed hub [ 1104.833973][T11937] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1104.868955][T11937] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1104.868990][T11937] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1104.918303][T11937] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1104.918333][T11937] usb 4-1: Product: syz [ 1104.918348][T11937] usb 4-1: Manufacturer: syz [ 1104.918363][T11937] usb 4-1: SerialNumber: syz [ 1104.982247][T12959] bridge0: port 2(bridge_slave_1) entered blocking state [ 1104.982426][T12959] bridge0: port 2(bridge_slave_1) entered disabled state [ 1104.982671][T12959] bridge_slave_1: entered allmulticast mode [ 1105.003042][T12959] bridge_slave_1: entered promiscuous mode [ 1105.696336][T11103] Bluetooth: hci1: command tx timeout [ 1107.249955][T11937] usb 4-1: 0:2 : does not exist [ 1109.010973][T11103] Bluetooth: hci1: command tx timeout [ 1109.179052][T11937] usb 4-1: USB disconnect, device number 42 [ 1111.219643][T13176] udevd[13176]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1111.493683][T12959] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1111.530017][T12959] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1112.074828][T12959] team0: Port device team_slave_0 added [ 1112.249554][T13196] batman_adv: batadv0: Adding interface: syzkaller0 [ 1112.249577][T13196] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1112.311321][T13196] batman_adv: batadv0: Interface activated: syzkaller0 [ 1112.907594][T12959] team0: Port device team_slave_1 added [ 1113.036841][T13194] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 1113.678931][T13194] batman_adv: batadv0: Removing interface: syzkaller0 [ 1114.845147][ T13] bridge_slave_1: left allmulticast mode [ 1114.845190][ T13] bridge_slave_1: left promiscuous mode [ 1114.845713][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1115.844937][ T13] bridge_slave_0: left allmulticast mode [ 1115.844981][ T13] bridge_slave_0: left promiscuous mode [ 1115.845262][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1117.871287][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 1117.871374][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 1118.317341][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1118.385425][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1118.457667][ T13] bond0 (unregistering): Released all slaves [ 1119.276145][T12959] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1119.276166][T12959] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1119.276198][T12959] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1119.316666][T12959] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1119.316686][T12959] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1119.316712][T12959] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1120.008472][T12959] hsr_slave_0: entered promiscuous mode [ 1120.010198][T12959] hsr_slave_1: entered promiscuous mode [ 1120.011514][T12959] debugfs: 'hsr0' already exists in 'hsr' [ 1120.013783][T12959] Cannot create hsr debugfs directory [ 1120.216619][ T13] hsr_slave_0: left promiscuous mode [ 1120.270541][ T13] hsr_slave_1: left promiscuous mode [ 1120.271895][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1120.315963][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1121.186066][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1121.342279][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1121.695011][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1121.797882][ T5247] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1122.936883][T13109] bridge0: port 1(bridge_slave_0) entered blocking state [ 1122.937102][T13109] bridge0: port 1(bridge_slave_0) entered disabled state [ 1122.937317][T13109] bridge_slave_0: entered allmulticast mode [ 1122.940788][T13109] bridge_slave_0: entered promiscuous mode [ 1122.955772][T13109] bridge0: port 2(bridge_slave_1) entered blocking state [ 1122.955902][T13109] bridge0: port 2(bridge_slave_1) entered disabled state [ 1122.956101][T13109] bridge_slave_1: entered allmulticast mode [ 1122.968943][T13109] bridge_slave_1: entered promiscuous mode [ 1123.212392][T13109] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1123.256287][T13109] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1124.024552][T13109] team0: Port device team_slave_0 added [ 1124.169578][T11103] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1124.391405][T11103] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1124.398646][T11103] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1124.400611][T11103] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1124.401678][T11103] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1124.519460][ T5247] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1124.911964][T13109] team0: Port device team_slave_1 added [ 1125.319286][T13109] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1125.319308][T13109] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1125.319339][T13109] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1125.384032][T13109] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1125.384055][T13109] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1125.384085][T13109] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1125.626680][ T13] bridge_slave_1: left allmulticast mode [ 1125.626737][ T13] bridge_slave_1: left promiscuous mode [ 1125.627055][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1125.867670][ T13] bridge_slave_0: left allmulticast mode [ 1125.867715][ T13] bridge_slave_0: left promiscuous mode [ 1125.868000][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1126.916587][ T13] bridge_slave_1: left allmulticast mode [ 1126.916631][ T13] bridge_slave_1: left promiscuous mode [ 1126.916931][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1127.022031][ T13] bridge_slave_0: left allmulticast mode [ 1127.022078][ T13] bridge_slave_0: left promiscuous mode [ 1127.022351][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1127.134936][ T5596] Bluetooth: hci4: command tx timeout [ 1127.876618][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1128.007802][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1128.098312][ T13] bond0 (unregistering): Released all slaves [ 1128.415472][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1128.475460][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1128.527352][ T13] bond0 (unregistering): Released all slaves [ 1128.670242][ T5247] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1128.942113][T13359] batman_adv: batadv0: Adding interface: syzkaller0 [ 1128.963789][T13359] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1128.964050][T13359] batman_adv: batadv0: Interface activated: syzkaller0 [ 1129.157058][T13356] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 1129.215703][ T5596] Bluetooth: hci4: command tx timeout [ 1129.624619][T13356] batman_adv: batadv0: Removing interface: syzkaller0 [ 1129.937420][ T13] hsr_slave_0: left promiscuous mode [ 1129.994369][ T13] hsr_slave_1: left promiscuous mode [ 1129.996077][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1130.037166][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1130.157484][ T13] hsr_slave_0: left promiscuous mode [ 1130.198519][ T13] hsr_slave_1: left promiscuous mode [ 1130.204366][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1130.245921][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1130.811913][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1130.918144][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1130.994855][ T5692] usb 4-1: new full-speed USB device number 43 using dummy_hcd [ 1131.146874][ T5692] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1131.146947][ T5692] usb 4-1: no configurations [ 1131.146961][ T5692] usb 4-1: can't read configurations, error -22 [ 1131.274969][ T5692] usb 4-1: new full-speed USB device number 44 using dummy_hcd [ 1131.294970][ T5596] Bluetooth: hci4: command tx timeout [ 1131.426327][ T5692] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1131.426400][ T5692] usb 4-1: no configurations [ 1131.426414][ T5692] usb 4-1: can't read configurations, error -22 [ 1131.427109][ T5692] usb usb4-port1: attempt power cycle [ 1131.764830][ T5692] usb 4-1: new full-speed USB device number 45 using dummy_hcd [ 1131.794972][ T5692] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1131.795044][ T5692] usb 4-1: no configurations [ 1131.795058][ T5692] usb 4-1: can't read configurations, error -22 [ 1131.859385][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1131.925034][ T5692] usb 4-1: new full-speed USB device number 46 using dummy_hcd [ 1131.929736][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1131.958610][ T5692] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1131.958693][ T5692] usb 4-1: no configurations [ 1131.958707][ T5692] usb 4-1: can't read configurations, error -22 [ 1131.959325][ T5692] usb usb4-port1: unable to enumerate USB device [ 1132.302775][T13109] hsr_slave_0: entered promiscuous mode [ 1132.309703][T13109] hsr_slave_1: entered promiscuous mode [ 1132.313492][T13109] debugfs: 'hsr0' already exists in 'hsr' [ 1132.313519][T13109] Cannot create hsr debugfs directory [ 1132.818037][T13412] syzkaller0: entered promiscuous mode [ 1132.818072][T13412] syzkaller0: entered allmulticast mode [ 1132.905032][T13408] tipc: Enabled bearer , priority 0 [ 1133.045141][T13406] tipc: Resetting bearer [ 1133.374969][ T5596] Bluetooth: hci4: command tx timeout [ 1133.581594][T13406] tipc: Disabling bearer [ 1133.829096][ T5247] 8021q: adding VLAN 0 to HW filter on device eth12 [ 1136.961240][T13474] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1459'. [ 1139.325909][T13109] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1139.639487][T13109] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1139.687151][T13109] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1139.722971][T13109] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1139.821038][T13109] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1139.866419][T13109] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1139.868002][T13307] bridge0: port 1(bridge_slave_0) entered blocking state [ 1139.868117][T13307] bridge0: port 1(bridge_slave_0) entered disabled state [ 1139.868246][T13307] bridge_slave_0: entered allmulticast mode [ 1139.870412][T13307] bridge_slave_0: entered promiscuous mode [ 1139.925888][T13109] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1139.984532][T13109] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1139.994082][T13307] bridge0: port 2(bridge_slave_1) entered blocking state [ 1139.994226][T13307] bridge0: port 2(bridge_slave_1) entered disabled state [ 1139.994435][T13307] bridge_slave_1: entered allmulticast mode [ 1140.015944][T13307] bridge_slave_1: entered promiscuous mode [ 1141.212062][T13307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1141.305387][T13307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1141.501082][T13307] team0: Port device team_slave_0 added [ 1141.561170][T13307] team0: Port device team_slave_1 added [ 1141.859340][T13307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1141.859364][T13307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1141.859395][T13307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1141.938688][T13307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1141.938711][T13307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1141.938742][T13307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1143.190097][T13307] hsr_slave_0: entered promiscuous mode [ 1143.204399][T13307] hsr_slave_1: entered promiscuous mode [ 1143.219224][T13307] debugfs: 'hsr0' already exists in 'hsr' [ 1143.219259][T13307] Cannot create hsr debugfs directory [ 1143.425995][T11937] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 1143.645154][T11937] usb 3-1: Using ep0 maxpacket: 8 [ 1143.661449][T11937] usb 3-1: New USB device found, idVendor=054c, idProduct=042f, bcdDevice= 0.00 [ 1143.686606][T11937] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1143.686643][T11937] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1143.686665][T11937] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1143.686708][T11937] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1143.850757][T11937] usb 3-1: config 0 descriptor?? [ 1144.373832][T11937] usbhid 3-1:0.0: can't add hid device: -71 [ 1144.373990][T11937] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1144.390398][T11937] usb 3-1: USB disconnect, device number 32 [ 1144.542431][T13109] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1144.825578][T13109] 8021q: adding VLAN 0 to HW filter on device team0 [ 1144.872393][ T6293] bridge0: port 1(bridge_slave_0) entered blocking state [ 1144.872781][ T6293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1144.914093][ T1773] bridge0: port 2(bridge_slave_1) entered blocking state [ 1144.914546][ T1773] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1150.885342][T13593] FAULT_INJECTION: forcing a failure. [ 1150.885342][T13593] name failslab, interval 1, probability 0, space 0, times 0 [ 1150.885388][T13593] CPU: 0 UID: 0 PID: 13593 Comm: syz.4.1483 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1150.885413][T13593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1150.885426][T13593] Call Trace: [ 1150.885433][T13593] [ 1150.885441][T13593] dump_stack_lvl+0xe8/0x150 [ 1150.885481][T13593] should_fail_ex+0x46b/0x600 [ 1150.885519][T13593] should_failslab+0xa8/0x100 [ 1150.885539][T13593] __kmalloc_noprof+0xfb/0x790 [ 1150.885569][T13593] ? asymmetric_key_generate_id+0x60/0x170 [ 1150.885640][T13593] ? asymmetric_key_generate_id+0x60/0x170 [ 1150.885672][T13593] ? __kmalloc_cache_noprof+0x3d5/0x680 [ 1150.885708][T13593] asymmetric_key_generate_id+0x60/0x170 [ 1150.885743][T13593] x509_key_preparse+0x3d7/0x6d0 [ 1150.885772][T13593] asymmetric_key_preparse+0xb9/0x1b0 [ 1150.885806][T13593] __key_create_or_update+0x3a9/0xa80 [ 1150.885840][T13593] ? __pfx___key_create_or_update+0x10/0x10 [ 1150.885867][T13593] ? lookup_user_key+0xb68/0x1150 [ 1150.885912][T13593] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 1150.885953][T13593] key_create_or_update+0x42/0x60 [ 1150.885987][T13593] __se_sys_add_key+0x349/0x420 [ 1150.886019][T13593] ? __pfx___se_sys_add_key+0x10/0x10 [ 1150.886056][T13593] ? __x64_sys_add_key+0x20/0xc0 [ 1150.886085][T13593] do_syscall_64+0x166/0x520 [ 1150.886110][T13593] ? trace_irq_disable+0x3b/0x140 [ 1150.886141][T13593] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1150.886164][T13593] ? clear_bhb_loop+0x70/0xc0 [ 1150.886191][T13593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1150.886212][T13593] RIP: 0033:0x7f45cf45e159 [ 1150.886232][T13593] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1150.886251][T13593] RSP: 002b:00007f45cd6b6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 1150.886277][T13593] RAX: ffffffffffffffda RBX: 00007f45cf6e5fa0 RCX: 00007f45cf45e159 [ 1150.886294][T13593] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 1150.886308][T13593] RBP: 00007f45cf4f506b R08: ffffffffffffffff R09: 0000000000000000 [ 1150.886324][T13593] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 1150.886339][T13593] R13: 00007f45cf6e6038 R14: 00007f45cf6e5fa0 R15: 00007fff38dd9a28 [ 1150.886377][T13593] [ 1151.448294][T13604] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1151.612867][T13607] Bluetooth: MGMT ver 1.23 [ 1151.820500][T13612] netlink: 'syz.2.1488': attribute type 2 has an invalid length. [ 1151.820530][T13612] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1488'. [ 1155.028596][T13650] batman_adv: batadv0: Adding interface: veth0 [ 1155.028637][T13650] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1155.031284][T13650] batman_adv: batadv0: Interface activated: veth0 [ 1155.123783][T13650] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1155.123821][T13650] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1155.292483][T11103] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1155.347848][T13650] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1155.347885][T13650] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1155.347910][T11103] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1155.451569][T11103] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1155.499009][T13650] batman_adv: batadv0: Interface deactivated: veth0 [ 1155.499039][T13650] batman_adv: batadv0: Removing interface: veth0 [ 1155.506870][T11103] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1155.544402][T11103] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1157.734183][T13681] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1157.864927][ T5596] Bluetooth: hci1: command tx timeout [ 1159.942965][ T5596] Bluetooth: hci1: command tx timeout [ 1162.238088][ T5596] Bluetooth: hci1: command tx timeout [ 1163.615554][T13738] 0x000000000000-0x000000020000 : "" [ 1163.635958][T13734] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1164.334861][ T5596] Bluetooth: hci1: command tx timeout [ 1164.695841][T13738] ftl_cs: FTL header not found. [ 1164.907767][T13307] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1165.060342][T13307] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1165.958896][T13307] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1166.064293][T13770] netlink: 'syz.2.1512': attribute type 23 has an invalid length. [ 1166.986584][T13307] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1167.125510][T13307] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1167.232846][T13307] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1167.486369][T13307] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1167.627634][T13307] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1168.267438][T13782] FAULT_INJECTION: forcing a failure. [ 1168.267438][T13782] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1168.267480][T13782] CPU: 1 UID: 0 PID: 13782 Comm: syz.3.1513 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1168.267505][T13782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1168.267516][T13782] Call Trace: [ 1168.267524][T13782] [ 1168.267533][T13782] dump_stack_lvl+0xe8/0x150 [ 1168.267570][T13782] should_fail_ex+0x46b/0x600 [ 1168.267605][T13782] _copy_from_user+0x2d/0xb0 [ 1168.267636][T13782] bpf_vlog_reverse_ubuf+0xb1/0x3e0 [ 1168.267673][T13782] bpf_vlog_finalize+0x154/0x3f0 [ 1168.267706][T13782] bpf_log_attr_finalize+0x80/0x1e0 [ 1168.267828][T13782] ? __pfx_bpf_log_attr_finalize+0x10/0x10 [ 1168.267873][T13782] btf_new_fd+0x36c/0xc70 [ 1168.267913][T13782] __sys_bpf+0xd2e/0xd90 [ 1168.267955][T13782] ? __pfx___sys_bpf+0x10/0x10 [ 1168.267981][T13782] ? rt_mutex_slowunlock+0x4ee/0xa30 [ 1168.268008][T13782] ? do_futex+0x3e7/0x4e0 [ 1168.268058][T13782] ? rcu_is_watching+0x16/0xb0 [ 1168.268110][T13782] __x64_sys_bpf+0xba/0xd0 [ 1168.268173][T13782] do_syscall_64+0x166/0x520 [ 1168.268198][T13782] ? trace_irq_disable+0x3b/0x140 [ 1168.268230][T13782] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1168.268254][T13782] ? clear_bhb_loop+0x70/0xc0 [ 1168.268281][T13782] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1168.268304][T13782] RIP: 0033:0x7f30006fe159 [ 1168.268326][T13782] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1168.268345][T13782] RSP: 002b:00007f2ffe956028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1168.268370][T13782] RAX: ffffffffffffffda RBX: 00007f3000985fa0 RCX: 00007f30006fe159 [ 1168.268388][T13782] RDX: 0000000000000028 RSI: 0000200000001b40 RDI: 0000000000000012 [ 1168.268403][T13782] RBP: 00007f300079506b R08: 0000000000000000 R09: 0000000000000000 [ 1168.268417][T13782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1168.268431][T13782] R13: 00007f3000986038 R14: 00007f3000985fa0 R15: 00007ffc2753c6d8 [ 1168.268469][T13782] [ 1168.719620][ T10] logitech-hidpp-device 0005:046D:B012.000D: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 1169.134137][T13794] netlink: 'syz.4.1514': attribute type 23 has an invalid length. [ 1170.206388][T13796] fido_id[13796]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1172.038596][T13821] netlink: 'syz.3.1518': attribute type 23 has an invalid length. [ 1173.013219][ T199] logitech-hidpp-device 0005:046D:B012.000E: item fetching failed at offset 3/4 [ 1173.026512][ T199] logitech-hidpp-device 0005:046D:B012.000E: hidpp_probe:parse failed [ 1173.026699][ T199] logitech-hidpp-device 0005:046D:B012.000E: probe with driver logitech-hidpp-device failed with error -22 [ 1173.418932][T13827] FAULT_INJECTION: forcing a failure. [ 1173.418932][T13827] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1173.418973][T13827] CPU: 1 UID: 0 PID: 13827 Comm: syz.4.1523 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1173.418999][T13827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1173.419013][T13827] Call Trace: [ 1173.419023][T13827] [ 1173.419033][T13827] dump_stack_lvl+0xe8/0x150 [ 1173.419074][T13827] should_fail_ex+0x46b/0x600 [ 1173.419127][T13827] _copy_to_user+0x31/0xb0 [ 1173.419163][T13827] bpf_vlog_reverse_ubuf+0x289/0x3e0 [ 1173.419204][T13827] bpf_vlog_finalize+0x154/0x3f0 [ 1173.419240][T13827] bpf_log_attr_finalize+0x80/0x1e0 [ 1173.419274][T13827] ? __pfx_bpf_log_attr_finalize+0x10/0x10 [ 1173.419320][T13827] btf_new_fd+0x36c/0xc70 [ 1173.419381][T13827] __sys_bpf+0xd2e/0xd90 [ 1173.419427][T13827] ? __pfx___sys_bpf+0x10/0x10 [ 1173.419461][T13827] ? rt_mutex_slowunlock+0x4ee/0xa30 [ 1173.419500][T13827] ? do_futex+0x458/0x4e0 [ 1173.419558][T13827] ? rcu_is_watching+0x16/0xb0 [ 1173.419612][T13827] __x64_sys_bpf+0xba/0xd0 [ 1173.419647][T13827] do_syscall_64+0x166/0x520 [ 1173.419671][T13827] ? trace_irq_disable+0x3b/0x140 [ 1173.419703][T13827] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1173.419728][T13827] ? clear_bhb_loop+0x70/0xc0 [ 1173.419757][T13827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1173.419781][T13827] RIP: 0033:0x7f45cf45e159 [ 1173.419805][T13827] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1173.419831][T13827] RSP: 002b:00007f45cd6b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1173.419857][T13827] RAX: ffffffffffffffda RBX: 00007f45cf6e5fa0 RCX: 00007f45cf45e159 [ 1173.419875][T13827] RDX: 0000000000000028 RSI: 0000200000001b40 RDI: 0000000000000012 [ 1173.419891][T13827] RBP: 00007f45cf4f506b R08: 0000000000000000 R09: 0000000000000000 [ 1173.419906][T13827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1173.419921][T13827] R13: 00007f45cf6e6038 R14: 00007f45cf6e5fa0 R15: 00007fff38dd9a28 [ 1173.419957][T13827] [ 1175.645483][ T6293] bridge_slave_1: left allmulticast mode [ 1175.645547][ T6293] bridge_slave_1: left promiscuous mode [ 1175.645851][ T6293] bridge0: port 2(bridge_slave_1) entered disabled state [ 1176.741817][ T6293] bridge_slave_0: left allmulticast mode [ 1176.741865][ T6293] bridge_slave_0: left promiscuous mode [ 1176.742163][ T6293] bridge0: port 1(bridge_slave_0) entered disabled state [ 1178.088471][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 1178.088523][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 1180.879547][ T6293] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1180.962833][ T6293] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1180.993684][ T6293] bond0 (unregistering): Released all slaves [ 1181.078175][T13653] bridge0: port 1(bridge_slave_0) entered blocking state [ 1181.078460][T13653] bridge0: port 1(bridge_slave_0) entered disabled state [ 1181.078683][T13653] bridge_slave_0: entered allmulticast mode [ 1181.116253][T13653] bridge_slave_0: entered promiscuous mode [ 1181.387436][T13653] bridge0: port 2(bridge_slave_1) entered blocking state [ 1181.387768][T13653] bridge0: port 2(bridge_slave_1) entered disabled state [ 1181.388132][T13653] bridge_slave_1: entered allmulticast mode [ 1181.391720][T13653] bridge_slave_1: entered promiscuous mode [ 1181.792943][T13653] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1181.807971][T13653] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1182.025158][T13896] FAULT_INJECTION: forcing a failure. [ 1182.025158][T13896] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1182.025200][T13896] CPU: 0 UID: 0 PID: 13896 Comm: syz.2.1532 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1182.025226][T13896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1182.025239][T13896] Call Trace: [ 1182.025249][T13896] [ 1182.025259][T13896] dump_stack_lvl+0xe8/0x150 [ 1182.025303][T13896] should_fail_ex+0x46b/0x600 [ 1182.025352][T13896] _copy_from_user+0x2d/0xb0 [ 1182.025389][T13896] bpf_vlog_reverse_ubuf+0xb1/0x3e0 [ 1182.025425][T13896] bpf_vlog_finalize+0x154/0x3f0 [ 1182.025457][T13896] bpf_log_attr_finalize+0x80/0x1e0 [ 1182.025488][T13896] ? __pfx_bpf_log_attr_finalize+0x10/0x10 [ 1182.025531][T13896] btf_new_fd+0x36c/0xc70 [ 1182.025571][T13896] __sys_bpf+0xd2e/0xd90 [ 1182.025615][T13896] ? __pfx___sys_bpf+0x10/0x10 [ 1182.025647][T13896] ? rt_mutex_slowunlock+0x4ee/0xa30 [ 1182.025686][T13896] ? do_futex+0x3e7/0x4e0 [ 1182.025742][T13896] ? rcu_is_watching+0x16/0xb0 [ 1182.025783][T13896] __x64_sys_bpf+0xba/0xd0 [ 1182.025949][T13896] do_syscall_64+0x166/0x520 [ 1182.025996][T13896] ? trace_irq_disable+0x3b/0x140 [ 1182.026029][T13896] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1182.026052][T13896] ? clear_bhb_loop+0x70/0xc0 [ 1182.026081][T13896] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1182.026106][T13896] RIP: 0033:0x7fe60472e159 [ 1182.026130][T13896] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1182.026158][T13896] RSP: 002b:00007fe602986028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1182.026248][T13896] RAX: ffffffffffffffda RBX: 00007fe6049b5fa0 RCX: 00007fe60472e159 [ 1182.026261][T13896] RDX: 0000000000000028 RSI: 0000200000001b40 RDI: 0000000000000012 [ 1182.026271][T13896] RBP: 00007fe6047c506b R08: 0000000000000000 R09: 0000000000000000 [ 1182.026280][T13896] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1182.026293][T13896] R13: 00007fe6049b6038 R14: 00007fe6049b5fa0 R15: 00007fff42bf4ec8 [ 1182.026318][T13896] [ 1182.189719][T13307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1182.200705][T13653] team0: Port device team_slave_0 added [ 1182.756068][ T6293] hsr_slave_0: left promiscuous mode [ 1182.800247][ T6293] hsr_slave_1: left promiscuous mode [ 1182.801176][ T6293] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1182.844058][ T6293] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1183.159881][T10856] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 1183.364856][T10856] usb 3-1: Using ep0 maxpacket: 32 [ 1183.366137][T10856] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1183.367911][T10856] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1183.380936][T10856] usb 3-1: config 0 descriptor?? [ 1183.415237][T10856] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1183.756299][ T5718] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 1183.905030][ T5718] usb 4-1: Using ep0 maxpacket: 8 [ 1183.907810][ T5718] usb 4-1: New USB device found, idVendor=054c, idProduct=042f, bcdDevice= 0.00 [ 1183.909534][ T5718] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1183.909635][ T5718] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1183.909662][ T5718] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1183.909708][ T5718] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1183.951636][ T5718] usb 4-1: config 0 descriptor?? [ 1184.003274][T10856] gspca_vc032x: reg_w err -71 [ 1184.003635][T10856] gspca_vc032x: I2c Bus Busy Wait 00 [ 1184.003651][T10856] gspca_vc032x: I2c Bus Busy Wait 00 [ 1184.003736][T10856] gspca_vc032x: I2c Bus Busy Wait 00 [ 1184.003747][T10856] gspca_vc032x: I2c Bus Busy Wait 00 [ 1184.003757][T10856] gspca_vc032x: I2c Bus Busy Wait 00 [ 1184.003767][T10856] gspca_vc032x: I2c Bus Busy Wait 00 [ 1184.003776][T10856] gspca_vc032x: I2c Bus Busy Wait 00 [ 1184.003786][T10856] gspca_vc032x: I2c Bus Busy Wait 00 [ 1184.003795][T10856] gspca_vc032x: I2c Bus Busy Wait 00 [ 1184.003804][T10856] gspca_vc032x: I2c Bus Busy Wait 00 [ 1184.003814][T10856] gspca_vc032x: I2c Bus Busy Wait 00 [ 1184.003823][T10856] gspca_vc032x: I2c Bus Busy Wait 00 [ 1184.003831][T10856] gspca_vc032x: I2c Bus Busy Wait 00 [ 1184.003902][T10856] gspca_vc032x: I2c Bus Busy Wait 00 [ 1184.003913][T10856] gspca_vc032x: I2c Bus Busy Wait 00 [ 1184.003922][T10856] gspca_vc032x: I2c Bus Busy Wait 00 [ 1184.003931][T10856] gspca_vc032x: I2c Bus Busy Wait 00 [ 1184.003942][T10856] gspca_vc032x: I2c Bus Busy Wait 00 [ 1184.003986][T10856] gspca_vc032x: Unknown sensor... [ 1184.004146][T10856] vc032x 3-1:0.0: probe with driver vc032x failed with error -22 [ 1184.237485][T10856] usb 3-1: USB disconnect, device number 33 [ 1184.441308][ T5718] hid_parser_main: 2 callbacks suppressed [ 1184.441353][ T5718] sony 0003:054C:042F.000F: unknown main item tag 0x0 [ 1184.441382][ T5718] sony 0003:054C:042F.000F: unknown main item tag 0x0 [ 1184.441409][ T5718] sony 0003:054C:042F.000F: unknown main item tag 0x0 [ 1184.441433][ T5718] sony 0003:054C:042F.000F: unknown main item tag 0x0 [ 1184.441458][ T5718] sony 0003:054C:042F.000F: unknown main item tag 0x0 [ 1184.441483][ T5718] sony 0003:054C:042F.000F: unknown main item tag 0x0 [ 1184.441509][ T5718] sony 0003:054C:042F.000F: unbalanced collection at end of report description [ 1184.443611][ T5718] sony 0003:054C:042F.000F: parse failed [ 1184.443732][ T5718] sony 0003:054C:042F.000F: probe with driver sony failed with error -22 [ 1184.620361][ T199] usb 4-1: USB disconnect, device number 47 [ 1184.819101][ T6293] team0 (unregistering): Port device team_slave_1 removed [ 1184.878686][ T6293] team0 (unregistering): Port device team_slave_0 removed [ 1185.079310][T13653] team0: Port device team_slave_1 added [ 1185.317542][T13653] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1185.317564][T13653] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1185.317595][T13653] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1185.325206][T13653] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1185.325226][T13653] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1185.325253][T13653] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1185.656126][T13653] hsr_slave_0: entered promiscuous mode [ 1185.659313][T13653] hsr_slave_1: entered promiscuous mode [ 1185.660387][T13653] debugfs: 'hsr0' already exists in 'hsr' [ 1185.660417][T13653] Cannot create hsr debugfs directory [ 1186.801982][T11103] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1186.932632][T11103] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1186.936706][T11103] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1186.939819][T11103] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1186.951294][T11103] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1187.275117][T13938] FAULT_INJECTION: forcing a failure. [ 1187.275117][T13938] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1187.275306][T13938] CPU: 1 UID: 0 PID: 13938 Comm: syz.3.1541 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1187.275333][T13938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1187.275346][T13938] Call Trace: [ 1187.275355][T13938] [ 1187.275364][T13938] dump_stack_lvl+0xe8/0x150 [ 1187.275402][T13938] should_fail_ex+0x46b/0x600 [ 1187.275439][T13938] _copy_from_user+0x2d/0xb0 [ 1187.275472][T13938] bpf_vlog_reverse_ubuf+0xb1/0x3e0 [ 1187.275511][T13938] bpf_vlog_finalize+0x154/0x3f0 [ 1187.275544][T13938] bpf_log_attr_finalize+0x80/0x1e0 [ 1187.275587][T13938] ? __pfx_bpf_log_attr_finalize+0x10/0x10 [ 1187.275626][T13938] btf_new_fd+0x36c/0xc70 [ 1187.275665][T13938] __sys_bpf+0xd2e/0xd90 [ 1187.275703][T13938] ? __pfx___sys_bpf+0x10/0x10 [ 1187.275795][T13938] ? rt_mutex_slowunlock+0x4ee/0xa30 [ 1187.275844][T13938] ? do_futex+0x3e7/0x4e0 [ 1187.275899][T13938] ? rcu_is_watching+0x16/0xb0 [ 1187.276045][T13938] __x64_sys_bpf+0xba/0xd0 [ 1187.276081][T13938] do_syscall_64+0x166/0x520 [ 1187.276103][T13938] ? trace_irq_disable+0x3b/0x140 [ 1187.276132][T13938] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1187.276154][T13938] ? clear_bhb_loop+0x70/0xc0 [ 1187.276181][T13938] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1187.276203][T13938] RIP: 0033:0x7f30006fe159 [ 1187.276227][T13938] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1187.276246][T13938] RSP: 002b:00007f2ffe956028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1187.276274][T13938] RAX: ffffffffffffffda RBX: 00007f3000985fa0 RCX: 00007f30006fe159 [ 1187.276291][T13938] RDX: 0000000000000028 RSI: 0000200000001b40 RDI: 0000000000000012 [ 1187.276305][T13938] RBP: 00007f300079506b R08: 0000000000000000 R09: 0000000000000000 [ 1187.276320][T13938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1187.276333][T13938] R13: 00007f3000986038 R14: 00007f3000985fa0 R15: 00007ffc2753c6d8 [ 1187.276370][T13938] [ 1187.991956][T13947] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1188.614815][ T10] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 1188.754925][ T5718] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 1188.875394][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 1188.876765][ T10] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1188.879629][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1188.884812][T10856] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 1188.904888][ T5718] usb 3-1: Using ep0 maxpacket: 32 [ 1188.905788][ T5718] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1188.907901][ T5718] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1188.987890][ T10] usb 5-1: config 0 descriptor?? [ 1188.992908][ T5718] usb 3-1: config 0 descriptor?? [ 1189.017396][ T10] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1189.034904][T10856] usb 4-1: Using ep0 maxpacket: 32 [ 1189.037364][T10856] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1189.039133][T10856] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1189.063269][T10856] usb 4-1: config 0 descriptor?? [ 1189.084190][T10856] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1189.197593][ T5718] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1189.216444][T11103] Bluetooth: hci4: command tx timeout [ 1189.570111][T10856] gspca_vc032x: reg_w err -71 [ 1189.570207][T10856] gspca_vc032x: I2c Bus Busy Wait 00 [ 1189.570222][T10856] gspca_vc032x: I2c Bus Busy Wait 00 [ 1189.570231][T10856] gspca_vc032x: I2c Bus Busy Wait 00 [ 1189.570240][T10856] gspca_vc032x: I2c Bus Busy Wait 00 [ 1189.570250][T10856] gspca_vc032x: I2c Bus Busy Wait 00 [ 1189.570259][T10856] gspca_vc032x: I2c Bus Busy Wait 00 [ 1189.570270][T10856] gspca_vc032x: I2c Bus Busy Wait 00 [ 1189.570278][T10856] gspca_vc032x: I2c Bus Busy Wait 00 [ 1189.570288][T10856] gspca_vc032x: I2c Bus Busy Wait 00 [ 1189.570296][T10856] gspca_vc032x: I2c Bus Busy Wait 00 [ 1189.570371][T10856] gspca_vc032x: I2c Bus Busy Wait 00 [ 1189.570382][T10856] gspca_vc032x: I2c Bus Busy Wait 00 [ 1189.570391][T10856] gspca_vc032x: I2c Bus Busy Wait 00 [ 1189.570401][T10856] gspca_vc032x: I2c Bus Busy Wait 00 [ 1189.570410][T10856] gspca_vc032x: I2c Bus Busy Wait 00 [ 1189.570420][T10856] gspca_vc032x: I2c Bus Busy Wait 00 [ 1189.570429][T10856] gspca_vc032x: I2c Bus Busy Wait 00 [ 1189.570439][T10856] gspca_vc032x: I2c Bus Busy Wait 00 [ 1189.570449][T10856] gspca_vc032x: Unknown sensor... [ 1189.570626][T10856] vc032x 4-1:0.0: probe with driver vc032x failed with error -22 [ 1189.707740][ T10] gspca_vc032x: reg_w err -71 [ 1189.707762][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 1189.707775][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 1189.707784][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 1189.707793][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 1189.707802][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 1189.707812][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 1189.707821][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 1189.707831][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 1189.707840][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 1189.707850][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 1189.707858][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 1189.707868][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 1189.707877][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 1189.707886][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 1189.707895][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 1189.707904][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 1189.707913][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 1189.707923][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 1189.707932][ T10] gspca_vc032x: Unknown sensor... [ 1189.708022][ T10] vc032x 5-1:0.0: probe with driver vc032x failed with error -22 [ 1189.871286][ T5718] gspca_vc032x: reg_w err -71 [ 1189.871310][ T5718] gspca_vc032x: I2c Bus Busy Wait 00 [ 1189.871323][ T5718] gspca_vc032x: I2c Bus Busy Wait 00 [ 1189.871334][ T5718] gspca_vc032x: I2c Bus Busy Wait 00 [ 1189.871343][ T5718] gspca_vc032x: I2c Bus Busy Wait 00 [ 1189.871353][ T5718] gspca_vc032x: I2c Bus Busy Wait 00 [ 1189.871363][ T5718] gspca_vc032x: I2c Bus Busy Wait 00 [ 1189.871373][ T5718] gspca_vc032x: I2c Bus Busy Wait 00 [ 1189.871392][ T5718] gspca_vc032x: I2c Bus Busy Wait 00 [ 1189.871403][ T5718] gspca_vc032x: I2c Bus Busy Wait 00 [ 1189.871414][ T5718] gspca_vc032x: I2c Bus Busy Wait 00 [ 1189.871423][ T5718] gspca_vc032x: I2c Bus Busy Wait 00 [ 1189.871433][ T5718] gspca_vc032x: I2c Bus Busy Wait 00 [ 1189.871444][ T5718] gspca_vc032x: I2c Bus Busy Wait 00 [ 1189.871453][ T5718] gspca_vc032x: I2c Bus Busy Wait 00 [ 1189.871463][ T5718] gspca_vc032x: I2c Bus Busy Wait 00 [ 1189.871472][ T5718] gspca_vc032x: I2c Bus Busy Wait 00 [ 1189.871482][ T5718] gspca_vc032x: I2c Bus Busy Wait 00 [ 1189.871492][ T5718] gspca_vc032x: I2c Bus Busy Wait 00 [ 1189.871503][ T5718] gspca_vc032x: Unknown sensor... [ 1189.871600][ T5718] vc032x 3-1:0.0: probe with driver vc032x failed with error -22 [ 1189.871606][ T10] usb 5-1: USB disconnect, device number 26 [ 1189.943393][T10856] usb 4-1: USB disconnect, device number 48 [ 1190.058750][ T5247] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1190.137478][ T5718] usb 3-1: USB disconnect, device number 34 [ 1192.027567][T11103] Bluetooth: hci4: command tx timeout [ 1192.152057][T13998] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1549'. [ 1193.880255][ T5247] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1194.096584][T11103] Bluetooth: hci4: command tx timeout [ 1194.113906][T14010] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1194.277074][T14013] netlink: 'syz.3.1555': attribute type 1 has an invalid length. [ 1194.296853][T14014] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1554'. [ 1194.609285][ T5718] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 1194.712855][T14013] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1194.785117][ T5718] usb 3-1: Using ep0 maxpacket: 32 [ 1194.785882][ T5718] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1194.787789][ T5718] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1194.812244][ T5718] usb 3-1: config 0 descriptor?? [ 1194.828453][ T5718] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1195.994851][ T5718] gspca_vc032x: reg_w err -71 [ 1195.994874][ T5718] gspca_vc032x: I2c Bus Busy Wait 00 [ 1195.994887][ T5718] gspca_vc032x: I2c Bus Busy Wait 00 [ 1195.994896][ T5718] gspca_vc032x: I2c Bus Busy Wait 00 [ 1195.994905][ T5718] gspca_vc032x: I2c Bus Busy Wait 00 [ 1195.994915][ T5718] gspca_vc032x: I2c Bus Busy Wait 00 [ 1195.994924][ T5718] gspca_vc032x: I2c Bus Busy Wait 00 [ 1195.994933][ T5718] gspca_vc032x: I2c Bus Busy Wait 00 [ 1195.994943][ T5718] gspca_vc032x: I2c Bus Busy Wait 00 [ 1195.994952][ T5718] gspca_vc032x: I2c Bus Busy Wait 00 [ 1195.994962][ T5718] gspca_vc032x: I2c Bus Busy Wait 00 [ 1195.994971][ T5718] gspca_vc032x: I2c Bus Busy Wait 00 [ 1195.994981][ T5718] gspca_vc032x: I2c Bus Busy Wait 00 [ 1195.994990][ T5718] gspca_vc032x: I2c Bus Busy Wait 00 [ 1195.995000][ T5718] gspca_vc032x: I2c Bus Busy Wait 00 [ 1195.995008][ T5718] gspca_vc032x: I2c Bus Busy Wait 00 [ 1195.995019][ T5718] gspca_vc032x: I2c Bus Busy Wait 00 [ 1195.995029][ T5718] gspca_vc032x: I2c Bus Busy Wait 00 [ 1195.995039][ T5718] gspca_vc032x: I2c Bus Busy Wait 00 [ 1195.995049][ T5718] gspca_vc032x: Unknown sensor... [ 1195.995143][ T5718] vc032x 3-1:0.0: probe with driver vc032x failed with error -22 [ 1196.015276][ T5718] usb 3-1: USB disconnect, device number 35 [ 1196.161868][T14024] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1558'. [ 1196.176582][T11103] Bluetooth: hci4: command tx timeout [ 1196.255536][T14026] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1559'. [ 1196.605610][ T10] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 1196.795830][ T10] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1196.801021][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1196.801053][ T10] usb 3-1: Product: syz [ 1196.801069][ T10] usb 3-1: Manufacturer: syz [ 1196.801086][ T10] usb 3-1: SerialNumber: syz [ 1197.310615][ T10] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1197.310690][ T10] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1197.344283][T14043] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1565'. [ 1198.278285][T14052] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1568'. [ 1199.401721][ T10] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 1199.610815][T14065] fuse: Bad value for 'fd' [ 1199.693248][ T10] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 1199.739869][ T10] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 1199.739936][ T10] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1199.740816][ T10] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1199.844764][ T10] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 1199.959080][ T10] usb 3-1: USB disconnect, device number 36 [ 1202.360284][T10856] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1202.506953][T10856] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1202.509193][T10856] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1202.509256][T10856] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1202.678814][T10856] usb 5-1: config 0 descriptor?? [ 1202.809143][T10856] pwc: Askey VC010 type 2 USB webcam detected. [ 1202.862933][T10856] pwc: send_video_command error -71 [ 1202.863017][T10856] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 1202.863194][T10856] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 1202.909898][T10856] usb 5-1: USB disconnect, device number 27 [ 1207.057260][T14099] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1584'. [ 1212.040172][T14152] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1595'. [ 1212.425266][T10856] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 1212.579878][T10856] usb 3-1: Using ep0 maxpacket: 32 [ 1212.613352][T10856] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1212.811284][T10856] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1212.811336][T10856] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1212.883601][T10856] usb 3-1: config 0 descriptor?? [ 1215.794278][ T5718] usb 3-1: USB disconnect, device number 37 [ 1215.912840][T13931] bridge0: port 1(bridge_slave_0) entered blocking state [ 1215.913529][T13931] bridge0: port 1(bridge_slave_0) entered disabled state [ 1215.913709][T13931] bridge_slave_0: entered allmulticast mode [ 1215.917275][T13931] bridge_slave_0: entered promiscuous mode [ 1216.025144][ T6293] bridge_slave_1: left allmulticast mode [ 1216.025188][ T6293] bridge_slave_1: left promiscuous mode [ 1216.025466][ T6293] bridge0: port 2(bridge_slave_1) entered disabled state [ 1216.126086][ T6293] bridge_slave_0: left allmulticast mode [ 1216.126116][ T6293] bridge_slave_0: left promiscuous mode [ 1216.126420][ T6293] bridge0: port 1(bridge_slave_0) entered disabled state [ 1216.965742][ T6293] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1217.065594][ T6293] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1217.136699][ T6293] bond0 (unregistering): Released all slaves [ 1217.155775][T13931] bridge0: port 2(bridge_slave_1) entered blocking state [ 1217.155960][T13931] bridge0: port 2(bridge_slave_1) entered disabled state [ 1217.156197][T13931] bridge_slave_1: entered allmulticast mode [ 1217.159598][T13931] bridge_slave_1: entered promiscuous mode [ 1217.385916][T13931] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1217.409633][T13931] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1217.746504][ T60] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1217.859726][ T60] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1217.881468][ T60] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1217.904475][ T60] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1217.916419][ T60] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1218.366794][T13931] team0: Port device team_slave_0 added [ 1218.434805][ T10] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 1218.614776][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 1218.615778][ T10] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1218.617717][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1218.620506][T13931] team0: Port device team_slave_1 added [ 1218.685022][ T10] usb 3-1: config 0 descriptor?? [ 1218.712207][ T10] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1218.775901][ T6293] hsr_slave_0: left promiscuous mode [ 1218.826676][ T6293] hsr_slave_1: left promiscuous mode [ 1218.828102][ T6293] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1218.901803][ T6293] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1218.903305][ T10] gspca_vc032x: reg_r err -32 [ 1218.903329][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 1218.903340][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 1218.903349][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 1218.903359][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 1218.903368][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 1218.903377][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 1218.903388][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 1218.903397][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 1218.903407][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 1218.903416][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 1218.903426][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 1218.903436][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 1218.903445][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 1218.903454][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 1218.903464][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 1218.903473][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 1218.903482][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 1218.903492][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 1218.903502][ T10] gspca_vc032x: Unknown sensor... [ 1218.903603][ T10] vc032x 3-1:0.0: probe with driver vc032x failed with error -22 [ 1219.080726][ T10] usb 3-1: USB disconnect, device number 38 [ 1219.154839][T14219] FAULT_INJECTION: forcing a failure. [ 1219.154839][T14219] name failslab, interval 1, probability 0, space 0, times 0 [ 1219.154878][T14219] CPU: 0 UID: 0 PID: 14219 Comm: syz.3.1607 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1219.154902][T14219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1219.154916][T14219] Call Trace: [ 1219.154924][T14219] [ 1219.154934][T14219] dump_stack_lvl+0xe8/0x150 [ 1219.154977][T14219] should_fail_ex+0x46b/0x600 [ 1219.155015][T14219] should_failslab+0xa8/0x100 [ 1219.155040][T14219] __kmalloc_node_track_caller_noprof+0xfb/0x7b0 [ 1219.155073][T14219] ? __lock_acquire+0x747/0x2de0 [ 1219.155106][T14219] ? __kernfs_new_node+0xac/0xa70 [ 1219.155171][T14219] ? __kernfs_new_node+0xac/0xa70 [ 1219.155212][T14219] kstrdup+0x42/0x100 [ 1219.155240][T14219] __kernfs_new_node+0xac/0xa70 [ 1219.155283][T14219] ? __pfx___kernfs_new_node+0x10/0x10 [ 1219.155313][T14219] ? kernfs_root+0x1c/0x230 [ 1219.155358][T14219] ? kernfs_root+0x1c/0x230 [ 1219.155387][T14219] ? kernfs_root+0x1c/0x230 [ 1219.155413][T14219] ? kernfs_root+0x1c/0x230 [ 1219.155448][T14219] kernfs_create_dir_ns+0xfe/0x230 [ 1219.155489][T14219] sysfs_create_dir_ns+0x12f/0x2a0 [ 1219.155522][T14219] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1219.155557][T14219] ? rt_spin_unlock+0x165/0x200 [ 1219.155594][T14219] kobject_add_internal+0x62c/0xce0 [ 1219.155633][T14219] kobject_init_and_add+0x12b/0x1a0 [ 1219.155664][T14219] ? __pfx_kobject_init_and_add+0x10/0x10 [ 1219.155694][T14219] ? __kmalloc_cache_noprof+0x3d5/0x680 [ 1219.155740][T14219] swnode_register+0x3c2/0x590 [ 1219.155783][T14219] fwnode_create_software_node+0x194/0x1f0 [ 1219.155817][T14219] device_create_managed_software_node+0xce/0x1f0 [ 1219.155857][T14219] iommufd_test+0x38a8/0x6370 [ 1219.155895][T14219] ? __lock_acquire+0x747/0x2de0 [ 1219.155923][T14219] ? __pfx_iommufd_test+0x10/0x10 [ 1219.155965][T14219] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1219.156000][T14219] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1219.156034][T14219] ? lock_acquire+0x115/0x350 [ 1219.156093][T14219] iommufd_fops_ioctl+0x468/0x600 [ 1219.156129][T14219] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 1219.156171][T14219] ? __fget_files+0x2a/0x420 [ 1219.156202][T14219] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1219.156230][T14219] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 1219.156261][T14219] __se_sys_ioctl+0xff/0x170 [ 1219.156298][T14219] do_syscall_64+0x166/0x520 [ 1219.156322][T14219] ? trace_irq_disable+0x3b/0x140 [ 1219.156362][T14219] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1219.156386][T14219] ? clear_bhb_loop+0x70/0xc0 [ 1219.156415][T14219] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1219.156439][T14219] RIP: 0033:0x7f30006fe159 [ 1219.156460][T14219] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1219.156478][T14219] RSP: 002b:00007f2ffe956028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1219.156502][T14219] RAX: ffffffffffffffda RBX: 00007f3000985fa0 RCX: 00007f30006fe159 [ 1219.156517][T14219] RDX: 0000200000000200 RSI: 0000000000003ba0 RDI: 0000000000000003 [ 1219.156532][T14219] RBP: 00007f300079506b R08: 0000000000000000 R09: 0000000000000000 [ 1219.156547][T14219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1219.156562][T14219] R13: 00007f3000986038 R14: 00007f3000985fa0 R15: 00007ffc2753c6d8 [ 1219.156599][T14219] [ 1219.156646][T14219] kobject: kobject_add_internal failed for node1 (error: -12 parent: software_nodes) [ 1219.156767][T14219] iommufd_mock iommufd_mock0: add pasid-num-bits property failed, rc: -12 [ 1220.867052][ T60] Bluetooth: hci5: command tx timeout [ 1222.128024][ T6293] team0 (unregistering): Port device team_slave_1 removed [ 1222.217427][ T6293] team0 (unregistering): Port device team_slave_0 removed [ 1222.894810][ T60] Bluetooth: hci5: command tx timeout [ 1223.445663][T14255] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1613'. [ 1223.920480][T13931] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1223.920504][T13931] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1223.920535][T13931] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1223.997096][T13931] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1223.997118][T13931] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1223.997147][T13931] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1224.326711][T13931] hsr_slave_0: entered promiscuous mode [ 1224.328708][T13931] hsr_slave_1: entered promiscuous mode [ 1224.331436][T13931] debugfs: 'hsr0' already exists in 'hsr' [ 1224.331467][T13931] Cannot create hsr debugfs directory [ 1224.974927][ T60] Bluetooth: hci5: command tx timeout [ 1225.231212][T14277] FAULT_INJECTION: forcing a failure. [ 1225.231212][T14277] name failslab, interval 1, probability 0, space 0, times 0 [ 1225.231255][T14277] CPU: 1 UID: 0 PID: 14277 Comm: syz.2.1616 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1225.231271][T14277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1225.231279][T14277] Call Trace: [ 1225.231285][T14277] [ 1225.231292][T14277] dump_stack_lvl+0xe8/0x150 [ 1225.231317][T14277] should_fail_ex+0x46b/0x600 [ 1225.231349][T14277] should_failslab+0xa8/0x100 [ 1225.231374][T14277] __kmalloc_node_track_caller_noprof+0xfb/0x7b0 [ 1225.231400][T14277] ? __lock_acquire+0x747/0x2de0 [ 1225.231417][T14277] ? __kernfs_new_node+0xac/0xa70 [ 1225.231433][T14277] ? __kernfs_new_node+0xac/0xa70 [ 1225.231453][T14277] kstrdup+0x42/0x100 [ 1225.231468][T14277] __kernfs_new_node+0xac/0xa70 [ 1225.231490][T14277] ? __pfx___kernfs_new_node+0x10/0x10 [ 1225.231507][T14277] ? kernfs_root+0x1c/0x230 [ 1225.231526][T14277] ? kernfs_root+0x1c/0x230 [ 1225.231541][T14277] ? kernfs_root+0x1c/0x230 [ 1225.231555][T14277] ? kernfs_root+0x1c/0x230 [ 1225.231573][T14277] kernfs_create_dir_ns+0xfe/0x230 [ 1225.231593][T14277] sysfs_create_dir_ns+0x12f/0x2a0 [ 1225.231611][T14277] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1225.231630][T14277] ? rt_spin_unlock+0x165/0x200 [ 1225.231651][T14277] kobject_add_internal+0x62c/0xce0 [ 1225.231671][T14277] kobject_init_and_add+0x12b/0x1a0 [ 1225.231690][T14277] ? __pfx_kobject_init_and_add+0x10/0x10 [ 1225.231708][T14277] ? __kmalloc_cache_noprof+0x3d5/0x680 [ 1225.231739][T14277] swnode_register+0x3c2/0x590 [ 1225.231761][T14277] fwnode_create_software_node+0x194/0x1f0 [ 1225.231782][T14277] device_create_managed_software_node+0xce/0x1f0 [ 1225.231803][T14277] iommufd_test+0x38a8/0x6370 [ 1225.231824][T14277] ? __lock_acquire+0x747/0x2de0 [ 1225.231840][T14277] ? __pfx_iommufd_test+0x10/0x10 [ 1225.231861][T14277] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1225.231880][T14277] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1225.231898][T14277] ? lock_acquire+0x115/0x350 [ 1225.231928][T14277] iommufd_fops_ioctl+0x468/0x600 [ 1225.231949][T14277] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 1225.231973][T14277] ? __fget_files+0x2a/0x420 [ 1225.231990][T14277] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1225.232005][T14277] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 1225.232021][T14277] __se_sys_ioctl+0xff/0x170 [ 1225.232040][T14277] do_syscall_64+0x166/0x520 [ 1225.232053][T14277] ? trace_irq_disable+0x3b/0x140 [ 1225.232069][T14277] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1225.232083][T14277] ? clear_bhb_loop+0x70/0xc0 [ 1225.232098][T14277] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1225.232110][T14277] RIP: 0033:0x7fe60472e159 [ 1225.232124][T14277] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1225.232135][T14277] RSP: 002b:00007fe602986028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1225.232151][T14277] RAX: ffffffffffffffda RBX: 00007fe6049b5fa0 RCX: 00007fe60472e159 [ 1225.232161][T14277] RDX: 0000200000000200 RSI: 0000000000003ba0 RDI: 0000000000000003 [ 1225.232169][T14277] RBP: 00007fe6047c506b R08: 0000000000000000 R09: 0000000000000000 [ 1225.232177][T14277] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1225.232185][T14277] R13: 00007fe6049b6038 R14: 00007fe6049b5fa0 R15: 00007fff42bf4ec8 [ 1225.232204][T14277] [ 1225.232213][T14277] kobject: kobject_add_internal failed for node1 (error: -12 parent: software_nodes) [ 1225.232280][T14277] iommufd_mock iommufd_mock0: add pasid-num-bits property failed, rc: -12 [ 1225.344880][ T5718] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 1225.499817][ T5718] usb 5-1: Using ep0 maxpacket: 16 [ 1225.519924][ T5718] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1225.521202][ T5718] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 1225.521230][ T5718] usb 5-1: config 0 has no interface number 0 [ 1225.521274][ T5718] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1225.521299][ T5718] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1225.525314][ T5718] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1225.525346][ T5718] usb 5-1: Product: syz [ 1225.525360][ T5718] usb 5-1: SerialNumber: syz [ 1225.556607][ T5718] usb 5-1: config 0 descriptor?? [ 1225.663903][ T5718] cm109 5-1:0.8: invalid payload size 0, expected 4 [ 1225.670144][ T5718] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input17 [ 1226.193864][ C1] cm109_urb_ctl_callback: 86 callbacks suppressed [ 1226.193898][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1226.194122][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1226.194329][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1226.194526][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1226.194865][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1226.195138][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1226.195390][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1226.195646][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1226.195908][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1226.196159][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1226.223596][ T5718] usb 5-1: USB disconnect, device number 28 [ 1226.223701][ C1] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1226.532203][ T5718] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1227.435047][ T6789] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 1227.577458][ T60] Bluetooth: hci5: command tx timeout [ 1227.597055][ T6789] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1227.603898][ T6789] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1227.603932][ T6789] usb 4-1: Product: syz [ 1227.603949][ T6789] usb 4-1: Manufacturer: syz [ 1227.603964][ T6789] usb 4-1: SerialNumber: syz [ 1227.725831][ T5247] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1228.184555][ T6789] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1228.184599][ T6789] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1228.995204][T11937] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1229.151083][T11937] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1229.170843][T11937] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1229.170964][T11937] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1229.237116][T11937] usb 5-1: config 0 descriptor?? [ 1229.312928][T11937] pwc: Askey VC010 type 2 USB webcam detected. [ 1229.578193][T11937] pwc: send_video_command error -71 [ 1229.578284][T11937] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 1229.578480][T11937] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 1229.657514][ T6789] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 1229.659214][ T6789] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 1229.659831][ T6789] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 1229.659898][ T6789] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1229.660982][ T6789] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1229.661424][T11937] usb 5-1: USB disconnect, device number 29 [ 1229.779853][ T6789] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 1229.832385][ T6789] usb 4-1: USB disconnect, device number 49 [ 1230.185491][T11937] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1230.339383][T11937] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1230.341293][T11937] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1230.341353][T11937] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1230.423306][T11937] usb 5-1: config 0 descriptor?? [ 1230.448883][T11937] pwc: Askey VC010 type 2 USB webcam detected. [ 1230.846543][T11937] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1230.901932][T11937] pwc: recv_control_msg error -32 req 02 val 2700 [ 1230.914976][T11937] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1230.917595][T11937] pwc: recv_control_msg error -32 req 04 val 1000 [ 1230.919740][T11937] pwc: recv_control_msg error -32 req 04 val 1300 [ 1231.125053][T11937] pwc: recv_control_msg error -71 req 02 val 2000 [ 1231.127075][T11937] pwc: recv_control_msg error -71 req 02 val 2100 [ 1231.127556][T11937] pwc: recv_control_msg error -71 req 04 val 1500 [ 1231.128122][T11937] pwc: recv_control_msg error -71 req 02 val 2500 [ 1231.128578][T11937] pwc: recv_control_msg error -71 req 02 val 2400 [ 1231.129116][T11937] pwc: recv_control_msg error -71 req 02 val 2600 [ 1231.130595][T11937] pwc: recv_control_msg error -71 req 02 val 2900 [ 1231.131070][T11937] pwc: recv_control_msg error -71 req 02 val 2800 [ 1231.131908][T11937] pwc: recv_control_msg error -71 req 04 val 1100 [ 1231.133611][T11937] pwc: recv_control_msg error -71 req 04 val 1200 [ 1231.539368][T11937] pwc: Registered as video103. [ 1231.575352][T11937] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input18 [ 1231.644202][T11937] usb 5-1: USB disconnect, device number 30 [ 1232.280276][T14342] 0x000000000006-0x000000020000 : "" [ 1232.314684][T14342] ftl_cs: FTL header corrupt! [ 1232.404775][ T199] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 1232.426471][ T5247] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1232.576879][ T199] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1232.582660][ T199] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1232.582719][ T199] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1232.647455][ T199] usb 4-1: config 0 descriptor?? [ 1232.915400][ T199] usbhid 4-1:0.0: can't add hid device: -71 [ 1232.915541][ T199] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1232.957027][ T199] usb 4-1: USB disconnect, device number 50 [ 1234.285114][ T199] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 1234.496396][ T199] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 1234.500203][ T199] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1234.500270][ T199] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1234.553136][ T199] usb 4-1: config 0 descriptor?? [ 1235.062787][ T199] aiptek 4-1:0.0: Aiptek using 400 ms programming speed [ 1235.105595][ T199] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input19 [ 1235.970253][ C0] aiptek 4-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1235.972267][ T199] usb 4-1: USB disconnect, device number 51 [ 1236.385352][T14373] FAULT_INJECTION: forcing a failure. [ 1236.385352][T14373] name failslab, interval 1, probability 0, space 0, times 0 [ 1236.385400][T14373] CPU: 1 UID: 0 PID: 14373 Comm: syz.2.1637 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1236.385435][T14373] Tainted: [L]=SOFTLOCKUP [ 1236.385443][T14373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1236.385458][T14373] Call Trace: [ 1236.385467][T14373] [ 1236.385478][T14373] dump_stack_lvl+0xe8/0x150 [ 1236.385540][T14373] should_fail_ex+0x46b/0x600 [ 1236.385581][T14373] should_failslab+0xa8/0x100 [ 1236.385606][T14373] __kmalloc_cache_noprof+0xa1/0x680 [ 1236.385642][T14373] ? io_wq_create+0x6b/0x7b0 [ 1236.385677][T14373] ? io_wq_create+0x6b/0x7b0 [ 1236.385720][T14373] io_wq_create+0x6b/0x7b0 [ 1236.385760][T14373] io_uring_alloc_task_context+0x271/0x6c0 [ 1236.385814][T14373] ? __pfx_io_uring_alloc_task_context+0x10/0x10 [ 1236.385884][T14373] ? alloc_file_pseudo+0x156/0x1e0 [ 1236.385916][T14373] __io_uring_add_tctx_node+0x48d/0x630 [ 1236.385979][T14373] ? __pfx___io_uring_add_tctx_node+0x10/0x10 [ 1236.386034][T14373] ? __anon_inode_getfile+0x16c/0x210 [ 1236.386100][T14373] io_uring_create+0x596/0x990 [ 1236.386137][T14373] __se_sys_io_uring_setup+0x2a8/0x2c0 [ 1236.386177][T14373] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 1236.386231][T14373] ? rcu_is_watching+0x16/0xb0 [ 1236.386278][T14373] do_syscall_64+0x166/0x520 [ 1236.386312][T14373] ? trace_irq_disable+0x3b/0x140 [ 1236.386343][T14373] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1236.386373][T14373] ? clear_bhb_loop+0x70/0xc0 [ 1236.386403][T14373] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1236.386426][T14373] RIP: 0033:0x7fe60472e159 [ 1236.386449][T14373] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1236.386467][T14373] RSP: 002b:00007fe602985fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 1236.386504][T14373] RAX: ffffffffffffffda RBX: 0000200000000400 RCX: 00007fe60472e159 [ 1236.386520][T14373] RDX: 0000200000000000 RSI: 0000200000000400 RDI: 0000000000000f00 [ 1236.386533][T14373] RBP: 00007fe6047c506b R08: 0000000000000000 R09: 0000000000000000 [ 1236.386554][T14373] R10: 0000200000000080 R11: 0000000000000206 R12: 0000200000000000 [ 1236.386579][T14373] R13: 0000200000000080 R14: 0000200000000100 R15: 00007fff42bf4ec8 [ 1236.386615][T14373] [ 1236.618444][ T199] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 1237.006664][ T199] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1237.009394][ T199] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1237.009463][ T199] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1237.073093][ T199] usb 4-1: config 0 descriptor?? [ 1237.103202][ T199] pwc: Askey VC010 type 2 USB webcam detected. [ 1237.626428][T14387] 0x000000000006-0x000000020000 : "" [ 1237.639630][T14387] ftl_cs: FTL header corrupt! [ 1237.925511][T14368] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1237.979696][T14368] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1238.483163][ T199] pwc: recv_control_msg error -71 req 02 val 2b00 [ 1238.500326][ T199] pwc: recv_control_msg error -71 req 02 val 2700 [ 1238.500917][ T199] pwc: recv_control_msg error -71 req 02 val 2c00 [ 1238.502738][ T199] pwc: recv_control_msg error -71 req 04 val 1000 [ 1238.504304][ T199] pwc: recv_control_msg error -71 req 04 val 1300 [ 1238.505018][ T199] pwc: recv_control_msg error -71 req 04 val 1400 [ 1238.517335][ T199] pwc: recv_control_msg error -71 req 02 val 2000 [ 1238.583115][ T199] pwc: recv_control_msg error -71 req 02 val 2100 [ 1238.583643][ T199] pwc: recv_control_msg error -71 req 04 val 1500 [ 1238.584128][ T199] pwc: recv_control_msg error -71 req 02 val 2500 [ 1238.584602][ T199] pwc: recv_control_msg error -71 req 02 val 2400 [ 1238.614324][ T199] pwc: recv_control_msg error -71 req 02 val 2600 [ 1238.621972][ T199] pwc: recv_control_msg error -71 req 02 val 2900 [ 1238.629071][ T199] pwc: recv_control_msg error -71 req 02 val 2800 [ 1238.629647][ T199] pwc: recv_control_msg error -71 req 04 val 1100 [ 1238.630038][ T199] pwc: recv_control_msg error -71 req 04 val 1200 [ 1238.724787][ T199] pwc: Registered as video103. [ 1238.731018][T14204] bridge0: port 1(bridge_slave_0) entered blocking state [ 1238.731175][T14204] bridge0: port 1(bridge_slave_0) entered disabled state [ 1238.731413][T14204] bridge_slave_0: entered allmulticast mode [ 1238.770044][ T199] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input20 [ 1238.799267][T14204] bridge_slave_0: entered promiscuous mode [ 1238.816324][ T199] usb 4-1: USB disconnect, device number 52 [ 1238.861623][T14204] bridge0: port 2(bridge_slave_1) entered blocking state [ 1238.861877][T14204] bridge0: port 2(bridge_slave_1) entered disabled state [ 1238.862106][T14204] bridge_slave_1: entered allmulticast mode [ 1238.931250][T14204] bridge_slave_1: entered promiscuous mode [ 1239.399800][T14204] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1239.459255][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.459339][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.502262][T14204] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1241.314569][T14422] FAULT_INJECTION: forcing a failure. [ 1241.314569][T14422] name failslab, interval 1, probability 0, space 0, times 0 [ 1241.328922][T14422] CPU: 0 UID: 0 PID: 14422 Comm: syz.2.1649 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1241.329083][T14422] Tainted: [L]=SOFTLOCKUP [ 1241.329103][T14422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1241.329119][T14422] Call Trace: [ 1241.329131][T14422] [ 1241.329143][T14422] dump_stack_lvl+0xe8/0x150 [ 1241.329187][T14422] should_fail_ex+0x46b/0x600 [ 1241.329226][T14422] should_failslab+0xa8/0x100 [ 1241.329253][T14422] __kmalloc_cache_noprof+0xa1/0x680 [ 1241.329316][T14422] ? io_wq_create+0x6b/0x7b0 [ 1241.329351][T14422] ? io_wq_create+0x6b/0x7b0 [ 1241.329396][T14422] io_wq_create+0x6b/0x7b0 [ 1241.329438][T14422] io_uring_alloc_task_context+0x271/0x6c0 [ 1241.329479][T14422] ? __pfx_io_uring_alloc_task_context+0x10/0x10 [ 1241.329510][T14422] ? alloc_file_pseudo+0x156/0x1e0 [ 1241.329545][T14422] __io_uring_add_tctx_node+0x48d/0x630 [ 1241.329592][T14422] ? __pfx___io_uring_add_tctx_node+0x10/0x10 [ 1241.329628][T14422] ? __anon_inode_getfile+0x16c/0x210 [ 1241.329669][T14422] io_uring_create+0x596/0x990 [ 1241.329697][T14422] __se_sys_io_uring_setup+0x2a8/0x2c0 [ 1241.329723][T14422] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 1241.329769][T14422] ? rcu_is_watching+0x16/0xb0 [ 1241.329816][T14422] do_syscall_64+0x166/0x520 [ 1241.329841][T14422] ? trace_irq_disable+0x3b/0x140 [ 1241.329868][T14422] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1241.329890][T14422] ? clear_bhb_loop+0x70/0xc0 [ 1241.329919][T14422] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1241.329941][T14422] RIP: 0033:0x7fe60472e159 [ 1241.329964][T14422] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1241.329982][T14422] RSP: 002b:00007fe602985fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 1241.330019][T14422] RAX: ffffffffffffffda RBX: 0000200000000400 RCX: 00007fe60472e159 [ 1241.330036][T14422] RDX: 0000200000000000 RSI: 0000200000000400 RDI: 0000000000000f00 [ 1241.330053][T14422] RBP: 00007fe6047c506b R08: 0000000000000000 R09: 0000000000000000 [ 1241.330069][T14422] R10: 0000200000000080 R11: 0000000000000206 R12: 0000200000000000 [ 1241.330086][T14422] R13: 0000200000000080 R14: 0000200000000100 R15: 00007fff42bf4ec8 [ 1241.330124][T14422] [ 1243.006204][T14204] team0: Port device team_slave_0 added [ 1243.083671][T14204] team0: Port device team_slave_1 added [ 1244.035059][T14204] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1244.035083][T14204] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1244.035113][T14204] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1244.039755][T14204] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1244.039776][T14204] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1244.039807][T14204] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1246.797053][T14204] hsr_slave_0: entered promiscuous mode [ 1246.839503][T14204] hsr_slave_1: entered promiscuous mode [ 1246.840226][T14204] debugfs: 'hsr0' already exists in 'hsr' [ 1246.840245][T14204] Cannot create hsr debugfs directory [ 1247.455183][ T6293] bridge_slave_1: left allmulticast mode [ 1247.455213][ T6293] bridge_slave_1: left promiscuous mode [ 1247.455434][ T6293] bridge0: port 2(bridge_slave_1) entered disabled state [ 1247.576071][ T6293] bridge_slave_0: left allmulticast mode [ 1247.576114][ T6293] bridge_slave_0: left promiscuous mode [ 1247.576375][ T6293] bridge0: port 1(bridge_slave_0) entered disabled state [ 1248.309775][ T6293] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1248.979710][T14473] fuse: Unknown parameter 'grou00000000000000000000' [ 1250.318681][ T6293] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1250.452495][ T6293] bond0 (unregistering): Released all slaves [ 1250.798516][T11103] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1251.085822][T11103] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1251.151387][T11103] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1251.190740][T11103] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1251.245706][T11103] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1251.742410][ T10] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 1252.219928][ T10] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1252.224497][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1252.224564][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1252.350795][ T10] usb 3-1: config 0 descriptor?? [ 1252.426964][ T10] pwc: Askey VC010 type 2 USB webcam detected. [ 1252.758621][ T10] pwc: send_video_command error -71 [ 1252.758645][ T10] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 1252.758768][ T10] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71 [ 1252.763231][ T10] usb 3-1: USB disconnect, device number 39 [ 1252.984877][ T199] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 1253.106705][ T6293] hsr_slave_0: left promiscuous mode [ 1253.158190][ T6293] hsr_slave_1: left promiscuous mode [ 1253.159847][ T6293] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1253.177055][ T199] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1253.198564][ T199] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1253.198658][ T199] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1253.220227][ T199] usb 5-1: config 0 descriptor?? [ 1253.246389][ T6293] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1253.247414][ T199] pwc: Askey VC010 type 2 USB webcam detected. [ 1253.434522][T14489] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1253.447967][T14489] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1253.464901][ T10] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 1253.638818][ T10] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1253.679181][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1253.679339][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1253.745355][ T10] usb 3-1: config 0 descriptor?? [ 1253.808033][ T10] pwc: Askey VC010 type 2 USB webcam detected. [ 1253.916988][ T199] pwc: recv_control_msg error -71 req 02 val 2700 [ 1253.923645][ T199] pwc: recv_control_msg error -71 req 02 val 2c00 [ 1253.926546][ T199] pwc: recv_control_msg error -71 req 04 val 1000 [ 1253.947373][ T199] pwc: recv_control_msg error -71 req 04 val 1300 [ 1254.035732][ T199] pwc: recv_control_msg error -71 req 04 val 1400 [ 1254.039834][ T199] pwc: recv_control_msg error -71 req 02 val 2000 [ 1254.046685][ T199] pwc: recv_control_msg error -71 req 02 val 2100 [ 1254.052553][ T60] Bluetooth: hci1: command tx timeout [ 1254.059472][ T199] pwc: recv_control_msg error -71 req 04 val 1500 [ 1254.062381][ T199] pwc: recv_control_msg error -71 req 02 val 2500 [ 1254.063419][ T199] pwc: recv_control_msg error -71 req 02 val 2400 [ 1254.064305][ T199] pwc: recv_control_msg error -71 req 02 val 2600 [ 1254.158391][ T10] pwc: send_video_command error -71 [ 1254.158408][ T10] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 1254.158488][ T10] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71 [ 1254.160233][ T199] pwc: recv_control_msg error -71 req 02 val 2900 [ 1254.179036][ T199] pwc: recv_control_msg error -71 req 02 val 2800 [ 1254.181756][ T199] pwc: recv_control_msg error -71 req 04 val 1100 [ 1254.183897][ T199] pwc: recv_control_msg error -71 req 04 val 1200 [ 1254.330090][ T10] usb 3-1: USB disconnect, device number 40 [ 1254.465523][T14498] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1664'. [ 1254.502123][ T199] pwc: Registered as video103. [ 1254.538150][ T199] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input21 [ 1254.690098][ T199] usb 5-1: USB disconnect, device number 31 [ 1254.740747][ T6293] team0 (unregistering): Port device team_slave_1 removed [ 1255.138486][ T6293] team0 (unregistering): Port device team_slave_0 removed [ 1256.094930][ T60] Bluetooth: hci1: command tx timeout [ 1258.176306][ T60] Bluetooth: hci1: command tx timeout [ 1260.335062][ T60] Bluetooth: hci1: command tx timeout [ 1260.520937][T14564] 0x000000000006-0x000000020000 : "" [ 1261.805751][T14565] fuse: Unknown parameter 'group_i00000000000000000000' [ 1261.857023][ T5247] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1262.789751][T14564] ftl_cs: FTL header corrupt! [ 1263.274863][T10856] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 1263.465865][T10856] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1263.472781][T10856] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1263.472814][T10856] usb 5-1: Product: syz [ 1263.472829][T10856] usb 5-1: Manufacturer: syz [ 1263.472844][T10856] usb 5-1: SerialNumber: syz [ 1264.096182][T10856] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1264.096260][T10856] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1265.112018][T10856] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPROTO [ 1265.112091][T10856] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1265.207705][T10856] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1265.310993][T10856] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 1265.521533][T10856] usb 5-1: USB disconnect, device number 32 [ 1267.006467][T14603] 0x000000000006-0x000000020000 : "" [ 1267.031803][T14603] ftl_cs: FTL header corrupt! [ 1268.667891][T14476] bridge0: port 1(bridge_slave_0) entered blocking state [ 1268.668092][T14476] bridge0: port 1(bridge_slave_0) entered disabled state [ 1268.668289][T14476] bridge_slave_0: entered allmulticast mode [ 1268.674230][T14476] bridge_slave_0: entered promiscuous mode [ 1268.803431][T14476] bridge0: port 2(bridge_slave_1) entered blocking state [ 1268.803548][T14476] bridge0: port 2(bridge_slave_1) entered disabled state [ 1268.803703][T14476] bridge_slave_1: entered allmulticast mode [ 1268.848436][T14476] bridge_slave_1: entered promiscuous mode [ 1269.295579][ T5718] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 1269.445633][ T5718] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1269.447667][ T5718] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1269.447750][ T5718] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1269.488994][ T5718] usb 3-1: config 0 descriptor?? [ 1269.505004][ T5718] pwc: Askey VC010 type 2 USB webcam detected. [ 1269.527986][T14476] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1269.603337][T14476] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1270.138767][T10856] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 1270.165707][ T5718] pwc: recv_control_msg error -71 req 02 val 2700 [ 1270.166341][ T5718] pwc: recv_control_msg error -71 req 02 val 2c00 [ 1270.166899][ T5718] pwc: recv_control_msg error -71 req 04 val 1000 [ 1270.167483][ T5718] pwc: recv_control_msg error -71 req 04 val 1300 [ 1270.168018][ T5718] pwc: recv_control_msg error -71 req 04 val 1400 [ 1270.170136][ T5718] pwc: recv_control_msg error -71 req 02 val 2000 [ 1270.170773][ T5718] pwc: recv_control_msg error -71 req 02 val 2100 [ 1270.171332][ T5718] pwc: recv_control_msg error -71 req 04 val 1500 [ 1270.171872][ T5718] pwc: recv_control_msg error -71 req 02 val 2500 [ 1270.172494][ T5718] pwc: recv_control_msg error -71 req 02 val 2400 [ 1270.174295][ T5718] pwc: recv_control_msg error -71 req 02 val 2600 [ 1270.295910][ T5718] pwc: recv_control_msg error -71 req 02 val 2900 [ 1270.299825][ T5718] pwc: recv_control_msg error -71 req 02 val 2800 [ 1270.301942][ T5718] pwc: recv_control_msg error -71 req 04 val 1100 [ 1270.302458][ T5718] pwc: recv_control_msg error -71 req 04 val 1200 [ 1270.365758][T10856] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1270.373899][T10856] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1270.373931][T10856] usb 4-1: Product: syz [ 1270.373948][T10856] usb 4-1: Manufacturer: syz [ 1270.373964][T10856] usb 4-1: SerialNumber: syz [ 1271.835927][ T5718] pwc: Registered as video103. [ 1271.915715][ T5718] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input22 [ 1271.951378][ T5718] usb 3-1: USB disconnect, device number 41 [ 1272.148600][T10856] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1272.148681][T10856] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1272.422556][T14476] team0: Port device team_slave_0 added [ 1272.449619][T14476] team0: Port device team_slave_1 added [ 1273.208273][T10856] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPROTO [ 1273.208340][T10856] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1273.209385][T10856] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1273.286017][T14476] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1273.286041][T14476] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1273.286079][T14476] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1273.290958][T10856] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 1273.381460][T10856] usb 4-1: USB disconnect, device number 53 [ 1273.400862][T14476] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1273.400884][T14476] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1273.400911][T14476] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1274.064478][T14667] Bluetooth: hci0: invalid length 0, exp 2 for type 16 [ 1274.891439][T14683] netlink: 'syz.4.1699': attribute type 1 has an invalid length. [ 1275.036891][T14687] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1699'. [ 1275.201658][T14204] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1275.308801][T14204] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1275.592091][T14683] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1275.702936][T14204] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1275.778280][T14204] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1275.881306][T14476] hsr_slave_0: entered promiscuous mode [ 1275.890183][T14476] hsr_slave_1: entered promiscuous mode [ 1275.899299][T14476] debugfs: 'hsr0' already exists in 'hsr' [ 1275.899336][T14476] Cannot create hsr debugfs directory [ 1276.015951][T14702] Bluetooth: hci0: invalid length 0, exp 2 for type 16 [ 1276.155149][ T5718] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 1276.180979][T14704] netlink: 'syz.4.1705': attribute type 2 has an invalid length. [ 1276.181008][T14704] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1705'. [ 1276.230733][T14204] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1276.308758][ T5718] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1276.313883][ T5718] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1276.313915][ T5718] usb 4-1: Product: syz [ 1276.313941][ T5718] usb 4-1: Manufacturer: syz [ 1276.313957][ T5718] usb 4-1: SerialNumber: syz [ 1276.465353][T14204] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1276.470247][T14204] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1276.592467][T14204] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1277.015870][ T5718] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1277.015945][ T5718] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1277.586660][ T6293] bridge_slave_1: left allmulticast mode [ 1277.586707][ T6293] bridge_slave_1: left promiscuous mode [ 1277.587014][ T6293] bridge0: port 2(bridge_slave_1) entered disabled state [ 1277.769906][ T6293] bridge_slave_0: left allmulticast mode [ 1277.769955][ T6293] bridge_slave_0: left promiscuous mode [ 1277.770266][ T6293] bridge0: port 1(bridge_slave_0) entered disabled state [ 1278.049900][ T5718] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPROTO [ 1278.049979][ T5718] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1278.051298][ T5718] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1278.120764][ T5718] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 1278.217130][ T5718] usb 4-1: USB disconnect, device number 54 [ 1278.555954][ T6293] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1278.637094][ T6293] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1278.709552][ T6293] bond0 (unregistering): Released all slaves [ 1279.540618][ T6293] hsr_slave_0: left promiscuous mode [ 1279.566586][ T6293] hsr_slave_1: left promiscuous mode [ 1279.568214][ T6293] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1279.606634][ T6293] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1279.857134][T11103] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1279.961859][T11103] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1279.965303][T11103] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1280.034009][T11103] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1280.063126][T11103] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1280.847036][ T6293] team0 (unregistering): Port device team_slave_1 removed [ 1280.926396][ T6293] team0 (unregistering): Port device team_slave_0 removed [ 1282.186674][ T60] Bluetooth: hci4: command tx timeout [ 1283.445435][T14773] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1719'. [ 1284.119673][T14758] fuse: Bad value for 'user_id' [ 1284.119726][T14758] fuse: Bad value for 'user_id' [ 1285.147180][ T60] Bluetooth: hci4: command tx timeout [ 1286.563256][T14778] fuse: Bad value for 'user_id' [ 1286.563307][T14778] fuse: Bad value for 'user_id' [ 1287.294573][ T60] Bluetooth: hci4: command tx timeout [ 1288.835370][ T5685] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 1289.084789][ T5685] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1289.155453][ T5685] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1289.155487][ T5685] usb 4-1: Product: syz [ 1289.155503][ T5685] usb 4-1: Manufacturer: syz [ 1289.155519][ T5685] usb 4-1: SerialNumber: syz [ 1289.656814][ T5247] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1289.694816][ T60] Bluetooth: hci4: command tx timeout [ 1289.726512][ T5685] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1289.726587][ T5685] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1290.974920][ T5685] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 1290.981742][ T5685] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPIPE [ 1290.982161][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 1290.982492][ T5685] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPIPE [ 1290.982551][ T5685] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1291.059649][ T5685] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1291.088227][ T5685] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -32 [ 1291.118915][ T5685] usb 4-1: USB disconnect, device number 55 [ 1295.541735][T10856] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 1295.700984][T10856] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1295.718893][T10856] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1295.718926][T10856] usb 4-1: Product: syz [ 1295.718939][T10856] usb 4-1: Manufacturer: syz [ 1295.718954][T10856] usb 4-1: SerialNumber: syz [ 1296.191052][T10856] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1296.191128][T10856] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1298.179423][T10856] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 1298.181085][T10856] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPIPE [ 1298.182724][T10856] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 1298.182785][T10856] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1298.245620][T10856] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1298.311405][T10856] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 1298.355892][T10856] usb 4-1: USB disconnect, device number 56 [ 1298.810427][ T37] kauditd_printk_skb: 56 callbacks suppressed [ 1298.810469][ T37] audit: type=1326 audit(1790811852.857:1090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14871 comm="syz.2.1736" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe60472e159 code=0x0 [ 1299.263935][T14729] bridge0: port 1(bridge_slave_0) entered blocking state [ 1299.264074][T14729] bridge0: port 1(bridge_slave_0) entered disabled state [ 1299.264218][T14729] bridge_slave_0: entered allmulticast mode [ 1299.278029][T14729] bridge_slave_0: entered promiscuous mode [ 1299.325465][T14729] bridge0: port 2(bridge_slave_1) entered blocking state [ 1299.325612][T14729] bridge0: port 2(bridge_slave_1) entered disabled state [ 1299.325827][T14729] bridge_slave_1: entered allmulticast mode [ 1299.330834][T14729] bridge_slave_1: entered promiscuous mode [ 1299.608134][T14729] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1300.898392][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.898521][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.998978][T14729] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1302.901137][T14729] team0: Port device team_slave_0 added [ 1302.931390][T14729] team0: Port device team_slave_1 added [ 1303.363218][T14729] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1303.363242][T14729] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1303.363269][T14729] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1303.492687][T14729] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1303.492709][T14729] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1303.492740][T14729] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1304.115034][ T5718] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 1304.178514][T14729] hsr_slave_0: entered promiscuous mode [ 1304.182290][T14729] hsr_slave_1: entered promiscuous mode [ 1304.208783][T14729] debugfs: 'hsr0' already exists in 'hsr' [ 1304.208818][T14729] Cannot create hsr debugfs directory [ 1304.328591][ T5718] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1304.330143][ T5718] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1304.407828][ T5718] usb 5-1: config 0 descriptor?? [ 1304.707906][ T5718] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1304.709900][ T5718] [drm:udl_init] *ERROR* Selecting channel failed [ 1304.815988][ T5718] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 1 [ 1304.816018][ T5718] [drm] Initialized udl on minor 1 [ 1304.819958][ T5718] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1304.866211][ T5718] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 1304.874575][ T5718] usb 5-1: USB disconnect, device number 33 [ 1305.805377][T14476] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1305.903368][T14476] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1306.405909][T14476] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1306.424875][ T6789] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 1306.440129][T14476] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1306.479006][T14476] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1306.559314][T14476] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1306.649328][T14947] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1749'. [ 1306.650208][ T6789] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1306.670853][ T6789] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1306.694201][ T6789] usb 4-1: config 0 descriptor?? [ 1306.801066][T14476] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1306.973594][ T6789] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1307.080293][T14476] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1307.292841][ T6789] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 1 [ 1307.292873][ T6789] [drm] Initialized udl on minor 1 [ 1307.385340][ T6789] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1307.385919][ T6789] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 1307.387299][ T199] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1307.443952][ T6789] usb 4-1: USB disconnect, device number 57 [ 1307.484426][ T199] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1307.484962][ T199] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 1308.905265][ T6293] bridge_slave_1: left allmulticast mode [ 1308.905461][ T6293] bridge_slave_1: left promiscuous mode [ 1308.905714][ T6293] bridge0: port 2(bridge_slave_1) entered disabled state [ 1309.015959][ T6293] bridge_slave_0: left allmulticast mode [ 1309.016000][ T6293] bridge_slave_0: left promiscuous mode [ 1309.016283][ T6293] bridge0: port 1(bridge_slave_0) entered disabled state [ 1309.385490][ T6293] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1309.465768][ T6293] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1309.526574][ T6293] bond0 (unregistering): Released all slaves [ 1310.224924][ T6293] hsr_slave_0: left promiscuous mode [ 1310.265615][ T6293] hsr_slave_1: left promiscuous mode [ 1310.266559][ T6293] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1310.305821][ T6293] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1311.389479][T11103] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1311.427517][T11103] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1311.432310][T11103] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1311.471838][T11103] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1311.483448][T11103] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1311.968309][ T6293] team0 (unregistering): Port device team_slave_1 removed [Read from remote host us-central1-ssh-serialport.googleapis.com: Connection reset by peer client_loop: send disconnect: Broken pipe