last executing test programs: 3m28.894101815s ago: executing program 0 (id=1): syz_io_uring_setup(0x4f6, 0x0, &(0x7f0000000180), 0x0, 0x0) r0 = eventfd2(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r2, &(0x7f0000000200)='.\x00', 0x100, &(0x7f0000001dc0)={0x81, 0x0, 0x80000}, 0x20) setsockopt$MRT6_TABLE(r2, 0x29, 0xcf, &(0x7f0000000040)=0xff, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r3, 0x0, 0x33, &(0x7f0000000040)=0x80000001, 0x4) clock_gettime(0x0, &(0x7f00000039c0)={0x0, 0x0}) recvmmsg(r3, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)=""/90, 0x5a}, {&(0x7f0000000280)=""/116, 0x74}, {&(0x7f0000000300)=""/236, 0xec}, {&(0x7f0000000400)=""/165, 0xa5}], 0x4, &(0x7f0000000500)=""/122, 0x7a}, 0x80f}, {{&(0x7f0000000580)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000600)=""/56, 0x38}, {&(0x7f0000000680)=""/244, 0xf4}, {&(0x7f0000000780)=""/87, 0x57}, {&(0x7f0000000800)=""/244, 0xf4}, {&(0x7f0000000900)=""/151, 0x97}, {&(0x7f00000009c0)=""/79, 0x4f}], 0x6, &(0x7f0000000ac0)=""/75, 0x4b}, 0x9}, {{&(0x7f0000000b40)=@tipc, 0x80, &(0x7f0000000dc0)=[{&(0x7f0000000bc0)=""/248, 0xf8}, {&(0x7f0000000cc0)=""/207, 0xcf}], 0x2, &(0x7f0000000e00)=""/148, 0x94}, 0x8}, {{&(0x7f0000000ec0)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000002ec0)=[{&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000002e00)=""/151, 0x97}], 0x2}, 0x80000001}, {{&(0x7f0000002f00)=@nfc_llcp, 0x80, &(0x7f00000035c0)=[{&(0x7f0000002f80)=""/201, 0xc9}, {&(0x7f0000003080)=""/150, 0x96}, {&(0x7f0000003140)=""/91, 0x5b}, {&(0x7f00000031c0)=""/234, 0xea}, {&(0x7f00000032c0)=""/90, 0x5a}, {&(0x7f0000003340)=""/73, 0x49}, {&(0x7f00000033c0)=""/199, 0xc7}, {&(0x7f00000034c0)=""/84, 0x54}, {&(0x7f0000003540)=""/102, 0x66}], 0x9, &(0x7f0000003680)=""/128, 0x80}, 0xb9dd}, {{&(0x7f0000003700)=@nfc, 0x80, &(0x7f00000037c0)=[{&(0x7f0000003780)=""/15, 0xf}], 0x1, &(0x7f0000003800)=""/11, 0xb}, 0x8}], 0x6, 0x100, &(0x7f0000003a00)={r4, r5+10000000}) 3m27.554593027s ago: executing program 0 (id=12): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x6) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockname(r3, 0x0, &(0x7f0000000080)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x24000, 0x0) mkdirat$cgroup(r4, &(0x7f0000000000)='syz1\x00', 0x1ff) setsockopt$RDS_GET_MR_FOR_DEST(r4, 0x114, 0x7, &(0x7f00000003c0)={@llc={0x1a, 0x230, 0x6, 0xee, 0x6, 0xd2, @broadcast}, {&(0x7f0000000280)=""/172, 0xac}, &(0x7f0000000380), 0x10}, 0xa0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r5 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000080)="13", 0x1, 0xfffffffffffffffd) keyctl$read(0xb, r5, &(0x7f0000000240)=""/112, 0x349b7f55) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x14, 0x10, 0x701, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000000)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000002200)=ANY=[@ANYBLOB="020200090d0000000000000000000000030006000000000002000000ac1414bb00ed00000000000002000100fffffffffffffffd00000000030005000000000002000000ac1414aa000000000000000001001500000000000100140000000000010016"], 0x68}, 0x1, 0x7}, 0x0) 3m25.839490468s ago: executing program 0 (id=17): r0 = creat(&(0x7f0000000080)='./file0\x00', 0x6a) close(r0) memfd_create(&(0x7f00000004c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7?\xfe?[\xdb9\xef\x9fb$aZ\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16T~\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x99aW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-g\xa3', 0x6) r1 = socket$tipc(0x1e, 0x2, 0x0) mount$9p_fd(0x3000000, &(0x7f0000000300)='./file0\x00', &(0x7f00000002c0), 0x200480, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 3m25.019243744s ago: executing program 0 (id=20): syz_open_dev$dvb_frontend(0x0, 0x0, 0x22000) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xb) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd27, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x4) 3m9.677092962s ago: executing program 32 (id=20): syz_open_dev$dvb_frontend(0x0, 0x0, 0x22000) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xb) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd27, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x4) 2m16.914748607s ago: executing program 2 (id=180): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$btrfs_control(0xffffff9c, 0x0, 0x400000, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x400, 0x2, 0xd6}, &(0x7f0000000100)=0x0, 0x0, &(0x7f0000000500)=0x0) syz_ublk_add_dev(r1, r2, 0x0, r3, &(0x7f00000003c0)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0xd3df, 0x0, 0x4, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x1, 0x2000, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35b9, 0x1, 0xfff7fffd, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1000c1cf, 0x1000, 0x0, 0x1f0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x49, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x4, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) r7 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route_sched(r0, 0x0, 0x0) syz_pidfd_open(0x0, 0x0) r8 = getpid() sched_setscheduler(r8, 0x1, &(0x7f0000000100)=0x5) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000600)={{0x3, 0x0, 0x0, 0x0, 0x0, 0x6, 0xa}, 0x0, 0x0, 0xffffffffffffffb1, 0x8, 0x2, 0x3, 0x8, 0x0, 0xe, 0x7, 0x0, r8}) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp256-generic\x00'}, 0x58) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000070601080000000000000000000000000500010006"], 0x1c}}, 0x0) 2m15.210631712s ago: executing program 2 (id=186): getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) syz_open_dev$ndb(&(0x7f00000007c0), 0x0, 0x20000) r0 = io_uring_setup(0x15ce, &(0x7f0000000140)={0x0, 0x52c1, 0x1, 0x0, 0x319}) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vxcan1\x00'}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) syz_open_procfs$pagemap(r3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x19, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x43}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfeff}, {0x85, 0x0, 0x0, 0x82}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x80000000}}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x1080}, @printk={@li, {}, {0x7, 0x1, 0xb, 0x1, 0xa, 0x20}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xf}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x85}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x500}}}, &(0x7f0000000080)='GPL\x00', 0x3, 0xff8, &(0x7f0000000780)=""/4088, 0x41000, 0x41, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000d}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) r8 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r8, 0x4020565a, &(0x7f0000000080)={0x5, 0x4, 0x7}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f0000000240)={0x48, 0x2, r7, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f00000007c0)={0x28, 0x5, r7, 0x0, &(0x7f00002ce000/0x1000)=nil, 0x1000, 0x1020800}) close_range(r0, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21}, &(0x7f0000000100)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 2m11.430174496s ago: executing program 2 (id=195): r0 = socket$l2tp(0x2, 0x2, 0x73) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$kcm(0xa, 0x7, 0x106) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) setrlimit(0xd, &(0x7f0000000280)={0xc800, 0x10000}) setpriority(0x1, 0x0, 0x80000000) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='stat\x00') mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000001800)=0x7, 0x6, 0x1) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r0, 0x0, 0x0) unshare(0x20000400) r5 = io_uring_setup(0x6ed6, &(0x7f00000004c0)={0x0, 0xbf57, 0x40000, 0x2, 0x26e}) io_uring_register$IORING_REGISTER_SEND_MSG_RING(0xffffffffffffffff, 0x1f, &(0x7f00000003c0)={0x28, 0x0, 0x0, r5, 0x0, 0x0, 0x8, 0x3, 0x1}, 0x1) 2m10.069200618s ago: executing program 2 (id=201): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, 0x0, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) keyctl$negate(0xd, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f00000102c0)=[{&(0x7f0000010300)="1633dd995ea1419a4613f2795ddb2471d988d3ec0206ab7eab56147b333b4faeaca4791736e2504c61dfb4e11778f13d9012cf652793792ccf239fef9f24389d95fcd28f4fd0", 0x46}, {&(0x7f00000100c0)="ceec5d287a6399e28414598d5d477ee1dfd2302520908675d44a17c22f64be4c7d1cbd53dcfff0933dcbdffcf24691ed1bfa8e912200bbfcffa1b51c024e18c6a5b801bcf0cc6f22eea8d2721dc6f000fbc4a2d15f0eb5a0f27c54c6ba", 0x5d}, {&(0x7f00000101c0)="f265590458bf7a115a80f2884a198dccd80e4dcb2a4c5766b985647c0169b908c35b23ed7e62bf788ab5b02f6090fa71fba0b23e0930284393f20313cf0b163f97ebe5d506d327a78b522f3ab5359d2512347dfbaae519efd12fce9313b14f20a90d1ab379ade8baf4d1ad762babb07e1d65a1fa709b0682d388dde55772b93e1ca126d9ceed57fee8d6a33c8190de8566fc1439ee3da71b2dc72a7e96b742ada6269a01ba2b87abfd89bbfacbd050743750b72022ad", 0xb6}], 0x3) keyctl$set_timeout(0xf, 0x0, 0xa0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001100)=ANY=[@ANYBLOB="20000000720001030100000404", @ANYRES32, @ANYBLOB], 0x20}, 0x1, 0xf00, 0x0, 0x80}, 0x40000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) bind$alg(r1, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) 2m8.638983253s ago: executing program 2 (id=203): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={&(0x7f0000000780)="77c7e2d608e19d7beff5216a3c81da5cb10dc00cf711194f9b2fdf0b4d967469be45c05a7641a2700aac73b5870f71cda55d6404d7b9d45d8bf9b568224983eb8ece4bd0cc4be455a0593151d1a234e414f70c1e05f049bbc0047bf05c3350aed5a82c6561d94d389ff09c7a175044c072", &(0x7f0000000800)="f6e7384378c248d0c3323f3db5e056339005b6efc232d6f23ca7f4c73f49265c1eb6ddfcc62178f9c125035b5c5c11987e293b153f9f02d0bb5e1d0ed4150fcc31a392078eb8047594e2"}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x2000000060d6, 0x5}) syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r0) r2 = syz_open_dev$vcsa(&(0x7f0000000540), 0xcf, 0x400000) write$binfmt_script(r2, &(0x7f0000000580)={'#! ', './mnt', [{0x20, 'ext4\x00'}, {0x20, 'nfc\x00'}, {}, {}, {0x20, '\\]\\'}, {0x20, '#'}], 0xa, "a763ec26e694441004ff5786a5bc93730eb63ce8de593c3b1626cbd1467fac904594c293ad6cddd3a3dee83f7e7bf612efce2ba5af61273cb67b313d6f487d8973bee3158b4a384d9abc66bf4c7ee9cdfec63dee"}, 0x70) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) read$dsp(r2, &(0x7f0000000600)=""/13, 0xd) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$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") syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xd4}, 0x9c) getsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000640)={0x0, 0x2}, &(0x7f0000000680)=0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x68, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc3cb}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) bind$packet(r2, &(0x7f0000000740)={0x11, 0xf4, 0x0, 0x1, 0xa}, 0x14) quotactl$Q_QUOTAOFF(0xffffffff80000301, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000700)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x181403, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000e00)='.\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_emit_vhci(0x0, 0x8) 2m6.426832325s ago: executing program 1 (id=208): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000e00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a14000000020a01030000000000000000000000001100010000000000000000000000000a"], 0x3c}}, 0x0) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)=ANY=[@ANYBLOB='^\x00\x00b', @ANYRES16=r4, @ANYBLOB="010028bd700000000000010000005c0008802800008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c30000080060005000300000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff1400020077673000"/126], 0x84}, 0x1, 0x0, 0x0, 0x4004840}, 0x2000000) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000240)='./file0\x00', 0x1064461, &(0x7f0000000100)=ANY=[@ANYRES16, @ANYRES16=r0, @ANYRES64=r0, @ANYRES32], 0xc1, 0x1528, &(0x7f0000003300)="$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") r5 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc408, 0x103) r6 = socket$pptp(0x18, 0x1, 0x2) fsetxattr$security_evm(r6, &(0x7f00000000c0), 0x0, 0x0, 0x1) write$binfmt_register(r5, &(0x7f0000000080)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x0, 0x3a, '-', 0x3a, '%*9', 0x3a, './file0', 0x3a, [0x46]}, 0x2c) 2m5.698229452s ago: executing program 2 (id=210): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000080)={@remote, @remote}, 0xc) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="120100009080e140fc044a500243010203010902120001000000000904"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_mreqsrc(r0, 0x0, 0x26, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x10, 0x0, 0x7fff7ffc}]}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x20000) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r4) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x44, r5, 0x207, 0xfffffffc, 0x0, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x44}}, 0x4004810) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x68, r6, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast1}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast2}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x400c000) close_range(r2, 0xffffffffffffffff, 0x0) 1m59.298407044s ago: executing program 1 (id=215): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56fa8e", 0x4) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3", 0x8}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25", 0x9a}], 0x3}], 0x1, 0x40800) recvmsg(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000002180)=[{&(0x7f0000000640)=""/120, 0x78}, {&(0x7f0000000a40)=""/82, 0x52}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f0000000880)=""/62, 0x85}, {&(0x7f0000000900)=""/182, 0xb6}, {&(0x7f00000009c0)=""/88, 0x58}, {&(0x7f0000001180)=""/4096, 0x1000}], 0x7}, 0x0) 1m59.18923768s ago: executing program 1 (id=216): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3000009, 0x200000005c832, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x700}) set_mempolicy(0x8006, 0x0, 0x3) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f000062c000/0x1000)=nil, 0x800000}) 1m58.609295395s ago: executing program 1 (id=218): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000280)=ANY=[@ANYBLOB="000001"], 0x20) sendto$inet6(r0, &(0x7f0000000240)='\x00', 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x2, @local, 0x9}, 0x1c) 1m58.420512851s ago: executing program 1 (id=219): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000000), r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x24, r2, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x1508a1a9b469814b}, 0x8094) 1m58.252442657s ago: executing program 1 (id=220): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001800dd8d0000000000000000020000000000fc050000000006001500010000001800168014000100800000100000030000001000000011"], 0x3c}, 0x1, 0x0, 0x0, 0x20000010}, 0x200000a0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_aout(r5, &(0x7f0000000940)=ANY=[], 0x120) fcntl$lock(r5, 0x24, &(0x7f0000000080)={0x1, 0x1, 0x1, 0x400000006}) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0xa5, 0x3, 0x0, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233bd00", 0x4, 0x2}) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x143580, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000140)=0x15) ioctl$TCSETS(r6, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400004, 0x14, "3eccd8000000000000000010000000040100"}) ioctl$TCSETS(r6, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400ff0, 0x14, "3eccd8000000000000000010000000040100"}) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0x7, 0x0, 0x0) sendmsg$nl_generic(r4, 0x0, 0x20008080) r7 = syz_open_dev$tty1(0xc, 0x4, 0x2) syz_io_uring_setup(0x2e06, 0x0, &(0x7f0000000240), &(0x7f0000000080), &(0x7f0000000000)) ioctl$KDGKBDIACR(r7, 0x4b4a, 0xffffffffffffffff) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000175d98858000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) syz_open_dev$sg(0x0, 0x6f5e, 0x2) openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0x8000, 0x73) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f0000000480)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140), 0x4) 1m42.146252921s ago: executing program 33 (id=210): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000080)={@remote, @remote}, 0xc) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="120100009080e140fc044a500243010203010902120001000000000904"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_mreqsrc(r0, 0x0, 0x26, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x10, 0x0, 0x7fff7ffc}]}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x20000) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r4) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x44, r5, 0x207, 0xfffffffc, 0x0, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x44}}, 0x4004810) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x68, r6, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast1}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast2}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x400c000) close_range(r2, 0xffffffffffffffff, 0x0) 1m40.719991369s ago: executing program 34 (id=220): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001800dd8d0000000000000000020000000000fc050000000006001500010000001800168014000100800000100000030000001000000011"], 0x3c}, 0x1, 0x0, 0x0, 0x20000010}, 0x200000a0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_aout(r5, &(0x7f0000000940)=ANY=[], 0x120) fcntl$lock(r5, 0x24, &(0x7f0000000080)={0x1, 0x1, 0x1, 0x400000006}) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0xa5, 0x3, 0x0, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233bd00", 0x4, 0x2}) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x143580, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000140)=0x15) ioctl$TCSETS(r6, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400004, 0x14, "3eccd8000000000000000010000000040100"}) ioctl$TCSETS(r6, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400ff0, 0x14, "3eccd8000000000000000010000000040100"}) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0x7, 0x0, 0x0) sendmsg$nl_generic(r4, 0x0, 0x20008080) r7 = syz_open_dev$tty1(0xc, 0x4, 0x2) syz_io_uring_setup(0x2e06, 0x0, &(0x7f0000000240), &(0x7f0000000080), &(0x7f0000000000)) ioctl$KDGKBDIACR(r7, 0x4b4a, 0xffffffffffffffff) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000175d98858000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) syz_open_dev$sg(0x0, 0x6f5e, 0x2) openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0x8000, 0x73) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f0000000480)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140), 0x4) 46.980251382s ago: executing program 4 (id=275): r0 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap$panthor(&(0x7f000000b000/0x4000)=nil, 0x4000, 0x1000000, 0x10010, 0xffffffffffffffff, 0x100000001) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000019c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)={0x2c, r3, 0x1, 0x70bd2e, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_KEY={0x10, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}]}]}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4c0c4}, 0x20040002) listen(r2, 0x9) futex(0x0, 0x9, 0x2, &(0x7f0000000040)={0x77359400}, 0x0, 0x2) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r2) keyctl$dh_compute(0x17, &(0x7f0000000100)={0x0, r0, r0}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'streebog512-generic\x00'}}) 46.089900101s ago: executing program 4 (id=276): r0 = syz_open_dev$dvb_frontend(0x0, 0x0, 0x22000) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xb) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd27, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x4) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{0x0, 0x14}], 0x1, 0x0, 0x0, 0x44988}, 0x0) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r3, 0x9361, 0x5) sendmsg$SOCK_DESTROY(r3, &(0x7f0000000880)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000500)=ANY=[], 0x31c}, 0x1, 0x0, 0x0, 0x80054}, 0x4044005) r5 = fsmount(r4, 0x0, 0x0) ioctl$sock_inet_SIOCGARP(r5, 0x8954, &(0x7f0000000340)={{0x2, 0x4e24, @rand_addr=0x64010100}, {0x6, @broadcast}, 0x2, {0x2, 0x4e23, @empty}, 'macvlan0\x00'}) r6 = openat$cgroup_procs(r5, 0x0, 0x2, 0x0) open_by_handle_at(r6, 0x0, 0x408100) ioctl$FE_GET_PROPERTY(r0, 0x80106f53, 0x0) geteuid() fstat(r5, &(0x7f0000000240)) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) 43.684084546s ago: executing program 3 (id=277): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x101000, 0x0) ioctl$COMEDI_CMD(r3, 0x80506409, &(0x7f0000000180)={0x1, 0x80, 0x80, 0xd, 0x10, 0x3e8, 0x2, 0x0, 0x20, 0x1, 0x1, 0x0, &(0x7f0000000600)=[0x7], 0x1, 0x0}) 41.722951589s ago: executing program 3 (id=278): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000001c0)={0x1f, 0xffff, 0x4}, 0x6) setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f00000005c0)=0x6, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x1) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x1000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbaf, &(0x7f0000002f00)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x40, 0x4) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x1c1002, 0x12) r7 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r7, &(0x7f0000004200)='t', 0x1) sendfile(r6, r5, 0x0, 0x3ffff) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)="a2", 0x1}, {&(0x7f00000001c0)="c7f016ed177d128be5cb805ca92a1246fcaaf2d44a83dee7719e652f9da116f73a486067548568e559cd9b6c710d2e50cb09345f5871f70b6a22d9dc2b55ef757d24c05bf4e7bf53cf91efc17384db92d535ab4e4413292ab2b99ea82d055d4aff6fd43df3f9446df8ed1d9335808e8123f9b27020a28598813d1f4139ae1082ab43567ccab16b92c1bd26fe5fa92fe2aa94321a95c63a61793da43546f1b6e757", 0xa1}], 0x2, 0x0, 0x0, 0x20000044}, 0x0) sendmmsg$inet_sctp(r8, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) 39.625480067s ago: executing program 4 (id=279): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$btrfs_control(0xffffff9c, 0x0, 0x400000, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x400, 0x2, 0xd6}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000500)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f00000003c0)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0xd3df, 0x0, 0x4, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x1, 0x2000, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35b9, 0x1, 0xfff7fffd, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1000c1cf, 0x1000, 0x0, 0x1f0, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x49, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) r8 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route_sched(r0, 0x0, 0x0) syz_pidfd_open(0x0, 0x0) r9 = getpid() sched_setscheduler(r9, 0x1, &(0x7f0000000100)=0x5) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000600)={{0x3, 0x0, 0x0, 0x0, 0x0, 0x6, 0xa}, 0x0, 0x0, 0xffffffffffffffb1, 0x8, 0x2, 0x3, 0x8, 0x0, 0xe, 0x7, 0x0, r9}) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp256-generic\x00'}, 0x58) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000070601080000000000000000000000000500010006"], 0x1c}}, 0x0) 38.209949943s ago: executing program 3 (id=280): syz_open_dev$dvb_frontend(0x0, 0x0, 0x22000) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xb) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd27, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x4) 33.037239461s ago: executing program 3 (id=281): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socket(0x10, 0x3, 0x0) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d0"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000000), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xd01c4813, &(0x7f00000000c0)={0x2, 0x100, 0x3, 0x2, 0x0, 0x4b}) 29.013959411s ago: executing program 3 (id=282): syz_mount_image$hfs(&(0x7f0000020940), &(0x7f0000000000)='./file0\x00', 0x2000000, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x11, 0x2fe, &(0x7f0000001100)="$eJzs3U1vE0ccx/HfrO3EaaJ0m6Sq1EurtJHaS9S0PVS9uKp87b2nqm3sSBFWEEmQgAsm4oh4Adx5C7wILiDeAHDhxAvIbdHMzq7X9nidCDubhO9HsjWenYf/sE8zK5EVgE/Wn+3XT395Zz9Gqqkm6XcpktSU6pK+1FfN2wfH+8e9bqesoZqrYT9GaU0zVmb3oBuqauu5Gl5sf9W1UszDfCRJ8sebqoNA5dzZHxBJi/48dNubFxzXrIwOri99U1EolSn+G5hTneqOVisMBwBwCfj7f+RvEysuyyiKpC1/27/S9/9Rp1UHMFu/9sayktIKhfu/m90lxu7fz92mwXrPLeHs9ihbJZ4lmMbI7wWlR9bQHMyEV5Vvk5SPJVra269re/eBOpFO1PIKFTbcdyc9dDNTot0MrE1LTG6tob8+S0djZ5RLo5uzkPb2e91FmwjEv36+Hj+eeW5emn9MrCfq5PO/emLsbnJ7Kh7ZU1HDxv/T5BaXXS1bSn7Z32q1oqEiX7hOvvY9eFNG2QyvSIptZg8I+nkEgThPsoTre03DjxXS0e2EOjCDxtdDteL813hd19fGUK2aPxK2d2/2Sh+lzEc2RPPY/G029V7P1C7M/yMb35YKZ2bZpd64kv7ISMezEC5ZdyXjsTtHP099m0fgLZ57bJDO+bTskf7Xb1o9unvvRq3X6x7axH+BxK2VQ+NzGg+lYJn5J2oqKaP+IMfdPO4nyVlbTuYZ/I8zbdBeP/Ice/qECtuzLM+JLno3Xb9EXaFN7RcqOyDnmsimLjNp0E60JmyayzUKl8yRyXa6zxibxOKas/Muk67/3Ezez+rcdcZ+xSXz9PJFpoZa3MlXcMNTwbXQ3GXK2mB58gqu0OPPE9aMbs313Q/S94VMo9IeYxfntWHaeqV/ef4PAAAAAAAAAAAAAAAAAABw1VzE/1ioeowAAAAAAAAAAAAAAAAAAAAAAFx1Z3//79LgTU2hvxHv3v8bT33/79ALgP2Lonj/L1CNDwEAAP//FJB9Ww==") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f00000000c0)='./bus\x00', 0x2c600, 0x0, 0xbe, 0x0, &(0x7f00000007c0)) syz_mount_image$vfat(&(0x7f00000006c0), &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x100800, 0x0, 0x1, 0x0, &(0x7f0000000080)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000001}, 0x40040) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{}, &(0x7f0000000000), 0x0}, 0x20) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x143) syz_open_dev$media(&(0x7f00000012c0), 0x66, 0x180502) ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x40002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0) read$msr(r0, &(0x7f0000005c40)=""/102400, 0x19000) write(0xffffffffffffffff, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) llistxattr(&(0x7f0000000040)='./file0\x00', 0x0, 0x11) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000580)='/dev/comedi4\x00', 0x2840, 0x0) ppoll(&(0x7f000017cc00)=[{r1, 0x580c}], 0x1, 0x0, 0x0, 0x0) landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x1}, 0x4a, 0x0) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) 23.037536705s ago: executing program 4 (id=283): r0 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap$panthor(&(0x7f000000b000/0x4000)=nil, 0x4000, 0x1000000, 0x10010, 0xffffffffffffffff, 0x100000001) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000019c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)={0x2c, r3, 0x1, 0x70bd2e, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_KEY={0x10, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}]}]}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4c0c4}, 0x20040002) listen(r2, 0x9) futex(0x0, 0x9, 0x2, &(0x7f0000000040)={0x77359400}, 0x0, 0x2) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r2) keyctl$dh_compute(0x17, &(0x7f0000000100)={0x0, r0, r0}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'streebog512-generic\x00'}}) 22.926533757s ago: executing program 3 (id=284): syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000df2bfd404b0c0001cad7010203010902240001000000000904"], 0x0) syz_usb_connect(0x5, 0x56a, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0xb, 0xb0, 0x8d, 0x10, 0x846, 0x4200, 0xce27, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x558, 0x3, 0xde, 0x4, 0x40, 0x9, "", [{{0x9, 0x4, 0xb3, 0x8, 0x4, 0x65, 0x56, 0xa2, 0x0, [@hid_hid={0x9, 0x21, 0x3, 0x0, 0x1, {0x22, 0x558}}, @cdc_ecm={{0x8, 0x24, 0x6, 0x0, 0x0, "ff088a"}, {0x5, 0x24, 0x0, 0x8000}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x3, 0x6, 0x1}, [@network_terminal={0x7, 0x24, 0xa, 0x10, 0x2, 0x3, 0x3}, @obex={0x5}, @acm={0x4, 0x24, 0x2, 0x1}, @acm={0x4, 0x24, 0x2, 0xf}]}], [{{0x9, 0x5, 0xe, 0x10, 0x8, 0xf2, 0x1, 0x2, [@generic={0x80, 0xd, "c9047a1d864122b07eb8edf75a1bb62f5be0d65c874eb6d0534a883ad3fc4b818022f1c079c75cc02f5d6cc41757bd95c43e1a183b7127b2423e34769dc6611605504a06a29931a046bd6c80aa248bb926c539035d32d949eb6fb3b1dd1796778e170eb14d77eec82d2b18c25815b441c52384bca230380eb8e527a5e82c"}]}}, {{0x9, 0x5, 0x8, 0x8, 0x200, 0x9, 0x36, 0xf8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0x5}]}}, {{0x9, 0x5, 0x3, 0x0, 0x8, 0x6, 0xe, 0x7, [@generic={0xf8, 0x4, "5ffbdb72b0b70aa810d0940187d71383da8a65b558d6c41dbaa3137ecd2b7321bbc2c79eb15a91c2a26849a4665ee56ad12b31465963d614db48c07cf1e0f13e1c9593bfbe65a2ad5e90f7917ce5bade13e26468f9ab5516a90e53bbe2fcb1372509b64910ce9b42c7f01170a34402cfc8a366c538017aa71bc2f23df380a407e95689699a5ce6e5f54ebf8499dd1ef016c209cfee5cf8aa5cc602b9396af731888b1d9d2e80394523dad5093874f539e70d8c7958efa2ed24a5ff6da5020bd70c07f3adfa2ca1bf4d654657a4b2d346481fa3a6c26888ef7fff25338667fe5db2948c13dc7a3786418f2dc9e52d490724c85472d204"}, @generic={0x63, 0x3, "822973b7a9fe8bbeef0c8706f3e6f39c87d50e69a36bbc9d07a257b40604923424de83e215dd936b7ee09bbf6ed714547f24b21ba1d1c85abbc32731892a74fb85afb8cb0dfdaff794d3676fb615208e02e6a0ba464f92d8867570144350aa0e1f"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x20, 0x8, 0x7, 0x4}}]}}, {{0x9, 0x4, 0x85, 0x9, 0xe, 0xa, 0x46, 0x2a, 0x7f, [@hid_hid={0x9, 0x21, 0x101, 0x7, 0x1, {0x22, 0x7fb}}, @cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0xfffff86f, 0x9, 0x4, 0xb}, {0x6, 0x24, 0x1a, 0x4, 0x13}, [@dmm={0x7, 0x24, 0x14, 0x351c, 0x101}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x7}, @country_functional={0x10, 0x24, 0x7, 0x1, 0x9, [0x400, 0x8, 0x6, 0xff, 0x4e]}, @acm={0x4, 0x24, 0x2, 0x9}, @network_terminal={0x7, 0x24, 0xa, 0x21, 0x0, 0x1, 0x5}]}], [{{0x9, 0x5, 0x3, 0x0, 0x40, 0x0, 0x0, 0x6}}, {{0x9, 0x5, 0xa, 0x4, 0x20, 0x49, 0x4, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x6}]}}, {{0x9, 0x5, 0x2, 0x0, 0x10, 0xc, 0x0, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x1000}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x800}]}}, {{0x9, 0x5, 0x0, 0x10, 0x3ff, 0xb2, 0x9, 0x8}}, {{0x9, 0x5, 0xb, 0x10, 0x10, 0xb, 0x64, 0x3d, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x30, 0xff3d}, @generic={0xe6, 0x23, "5de77e1133f3b3f14c57b4860c39b7c9f373ed4e2905e721c2396b3d2670be775fd17c6693dc2ed6566d48c9b39bf9aeef360adcbe0831db0c498a5e77139071669f8c4a3ada6b1ae38386881d88cb85e8e9930e3fd84b4d09a7ff4c9c14dc9751a6543631d7fcc9b28e615f9dc284536986ed09fb755ca825a7ed6aea19d52d1468a500a3c7773cd187de88a5a12db8dae2fc3f8633ec416e548943ef7346eb52c10891bea25ece01d369ffa4caebb6d9c4a9f31214972ea54535815d5972050065267f6f170dfef7560d182cdaf2647c44cdd051503f9157402640ad0e1731d9538ce1"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x8, 0x5, 0x2b, 0x64}}, {{0x9, 0x5, 0xf, 0x0, 0x18, 0x4, 0x1, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x5, 0x6}]}}, {{0x9, 0x5, 0x5, 0x0, 0x200, 0x1, 0x17, 0x8}}, {{0x9, 0x5, 0xa, 0x8, 0xe845600a4ae1984b, 0xf, 0x0, 0xd, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x4, 0x80}]}}, {{0x9, 0x5, 0xc, 0x10, 0x8, 0x3, 0x2, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0xe, 0xd6, 0xff00}]}}, {{0x9, 0x5, 0x0, 0x0, 0x40, 0x1, 0x48, 0x1}}, {{0x9, 0x5, 0x4, 0x0, 0x20, 0xb, 0x80, 0x2, [@generic={0x32, 0x22, "929b03bde4ba5dbf3a2009aa08a7c0e82e4e3df235b8f5ba17bf265be51319d3489a4057d9e8a67559ea966a3044ecb1"}, @generic={0xd5, 0x23, "b1af00de26822da0042defeef7496345170036a2111a79c766d2bfd2b11b36efcaecd7179b3b18216443e747254dd81b74cf1c55b1d70cc8eff7fd4d1fdc5d2937bd85972e35ffc1a215e846cb05b1b9f02dfced738aa52e1f64f7787b8164139ce15f6ba1d424e68887b9d1d3d0e4a78aac5bece0b50c064442f0be55221941aa0ce3ae2f190739ff2942431bc9e22e653e41e93ceda9cc2e3831f76c7bda35710cf56aae5fab83925a6cda4dfe32a4fa2c05baafb95740248474dac39690de3d95bd28ff70f5d20f247a170aa242ee7c27cc"}]}}, {{0x9, 0x5, 0x17, 0x1, 0x200, 0x86, 0x6, 0xdd, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x18, 0x5}]}}, {{0x9, 0x5, 0x9, 0x0, 0x8, 0x6d, 0x6, 0xd, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0xff, 0x4}]}}]}}, {{0x9, 0x4, 0x36, 0x6, 0x0, 0x49, 0xcb, 0x88, 0x6}}]}}]}}, &(0x7f0000001440)={0xa, &(0x7f0000001080)={0xa, 0x6, 0x250, 0x7, 0x0, 0x0, 0xff, 0x9}, 0x13, &(0x7f00000010c0)={0x5, 0xf, 0x13, 0x2, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x8, 0xb, 0x7f, 0xfc00, 0x6}]}, 0x7, [{0x4, &(0x7f0000001100)=@lang_id={0x4, 0x3, 0x861}}, {0x1a, &(0x7f0000001140)=@string={0x1a, 0x3, "60a508aa8368a15fab3aad8e5c9a5461b5eb1c0a6d589ea5"}}, {0x4, &(0x7f0000001180)=@lang_id={0x4, 0x3, 0x3009}}, {0xda, &(0x7f00000011c0)=@string={0xda, 0x3, "02776f24452824e4403a5b77e62e498aff283b7c7676252828108207f9fee1cc8f875155c9f832f3d649f4827fc2b2765f56c1ac4aa780310676ad651a285202855b5ebff8b82b9c09b3a4501c63d89f47267a5ae1c887000f368124325a1402d89ca48e202413bc4031745278023dee43725977d863bd52b7a4cc462a1dffc2f97699fef36bd2cd193ba66c0045366f1e19f47a1093f25bc53dff5ae486e7f111c13249601cc37d262820d171e94e5117b2fe3b2765ac3d5d9156c88b2973bb597696f5aad5007962fde2b0ec966cc25b149074f2061046"}}, {0x79, &(0x7f00000012c0)=@string={0x79, 0x3, "02aa65a2882e8749626fc1badcba42164d95993f3df4671b7de461bbd1265e8f37eb7ac5deafb93946766e98addbe472484b5a708e0b993883044d840d3e948ebe6dd8c0c6963c7d4b3984fb3555bb9895c23b2c67eda91aa293e4fbe4781920629d4eff0bec58859aa646547563efc79775b5970c8ba3"}}, {0xa0, &(0x7f0000001340)=@string={0xa0, 0x3, "73988e6334aaaa4a131e224c58afceb039c8cf1ef7faa7e532d2e30afc1f8057937b66924888287d3d7cf007bee3969b5365b5907e7e788e9dcb80ea6a38b6c1ed1962dfd4d9777714149220375277a95c4edf8daa8d6acce67a49dff0bacf2eb48e76732411a81e2d07088151eb9d8537979f931460ec11d39960d255dbc64339f0e9853dfd031c0472aef54f4071fd68211c67ec7aa3381963ec3cf37d"}}, {0x4, &(0x7f0000001400)=@lang_id={0x4, 0x3, 0x424}}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000015000100fdffffff0000000002180000", @ANYRES32=r1, @ANYBLOB="140003"], 0x2c}}, 0x0) 12.672292302s ago: executing program 4 (id=285): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x101000, 0x0) ioctl$COMEDI_CMD(r3, 0x80506409, &(0x7f0000000180)={0x1, 0x80, 0x80, 0xd, 0x10, 0x3e8, 0x2, 0x0, 0x20, 0x1, 0x1, 0x0, &(0x7f0000000600)=[0x7], 0x1, 0x0}) 680.703µs ago: executing program 4 (id=286): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5800000055003d07000000000001000007000000", @ANYRES32=r1, @ANYBLOB="20000280", @ANYRES32=r0, @ANYBLOB="00000000000000000009b69408250ead9700000000000014200001"], 0x58}}, 0x0) 139.052µs ago: executing program 35 (id=284): syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000df2bfd404b0c0001cad7010203010902240001000000000904"], 0x0) syz_usb_connect(0x5, 0x56a, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0xb, 0xb0, 0x8d, 0x10, 0x846, 0x4200, 0xce27, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x558, 0x3, 0xde, 0x4, 0x40, 0x9, "", [{{0x9, 0x4, 0xb3, 0x8, 0x4, 0x65, 0x56, 0xa2, 0x0, [@hid_hid={0x9, 0x21, 0x3, 0x0, 0x1, {0x22, 0x558}}, @cdc_ecm={{0x8, 0x24, 0x6, 0x0, 0x0, "ff088a"}, {0x5, 0x24, 0x0, 0x8000}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x3, 0x6, 0x1}, [@network_terminal={0x7, 0x24, 0xa, 0x10, 0x2, 0x3, 0x3}, @obex={0x5}, @acm={0x4, 0x24, 0x2, 0x1}, @acm={0x4, 0x24, 0x2, 0xf}]}], [{{0x9, 0x5, 0xe, 0x10, 0x8, 0xf2, 0x1, 0x2, [@generic={0x80, 0xd, "c9047a1d864122b07eb8edf75a1bb62f5be0d65c874eb6d0534a883ad3fc4b818022f1c079c75cc02f5d6cc41757bd95c43e1a183b7127b2423e34769dc6611605504a06a29931a046bd6c80aa248bb926c539035d32d949eb6fb3b1dd1796778e170eb14d77eec82d2b18c25815b441c52384bca230380eb8e527a5e82c"}]}}, {{0x9, 0x5, 0x8, 0x8, 0x200, 0x9, 0x36, 0xf8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0x5}]}}, {{0x9, 0x5, 0x3, 0x0, 0x8, 0x6, 0xe, 0x7, [@generic={0xf8, 0x4, "5ffbdb72b0b70aa810d0940187d71383da8a65b558d6c41dbaa3137ecd2b7321bbc2c79eb15a91c2a26849a4665ee56ad12b31465963d614db48c07cf1e0f13e1c9593bfbe65a2ad5e90f7917ce5bade13e26468f9ab5516a90e53bbe2fcb1372509b64910ce9b42c7f01170a34402cfc8a366c538017aa71bc2f23df380a407e95689699a5ce6e5f54ebf8499dd1ef016c209cfee5cf8aa5cc602b9396af731888b1d9d2e80394523dad5093874f539e70d8c7958efa2ed24a5ff6da5020bd70c07f3adfa2ca1bf4d654657a4b2d346481fa3a6c26888ef7fff25338667fe5db2948c13dc7a3786418f2dc9e52d490724c85472d204"}, @generic={0x63, 0x3, "822973b7a9fe8bbeef0c8706f3e6f39c87d50e69a36bbc9d07a257b40604923424de83e215dd936b7ee09bbf6ed714547f24b21ba1d1c85abbc32731892a74fb85afb8cb0dfdaff794d3676fb615208e02e6a0ba464f92d8867570144350aa0e1f"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x20, 0x8, 0x7, 0x4}}]}}, {{0x9, 0x4, 0x85, 0x9, 0xe, 0xa, 0x46, 0x2a, 0x7f, [@hid_hid={0x9, 0x21, 0x101, 0x7, 0x1, {0x22, 0x7fb}}, @cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0xfffff86f, 0x9, 0x4, 0xb}, {0x6, 0x24, 0x1a, 0x4, 0x13}, [@dmm={0x7, 0x24, 0x14, 0x351c, 0x101}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x7}, @country_functional={0x10, 0x24, 0x7, 0x1, 0x9, [0x400, 0x8, 0x6, 0xff, 0x4e]}, @acm={0x4, 0x24, 0x2, 0x9}, @network_terminal={0x7, 0x24, 0xa, 0x21, 0x0, 0x1, 0x5}]}], [{{0x9, 0x5, 0x3, 0x0, 0x40, 0x0, 0x0, 0x6}}, {{0x9, 0x5, 0xa, 0x4, 0x20, 0x49, 0x4, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x6}]}}, {{0x9, 0x5, 0x2, 0x0, 0x10, 0xc, 0x0, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x1000}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x800}]}}, {{0x9, 0x5, 0x0, 0x10, 0x3ff, 0xb2, 0x9, 0x8}}, {{0x9, 0x5, 0xb, 0x10, 0x10, 0xb, 0x64, 0x3d, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x30, 0xff3d}, @generic={0xe6, 0x23, "5de77e1133f3b3f14c57b4860c39b7c9f373ed4e2905e721c2396b3d2670be775fd17c6693dc2ed6566d48c9b39bf9aeef360adcbe0831db0c498a5e77139071669f8c4a3ada6b1ae38386881d88cb85e8e9930e3fd84b4d09a7ff4c9c14dc9751a6543631d7fcc9b28e615f9dc284536986ed09fb755ca825a7ed6aea19d52d1468a500a3c7773cd187de88a5a12db8dae2fc3f8633ec416e548943ef7346eb52c10891bea25ece01d369ffa4caebb6d9c4a9f31214972ea54535815d5972050065267f6f170dfef7560d182cdaf2647c44cdd051503f9157402640ad0e1731d9538ce1"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x8, 0x5, 0x2b, 0x64}}, {{0x9, 0x5, 0xf, 0x0, 0x18, 0x4, 0x1, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x5, 0x6}]}}, {{0x9, 0x5, 0x5, 0x0, 0x200, 0x1, 0x17, 0x8}}, {{0x9, 0x5, 0xa, 0x8, 0xe845600a4ae1984b, 0xf, 0x0, 0xd, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x4, 0x80}]}}, {{0x9, 0x5, 0xc, 0x10, 0x8, 0x3, 0x2, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0xe, 0xd6, 0xff00}]}}, {{0x9, 0x5, 0x0, 0x0, 0x40, 0x1, 0x48, 0x1}}, {{0x9, 0x5, 0x4, 0x0, 0x20, 0xb, 0x80, 0x2, [@generic={0x32, 0x22, "929b03bde4ba5dbf3a2009aa08a7c0e82e4e3df235b8f5ba17bf265be51319d3489a4057d9e8a67559ea966a3044ecb1"}, @generic={0xd5, 0x23, "b1af00de26822da0042defeef7496345170036a2111a79c766d2bfd2b11b36efcaecd7179b3b18216443e747254dd81b74cf1c55b1d70cc8eff7fd4d1fdc5d2937bd85972e35ffc1a215e846cb05b1b9f02dfced738aa52e1f64f7787b8164139ce15f6ba1d424e68887b9d1d3d0e4a78aac5bece0b50c064442f0be55221941aa0ce3ae2f190739ff2942431bc9e22e653e41e93ceda9cc2e3831f76c7bda35710cf56aae5fab83925a6cda4dfe32a4fa2c05baafb95740248474dac39690de3d95bd28ff70f5d20f247a170aa242ee7c27cc"}]}}, {{0x9, 0x5, 0x17, 0x1, 0x200, 0x86, 0x6, 0xdd, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x18, 0x5}]}}, {{0x9, 0x5, 0x9, 0x0, 0x8, 0x6d, 0x6, 0xd, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0xff, 0x4}]}}]}}, {{0x9, 0x4, 0x36, 0x6, 0x0, 0x49, 0xcb, 0x88, 0x6}}]}}]}}, &(0x7f0000001440)={0xa, &(0x7f0000001080)={0xa, 0x6, 0x250, 0x7, 0x0, 0x0, 0xff, 0x9}, 0x13, &(0x7f00000010c0)={0x5, 0xf, 0x13, 0x2, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x8, 0xb, 0x7f, 0xfc00, 0x6}]}, 0x7, [{0x4, &(0x7f0000001100)=@lang_id={0x4, 0x3, 0x861}}, {0x1a, &(0x7f0000001140)=@string={0x1a, 0x3, "60a508aa8368a15fab3aad8e5c9a5461b5eb1c0a6d589ea5"}}, {0x4, &(0x7f0000001180)=@lang_id={0x4, 0x3, 0x3009}}, {0xda, &(0x7f00000011c0)=@string={0xda, 0x3, "02776f24452824e4403a5b77e62e498aff283b7c7676252828108207f9fee1cc8f875155c9f832f3d649f4827fc2b2765f56c1ac4aa780310676ad651a285202855b5ebff8b82b9c09b3a4501c63d89f47267a5ae1c887000f368124325a1402d89ca48e202413bc4031745278023dee43725977d863bd52b7a4cc462a1dffc2f97699fef36bd2cd193ba66c0045366f1e19f47a1093f25bc53dff5ae486e7f111c13249601cc37d262820d171e94e5117b2fe3b2765ac3d5d9156c88b2973bb597696f5aad5007962fde2b0ec966cc25b149074f2061046"}}, {0x79, &(0x7f00000012c0)=@string={0x79, 0x3, "02aa65a2882e8749626fc1badcba42164d95993f3df4671b7de461bbd1265e8f37eb7ac5deafb93946766e98addbe472484b5a708e0b993883044d840d3e948ebe6dd8c0c6963c7d4b3984fb3555bb9895c23b2c67eda91aa293e4fbe4781920629d4eff0bec58859aa646547563efc79775b5970c8ba3"}}, {0xa0, &(0x7f0000001340)=@string={0xa0, 0x3, "73988e6334aaaa4a131e224c58afceb039c8cf1ef7faa7e532d2e30afc1f8057937b66924888287d3d7cf007bee3969b5365b5907e7e788e9dcb80ea6a38b6c1ed1962dfd4d9777714149220375277a95c4edf8daa8d6acce67a49dff0bacf2eb48e76732411a81e2d07088151eb9d8537979f931460ec11d39960d255dbc64339f0e9853dfd031c0472aef54f4071fd68211c67ec7aa3381963ec3cf37d"}}, {0x4, &(0x7f0000001400)=@lang_id={0x4, 0x3, 0x424}}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000015000100fdffffff0000000002180000", @ANYRES32=r1, @ANYBLOB="140003"], 0x2c}}, 0x0) 0s ago: executing program 36 (id=286): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5800000055003d07000000000001000007000000", @ANYRES32=r1, @ANYBLOB="20000280", @ANYRES32=r0, @ANYBLOB="00000000000000000009b69408250ead9700000000000014200001"], 0x58}}, 0x0) kernel console output (not intermixed with test programs): 0 [ 87.888637][ T5600] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.935162][ T5598] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.012540][ T5596] veth0_vlan: entered promiscuous mode [ 88.160303][ T5596] veth1_vlan: entered promiscuous mode [ 88.352686][ T5600] veth0_vlan: entered promiscuous mode [ 88.455905][ T5600] veth1_vlan: entered promiscuous mode [ 88.543474][ T5596] veth0_macvtap: entered promiscuous mode [ 88.596317][ T5599] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.613003][ T5596] veth1_macvtap: entered promiscuous mode [ 88.728237][ T5597] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.752593][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.816164][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.829349][ T5600] veth0_macvtap: entered promiscuous mode [ 88.875896][ T5600] veth1_macvtap: entered promiscuous mode [ 88.885909][ T1198] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.904934][ T1198] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.933380][ T1198] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.968515][ T1198] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.101681][ T5599] veth0_vlan: entered promiscuous mode [ 89.107038][ T5598] veth0_vlan: entered promiscuous mode [ 89.117401][ T5600] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.290476][ T5600] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.406071][ T5599] veth1_vlan: entered promiscuous mode [ 89.445046][ T5598] veth1_vlan: entered promiscuous mode [ 89.462938][ T5597] veth0_vlan: entered promiscuous mode [ 89.467046][ T68] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.484303][ T68] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.503942][ T68] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.535894][ T68] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.655803][ T5597] veth1_vlan: entered promiscuous mode [ 89.681176][ T1198] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.681200][ T1198] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.070339][ T5599] veth0_macvtap: entered promiscuous mode [ 90.080089][ T1397] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.080105][ T1397] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.084060][ T5598] veth0_macvtap: entered promiscuous mode [ 90.176272][ T5599] veth1_macvtap: entered promiscuous mode [ 90.200762][ T5598] veth1_macvtap: entered promiscuous mode [ 90.229152][ T1410] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.229170][ T1410] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.382410][ T5597] veth0_macvtap: entered promiscuous mode [ 90.474497][ T5597] veth1_macvtap: entered promiscuous mode [ 90.500030][ T1410] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.500048][ T1410] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.503390][ T5598] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.506107][ T5599] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.645637][ T5598] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.661593][ T5599] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.724008][ T68] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.763265][ T68] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.782252][ T5597] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.784620][ T68] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.835183][ T68] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.854507][ T68] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.885346][ T5597] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.892329][ T68] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.956017][ T68] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.969281][ T68] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.222475][ T1198] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.229687][ T1198] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.261467][ T1198] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.296047][ T1198] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.385817][ T5795] loop3: detected capacity change from 0 to 512 [ 92.642741][ T5795] EXT4-fs (loop3): Test dummy encryption mode enabled [ 92.809231][ T5795] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.6: inode has both inline data and extents flags [ 92.809425][ T5795] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 92.825222][ T5795] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.6: couldn't read orphan inode 15 (err -117) [ 92.825416][ T5795] loop3: lost filesystem error report for type 5 error -117 [ 92.835244][ T5795] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.856355][ T5795] FAULT_INJECTION: forcing a failure. [ 92.856355][ T5795] name failslab, interval 1, probability 0, space 0, times 1 [ 92.856400][ T5795] CPU: 1 UID: 0 PID: 5795 Comm: syz.3.6 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 92.856419][ T5795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 92.856436][ T5795] Call Trace: [ 92.856442][ T5795] [ 92.856449][ T5795] dump_stack_lvl+0xe8/0x150 [ 92.856480][ T5795] should_fail_ex+0x467/0x600 [ 92.856508][ T5795] should_failslab+0xa8/0x100 [ 92.856525][ T5795] ? security_inode_alloc+0x39/0x2d0 [ 92.856548][ T5795] kmem_cache_alloc_noprof+0x9e/0x680 [ 92.856572][ T5795] ? security_inode_alloc+0x39/0x2d0 [ 92.856599][ T5795] security_inode_alloc+0x39/0x2d0 [ 92.856622][ T5795] inode_init_always_gfp+0x983/0xd40 [ 92.856652][ T5795] ? __pfx_ext4_alloc_inode+0x10/0x10 [ 92.856671][ T5795] alloc_inode+0x82/0x1b0 [ 92.856695][ T5795] new_inode+0x1f/0x170 [ 92.856711][ T5795] ? __ext4_new_inode+0x2f6/0x3e40 [ 92.856736][ T5795] __ext4_new_inode+0x327/0x3e40 [ 92.856759][ T5795] ? tomoyo_path_number_perm+0x219/0x5f0 [ 92.856787][ T5795] ? __asan_memset+0x22/0x50 [ 92.856809][ T5795] ? __dquot_initialize+0x236/0xd40 [ 92.856828][ T5795] ? __pfx___ext4_new_inode+0x10/0x10 [ 92.856854][ T5795] ? __pfx___dquot_initialize+0x10/0x10 [ 92.856879][ T5795] ext4_mkdir+0x3ee/0xca0 [ 92.856912][ T5795] ? __pfx_ext4_mkdir+0x10/0x10 [ 92.856935][ T5795] ? bpf_lsm_inode_mkdir+0x9/0x20 [ 92.856962][ T5795] vfs_mkdir+0x408/0x620 [ 92.856988][ T5795] filename_mkdirat+0x289/0x520 [ 92.857023][ T5795] ? __pfx_filename_mkdirat+0x10/0x10 [ 92.857047][ T5795] ? do_getname+0x151/0x250 [ 92.857071][ T5795] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.857088][ T5795] __se_sys_mkdirat+0x35/0x150 [ 92.857110][ T5795] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.857127][ T5795] do_syscall_64+0x174/0x580 [ 92.857149][ T5795] ? trace_irq_disable+0x3b/0x140 [ 92.857168][ T5795] ? clear_bhb_loop+0x40/0x90 [ 92.857188][ T5795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.857205][ T5795] RIP: 0033:0x7f223c29ccc7 [ 92.857230][ T5795] Code: 00 66 90 48 89 f2 b9 00 01 00 00 48 89 fe bf 9c ff ff ff e9 db f7 ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 92.857243][ T5795] RSP: 002b:00007f223a4f5e58 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 92.857261][ T5795] RAX: ffffffffffffffda RBX: 00007f223a4f5ee0 RCX: 00007f223c29ccc7 [ 92.857273][ T5795] RDX: 00000000000001ff RSI: 0000200000000a80 RDI: 00000000ffffff9c [ 92.857284][ T5795] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 92.857292][ T5795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000a80 [ 92.857302][ T5795] R13: 00007f223a4f5ea0 R14: 0000000000000000 R15: 0000000000000000 [ 92.857328][ T5795] [ 93.139409][ T5600] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.140832][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.140850][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.446910][ T5600] Flush: task=syz-executor[5600] dev=loop3 state=2 [ 93.531032][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.531049][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.586320][ T5600] Teardown: task=syz-executor[5600] dev=loop3 state=2 [ 93.890150][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.890168][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.121919][ T11] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 94.411716][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.411736][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.667248][ T11] usb 2-1: device not accepting address 2, error -71 [ 94.743116][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.743136][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.911764][ T5810] loop1: detected capacity change from 0 to 164 [ 95.219792][ T5810] isofs_fill_super: bread failed, dev=loop1, iso_blknum=270, block=1080 [ 95.262480][ T5810] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 95.526033][ T5819] Zero length message leads to an empty skb [ 95.693499][ T5694] Flush: task=udevd[5694] dev=loop1 state=2 [ 95.768588][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.768607][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.787161][ T5823] loop4: detected capacity change from 0 to 256 [ 95.863383][ T5823] exfat: Bad value for 'time_offset' [ 95.903560][ T5694] Teardown: task=udevd[5694] dev=loop1 state=2 [ 96.565634][ T5799] Flush: task=udevd[5799] dev=loop4 state=2 [ 97.940592][ T5799] Teardown: task=udevd[5799] dev=loop4 state=2 [ 98.060299][ T5842] FAULT_INJECTION: forcing a failure. [ 98.060299][ T5842] name failslab, interval 1, probability 0, space 0, times 0 [ 98.060326][ T5842] CPU: 1 UID: 0 PID: 5842 Comm: syz.1.15 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 98.060341][ T5842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 98.060350][ T5842] Call Trace: [ 98.060357][ T5842] [ 98.060364][ T5842] dump_stack_lvl+0xe8/0x150 [ 98.060394][ T5842] should_fail_ex+0x467/0x600 [ 98.060425][ T5842] should_failslab+0xa8/0x100 [ 98.060445][ T5842] kmem_cache_alloc_node_noprof+0xac/0x660 [ 98.060468][ T5842] ? __alloc_skb+0x1d7/0x7a0 [ 98.060485][ T5842] ? __alloc_skb+0x1d7/0x7a0 [ 98.060507][ T5842] __alloc_skb+0x1d7/0x7a0 [ 98.060528][ T5842] netlink_sendmsg+0x5d4/0xb40 [ 98.060559][ T5842] ? __pfx_netlink_sendmsg+0x10/0x10 [ 98.060580][ T5842] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 98.060606][ T5842] ? __kernel_text_address+0xd/0x30 [ 98.060624][ T5842] ? unwind_get_return_address+0x4d/0x90 [ 98.060644][ T5842] ? __pfx_netlink_sendmsg+0x10/0x10 [ 98.060665][ T5842] sock_sendmsg_nosec+0x13a/0x180 [ 98.060684][ T5842] ____sys_sendmsg+0x565/0x870 [ 98.060714][ T5842] ? __pfx_____sys_sendmsg+0x10/0x10 [ 98.060740][ T5842] ? import_iovec+0x73/0xa0 [ 98.060761][ T5842] ___sys_sendmsg+0x2a5/0x360 [ 98.060782][ T5842] ? __lock_acquire+0x6df/0x2e40 [ 98.060805][ T5842] ? __pfx____sys_sendmsg+0x10/0x10 [ 98.060860][ T5842] ? __fget_files+0x2a/0x420 [ 98.060878][ T5842] ? __fget_files+0x3a8/0x420 [ 98.060902][ T5842] __x64_sys_sendmsg+0x1b7/0x290 [ 98.060926][ T5842] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 98.060962][ T5842] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.060981][ T5842] do_syscall_64+0x174/0x580 [ 98.061004][ T5842] ? clear_bhb_loop+0x40/0x90 [ 98.061034][ T5842] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.061050][ T5842] RIP: 0033:0x7f3d3687de59 [ 98.061065][ T5842] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 98.061078][ T5842] RSP: 002b:00007f3d34ad6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 98.061096][ T5842] RAX: ffffffffffffffda RBX: 00007f3d36b05fa0 RCX: 00007f3d3687de59 [ 98.061107][ T5842] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 98.061117][ T5842] RBP: 00007f3d34ad6090 R08: 0000000000000000 R09: 0000000000000000 [ 98.061126][ T5842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 98.061135][ T5842] R13: 00007f3d36b06038 R14: 00007f3d36b05fa0 R15: 00007fff24379208 [ 98.061158][ T5842] [ 98.225124][ T5846] loop4: detected capacity change from 0 to 64 [ 98.539683][ T5846] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. Mounting read-only. [ 98.582870][ T5856] futex_wake_op: syz.2.3 tries to shift op by -1; fix this program [ 99.132168][ T5865] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18'. [ 99.718121][ T5598] Flush: task=syz-executor[5598] dev=loop4 state=2 [ 99.797605][ T5598] Teardown: task=syz-executor[5598] dev=loop4 state=2 [ 100.148855][ T5872] lo speed is unknown, defaulting to 1000 [ 100.490786][ T5872] lo speed is unknown, defaulting to 1000 [ 100.884345][ T5872] lo speed is unknown, defaulting to 1000 [ 101.152942][ T5891] loop3: detected capacity change from 0 to 512 [ 101.184825][ T5891] Flush: task=syz.3.25[5891] dev=loop3 state=2 [ 101.408278][ T5891] Teardown: task=syz.3.25[5891] dev=loop3 state=2 [ 102.910662][ T38] audit: type=1326 audit(1783199218.348:2): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=5900 comm="syz.4.28" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4799dcde59 code=0x7ffc0000 [ 102.910712][ T38] audit: type=1326 audit(1783199218.348:3): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=5900 comm="syz.4.28" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4799dcde59 code=0x7ffc0000 [ 102.910745][ T38] audit: type=1326 audit(1783199218.348:4): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=5900 comm="syz.4.28" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4799dcde59 code=0x7ffc0000 [ 102.910776][ T38] audit: type=1326 audit(1783199218.348:5): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=5900 comm="syz.4.28" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4799dcde59 code=0x7ffc0000 [ 103.073018][ T38] audit: type=1326 audit(1783199218.358:6): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=5900 comm="syz.4.28" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4799d8e68e code=0x7ffc0000 [ 103.073076][ T38] audit: type=1326 audit(1783199218.438:7): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=5900 comm="syz.4.28" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4799d8e68e code=0x7ffc0000 [ 103.073114][ T38] audit: type=1326 audit(1783199218.508:8): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=5900 comm="syz.4.28" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f4799d8e68e code=0x7ffc0000 [ 103.154715][ T38] audit: type=1326 audit(1783199218.508:9): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=5900 comm="syz.4.28" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7f4799dcde59 code=0x7ffc0000 [ 103.154777][ T38] audit: type=1326 audit(1783199218.528:10): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=5900 comm="syz.4.28" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4799d8e68e code=0x7ffc0000 [ 103.154814][ T38] audit: type=1326 audit(1783199218.528:11): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=5900 comm="syz.4.28" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4799d8e68e code=0x7ffc0000 [ 103.206605][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 103.706201][ T9] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 103.706232][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 103.706254][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 103.706272][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 103.706307][ T9] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 103.706326][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.756733][ T5911] fuse: Unknown parameter 'user_i00000000000000000000' [ 103.997655][ T9] usb 4-1: config 0 descriptor?? [ 104.298594][ T5899] netlink: 12 bytes leftover after parsing attributes in process `syz.3.27'. [ 104.650766][ T5872] infiniband syz0: set active [ 104.668377][ T5730] lo speed is unknown, defaulting to 1000 [ 104.729519][ T5872] infiniband syz0: added lo [ 104.820216][ T5872] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 104.872444][ T5872] infiniband syz0: Couldn't open port 1 [ 104.872917][ T5872] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 104.872947][ T5872] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 104.872979][ T5872] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 105.019422][ T32] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 105.384163][ T32] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 105.384191][ T32] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.384207][ T32] usb 5-1: Product: 㰁 [ 105.384220][ T32] usb 5-1: Manufacturer: ﹐ꢸ᯹뺥ォ 衹䠚嗓 [ 105.491444][ T5916] capability: warning: `syz.3.27' uses 32-bit capabilities (legacy support in use) [ 107.362331][ T9] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 107.783002][ T32] usb 5-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 107.861842][ T32] usb 5-1: 2:1: invalid format type 0x1001 is detected, processed as PCM [ 107.861870][ T32] usb 5-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 108.651109][ T5946] loop1: detected capacity change from 0 to 256 [ 108.817748][ T5872] RDS/IB: syz0: added [ 108.818624][ T5872] smc: adding ib device syz0 with port count 1 [ 108.820541][ T5872] smc: ib device syz0 port 1 has no pnetid [ 108.824723][ T5702] lo speed is unknown, defaulting to 1000 [ 108.956027][ T9] usb 4-1: USB disconnect, device number 2 [ 109.075673][ T5946] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 109.110708][ T5946] FAT-fs (loop1): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 109.111370][ T5946] FAT-fs (loop1): Filesystem has been set read-only [ 109.353830][ T38] kauditd_printk_skb: 31 callbacks suppressed [ 109.353846][ T38] audit: type=1326 audit(1783199224.798:41): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=5959 comm="syz.2.41" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5df6f0de59 code=0x7ffc0000 [ 109.354855][ T38] audit: type=1326 audit(1783199224.798:42): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=5959 comm="syz.2.41" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5df6f0de59 code=0x7ffc0000 [ 109.424299][ T38] audit: type=1326 audit(1783199224.868:43): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=5959 comm="syz.2.41" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5df6f0de59 code=0x7ffc0000 [ 109.424801][ T38] audit: type=1326 audit(1783199224.868:44): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=5959 comm="syz.2.41" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5df6f0de59 code=0x7ffc0000 [ 109.477824][ T38] audit: type=1326 audit(1783199224.868:45): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=5959 comm="syz.2.41" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5df6f0de59 code=0x7ffc0000 [ 109.478105][ T38] audit: type=1326 audit(1783199224.928:46): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=5959 comm="syz.2.41" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5df6f0de59 code=0x7ffc0000 [ 109.516576][ T38] audit: type=1326 audit(1783199224.958:47): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=5959 comm="syz.2.41" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5df6f0de59 code=0x7ffc0000 [ 109.528987][ T38] audit: type=1326 audit(1783199224.978:48): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=5959 comm="syz.2.41" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5df6f0de59 code=0x7ffc0000 [ 109.529032][ T38] audit: type=1326 audit(1783199224.978:49): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=5959 comm="syz.2.41" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5df6f0de59 code=0x7ffc0000 [ 109.586588][ T38] audit: type=1326 audit(1783199225.028:50): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=5959 comm="syz.2.41" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5df6f0de59 code=0x7ffc0000 [ 109.743570][ T5596] Flush: task=syz-executor[5596] dev=loop1 state=2 [ 109.899135][ T5596] Teardown: task=syz-executor[5596] dev=loop1 state=2 [ 110.165276][ T5872] lo speed is unknown, defaulting to 1000 [ 110.499318][ T5978] fuse: Unknown parameter 'user_i00000000000000000000' [ 110.524277][ T32] usb 5-1: USB disconnect, device number 2 [ 110.823928][ T5979] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.108823][ T5979] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.540230][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 111.695790][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 111.704491][ T9] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 111.704520][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.949076][ T9] usb 4-1: config 0 descriptor?? [ 112.385139][ T9] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 112.423473][ T5996] Driver unsupported XDP return value 0 on prog (id 9) dev N/A, expect packet loss! [ 113.093691][ T9] gspca_sonixj: reg_w1 err -110 [ 113.093795][ T9] sonixj 4-1:0.0: probe with driver sonixj failed with error -110 [ 113.606784][ T5605] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 113.690995][ T5872] lo speed is unknown, defaulting to 1000 [ 113.808538][ T5605] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 113.808565][ T5605] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.808583][ T5605] usb 2-1: Product: 㰁 [ 113.808595][ T5605] usb 2-1: Manufacturer: ﹐ꢸ᯹뺥ォ 衹䠚嗓 [ 114.205049][ T5605] usb 2-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 114.206040][ T5605] usb 2-1: 2:1: invalid format type 0x1001 is detected, processed as PCM [ 114.206064][ T5605] usb 2-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 114.364881][ T6006] loop4: detected capacity change from 0 to 32768 [ 114.483232][ T823] usb 4-1: USB disconnect, device number 3 [ 114.592261][ T6006] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.51 (6006) [ 115.214191][ T6025] fuse: Unknown parameter 'user_i00000000000000000000' [ 115.550497][ T60] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 116.190227][ T60] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 116.205298][ T60] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 116.208705][ T60] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 116.209668][ T60] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 116.674484][ T5605] usb 2-1: USB disconnect, device number 4 [ 116.741253][ T6006] BTRFS error (device loop4): open_ctree failed: -4 [ 117.158440][ T38] kauditd_printk_skb: 81 callbacks suppressed [ 117.158456][ T38] audit: type=1326 audit(1783199232.598:132): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=6038 comm="syz.3.58" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f223c29de59 code=0x0 [ 117.257206][ T5799] Flush: task=udevd[5799] dev=loop4 state=2 [ 117.257286][ T32] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 117.459208][ T32] usb 3-1: unable to get BOS descriptor or descriptor too short [ 117.460337][ T32] usb 3-1: not running at top speed; connect to a high speed hub [ 117.464167][ T32] usb 3-1: config 250 has an invalid interface number: 59 but max is 2 [ 117.464192][ T32] usb 3-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 117.464208][ T32] usb 3-1: config 250 has 1 interface, different from the descriptor's value: 3 [ 117.464226][ T32] usb 3-1: config 250 has no interface number 0 [ 117.464278][ T32] usb 3-1: config 250 interface 59 altsetting 255 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 117.464301][ T32] usb 3-1: config 250 interface 59 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 117.464319][ T32] usb 3-1: config 250 interface 59 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 117.464342][ T32] usb 3-1: config 250 interface 59 has no altsetting 0 [ 117.466915][ T5799] Teardown: task=udevd[5799] dev=loop4 state=2 [ 117.473401][ T32] usb 3-1: New USB device found, idVendor=1b80, idProduct=e302, bcdDevice=8c.2b [ 117.473438][ T32] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.473454][ T32] usb 3-1: Product: syz [ 117.473466][ T32] usb 3-1: Manufacturer: syz [ 117.473478][ T32] usb 3-1: SerialNumber: syz [ 118.116056][ T5872] lo speed is unknown, defaulting to 1000 [ 118.157191][ T32] usb 3-1: USB disconnect, device number 2 [ 118.236621][ T6061] loop3: detected capacity change from 0 to 1024 [ 118.237366][ T6061] ext4: Unknown parameter 'smackfsroot' [ 118.237603][ T6061] Flush: task=syz.3.63[6061] dev=loop3 state=2 [ 118.350107][ T6061] Teardown: task=syz.3.63[6061] dev=loop3 state=2 [ 118.596726][ T5612] Bluetooth: hci5: command tx timeout [ 118.810750][ T6070] loop2: detected capacity change from 0 to 64 [ 119.259993][ T5872] lo speed is unknown, defaulting to 1000 [ 119.413797][ T6075] fuse: Unknown parameter 'user_id00000000000000000000' [ 119.744631][ T5872] lo speed is unknown, defaulting to 1000 [ 119.844325][ T5597] Flush: task=syz-executor[5597] dev=loop2 state=2 [ 119.936210][ T5597] Teardown: task=syz-executor[5597] dev=loop2 state=2 [ 121.524785][ T5612] Bluetooth: hci5: command tx timeout [ 121.569704][ T5328] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 121.741082][ T5328] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 121.741108][ T5328] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 121.741140][ T5328] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 121.741160][ T5328] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.780997][ T6094] loop3: detected capacity change from 0 to 1024 [ 121.812795][ T6094] ext4: Unknown parameter 'smackfsroot' [ 121.839015][ T5328] usb 3-1: config 0 descriptor?? [ 121.905053][ T5799] Flush: task=udevd[5799] dev=loop3 state=2 [ 121.943905][ T5872] lo speed is unknown, defaulting to 1000 [ 121.978288][ T5799] Teardown: task=udevd[5799] dev=loop3 state=2 [ 122.148745][ T823] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 122.206714][ T32] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 122.237218][ T6034] rdma_rxe: rxe_newlink: failed to add lo [ 122.357741][ T823] usb 5-1: Using ep0 maxpacket: 8 [ 122.369794][ T823] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 122.369817][ T823] usb 5-1: config 179 has no interface number 0 [ 122.369868][ T823] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 122.369890][ T823] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 122.369912][ T823] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 122.369934][ T823] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 122.369956][ T823] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 122.369994][ T823] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 122.370012][ T823] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.499745][ T32] usb 4-1: unable to get BOS descriptor or descriptor too short [ 122.500240][ T32] usb 4-1: not running at top speed; connect to a high speed hub [ 122.524746][ T32] usb 4-1: config 250 has an invalid interface number: 59 but max is 2 [ 122.524773][ T32] usb 4-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 122.524814][ T32] usb 4-1: config 250 has 1 interface, different from the descriptor's value: 3 [ 122.524831][ T32] usb 4-1: config 250 has no interface number 0 [ 122.524877][ T32] usb 4-1: config 250 interface 59 altsetting 255 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 122.524899][ T32] usb 4-1: config 250 interface 59 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 122.524916][ T32] usb 4-1: config 250 interface 59 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 122.524939][ T32] usb 4-1: config 250 interface 59 has no altsetting 0 [ 122.618646][ T32] usb 4-1: New USB device found, idVendor=1b80, idProduct=e302, bcdDevice=8c.2b [ 122.618675][ T32] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.618685][ T32] usb 4-1: Product: syz [ 122.618691][ T32] usb 4-1: Manufacturer: syz [ 122.618698][ T32] usb 4-1: SerialNumber: syz [ 122.758114][ T6095] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 123.335471][ T6092] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.483714][ T37] usb 3-1: USB disconnect, device number 3 [ 123.575148][ T5612] Bluetooth: hci5: command tx timeout [ 123.684796][ T6092] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.292726][ T32] usb 4-1: USB disconnect, device number 4 [ 124.318289][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 124.318358][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 124.357935][ T5731] usb 5-1: USB disconnect, device number 3 [ 125.242288][ T6126] fuse: Unknown parameter 'user_id00000000000000000000' [ 125.261571][ T5328] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 125.305701][ T6128] loop4: detected capacity change from 0 to 1024 [ 125.391052][ T6128] ext4: Unknown parameter 'smackfsroot' [ 125.391478][ T6128] Flush: task=syz.4.83[6128] dev=loop4 state=2 [ 125.641582][ T5612] Bluetooth: hci5: command tx timeout [ 125.652064][ T5328] usb 2-1: Using ep0 maxpacket: 16 [ 125.683076][ T5328] usb 2-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 125.683103][ T5328] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.683119][ T5328] usb 2-1: Product: syz [ 125.683130][ T5328] usb 2-1: Manufacturer: syz [ 125.683140][ T5328] usb 2-1: SerialNumber: syz [ 126.519817][ T6133] rdma_rxe: rxe_newlink: failed to add lo [ 126.520287][ T6128] Teardown: task=syz.4.83[6128] dev=loop4 state=2 [ 126.596005][ T6133] syz.2.84 (6133) used greatest stack depth: 19464 bytes left [ 126.808509][ T5328] usb 2-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 127.086818][ T37] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 127.103555][ T5328] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 127.104211][ T5328] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 127.105830][ T5328] usb 2-1: media controller created [ 127.154142][ T5328] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 127.280578][ T5328] zl10353_read_register: readreg error (reg=127, ret==-71) [ 127.282661][ T37] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 127.282710][ T37] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 127.282729][ T37] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.339050][ T37] usb 4-1: config 0 descriptor?? [ 127.362917][ T37] pwc: Askey VC010 type 2 USB webcam detected. [ 127.534119][ T5328] dvb_usb_gl861 2-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 127.713495][ T5328] usb 2-1: USB disconnect, device number 5 [ 127.817305][ T37] pwc: recv_control_msg error -32 req 02 val 2b00 [ 127.834758][ T37] pwc: recv_control_msg error -32 req 02 val 2700 [ 127.836420][ T37] pwc: recv_control_msg error -32 req 02 val 2c00 [ 127.886427][ T37] pwc: recv_control_msg error -32 req 04 val 1000 [ 127.893718][ T37] pwc: recv_control_msg error -32 req 04 val 1300 [ 128.360999][ T37] pwc: recv_control_msg error -32 req 02 val 2100 [ 128.368738][ T37] pwc: recv_control_msg error -32 req 04 val 1500 [ 128.369834][ T37] pwc: recv_control_msg error -32 req 02 val 2500 [ 128.371621][ T37] pwc: recv_control_msg error -32 req 02 val 2400 [ 128.585012][ T37] pwc: recv_control_msg error -71 req 02 val 2900 [ 128.585461][ T37] pwc: recv_control_msg error -71 req 02 val 2800 [ 128.586269][ T37] pwc: recv_control_msg error -71 req 04 val 1100 [ 128.637539][ T37] pwc: recv_control_msg error -71 req 04 val 1200 [ 128.758009][ T37] pwc: Registered as video103. [ 128.794501][ T37] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input6 [ 128.897689][ T37] usb 4-1: USB disconnect, device number 5 [ 129.170409][ T6164] fuse: Unknown parameter 'user_id00000000000000000000' [ 131.186907][ T6179] rdma_rxe: rxe_newlink: failed to add lo [ 132.166519][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 132.196520][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 132.206499][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 132.478054][ T6176] loop3: detected capacity change from 0 to 1024 [ 132.478878][ T6176] ext4: Unknown parameter 'smackfsroot' [ 132.479116][ T6176] Flush: task=syz.3.96[6176] dev=loop3 state=2 [ 132.665665][ T6176] Teardown: task=syz.3.96[6176] dev=loop3 state=2 [ 132.735336][ T189] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.931730][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.931843][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.647539][ T6208] fuse: Bad value for 'fd' [ 135.032602][ T189] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.138888][ T6022] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.139251][ T6022] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.139515][ T6022] bridge_slave_0: entered allmulticast mode [ 135.178071][ T6022] bridge_slave_0: entered promiscuous mode [ 135.217724][ T6022] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.218528][ T6022] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.218771][ T6022] bridge_slave_1: entered allmulticast mode [ 135.272431][ T6022] bridge_slave_1: entered promiscuous mode [ 136.179541][ T189] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.203736][ T6238] netlink: 768 bytes leftover after parsing attributes in process `syz.4.112'. [ 136.231011][ T6022] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 136.236158][ T6022] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 136.246607][ T37] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 136.403470][ T37] usb 3-1: config 2 has an invalid interface number: 174 but max is 0 [ 136.403496][ T37] usb 3-1: config 2 has no interface number 0 [ 136.403535][ T37] usb 3-1: config 2 interface 174 altsetting 0 has an endpoint descriptor with address 0x9E, changing to 0x8E [ 136.403557][ T37] usb 3-1: config 2 interface 174 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 1023 [ 136.403576][ T37] usb 3-1: config 2 interface 174 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 255 [ 136.406119][ T37] usb 3-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=22.7e [ 136.406145][ T37] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.406162][ T37] usb 3-1: Product: syz [ 136.406175][ T37] usb 3-1: Manufacturer: syz [ 136.406186][ T37] usb 3-1: SerialNumber: syz [ 136.485498][ T6236] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 136.485615][ T6236] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 136.486079][ T6022] team0: Port device team_slave_0 added [ 136.511385][ T6022] team0: Port device team_slave_1 added [ 138.059070][ T6246] netlink: 'syz.4.115': attribute type 1 has an invalid length. [ 138.175099][ T37] usb 3-1: probing VID:PID(0424:012C) [ 138.179747][ T37] usb 3-1: vub300 testing BULK IN EndPoint(0) 8E [ 138.179771][ T37] usb 3-1: vub300 testing BULK IN EndPoint(1) 82 [ 138.179790][ T37] usb 3-1: Could not find two sets of bulk-in/out endpoint pairs [ 138.493886][ T37] vub300 3-1:2.174: probe with driver vub300 failed with error -22 [ 138.628832][ T37] usb 3-1: USB disconnect, device number 4 [ 138.676358][ T189] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.823157][ T5731] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 138.980469][ T6022] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 138.980479][ T6022] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 138.980491][ T6022] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 139.003435][ T5731] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 139.003463][ T5731] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.003479][ T5731] usb 5-1: Product: 㰁 [ 139.003491][ T5731] usb 5-1: Manufacturer: ﹐ꢸ᯹뺥ォ 衹䠚嗓 [ 139.357750][ T5731] usb 5-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 139.363319][ T5731] usb 5-1: 2:1: invalid format type 0x1001 is detected, processed as PCM [ 139.363346][ T5731] usb 5-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 139.371184][ T6022] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 139.371197][ T6022] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 139.371216][ T6022] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 140.806759][ T5731] usb 5-1: USB disconnect, device number 4 [ 140.878720][ T6022] hsr_slave_0: entered promiscuous mode [ 141.541647][ T6022] hsr_slave_1: entered promiscuous mode [ 141.550508][ T6022] debugfs: 'hsr0' already exists in 'hsr' [ 141.550548][ T6022] Cannot create hsr debugfs directory [ 142.569473][ T6288] loop2: detected capacity change from 0 to 128 [ 142.604815][ T6281] warning: `syz.4.126' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 142.774946][ T6288] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 142.881876][ T6288] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 142.987763][ T6288] netlink: 'syz.2.127': attribute type 13 has an invalid length. [ 143.302057][ T6294] netlink: 24 bytes leftover after parsing attributes in process `syz.2.127'. [ 143.807629][ T6312] netlink: 4 bytes leftover after parsing attributes in process `syz.4.133'. [ 144.127355][ T6316] loop1: detected capacity change from 0 to 256 [ 144.131637][ T6316] ======================================================= [ 144.131637][ T6316] WARNING: The mand mount option has been deprecated and [ 144.131637][ T6316] and is ignored by this kernel. Remove the mand [ 144.131637][ T6316] option from the mount to silence this warning. [ 144.131637][ T6316] ======================================================= [ 144.311625][ T6316] FAT-fs (loop1): IO charset m not found [ 144.492044][ T5943] Flush: task=udevd[5943] dev=loop1 state=2 [ 144.891614][ T5943] Teardown: task=udevd[5943] dev=loop1 state=2 [ 145.286006][ C0] vcan0: j1939_tp_rxtimer: 0xffff888038c32000: rx timeout, send abort [ 145.455706][ T6320] loop3: detected capacity change from 0 to 32768 [ 145.465261][ T6320] btrfs: Deprecated parameter 'usebackuproot' [ 145.465491][ T6320] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 145.593113][ T6320] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.136 (6320) [ 145.681829][ T6320] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 145.681878][ T6320] BTRFS info (device loop3): using crc32c checksum algorithm [ 145.767072][ T6327] netlink: 768 bytes leftover after parsing attributes in process `syz.1.137'. [ 145.788420][ C0] vcan0: j1939_tp_rxtimer: 0xffff888038c32000: abort rx timeout. Force session deactivation [ 145.883687][ T1198] BTRFS warning (device loop3): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 145.883810][ T6320] BTRFS error (device loop3): failed to load root extent [ 145.883851][ T6320] BTRFS warning (device loop3): try to load backup roots slot 1 [ 145.891028][ T67] BTRFS warning (device loop3): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 145.891173][ T6320] BTRFS warning (device loop3): couldn't read tree root [ 145.891192][ T6320] BTRFS warning (device loop3): try to load backup roots slot 2 [ 145.903303][ T5839] BTRFS error (device loop3): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 145.903428][ T6320] BTRFS warning (device loop3): couldn't read tree root [ 145.903444][ T6320] BTRFS warning (device loop3): try to load backup roots slot 3 [ 145.987918][ T6320] BTRFS info (device loop3): rebuilding free space tree [ 146.287537][ T6320] BTRFS info (device loop3): checking UUID tree [ 146.298231][ T6320] BTRFS info (device loop3): enabling ssd optimizations [ 146.298260][ T6320] BTRFS info (device loop3): turning on async discard [ 146.298274][ T6320] BTRFS info (device loop3): enabling free space tree [ 146.298288][ T6320] BTRFS info (device loop3): force clearing of disk cache [ 146.298301][ T6320] BTRFS info (device loop3): enabling auto defrag [ 146.298319][ T6320] BTRFS info (device loop3): trying to use backup root at mount time [ 146.298341][ T6320] BTRFS info (device loop3): use zstd compression, level 3 [ 147.069598][ T5597] Flush: task=syz-executor[5597] dev=loop2 state=2 [ 147.541961][ T5597] Teardown: task=syz-executor[5597] dev=loop2 state=2 [ 148.014269][ T6360] ubi0: attaching mtd0 [ 148.090083][ T6360] ubi0: scanning is finished [ 148.090124][ T6360] ubi0: empty MTD device detected [ 148.266457][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 149.939585][ T6360] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 150.790777][ T189] bridge_slave_1: left allmulticast mode [ 150.847931][ T189] bridge_slave_1: left promiscuous mode [ 150.869201][ T823] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 150.892963][ T189] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.037377][ T823] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 151.037407][ T823] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.037424][ T823] usb 5-1: Product: 㰁 [ 151.037437][ T823] usb 5-1: Manufacturer: ﹐ꢸ᯹뺥ォ 衹䠚嗓 [ 151.977035][ T823] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 151.978011][ T823] usb 5-1: 2:1: invalid format type 0x1001 is detected, processed as PCM [ 151.978036][ T823] usb 5-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 152.173640][ T823] usb 5-1: USB disconnect, device number 5 [ 152.263530][ T189] bridge_slave_0: left allmulticast mode [ 152.263561][ T189] bridge_slave_0: left promiscuous mode [ 152.263792][ T189] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.344006][ T5943] udevd[5943]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 152.433174][ T6386] loop2: detected capacity change from 0 to 2048 [ 152.557221][ T6386] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 152.567251][ T6386] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 152.721397][ T6386] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 152.901562][ T5600] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 152.945187][ T6388] loop1: detected capacity change from 0 to 40427 [ 152.970593][ T6388] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 152.970627][ T6388] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 153.028213][ T6388] F2FS-fs (loop1): invalid crc value [ 153.328906][ T6388] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 153.435938][ T6388] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 153.436312][ T6388] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 153.729706][ T823] usb 3-1: new low-speed USB device number 5 using dummy_hcd [ 155.079371][ T6400] rdma_rxe: rxe_newlink: failed to add lo [ 155.133497][ T823] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 8 [ 155.133527][ T823] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 15 [ 155.133566][ T823] usb 3-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00 [ 155.133586][ T823] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.183307][ T823] usb 3-1: config 0 descriptor?? [ 155.189273][ T6386] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 155.477802][ T823] usbhid 3-1:0.0: can't add hid device: -71 [ 155.477929][ T823] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 155.528869][ T5600] Flush: task=syz-executor[5600] dev=loop3 state=2 [ 155.607199][ T823] usb 3-1: USB disconnect, device number 5 [ 155.692496][ T5600] Teardown: task=syz-executor[5600] dev=loop3 state=2 [ 155.772962][ T5597] Flush: task=syz-executor[5597] dev=loop2 state=2 [ 155.959718][ T5597] Teardown: task=syz-executor[5597] dev=loop2 state=2 [ 156.841557][ T6411] netlink: 8 bytes leftover after parsing attributes in process `syz.3.147'. [ 156.940841][ T6406] loop3: detected capacity change from 0 to 256 [ 156.987743][ T6406] vfat: Unknown parameter 'uni' [ 157.043863][ T5943] Flush: task=udevd[5943] dev=loop3 state=2 [ 157.167196][ T5943] Teardown: task=udevd[5943] dev=loop3 state=2 [ 157.365015][ T6414] loop2: detected capacity change from 0 to 16 [ 157.440503][ T6414] erofs (device loop2): unidentified algorithms ff00, please upgrade kernel [ 157.539892][ T5943] Flush: task=udevd[5943] dev=loop2 state=2 [ 157.755366][ T6420] netlink: 8 bytes leftover after parsing attributes in process `syz.2.160'. [ 157.761125][ T5943] Teardown: task=udevd[5943] dev=loop2 state=2 [ 157.855379][ T6422] netlink: 8 bytes leftover after parsing attributes in process `syz.2.160'. [ 158.091479][ T6426] netlink: 12 bytes leftover after parsing attributes in process `syz.4.161'. [ 158.447449][ T189] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 158.577485][ T189] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 158.582046][ T5596] Flush: task=syz-executor[5596] dev=loop1 state=2 [ 158.619555][ T189] bond0 (unregistering): Released all slaves [ 158.666814][ T5596] Teardown: task=syz-executor[5596] dev=loop1 state=2 [ 158.667786][ T5717] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 158.846123][ T6420] batadv_slave_0: Caught tx_queue_len zero misconfig [ 158.848898][ T6422] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 158.888030][ T5717] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 158.888062][ T5717] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.888079][ T5717] usb 5-1: Product: 㰁 [ 158.888091][ T5717] usb 5-1: Manufacturer: ﹐ꢸ᯹뺥ォ 衹䠚嗓 [ 159.236824][ T5717] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 159.237368][ T5717] usb 5-1: 2:1: invalid format type 0x1001 is detected, processed as PCM [ 159.237390][ T5717] usb 5-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 159.360750][ T5717] usb 5-1: USB disconnect, device number 6 [ 160.951422][ T6441] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 160.991359][ T5943] udevd[5943]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 163.152519][ T6471] loop2: detected capacity change from 0 to 128 [ 163.155381][ T6471] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 163.343125][ T6471] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 163.804149][ T6477] misc userio: Invalid payload size [ 163.804525][ T6477] misc userio: No port type given on /dev/userio [ 166.402778][ T6502] loop4: detected capacity change from 0 to 128 [ 166.405879][ T6502] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 166.411046][ T6502] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 166.981202][ T5597] Flush: task=syz-executor[5597] dev=loop2 state=2 [ 167.327482][ T5597] Teardown: task=syz-executor[5597] dev=loop2 state=2 [ 167.367924][ T5257] 8021q: adding VLAN 0 to HW filter on device eth1 [ 167.483664][ T6022] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 168.301154][ T6022] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 168.305768][ T6022] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 168.549123][ T6022] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 168.574631][ T6022] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 168.582587][ T5598] Flush: task=syz-executor[5598] dev=loop4 state=2 [ 168.688243][ T5598] Teardown: task=syz-executor[5598] dev=loop4 state=2 [ 168.732572][ T6022] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 170.262188][ T6022] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 171.274343][ T6022] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 171.692905][ T6554] netlink: 36 bytes leftover after parsing attributes in process `syz.1.192'. [ 172.125684][ T6557] loop3: detected capacity change from 0 to 256 [ 172.129261][ T6557] exfat: Deprecated parameter 'utf8' [ 172.129389][ T6557] exfat: Deprecated parameter 'namecase' [ 172.129838][ T6557] exfat: Deprecated parameter 'namecase' [ 172.129924][ T6557] exfat: Deprecated parameter 'namecase' [ 172.506352][ T6557] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 173.498309][ T5257] 8021q: adding VLAN 0 to HW filter on device eth2 [ 175.252580][ T6595] netlink: 8 bytes leftover after parsing attributes in process `syz.1.204'. [ 175.439892][ T6597] loop1: detected capacity change from 0 to 1024 [ 175.685661][ T6599] loop2: detected capacity change from 0 to 128 [ 176.185253][ T60] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 176.233304][ T60] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 176.270673][ T60] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 176.285281][ T5600] Flush: task=syz-executor[5600] dev=loop3 state=2 [ 176.295593][ T60] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 176.312926][ T60] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 176.665761][ T6599] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 176.821209][ T6599] ext4 filesystem being mounted at /49/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 176.840598][ T5600] Teardown: task=syz-executor[5600] dev=loop3 state=2 [ 177.022474][ T38] audit: type=1326 audit(1783199292.468:133): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=6596 comm="syz.2.203" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5df6f0de59 code=0x7ffc0000 [ 177.022520][ T38] audit: type=1326 audit(1783199292.468:134): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=6596 comm="syz.2.203" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5df6f0de59 code=0x7ffc0000 [ 177.023530][ T38] audit: type=1326 audit(1783199292.468:135): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=6596 comm="syz.2.203" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5df6f0de59 code=0x7ffc0000 [ 177.023570][ T38] audit: type=1326 audit(1783199292.468:136): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=6596 comm="syz.2.203" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5df6f0de59 code=0x7ffc0000 [ 177.024563][ T38] audit: type=1326 audit(1783199292.468:137): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=6596 comm="syz.2.203" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f5df6f0de59 code=0x7ffc0000 [ 177.024602][ T38] audit: type=1326 audit(1783199292.468:138): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=6596 comm="syz.2.203" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5df6f0de59 code=0x7ffc0000 [ 177.024638][ T38] audit: type=1326 audit(1783199292.468:139): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=6596 comm="syz.2.203" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5df6f0de59 code=0x7ffc0000 [ 177.025056][ T38] audit: type=1326 audit(1783199292.468:140): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=6596 comm="syz.2.203" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5df6f0de59 code=0x7ffc0000 [ 177.025094][ T38] audit: type=1326 audit(1783199292.468:141): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=6596 comm="syz.2.203" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5df6f0de59 code=0x7ffc0000 [ 177.138499][ T38] audit: type=1326 audit(1783199292.588:142): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=6596 comm="syz.2.203" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5df6f0de59 code=0x7ffc0000 [ 177.296856][ T6595] netlink: 'syz.1.204': attribute type 15 has an invalid length. [ 177.296875][ T6595] netlink: 24 bytes leftover after parsing attributes in process `syz.1.204'. [ 177.643356][ T6361] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 177.820130][ T6361] usb 5-1: Using ep0 maxpacket: 16 [ 177.850484][ T6361] usb 5-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 177.850515][ T6361] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.868915][ T6361] usb 5-1: config 0 descriptor?? [ 177.875953][ T6361] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 178.072598][ T5596] Flush: task=syz-executor[5596] dev=loop1 state=2 [ 178.303036][ T189] hsr_slave_0: left promiscuous mode [ 178.352518][ T5597] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 178.436501][ T5597] Flush: task=syz-executor[5597] dev=loop2 state=2 [ 178.477316][ T189] hsr_slave_1: left promiscuous mode [ 178.478535][ T189] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 178.501362][ T189] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 178.529211][ T5596] Teardown: task=syz-executor[5596] dev=loop1 state=2 [ 178.766599][ T5612] Bluetooth: hci4: command tx timeout [ 178.831093][ T6636] loop1: detected capacity change from 0 to 256 [ 178.900794][ T6636] binfmt_misc: register: failed to install interpreter file ./file0 [ 178.951898][ T5943] Flush: task=udevd[5943] dev=loop1 state=2 [ 179.082135][ T189] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 179.082164][ T189] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 179.700604][ T5597] Teardown: task=syz-executor[5597] dev=loop2 state=2 [ 180.106967][ T5328] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 180.349702][ T5328] usb 3-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 180.349731][ T5328] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.349747][ T5328] usb 3-1: Product: syz [ 180.349759][ T5328] usb 3-1: Manufacturer: syz [ 180.349771][ T5328] usb 3-1: SerialNumber: syz [ 180.432248][ T5328] usb 3-1: config 0 descriptor?? [ 180.464779][ T5328] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 180.490445][ T6361] gspca_sonixj: reg_w1 err -110 [ 180.490530][ T6361] sonixj 5-1:0.0: probe with driver sonixj failed with error -110 [ 180.498259][ T6361] usb 5-1: USB disconnect, device number 7 [ 180.696669][ T5730] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 180.836785][ T5612] Bluetooth: hci4: command tx timeout [ 180.860350][ T5730] usb 4-1: config 0 interface 0 has no altsetting 0 [ 180.860391][ T5730] usb 4-1: New USB device found, idVendor=046d, idProduct=c704, bcdDevice= 0.00 [ 180.860414][ T5730] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.001031][ T5943] Teardown: task=udevd[5943] dev=loop1 state=2 [ 181.140500][ T200] usb 3-1: USB disconnect, device number 6 [ 182.448979][ T5730] usb 4-1: config 0 descriptor?? [ 183.101016][ T5612] Bluetooth: hci4: command tx timeout [ 184.141130][ T5730] usbhid 4-1:0.0: can't add hid device: -71 [ 184.181328][ T5730] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 184.318915][ T189] veth1_macvtap: left promiscuous mode [ 184.335846][ T189] veth0_macvtap: left promiscuous mode [ 184.336249][ T189] veth1_vlan: left promiscuous mode [ 184.376017][ T189] veth0_vlan: left promiscuous mode [ 184.513887][ T5730] usb 4-1: USB disconnect, device number 6 [ 184.623073][ T6650] FAULT_INJECTION: forcing a failure. [ 184.623073][ T6650] name failslab, interval 1, probability 0, space 0, times 0 [ 184.623118][ T6650] CPU: 1 UID: 0 PID: 6650 Comm: syz.3.214 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 184.623137][ T6650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 184.623147][ T6650] Call Trace: [ 184.623153][ T6650] [ 184.623161][ T6650] dump_stack_lvl+0xe8/0x150 [ 184.623191][ T6650] should_fail_ex+0x467/0x600 [ 184.623223][ T6650] should_failslab+0xa8/0x100 [ 184.623240][ T6650] ? alloc_empty_file+0x5b/0x1d0 [ 184.623263][ T6650] kmem_cache_alloc_noprof+0x9e/0x680 [ 184.623289][ T6650] ? alloc_empty_file+0x5b/0x1d0 [ 184.623317][ T6650] alloc_empty_file+0x5b/0x1d0 [ 184.623342][ T6650] alloc_file_pseudo+0x115/0x1e0 [ 184.623369][ T6650] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 184.623402][ T6650] __shmem_file_setup+0x2e9/0x370 [ 184.623427][ T6650] ? __pfx___shmem_file_setup+0x10/0x10 [ 184.623451][ T6650] ? rt_spin_unlock+0x157/0x200 [ 184.623472][ T6650] memfd_alloc_file+0x99/0x570 [ 184.623486][ T6650] ? rt_spin_unlock+0x163/0x200 [ 184.623503][ T6650] ? __pfx_memfd_alloc_file+0x10/0x10 [ 184.623516][ T6650] ? alloc_fd+0x654/0x6d0 [ 184.623539][ T6650] __se_sys_memfd_create+0x329/0x420 [ 184.623557][ T6650] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.623575][ T6650] do_syscall_64+0x174/0x580 [ 184.623596][ T6650] ? trace_irq_disable+0x3b/0x140 [ 184.623615][ T6650] ? clear_bhb_loop+0x40/0x90 [ 184.623636][ T6650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.623653][ T6650] RIP: 0033:0x7f223c29de59 [ 184.623680][ T6650] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 184.623695][ T6650] RSP: 002b:00007f223a4f5e08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 184.623717][ T6650] RAX: ffffffffffffffda RBX: 000000000000034f RCX: 00007f223c29de59 [ 184.623729][ T6650] RDX: 00007f223a4f5ee0 RSI: 0000000000000000 RDI: 00007f223c33404f [ 184.623739][ T6650] RBP: 00002000000000c0 R08: 00000000ffffffff R09: 0000000000000000 [ 184.623749][ T6650] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000000 [ 184.623759][ T6650] R13: 00007f223a4f5ee0 R14: 00007f223a4f5ea0 R15: 0000200000000400 [ 184.623784][ T6650] [ 185.160174][ T5612] Bluetooth: hci4: command tx timeout [ 185.922007][ T6671] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 185.922030][ T6671] CPU: 1 UID: 0 PID: 6671 Comm: syz.1.220 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 185.922051][ T6671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 185.922062][ T6671] Call Trace: [ 185.922068][ T6671] [ 185.922076][ T6671] dump_stack_lvl+0xe8/0x150 [ 185.922111][ T6671] sysfs_create_dir_ns+0x271/0x2a0 [ 185.922133][ T6671] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 185.922156][ T6671] ? rt_spin_unlock+0x163/0x200 [ 185.922179][ T6671] kobject_add_internal+0x62c/0xce0 [ 185.922204][ T6671] kobject_add+0x163/0x240 [ 185.922230][ T6671] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 185.922252][ T6671] ? __pfx_kobject_add+0x10/0x10 [ 185.922281][ T6671] ? get_device_parent+0x370/0x3a0 [ 185.922302][ T6671] ? __pfx_klist_children_get+0x10/0x10 [ 185.922322][ T6671] device_add+0x3fa/0xb80 [ 185.922344][ T6671] tty_register_device_attr+0x422/0x950 [ 185.922374][ T6671] ? __pfx_tty_register_device_attr+0x10/0x10 [ 185.922420][ T6671] ? tty_port_init+0x140/0x1b0 [ 185.922445][ T6671] ? gsm_dlci_alloc+0x341/0x650 [ 185.922471][ T6671] gsm_activate_mux+0x110/0x2a0 [ 185.922499][ T6671] gsmld_ioctl+0x12d3/0x1930 [ 185.922525][ T6671] ? __pfx_gsmld_ioctl+0x10/0x10 [ 185.922558][ T6671] ? __pfx___ldsem_down_read_nested+0x10/0x10 [ 185.922583][ T6671] ? ldsem_down_read+0x12/0x40 [ 185.922610][ T6671] ? __pfx_gsmld_ioctl+0x10/0x10 [ 185.922634][ T6671] tty_ioctl+0x9c3/0xde0 [ 185.922659][ T6671] ? __pfx_tty_ioctl+0x10/0x10 [ 185.922682][ T6671] __se_sys_ioctl+0xff/0x170 [ 185.922708][ T6671] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.922731][ T6671] do_syscall_64+0x174/0x580 [ 185.922757][ T6671] ? trace_irq_disable+0x3b/0x140 [ 185.922779][ T6671] ? clear_bhb_loop+0x40/0x90 [ 185.922801][ T6671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.922819][ T6671] RIP: 0033:0x7f3d3687de59 [ 185.922839][ T6671] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 185.922863][ T6671] RSP: 002b:00007f3d34671028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 185.922884][ T6671] RAX: ffffffffffffffda RBX: 00007f3d36b06270 RCX: 00007f3d3687de59 [ 185.922898][ T6671] RDX: 0000200000000040 RSI: 00000000404c4701 RDI: 0000000000000008 [ 185.922910][ T6671] RBP: 00007f3d36913e6f R08: 0000000000000000 R09: 0000000000000000 [ 185.922921][ T6671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 185.922931][ T6671] R13: 00007f3d36b06308 R14: 00007f3d36b06270 R15: 00007fff24379208 [ 185.922957][ T6671] [ 185.922983][ T6671] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 187.600017][ T6675] udevd[6675]: setting mode of /dev/gsmtty36 to 020600 failed: No such file or directory [ 187.600190][ T6675] udevd[6675]: setting owner of /dev/gsmtty36 to uid=0, gid=0 failed: No such file or directory [ 187.693412][ T6661] rdma_rxe: rxe_newlink: failed to add lo [ 188.006271][ T6680] FAULT_INJECTION: forcing a failure. [ 188.006271][ T6680] name failslab, interval 1, probability 0, space 0, times 0 [ 188.006303][ T6680] CPU: 0 UID: 0 PID: 6680 Comm: syz.3.222 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 188.006322][ T6680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 188.006331][ T6680] Call Trace: [ 188.006338][ T6680] [ 188.006345][ T6680] dump_stack_lvl+0xe8/0x150 [ 188.006375][ T6680] should_fail_ex+0x467/0x600 [ 188.006406][ T6680] should_failslab+0xa8/0x100 [ 188.006428][ T6680] __kmalloc_cache_noprof+0xa1/0x670 [ 188.006444][ T6680] ? alloc_pipe_info+0xe8/0x4c0 [ 188.006464][ T6680] ? alloc_pipe_info+0xe8/0x4c0 [ 188.006489][ T6680] alloc_pipe_info+0xe8/0x4c0 [ 188.006511][ T6680] splice_direct_to_actor+0xa52/0xcc0 [ 188.006531][ T6680] ? __lock_acquire+0x6df/0x2e40 [ 188.006554][ T6680] ? kstrtouint+0x6e/0xe0 [ 188.006585][ T6680] ? __lock_acquire+0x6df/0x2e40 [ 188.006604][ T6680] ? __pfx_direct_splice_actor+0x10/0x10 [ 188.006622][ T6680] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 188.006656][ T6680] do_splice_direct+0x19b/0x2a0 [ 188.006675][ T6680] ? __pfx_do_splice_direct+0x10/0x10 [ 188.006693][ T6680] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 188.006714][ T6680] ? bpf_lsm_file_permission+0x9/0x20 [ 188.006731][ T6680] ? security_file_permission+0x68/0x220 [ 188.006750][ T6680] ? rw_verify_area+0x209/0x4d0 [ 188.006768][ T6680] do_sendfile+0x540/0x7e0 [ 188.006792][ T6680] ? __pfx_do_sendfile+0x10/0x10 [ 188.006817][ T6680] __se_sys_sendfile64+0xdf/0x1a0 [ 188.006836][ T6680] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 188.006861][ T6680] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.006879][ T6680] do_syscall_64+0x174/0x580 [ 188.006900][ T6680] ? trace_irq_disable+0x3b/0x140 [ 188.006920][ T6680] ? clear_bhb_loop+0x40/0x90 [ 188.006941][ T6680] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.006957][ T6680] RIP: 0033:0x7f223c29de59 [ 188.006974][ T6680] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 188.006988][ T6680] RSP: 002b:00007f223a4f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 188.007006][ T6680] RAX: ffffffffffffffda RBX: 00007f223c525fa0 RCX: 00007f223c29de59 [ 188.007018][ T6680] RDX: 0000200000000200 RSI: 0000000000000004 RDI: 0000000000000003 [ 188.007028][ T6680] RBP: 00007f223a4f6090 R08: 0000000000000000 R09: 0000000000000000 [ 188.007038][ T6680] R10: 0000000000001000 R11: 0000000000000246 R12: 0000000000000001 [ 188.007048][ T6680] R13: 00007f223c526038 R14: 00007f223c525fa0 R15: 00007ffe7e233328 [ 188.007073][ T6680] [ 188.476624][ T200] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 188.632916][ T200] usb 5-1: Using ep0 maxpacket: 16 [ 188.672706][ T200] usb 5-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 188.672738][ T200] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.713405][ T200] usb 5-1: config 0 descriptor?? [ 188.725914][ T200] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 189.916850][ T200] gspca_sonixj: reg_w1 err -110 [ 189.916948][ T200] sonixj 5-1:0.0: probe with driver sonixj failed with error -110 [ 190.428211][ T6687] loop3: detected capacity change from 0 to 512 [ 190.430824][ T6687] ext4: Unknown parameter 'obj_user' [ 200.066462][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 200.226462][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 200.286461][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 200.316472][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 200.476460][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 200.676463][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 200.828807][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 200.828950][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 201.044255][ T5943] Flush: task=udevd[5943] dev=loop3 state=2 [ 201.085897][ T11] usb 5-1: USB disconnect, device number 8 [ 201.796552][ T6692] Bluetooth: hci0: command 0x0406 tx timeout [ 202.829701][ T5943] Teardown: task=udevd[5943] dev=loop3 state=2 [ 202.885350][ T189] team0 (unregistering): Port device team_slave_1 removed [ 203.158339][ T5612] Bluetooth: hci3: command 0x0406 tx timeout [ 203.158379][ T5612] Bluetooth: hci2: command 0x0406 tx timeout [ 203.158402][ T5612] Bluetooth: hci1: command 0x0406 tx timeout [ 203.604701][ T189] team0 (unregistering): Port device team_slave_0 removed [ 203.785873][ T1034] smc: removing ib device syz0 [ 205.574723][ T6692] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 205.646846][ T6692] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 205.652166][ T6692] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 205.664626][ T6692] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 205.676353][ T6692] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 206.169518][ T4911] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 206.245547][ T4911] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 206.264610][ T4911] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 206.271818][ T4911] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 206.275683][ T4911] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 206.770267][ T6716] rdma_rxe: rxe_newlink: failed to add lo [ 207.237110][ T1034] smbdirect: ib_dev[syz0] removed [ 208.116575][ T5604] Bluetooth: hci5: command tx timeout [ 208.439106][ T5604] Bluetooth: hci6: command tx timeout [ 209.100098][ T6725] loop4: detected capacity change from 0 to 64 [ 210.204601][ T5604] Bluetooth: hci5: command tx timeout [ 210.516627][ T5604] Bluetooth: hci6: command tx timeout [ 212.626250][ T5604] Bluetooth: hci5: command tx timeout [ 212.680598][ T5604] Bluetooth: hci6: command tx timeout [ 214.088549][ T6728] loop3: detected capacity change from 0 to 164 [ 214.181188][ T5598] Flush: task=syz-executor[5598] dev=loop4 state=2 [ 214.513926][ T5598] Teardown: task=syz-executor[5598] dev=loop4 state=2 [ 214.763545][ T4911] Bluetooth: hci6: command tx timeout [ 214.763579][ T4911] Bluetooth: hci5: command tx timeout [ 214.914352][ T5257] 8021q: adding VLAN 0 to HW filter on device eth3 [ 214.979366][ T5730] lo speed is unknown, defaulting to 1000 [ 214.979415][ T5730] syz0: Port: 1 Link DOWN [ 216.596872][ T6731] loop4: detected capacity change from 0 to 32768 [ 217.111326][ T6731] diRead: diIAGRead returned -5 [ 218.465797][ T5600] Flush: task=syz-executor[5600] dev=loop3 state=2 [ 218.714820][ T5598] Flush: task=syz-executor[5598] dev=loop4 state=2 [ 219.148765][ T5600] Teardown: task=syz-executor[5600] dev=loop3 state=2 [ 219.152951][ T5598] Teardown: task=syz-executor[5598] dev=loop4 state=2 [ 219.731719][ T6747] loop4: detected capacity change from 0 to 1024 [ 219.746193][ T6747] EXT4-fs: inline encryption not supported [ 219.774602][ T6747] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 220.719897][ T6747] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #3: block 2: comm syz.4.237: lblock 2 mapped to illegal pblock 2 (length 1) [ 220.719937][ T6747] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 220.731736][ C0] EXT4-fs (loop4): initial error at time 1783199336: ext4_map_blocks:791: inode 3: block 2 [ 220.731777][ C0] EXT4-fs (loop4): last error at time 1783199336: ext4_map_blocks:791: inode 3: block 2 [ 221.031755][ T6747] __quota_error: 43 callbacks suppressed [ 221.031775][ T6747] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 221.031929][ T6747] EXT4-fs error (device loop4): __ext4_get_inode_loc:4886: comm syz.4.237: Invalid inode table block 1 in block_group 0 [ 221.031953][ T6747] loop4: lost filesystem error report for type 5 error -117 [ 221.239297][ T6747] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 221.239325][ T6747] loop4: lost filesystem error report for type 5 error -117 [ 221.339696][ T6747] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #3: comm syz.4.237: mark_inode_dirty error [ 221.339731][ T6747] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 221.419367][ T6747] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 221.419393][ T6747] EXT4-fs error (device loop4): ext4_acquire_dquot:7041: comm syz.4.237: Failed to acquire dquot type 0 [ 221.419414][ T6747] loop4: lost filesystem error report for type 5 error -117 [ 221.427066][ T6747] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 221.427092][ T6747] loop4: lost filesystem error report for type 5 error -117 [ 221.604153][ T6747] EXT4-fs error (device loop4): ext4_evict_inode:267: inode #11: comm syz.4.237: mark_inode_dirty error [ 221.604184][ T6747] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 221.625112][ T6747] EXT4-fs warning (device loop4): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 221.667595][ T6747] EXT4-fs (loop4): 1 orphan inode deleted [ 221.672625][ T6747] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 221.869532][ T6771] lo speed is unknown, defaulting to 1000 [ 221.871773][ T6771] lo speed is unknown, defaulting to 1000 [ 221.873403][ T6771] lo speed is unknown, defaulting to 1000 [ 222.125279][ T6771] infiniband syz0: set active [ 222.125379][ T6771] infiniband syz0: added lo [ 222.195830][ T6771] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 222.195866][ T6771] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 222.195901][ T6771] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 222.234407][ T6771] RDS/IB: syz0: added [ 222.234484][ T6771] smc: adding ib device syz0 with port count 1 [ 222.234704][ T6771] smc: ib device syz0 port 1 has no pnetid [ 222.240990][ T11] lo speed is unknown, defaulting to 1000 [ 222.247199][ T6771] lo speed is unknown, defaulting to 1000 [ 222.528262][ T6771] lo speed is unknown, defaulting to 1000 [ 222.879624][ T6771] lo speed is unknown, defaulting to 1000 [ 223.176107][ T6771] lo speed is unknown, defaulting to 1000 [ 223.533255][ T6771] lo speed is unknown, defaulting to 1000 [ 223.832010][ T6771] lo speed is unknown, defaulting to 1000 [ 224.131397][ T200] lo speed is unknown, defaulting to 1000 [ 224.141498][ T6771] lo speed is unknown, defaulting to 1000 [ 224.439777][ T6771] lo speed is unknown, defaulting to 1000 [ 226.116040][ T5598] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.130134][ T14] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 226.130168][ T14] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 226.660664][ T5257] 8021q: adding VLAN 0 to HW filter on device eth4 [ 226.964403][ T6795] netlink: 28 bytes leftover after parsing attributes in process `syz.3.244'. [ 227.120850][ T14] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 227.121084][ T14] EXT4-fs error (device loop4): ext4_release_dquot:7077: comm kworker/u8:1: Failed to release dquot type 0 [ 227.121104][ T14] loop4: lost filesystem error report for type 5 error -117 [ 227.267337][ T5598] EXT4-fs error (device loop4): __ext4_get_inode_loc:4886: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 227.267367][ T5598] loop4: lost filesystem error report for type 5 error -117 [ 227.385559][ T5598] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 227.385584][ T5598] loop4: lost filesystem error report for type 5 error -117 [ 227.480387][ T5598] EXT4-fs error (device loop4): ext4_quota_off:7325: inode #3: comm syz-executor: mark_inode_dirty error [ 227.480417][ T5598] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 227.647966][ T5598] Flush: task=syz-executor[5598] dev=loop4 state=2 [ 227.851299][ T6800] loop3: detected capacity change from 0 to 128 [ 227.964419][ T5598] Teardown: task=syz-executor[5598] dev=loop4 state=2 [ 228.008717][ T6800] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 228.042400][ T6800] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 228.071875][ T6800] netlink: 'syz.3.246': attribute type 13 has an invalid length. [ 228.353492][ T6805] netlink: 24 bytes leftover after parsing attributes in process `syz.3.246'. [ 228.420546][ T6802] netlink: 'syz.3.246': attribute type 3 has an invalid length. [ 228.420565][ T6802] netlink: 3 bytes leftover after parsing attributes in process `syz.3.246'. [ 231.195147][ T6813] netlink: 6716 bytes leftover after parsing attributes in process `syz.4.248'. [ 231.610088][ T200] lo speed is unknown, defaulting to 1000 [ 231.628864][ T6817] syz_tun: entered allmulticast mode [ 233.974268][ T5600] Flush: task=syz-executor[5600] dev=loop3 state=2 [ 234.093406][ T6825] loop4: detected capacity change from 0 to 128 [ 234.145621][ T6825] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 234.168418][ T6825] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 234.250622][ T6825] netlink: 'syz.4.251': attribute type 13 has an invalid length. [ 234.457282][ T6827] netlink: 24 bytes leftover after parsing attributes in process `syz.4.251'. [ 234.611832][ T6826] netlink: 'syz.4.251': attribute type 3 has an invalid length. [ 234.611853][ T6826] netlink: 3 bytes leftover after parsing attributes in process `syz.4.251'. [ 235.901089][ T4911] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 235.994982][ T4911] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 236.016199][ T4911] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 236.047833][ T4911] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 236.058842][ T4911] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 236.898326][ T5600] Teardown: task=syz-executor[5600] dev=loop3 state=2 [ 238.112928][ T6604] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wg0": -EINTR [ 238.219801][ T5604] Bluetooth: hci0: command tx timeout [ 238.555153][ T5598] Flush: task=syz-executor[5598] dev=loop4 state=2 [ 238.851491][ T5598] Teardown: task=syz-executor[5598] dev=loop4 state=2 [ 240.261328][ T6709] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.261615][ T6709] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.261891][ T6709] bridge_slave_0: entered allmulticast mode [ 240.277341][ T5604] Bluetooth: hci0: command tx timeout [ 240.365729][ T6709] bridge_slave_0: entered promiscuous mode [ 240.561510][ T6709] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.561807][ T6709] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.562102][ T6709] bridge_slave_1: entered allmulticast mode [ 240.613123][ T6709] bridge_slave_1: entered promiscuous mode [ 241.210472][ T6882] Bluetooth: MGMT ver 1.23 [ 241.214288][ T6882] Bluetooth: hci0: invalid length 0, exp 2 for type 17 [ 241.589922][ T189] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.356524][ T5604] Bluetooth: hci0: command tx timeout [ 242.780265][ T6876] dummy0: Caught tx_queue_len zero misconfig [ 243.245428][ T6885] comedi comedi1: 8255: I/O base address not correctly aligned [ 245.265976][ T5604] Bluetooth: hci0: command tx timeout [ 246.960843][ T6709] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 246.963579][ T6705] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.963912][ T6705] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.964172][ T6705] bridge_slave_0: entered allmulticast mode [ 247.004941][ T6705] bridge_slave_0: entered promiscuous mode [ 247.052350][ T6709] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 247.052940][ T6705] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.053212][ T6705] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.053773][ T6705] bridge_slave_1: entered allmulticast mode [ 247.119421][ T6705] bridge_slave_1: entered promiscuous mode [ 248.732204][ T189] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.987700][ T6709] team0: Port device team_slave_0 added [ 253.033795][ T6705] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 253.202615][ T6832] lo speed is unknown, defaulting to 1000 [ 253.223915][ T6709] team0: Port device team_slave_1 added [ 253.405878][ T6705] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 253.516558][ T5607] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 254.505159][ T5607] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 254.505191][ T5607] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 254.505213][ T5607] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 254.505254][ T5607] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 254.505273][ T5607] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.571512][ T5607] usb 5-1: config 0 descriptor?? [ 255.330738][ T5607] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 255.330779][ T5607] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 255.330803][ T5607] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 255.330827][ T5607] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 255.330851][ T5607] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 255.330874][ T5607] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 255.521502][ T5607] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 255.563256][ T5607] usb 5-1: USB disconnect, device number 9 [ 255.817504][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.817588][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.911499][ T6986] fido_id[6986]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 256.017393][ T6987] loop3: detected capacity change from 0 to 256 [ 256.399077][ T6987] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 256.690682][ T189] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.447293][ T6709] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 259.447308][ T6709] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 259.447342][ T6709] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 259.501780][ T6705] team0: Port device team_slave_0 added [ 259.541755][ T6709] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 259.541770][ T6709] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 259.541792][ T6709] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 259.593611][ T6705] team0: Port device team_slave_1 added [ 259.837680][ T7002] rdma_rxe: rxe_newlink: failed to add lo [ 259.916863][ T6705] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 259.916879][ T6705] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 259.916900][ T6705] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 260.172238][ T6705] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 260.172254][ T6705] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 260.172277][ T6705] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 260.568494][ T5600] Flush: task=syz-executor[5600] dev=loop3 state=2 [ 260.709800][ T5600] Teardown: task=syz-executor[5600] dev=loop3 state=2 [ 262.441505][ T7020] loop3: detected capacity change from 0 to 4096 [ 262.856945][ T189] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.949816][ T7020] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 263.066891][ T38] audit: type=1804 audit(1783199378.448:186): pid=7020 uid=0 auid=4294967295 ses=4294967295 op=invalid_pcr cause=open_writers comm="syz.3.278" name="/newroot/80/file0/bus" dev="loop3" ino=18 res=1 errno=0 [ 263.066937][ T38] audit: type=1804 audit(1783199378.458:187): pid=7024 uid=0 auid=4294967295 ses=4294967295 op=invalid_pcr cause=ToMToU comm="syz.3.278" name="/newroot/80/file0/bus" dev="loop3" ino=18 res=1 errno=0 [ 263.820702][ T4911] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 263.872601][ T4911] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 263.896215][ T4911] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 263.936172][ T4911] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 263.978356][ T4911] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 264.909507][ T6709] hsr_slave_0: entered promiscuous mode [ 264.922903][ T6709] hsr_slave_1: entered promiscuous mode [ 264.923796][ T6709] debugfs: 'hsr0' already exists in 'hsr' [ 264.923810][ T6709] Cannot create hsr debugfs directory [ 265.001449][ T4911] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 265.045822][ T4911] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 265.048640][ T4911] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 265.079307][ T4911] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 265.095791][ T4911] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 265.897921][ T5600] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.127967][ T4911] Bluetooth: hci2: command tx timeout [ 266.326033][ T5600] Flush: task=syz-executor[5600] dev=loop3 state=2 [ 267.236563][ T4911] Bluetooth: hci4: command tx timeout [ 268.196813][ T4911] Bluetooth: hci2: command tx timeout [ 268.733883][ T5600] Teardown: task=syz-executor[5600] dev=loop3 state=2 [ 269.316678][ T4911] Bluetooth: hci4: command tx timeout [ 270.189939][ T6832] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.190203][ T6832] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.190474][ T6832] bridge_slave_0: entered allmulticast mode [ 270.195153][ T7072] syz0: rxe_newlink: already configured on lo [ 270.238403][ T6832] bridge_slave_0: entered promiscuous mode [ 270.263530][ T7027] lo speed is unknown, defaulting to 1000 [ 270.276808][ T4911] Bluetooth: hci2: command tx timeout [ 270.286729][ T6832] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.286999][ T6832] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.337564][ T6832] bridge_slave_1: entered allmulticast mode [ 270.410683][ T6832] bridge_slave_1: entered promiscuous mode [ 271.396772][ T4911] Bluetooth: hci4: command tx timeout [ 272.144292][ T6832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 272.170576][ T5730] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 272.232147][ T6832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 272.291295][ T7031] lo speed is unknown, defaulting to 1000 [ 272.356794][ T4911] Bluetooth: hci2: command tx timeout [ 272.388162][ T5730] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 272.388202][ T5730] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 272.388221][ T5730] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 272.388258][ T5730] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 272.388278][ T5730] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.464790][ T5730] usb 4-1: config 0 descriptor?? [ 273.716551][ T4911] Bluetooth: hci4: command tx timeout [ 273.839427][ T5730] plantronics 0003:047F:FFFF.0003: reserved main item tag 0xd [ 273.839471][ T5730] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 273.839506][ T5730] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 273.839530][ T5730] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 273.839554][ T5730] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 273.839576][ T5730] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 274.161808][ T5730] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 274.318088][ T5730] usb 4-1: USB disconnect, device number 7 [ 274.492395][ T7077] fido_id[7077]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 276.019178][ T7079] loop3: detected capacity change from 0 to 64 [ 278.143740][ T6832] team0: Port device team_slave_0 added [ 294.265893][ T5600] Flush: task=syz-executor[5600] dev=loop3 state=2 [ 295.446732][ T5600] Teardown: task=syz-executor[5600] dev=loop3 state=2 [ 295.816571][ T200] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 295.970409][ T200] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 296.008094][ T200] usb 4-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 296.008122][ T200] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.008139][ T200] usb 4-1: Product: syz [ 296.008151][ T200] usb 4-1: Manufacturer: syz [ 296.008162][ T200] usb 4-1: SerialNumber: syz [ 296.013343][ T200] usb 4-1: config 0 descriptor?? [ 296.111315][ T200] cyberjack 4-1:0.0: required endpoints missing [ 296.298047][ T7093] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 296.437343][ T7093] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 296.744341][ T5604] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 296.815358][ T5604] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 296.829597][ T5604] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 296.903524][ T5604] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 296.904318][ T5604] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 297.733201][ T6692] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 297.783577][ T6692] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 297.800288][ T6692] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 297.801684][ T6692] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 297.802493][ T6692] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 298.051124][ T4911] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 298.128104][ T4911] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 298.132400][ T4911] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 298.156252][ T4911] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 298.166102][ T4911] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 299.076816][ T4911] Bluetooth: hci5: command tx timeout [ 299.503975][ T6832] team0: Port device team_slave_1 added [ 300.048802][ T4911] Bluetooth: hci6: command tx timeout [ 300.356549][ T4911] Bluetooth: hci7: command tx timeout [ 301.158312][ T4911] Bluetooth: hci5: command tx timeout [ 302.116712][ T4911] Bluetooth: hci6: command tx timeout [ 302.478479][ T4911] Bluetooth: hci7: command tx timeout [ 303.236662][ T4911] Bluetooth: hci5: command tx timeout [ 304.196664][ T5604] Bluetooth: hci6: command tx timeout [ 304.699125][ T7090] netlink: 28 bytes leftover after parsing attributes in process `syz.4.286'. [ 304.826711][ T5604] Bluetooth: hci7: command tx timeout [ 305.316694][ T5604] Bluetooth: hci5: command tx timeout [ 306.276748][ T5604] Bluetooth: hci6: command tx timeout [ 306.836634][ T5604] Bluetooth: hci7: command tx timeout [ 317.240660][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.240764][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.952703][ T7090] syz_tun (unregistering): left allmulticast mode [ 322.582868][ T4911] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 322.640918][ T4911] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 322.674052][ T4911] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 322.691429][ T4911] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 322.707035][ T4911] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 323.170353][ T7102] lo speed is unknown, defaulting to 1000 [ 324.643880][ T7097] lo speed is unknown, defaulting to 1000 [ 324.838079][ T5604] Bluetooth: hci0: command tx timeout [ 325.386044][ T4911] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 325.435618][ T4911] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 325.484274][ T4911] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 325.500041][ T4911] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 325.500917][ T4911] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 326.916661][ T5604] Bluetooth: hci0: command tx timeout [ 328.596822][ T5604] Bluetooth: hci1: command tx timeout [ 328.996696][ T5604] Bluetooth: hci0: command tx timeout [ 329.202305][ T189] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.368122][ T7103] lo speed is unknown, defaulting to 1000 [ 330.374525][ T5257] 8021q: adding VLAN 0 to HW filter on device eth5 [ 330.686580][ T5604] Bluetooth: hci1: command tx timeout [ 331.076589][ T5604] Bluetooth: hci0: command tx timeout [ 332.756833][ T5604] Bluetooth: hci1: command tx timeout [ 334.836639][ T5604] Bluetooth: hci1: command tx timeout [ 341.120272][ T7140] lo speed is unknown, defaulting to 1000 [ 342.347157][ T7162] lo speed is unknown, defaulting to 1000 [ 344.554000][ T5257] 8021q: adding VLAN 0 to HW filter on device eth6 [ 345.137826][ T7102] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.138093][ T7102] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.138707][ T7102] bridge_slave_0: entered allmulticast mode [ 345.142184][ T7102] bridge_slave_0: entered promiscuous mode [ 345.228965][ T7102] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.229283][ T7102] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.229592][ T7102] bridge_slave_1: entered allmulticast mode [ 345.233477][ T7102] bridge_slave_1: entered promiscuous mode [ 346.705641][ T7102] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 346.880553][ T7102] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 346.883751][ T7097] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.884068][ T7097] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.884356][ T7097] bridge_slave_0: entered allmulticast mode [ 346.932797][ T7097] bridge_slave_0: entered promiscuous mode [ 346.955601][ T7103] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.955878][ T7103] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.956173][ T7103] bridge_slave_0: entered allmulticast mode [ 347.024469][ T7103] bridge_slave_0: entered promiscuous mode [ 347.152984][ T7097] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.153254][ T7097] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.153530][ T7097] bridge_slave_1: entered allmulticast mode [ 347.181300][ T7097] bridge_slave_1: entered promiscuous mode [ 347.222302][ T7103] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.222585][ T7103] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.222891][ T7103] bridge_slave_1: entered allmulticast mode [ 347.253355][ T7103] bridge_slave_1: entered promiscuous mode [ 348.125297][ T7102] team0: Port device team_slave_0 added [ 348.281244][ T7102] team0: Port device team_slave_1 added [ 348.340623][ T7097] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 348.354145][ T5257] 8021q: adding VLAN 0 to HW filter on device eth7 [ 348.392503][ T7103] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 348.495014][ T7097] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 348.511299][ T7103] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 348.634657][ T7102] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 348.634673][ T7102] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 348.634693][ T7102] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 351.503126][ T7102] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 351.503141][ T7102] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 351.503162][ T7102] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 351.612826][ T7097] team0: Port device team_slave_0 added [ 351.624477][ T7103] team0: Port device team_slave_0 added [ 351.705806][ T7097] team0: Port device team_slave_1 added [ 351.717926][ T7103] team0: Port device team_slave_1 added [ 351.739623][ T7140] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.740006][ T7140] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.740310][ T7140] bridge_slave_0: entered allmulticast mode [ 351.743736][ T7140] bridge_slave_0: entered promiscuous mode [ 351.872101][ T7140] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.872403][ T7140] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.872682][ T7140] bridge_slave_1: entered allmulticast mode [ 351.876201][ T7140] bridge_slave_1: entered promiscuous mode [ 352.063724][ T7097] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 352.063739][ T7097] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 352.063760][ T7097] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 352.175736][ T7103] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 352.175751][ T7103] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 352.175781][ T7103] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 352.302106][ T7097] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 352.302120][ T7097] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 352.302142][ T7097] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 352.370686][ T7102] hsr_slave_0: entered promiscuous mode [ 352.373530][ T7102] hsr_slave_1: entered promiscuous mode [ 352.375564][ T7102] debugfs: 'hsr0' already exists in 'hsr' [ 352.375671][ T7102] Cannot create hsr debugfs directory [ 352.400275][ T7103] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 352.400290][ T7103] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 352.400312][ T7103] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 352.654003][ T7140] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 352.681617][ T7162] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.683084][ T7162] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.683388][ T7162] bridge_slave_0: entered allmulticast mode [ 352.710260][ T7162] bridge_slave_0: entered promiscuous mode [ 352.732080][ T7140] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 357.081806][ T4911] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 357.130646][ T4911] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 357.135797][ T4911] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 357.196286][ T4911] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 357.209629][ T4911] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 357.823066][ T5604] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 358.064279][ T5604] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 358.065929][ T5604] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 358.081966][ T5604] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 358.082842][ T5604] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 358.641616][ T7162] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.641966][ T7162] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.642269][ T7162] bridge_slave_1: entered allmulticast mode [ 358.680037][ T7162] bridge_slave_1: entered promiscuous mode [ 359.327939][ T4911] Bluetooth: hci2: command tx timeout [ 359.624744][ T5604] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 359.736811][ T5604] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 359.744141][ T5604] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 359.790695][ T5604] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 359.791504][ T5604] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 360.209551][ T4911] Bluetooth: hci3: command tx timeout [ 360.974877][ T7140] team0: Port device team_slave_0 added [ 360.995650][ T7162] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 361.029737][ T7140] team0: Port device team_slave_1 added [ 361.396791][ T4911] Bluetooth: hci2: command tx timeout [ 361.957001][ T5604] Bluetooth: hci4: command tx timeout [ 362.038429][ T7162] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 362.074637][ T5257] 8021q: adding VLAN 0 to HW filter on device eth8 [ 362.276579][ T5604] Bluetooth: hci3: command tx timeout [ 363.269707][ T7140] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 363.269722][ T7140] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 363.269743][ T7140] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 363.400265][ T7162] team0: Port device team_slave_0 added [ 363.414546][ T7140] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 363.414561][ T7140] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 363.414586][ T7140] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 363.465912][ T7162] team0: Port device team_slave_1 added [ 363.476495][ T5604] Bluetooth: hci2: command tx timeout [ 363.914254][ T7162] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 363.914271][ T7162] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 363.914292][ T7162] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 364.038239][ T5604] Bluetooth: hci4: command tx timeout [ 364.084387][ T7162] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 364.084402][ T7162] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 364.084425][ T7162] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 364.230873][ T7140] hsr_slave_0: entered promiscuous mode [ 364.233107][ T7140] hsr_slave_1: entered promiscuous mode [ 364.234907][ T7140] debugfs: 'hsr0' already exists in 'hsr' [ 364.234931][ T7140] Cannot create hsr debugfs directory [ 364.356760][ T5604] Bluetooth: hci3: command tx timeout [ 364.674171][ T6709] syz-executor (6709) used greatest stack depth: 18912 bytes left [ 365.556556][ T5604] Bluetooth: hci2: command tx timeout [ 365.872154][ T7246] lo speed is unknown, defaulting to 1000 [ 366.117796][ T5604] Bluetooth: hci4: command tx timeout [ 366.150532][ T7162] hsr_slave_0: entered promiscuous mode [ 366.223542][ T7162] hsr_slave_1: entered promiscuous mode [ 366.234504][ T7162] debugfs: 'hsr0' already exists in 'hsr' [ 366.234531][ T7162] Cannot create hsr debugfs directory [ 366.436703][ T5604] Bluetooth: hci3: command tx timeout [ 366.907827][ T7262] lo speed is unknown, defaulting to 1000 [ 368.197752][ T5604] Bluetooth: hci4: command tx timeout [ 369.471198][ T7253] lo speed is unknown, defaulting to 1000 [ 378.687402][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.687497][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 382.664704][ T4911] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 382.795200][ T4911] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 382.817372][ T4911] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 382.822556][ T4911] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 382.823338][ T4911] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 384.644494][ T5604] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 384.696158][ T5604] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 384.921728][ T5604] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 384.959773][ T5604] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 384.960684][ T5604] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 385.076877][ T4911] Bluetooth: hci5: command tx timeout [ 387.081341][ T4911] Bluetooth: hci6: command tx timeout [ 387.158981][ T4911] Bluetooth: hci5: command tx timeout [ 389.156502][ T4911] Bluetooth: hci6: command tx timeout [ 389.236620][ T4911] Bluetooth: hci5: command tx timeout [ 389.912437][ T7307] lo speed is unknown, defaulting to 1000 [ 391.236637][ T4911] Bluetooth: hci6: command tx timeout [ 391.317607][ T4911] Bluetooth: hci5: command tx timeout [ 391.476846][ T7314] lo speed is unknown, defaulting to 1000 [ 392.678463][ T7246] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.678737][ T7246] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.679033][ T7246] bridge_slave_0: entered allmulticast mode [ 392.730882][ T7246] bridge_slave_0: entered promiscuous mode [ 392.808794][ T7246] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.809162][ T7246] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.809460][ T7246] bridge_slave_1: entered allmulticast mode [ 392.815269][ T7246] bridge_slave_1: entered promiscuous mode [ 393.316783][ T4911] Bluetooth: hci6: command tx timeout [ 393.619875][ T7246] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 393.809929][ T7246] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 393.909418][ T7262] bridge0: port 1(bridge_slave_0) entered blocking state [ 393.909793][ T7262] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.910090][ T7262] bridge_slave_0: entered allmulticast mode [ 393.939825][ T7262] bridge_slave_0: entered promiscuous mode [ 394.138893][ T7262] bridge0: port 2(bridge_slave_1) entered blocking state [ 394.139198][ T7262] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.139513][ T7262] bridge_slave_1: entered allmulticast mode [ 394.170122][ T7262] bridge_slave_1: entered promiscuous mode [ 394.313733][ T7253] bridge0: port 1(bridge_slave_0) entered blocking state [ 394.314064][ T7253] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.314360][ T7253] bridge_slave_0: entered allmulticast mode [ 394.348718][ T7253] bridge_slave_0: entered promiscuous mode [ 394.419623][ T7246] team0: Port device team_slave_0 added [ 394.483254][ T7253] bridge0: port 2(bridge_slave_1) entered blocking state [ 394.483581][ T7253] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.483899][ T7253] bridge_slave_1: entered allmulticast mode [ 394.724029][ T7253] bridge_slave_1: entered promiscuous mode [ 394.785404][ T7246] team0: Port device team_slave_1 added [ 397.021039][ T7262] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 406.088868][ T7262] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 406.174752][ T7253] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 406.294858][ T7246] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 406.294872][ T7246] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 406.294892][ T7246] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 406.360341][ T7253] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 407.292018][ T7246] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 407.292033][ T7246] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 407.292053][ T7246] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 408.619131][ T7262] team0: Port device team_slave_0 added [ 408.685690][ T7262] team0: Port device team_slave_1 added [ 408.739938][ T7253] team0: Port device team_slave_0 added [ 408.813473][ T7253] team0: Port device team_slave_1 added [ 409.210837][ T7262] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 409.210853][ T7262] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 409.210875][ T7262] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 409.455866][ T7262] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 409.455880][ T7262] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 409.455903][ T7262] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 409.529864][ T7246] hsr_slave_0: entered promiscuous mode [ 409.532092][ T7246] hsr_slave_1: entered promiscuous mode [ 409.533943][ T7246] debugfs: 'hsr0' already exists in 'hsr' [ 409.533968][ T7246] Cannot create hsr debugfs directory [ 409.561325][ T7253] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 409.561340][ T7253] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 409.561384][ T7253] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 409.654411][ T7253] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 409.654426][ T7253] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 409.654447][ T7253] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 413.629324][ T7262] hsr_slave_0: entered promiscuous mode [ 413.673719][ T7262] hsr_slave_1: entered promiscuous mode [ 413.675669][ T7262] debugfs: 'hsr0' already exists in 'hsr' [ 413.675694][ T7262] Cannot create hsr debugfs directory [ 413.794954][ T7253] hsr_slave_0: entered promiscuous mode [ 413.805216][ T7253] hsr_slave_1: entered promiscuous mode [ 413.816616][ T7253] debugfs: 'hsr0' already exists in 'hsr' [ 413.816641][ T7253] Cannot create hsr debugfs directory [ 414.303347][ T7307] bridge0: port 1(bridge_slave_0) entered blocking state [ 414.303965][ T7307] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.304259][ T7307] bridge_slave_0: entered allmulticast mode [ 414.330524][ T7307] bridge_slave_0: entered promiscuous mode [ 414.415648][ T7307] bridge0: port 2(bridge_slave_1) entered blocking state [ 414.416204][ T7307] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.433023][ T7307] bridge_slave_1: entered allmulticast mode [ 414.447186][ T7307] bridge_slave_1: entered promiscuous mode [ 418.313863][ T5604] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 418.375689][ T5604] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 418.393153][ T5604] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 418.423107][ T5604] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 418.452692][ T5604] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 419.623329][ T7314] bridge0: port 1(bridge_slave_0) entered blocking state [ 419.623612][ T7314] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.623912][ T7314] bridge_slave_0: entered allmulticast mode [ 419.748550][ T7314] bridge_slave_0: entered promiscuous mode [ 420.000931][ T7314] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.002799][ T7314] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.003114][ T7314] bridge_slave_1: entered allmulticast mode [ 420.045955][ T7314] bridge_slave_1: entered promiscuous mode [ 420.161166][ T7307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 420.392434][ T7307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 420.572879][ T5604] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 420.623752][ T5604] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 420.667887][ T5604] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 420.696248][ T5604] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 420.702946][ T5604] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 421.019881][ T4911] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 421.068472][ T4911] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 421.072833][ T4911] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 421.122509][ T4911] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 421.135431][ T4911] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 421.318586][ T4911] Bluetooth: hci0: command tx timeout [ 421.373432][ T7314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 422.841126][ T4911] Bluetooth: hci1: command tx timeout [ 423.316788][ T4911] Bluetooth: hci7: command tx timeout [ 423.396825][ T4911] Bluetooth: hci0: command tx timeout [ 424.441555][ T7314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 424.461114][ T7307] team0: Port device team_slave_0 added [ 424.495766][ T7307] team0: Port device team_slave_1 added [ 424.615231][ T7314] team0: Port device team_slave_0 added [ 424.707698][ T7314] team0: Port device team_slave_1 added [ 424.711339][ T7307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 424.711354][ T7307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 424.711376][ T7307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 424.816649][ T7307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 424.816665][ T7307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 424.816689][ T7307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 424.918050][ T4911] Bluetooth: hci1: command tx timeout [ 424.973034][ T7314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 424.973049][ T7314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 424.973071][ T7314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 425.031730][ T7314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 425.031745][ T7314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 425.031767][ T7314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 425.397598][ T4911] Bluetooth: hci7: command tx timeout [ 425.476900][ T4911] Bluetooth: hci0: command tx timeout [ 425.498135][ T7307] hsr_slave_0: entered promiscuous mode [ 425.500741][ T7307] hsr_slave_1: entered promiscuous mode [ 425.502174][ T7307] debugfs: 'hsr0' already exists in 'hsr' [ 425.502199][ T7307] Cannot create hsr debugfs directory [ 426.996885][ T4911] Bluetooth: hci1: command tx timeout [ 427.477020][ T4911] Bluetooth: hci7: command tx timeout [ 427.556737][ T4911] Bluetooth: hci0: command tx timeout [ 427.574948][ T7314] hsr_slave_0: entered promiscuous mode [ 427.583735][ T7314] hsr_slave_1: entered promiscuous mode [ 427.605001][ T7314] debugfs: 'hsr0' already exists in 'hsr' [ 427.605027][ T7314] Cannot create hsr debugfs directory [ 428.491902][ T7440] lo speed is unknown, defaulting to 1000 [ 429.077118][ T4911] Bluetooth: hci1: command tx timeout [ 429.254476][ T7432] lo speed is unknown, defaulting to 1000 [ 429.569014][ T4911] Bluetooth: hci7: command tx timeout [ 430.429071][ T7439] lo speed is unknown, defaulting to 1000 [ 431.749392][ T7307] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 432.108307][ T7307] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 432.229023][ T7307] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 433.760292][ T7307] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 439.829463][ T7307] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 440.124666][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.124750][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.193122][ T7307] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 443.703951][ T5604] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 443.791686][ T5604] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 443.823172][ T5604] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 443.827322][ T5604] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 443.843258][ T5604] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 445.075541][ T5604] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 445.130813][ T5604] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 445.144247][ T5604] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 445.205285][ T5604] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 445.222224][ T5604] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 446.437167][ T4911] Bluetooth: hci2: command tx timeout [ 447.317175][ T4911] Bluetooth: hci3: command tx timeout [ 448.554061][ T4911] Bluetooth: hci2: command tx timeout [ 449.400863][ T4911] Bluetooth: hci3: command tx timeout [ 450.597000][ T4911] Bluetooth: hci2: command tx timeout [ 451.477285][ T4911] Bluetooth: hci3: command tx timeout [ 452.379998][ T7307] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 452.677339][ T4911] Bluetooth: hci2: command tx timeout [ 453.557708][ T4911] Bluetooth: hci3: command tx timeout [ 454.045863][ T7307] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 455.478832][ T7440] bridge0: port 1(bridge_slave_0) entered blocking state [ 455.479126][ T7440] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.479450][ T7440] bridge_slave_0: entered allmulticast mode [ 455.515625][ T7440] bridge_slave_0: entered promiscuous mode [ 455.683637][ T7440] bridge0: port 2(bridge_slave_1) entered blocking state [ 455.683947][ T7440] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.684267][ T7440] bridge_slave_1: entered allmulticast mode [ 455.710843][ T7440] bridge_slave_1: entered promiscuous mode [ 456.414736][ T7440] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 458.302968][ T7440] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 458.806632][ T7440] team0: Port device team_slave_0 added [ 458.812897][ T7481] lo speed is unknown, defaulting to 1000 [ 458.919695][ T7440] team0: Port device team_slave_1 added [ 459.398419][ T7440] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 459.398436][ T7440] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 459.398459][ T7440] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 462.013045][ T7440] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 462.013062][ T7440] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 462.013086][ T7440] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 462.084089][ T7475] lo speed is unknown, defaulting to 1000 [ 467.637461][ T39] INFO: task syz-executor:6832 blocked for more than 143 seconds. [ 467.637486][ T39] Not tainted syzkaller #0 [ 467.637496][ T39] Blocked by coredump. [ 467.637501][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 467.637509][ T39] task:syz-executor state:D stack:21432 pid:6832 tgid:6832 ppid:1 task_flags:0x40054c flags:0x00080003 [ 467.637573][ T39] Call Trace: [ 467.637667][ T39] [ 467.637760][ T39] __schedule+0x1709/0x5530 [ 467.637866][ T39] ? __pfx___schedule+0x10/0x10 [ 467.637962][ T39] rt_mutex_schedule+0x76/0xf0 [ 467.637984][ T39] rt_mutex_slowlock_block+0x55c/0x680 [ 467.638017][ T39] rt_mutex_slowlock+0x2d4/0x780 [ 467.638038][ T39] ? rt_mutex_slowlock+0x1f2/0x780 [ 467.638055][ T39] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 467.638089][ T39] ? rcu_barrier+0x4c/0x530 [ 467.638118][ T39] ? rcu_barrier+0x4c/0x530 [ 467.638139][ T39] mutex_lock_nested+0x168/0x1d0 [ 467.638155][ T39] ? __pfx_rt_mutex_slowunlock+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 467.638177][ T39] rcu_barrier+0x4c/0x530 [ 467.638225][ T39] netdev_run_todo+0x2ff/0x12a0 [ 467.638268][ T39] ? rtnl_is_locked+0x9/0x20 [ 467.638289][ T39] ? netif_state_change+0x241/0x3a0 [ 467.638309][ T39] ? __pfx_netdev_run_todo+0x10/0x10 [ 467.638334][ T39] ? kasan_quarantine_put+0xbb/0x1f0 [ 467.638359][ T39] ? lockdep_hardirqs_on+0x7a/0x110 [ 467.638389][ T39] ? netdev_state_change+0x1bc/0x210 [ 467.638413][ T39] tun_chr_close+0x13f/0x1c0 [ 467.638431][ T39] ? __pfx_tun_chr_close+0x10/0x10 [ 467.638448][ T39] __fput+0x42a/0xa80 [ 467.638472][ T39] task_work_run+0x1d9/0x270 [ 467.638494][ T39] ? __pfx_task_work_run+0x10/0x10 [ 467.638513][ T39] ? do_exit+0x735/0x2360 [ 467.638528][ T39] ? kmem_cache_free+0x187/0x6c0 [ 467.638544][ T39] ? put_net+0x191/0x260 [ 467.638563][ T39] ? do_exit+0x735/0x2360 [ 467.638582][ T39] do_exit+0x73a/0x2360 [ 467.638597][ T39] ? lockdep_hardirqs_on+0x7a/0x110 [ 467.638619][ T39] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 467.638646][ T39] ? __pfx_do_exit+0x10/0x10 [ 467.638662][ T39] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 467.638742][ T39] ? rt_spin_unlock+0x157/0x200 [ 467.638779][ T39] do_group_exit+0x22d/0x2f0 [ 467.638797][ T39] ? rt_spin_unlock+0x163/0x200 [ 467.638817][ T39] get_signal+0x121b/0x12c0 [ 467.638857][ T39] arch_do_signal_or_restart+0xbb/0x860 [ 467.638887][ T39] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 467.638909][ T39] ? kmem_cache_free+0x526/0x6c0 [ 467.638944][ T39] exit_to_user_mode_loop+0x104/0x730 [ 467.638974][ T39] ? rcu_is_watching+0x15/0xb0 [ 467.638997][ T39] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.639016][ T39] do_syscall_64+0x353/0x580 [ 467.639038][ T39] ? trace_irq_disable+0x3b/0x140 [ 467.639057][ T39] ? clear_bhb_loop+0x40/0x90 [ 467.639078][ T39] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.639104][ T39] RIP: 0033:0x7f6bc5fbe68e [ 467.639163][ T39] RSP: 002b:00007ffc9d82e6b8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 467.639218][ T39] RAX: 0000000000000028 RBX: 0000555586614500 RCX: 00007f6bc5fbe68e [ 467.639229][ T39] RDX: 0000000000000028 RSI: 00007f6bc6db4670 RDI: 0000000000000003 [ 467.639240][ T39] RBP: 0000000000000001 R08: 00007ffc9d82e734 R09: 000000000000000c [ 467.639251][ T39] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 467.639261][ T39] R13: 0000000000000000 R14: 00007f6bc6db4670 R15: 00000000[ 467.639261][ T39] R13: 0000000000000000 R14: 00007f6bc6db4670 R15: 0000000000000000 [ 467.639288][ T39] [ 467.639307][ T39] INFO: task syz.4.286:7090 blocked for more than 143 seconds. [ 467.639321][ T39] Not tainted syzkaller #0 [ 467.639329][ T39] Blocked by coredump. [ 467.639335][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 467.639343][ T39] task:syz.4.286 state:D stack:25768 pid:7090 tgid:7089 ppid:5598 task_flags:0x40054c flags:0x00080001 [ 467.639386][ T39] Call Trace: [ 467.639392][ T39] [ 467.639403][ T39] __schedule+0x1709/0x5530 [ 467.639451][ T39] ? __pfx___schedule+0x10/0x10 [ 467.639483][ T39] rt_mutex_schedule+0x76/0xf0 [ 467.639503][ T39] rt_mutex_slowlock_block+0x55c/0x680 [ 467.639534][ T39] rt_mutex_slowlock+0x2d4/0x780 [ 467.639554][ T39] ? rt_mutex_slowlock+0x1f2/0x780 [ 467.639571][ T39] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 467.639605][ T39] ? rcu_barrier+0x4c/0x530 [ 467.639633][ T39] ? rcu_barrier+0x4c/0x530 [ 467.639654][ T39] mutex_lock_nested+0x168/0x1d0 [ 467.639670][ T39] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 467.639707][ T39] rcu_barrier+0x4c/0x530 [ 467.639739][ T39] netdev_run_todo+0x2ff/0x12a0 [ 467.639766][ T39] ? rt_spin_unlock+0x157/0x200 [ 467.639782][ T39] ? rtnl_is_locked+0x9/0x20 [ 467.639804][ T39] ? netif_state_change+0x241/0x3a0 [ 467.639825][ T39] ? __pfx_netdev_run_todo+0x10/0x10 [ 467.639851][ T39] ? __tun_detach+0x146f/0x1830 [ 467.639880][ T39] ? netdev_state_change+0x1bc/0x210 [ 467.639905][ T39] tun_chr_close+0x13f/0x1c0 [ 467.639922][ T39] ? __pfx_tun_chr_close+0x10/0x10 [ 467.639939][ T39] __fput+0x42a/0xa80 [ 467.639973][ T39] task_work_run+0x1d9/0x270 [ 467.639994][ T39] ? __pfx_task_work_run+0x10/0x10 [ 467.640012][ T39] ? do_exit+0x735/0x2360 [ 467.640026][ T39] ? kmem_cache_free+0x187/0x6c0 [ 467.640042][ T39] ? put_net+0x191/0x260 [ 467.640061][ T39] ? do_exit+0x735/0x2360 [ 467.640097][ T39] do_exit+0x73a/0x2360 [ 467.640129][ T39] ? lockdep_hardirqs_on+0x7a/0x110 [ 467.640167][ T39] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 467.640193][ T39] ? __pfx_do_exit+0x10/0x10 [ 467.640210][ T39] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 467.640236][ T39] ? rt_spin_unlock+0x157/0x200 [ 467.640256][ T39] do_group_exit+0x22d/0x2f0 [ 467.640272][ T39] ? rt_spin_unlock+0x163/0x200 [ 467.640293][ T39] get_signal+0x121b/0x12c0 [ 467.640335][ T39] arch_do_signal_or_restart+0xbb/0x860 [ 467.640363][ T39] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 467.640385][ T39] ? __x64_sys_sendmsg+0x263/0x290 [ 467.640424][ T39] exit_to_user_mode_loop+0x104/0x730 [ 467.640444][ T39] ? rcu_is_watching+0x15/0xb0 [ 467.640465][ T39] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.640484][ T39] do_syscall_64+0x353/0x580 [ 467.640505][ T39] ? trace_irq_disable+0x3b/0x140 [ 467.640524][ T39] ? clear_bhb_loop+0x40/0x90 [ 467.640546][ T39] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.640563][ T39] RIP: 0033:0x7f4799dcde59 [ 467.640578][ T39] RSP: 002b:00007f4798026028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 467.640595][ T39] RAX: 0000000000000058 RBX: 00007f479a055fa0 RCX: 00007f4799dcde59 [ 467.640607][ T39] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000003 [ 467.640617][ T39] RBP: 00007f4799e63e6f R08: 0000000000000000 R09: 0000000000000000 [ 467.640628][ T39] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 467.640638][ T39] R13: 00007f479a056038 R14: 00007f479a055fa0 R15: 00007ffdc756a498 [ 467.640670][ T39] [ 467.640677][ T39] INFO: task syz.3.284:7092 blocked for more than 143 seconds. [ 467.640690][ T39] Not tainted syzkaller #0 [ 467.640699][ T39] Blocked by coredump. [ 467.640704][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 467.640712][ T39] task:syz.3.284 state:D stack:24920 pid:7092 tgid:7092 ppid:5600 task_flags:0x40044c flags:0x00080003 [ 467.640754][ T39] Call Trace: [ 467.640760][ T39] [ 467.640771][ T39] __schedule+0x1709/0x5530 [ 467.640818][ T39] ? __pfx___schedule+0x10/0x10 [ 467.640853][ T39] rt_mutex_schedule+0x76/0xf0 [ 467.640874][ T39] rt_mutex_slowlock_block+0x55c/0x680 [ 467.640906][ T39] rt_mutex_slowlock+0x2d4/0x780 [ 467.640926][ T39] ? rt_mutex_slowlock+0x1f2/0x780 [ 467.640945][ T39] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 467.640990][ T39] ? rcu_barrier+0x4c/0x530 [ 467.641019][ T39] ? rcu_barrier+0x4c/0x530 [ 467.641040][ T39] mutex_lock_nested+0x168/0x1d0 [ 467.641055][ T39] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 467.641077][ T39] rcu_barrier+0x4c/0x530 [ 467.641110][ T39] netdev_run_todo+0x2ff/0x12a0 [ 467.641137][ T39] ? rt_spin_unlock+0x157/0x200 [ 467.641152][ T39] ? rtnl_is_locked+0x9/0x20 [ 467.641174][ T39] ? netif_state_change+0x241/0x3a0 [ 467.641195][ T39] ? __pfx_netdev_run_todo+0x10/0x10 [ 467.641221][ T39] ? __tun_detach+0x146f/0x1830 [ 467.641249][ T39] ? netdev_state_change+0x1bc/0x210 [ 467.641271][ T39] tun_chr_close+0x13f/0x1c0 [ 467.641288][ T39] ? __pfx_tun_chr_close+0x10/0x10 [ 467.641304][ T39] __fput+0x42a/0xa80 [ 467.641328][ T39] task_work_run+0x1d9/0x270 [ 467.641349][ T39] ? __pfx_task_work_run+0x10/0x10 [ 467.641384][ T39] ? do_exit+0x735/0x2360 [ 467.641399][ T39] ? kmem_cache_free+0x187/0x6c0 [ 467.641431][ T39] ? put_net+0x191/0x260 [ 467.641449][ T39] ? do_exit+0x735/0x2360 [ 467.641484][ T39] do_exit+0x73a/0x2360 [ 467.641500][ T39] ? lockdep_hardirqs_on+0x7a/0x110 [ 467.641520][ T39] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 467.641547][ T39] ? __pfx_do_exit+0x10/0x10 [ 467.641563][ T39] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 467.641589][ T39] ? rt_spin_unlock+0x157/0x200 [ 467.641609][ T39] do_group_exit+0x22d/0x2f0 [ 467.641626][ T39] ? rt_spin_unlock+0x163/0x200 [ 467.641647][ T39] get_signal+0x121b/0x12c0 [ 467.641688][ T39] arch_do_signal_or_restart+0xbb/0x860 [ 467.641715][ T39] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 467.641756][ T39] exit_to_user_mode_loop+0x104/0x730 [ 467.641774][ T39] ? rcu_is_watching+0x15/0xb0 [ 467.641796][ T39] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.641815][ T39] do_syscall_64+0x353/0x580 [ 467.641836][ T39] ? trace_irq_disable+0x3b/0x140 [ 467.641872][ T39] ? clear_bhb_loop+0x40/0x90 [ 467.641909][ T39] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.641926][ T39] RIP: 0033:0x7f223c29de59 [ 467.641940][ T39] RSP: 002b:00007ffe7e233488 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 467.641967][ T39] RAX: fffffffffffffdfc RBX: 000000000004849e RCX: 00007f223c29de59 [ 467.641979][ T39] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f223c525fac [ 467.641990][ T39] RBP: 0000000000000bea R08: 3fffffffffffffff R09: 0000000000000000 [ 467.642001][ T39] R10: 00007ffe7e233590 R11: 0000000000000246 R12: 00007ffe7e2335b0 [ 467.642012][ T39] R13: 00007f223c525fac R14: 0000000000049088 R15: 00007ffe7e233590 [ 467.642040][ T39] [ 467.642101][ T39] [ 467.642101][ T39] Showing all locks held in the system: [ 467.642155][ T39] 3 locks held by kworker/u8:0/12: [ 467.642197][ T39] #0: ffff88813fe5c138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 467.642251][ T39] #1: ffffc90000117c60 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 467.642293][ T39] #2: ffffffff8f5ac2f8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 467.642341][ T39] 4 locks held by ksoftirqd/1/31: [ 467.642350][ T39] #0: ffffffff8e0592e0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 467.642392][ T39] #1: ffffffff8e1c37c0 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 467.642434][ T39] #2: ffffffff8e1c37c0 (rcu_read_lock){....}-{1:3}, at: process_backlog+0x261/0xc50 [ 467.642471][ T39] #3: ffff8880b873d5c0 ((process_queue_bh_lock).lock.wait_lock){....}-{2:2}, at: NF_HOOK+0x9e/0x3c0 [ 467.642518][ T39] 1 lock held by khungtaskd/39: [ 467.642528][ T39] #0: ffffffff8e1c37c0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 467.642573][ T39] 2 locks held by kworker/u8:5/68: [ 467.642582][ T39] #0: ffff88813fe5c138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 467.642625][ T39] #1: ffffc9000153fc60 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 467.642669][ T39] 6 locks held by kworker/u8:7/189: [ 467.642678][ T39] #0: ffff88801bea0938 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 467.642719][ T39] #1: ffffc90003bdfc60 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 467.642760][ T39] #2: ffffffff8f59cfc0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810 [ 467.642801][ T39] #3: ffff88802abd3160 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x129/0x420 [ 467.642848][ T39] #4: ffff8880628f6310 (&devlink->lock_key){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x142/0x420 [ 467.642893][ T39] #5: ffffffff8e1c99b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 467.642946][ T39] 3 locks held by kworker/u8:10/1397: [ 467.642967][ T39] #0: ffff888032c04138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 467.643010][ T39] #1: ffffc90006b0fc60 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 467.643054][ T39] #2: ffffffff8f5ac2f8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 467.643114][ T39] 2 locks held by getty/5351: [ 467.643123][ T39] #0: ffff8880367760a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 467.643165][ T39] #1: ffffc90003cc62e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x460/0x1360 [ 467.643213][ T39] 1 lock held by syz-executor/6705: [ 467.643223][ T39] #0: ffffffff8e1c99b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 467.643268][ T39] 1 lock held by syz-executor/6832: [ 467.643277][ T39] #0: ffffffff8e1c99b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 467.643322][ T39] 1 lock held by syz-executor/7027: [ 467.643331][ T39] #0: ffffffff8e1c99b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 467.643375][ T39] 1 lock held by syz-executor/7031: [ 467.643385][ T39] #0: ffffffff8e1c99b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 467.643429][ T39] 1 lock held by syz.4.286/7090: [ 467.643439][ T39] #0: ffffffff8e1c99b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 467.643482][ T39] 1 lock held by syz.3.284/7092: [ 467.643492][ T39] #0: ffffffff8e1c99b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 467.643537][ T39] 1 lock held by syz-executor/7097: [ 467.643546][ T39] #0: ffffffff8e1c99b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 467.643591][ T39] 1 lock held by syz-executor/7102: [ 467.643600][ T39] #0: ffffffff8e1c99b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 467.643643][ T39] 1 lock held by syz-executor/7103: [ 467.643653][ T39] #0: ffffffff8e1c99b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 467.643697][ T39] 1 lock held by syz-executor/7140: [ 467.643707][ T39] #0: ffffffff8e1c99b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 467.643751][ T39] 1 lock held by syz-executor/7162: [ 467.643760][ T39] #0: ffffffff8e1c99b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 467.643806][ T39] 1 lock held by syz-executor/7246: [ 467.643816][ T39] #0: ffffffff8e1c99b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 467.643861][ T39] 1 lock held by syz-executor/7253: [ 467.643871][ T39] #0: ffffffff8e1c99b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 467.643915][ T39] 1 lock held by syz-executor/7262: [ 467.643924][ T39] #0: ffffffff8e1c99b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 467.643979][ T39] 1 lock held by syz-executor/7307: [ 467.643989][ T39] #0: ffffffff8e1c99b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 467.644033][ T39] 1 lock held by syz-executor/7314: [ 467.644042][ T39] #0: ffffffff8f5ac2f8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 467.644084][ T39] 2 locks held by syz-executor/7432: [ 467.644093][ T39] #0: ffffffff8ed106c8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 467.644152][ T39] #1: ffffffff8f5ac2f8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a3/0x1bd0 [ 467.644193][ T39] 2 locks held by syz-executor/7439: [ 467.644202][ T39] #0: ffffffff8ed106c8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 467.644247][ T39] #1: ffffffff8f5ac2f8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a3/0x1bd0 [ 467.644288][ T39] 1 lock held by syz-executor/7440: [ 467.644296][ T39] #0: ffffffff8f5ac2f8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a3/0x1bd0 [ 467.644337][ T39] 2 locks held by syz-executor/7475: [ 467.644346][ T39] #0: ffffffff8f59cfc0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4e2/0x720 [ 467.644386][ T39] #1: ffffffff8f5ac2f8 (rtnl_mutex){+.+.}-{4:4}, at: ip_tunnel_init_net+0x2d5/0x820 [ 467.644424][ T39] 2 locks held by syz-executor/7481: [ 467.644433][ T39] #0: ffffffff8f59cfc0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4e2/0x720 [ 467.644471][ T39] #1: ffffffff8f5ac2f8 (rtnl_mutex){+.+.}-{4:4}, at: ip_tunnel_init_net+0x2d5/0x820 [ 467.644512][ T39] [ 467.644517][ T39] ============================================= [ 467.644517][ T39] [ 467.644537][ T39] NMI backtrace for cpu 0 [ 467.644553][ T39] CPU: 0 UID: 0 PID: 39 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 467.644571][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 467.644581][ T39] Call Trace: [ 467.644588][ T39] [ 467.644595][ T39] dump_stack_lvl+0xe8/0x150 [ 467.644620][ T39] nmi_cpu_backtrace+0x274/0x2d0 [ 467.644639][ T39] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 467.644666][ T39] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 467.644704][ T39] sys_info+0x135/0x170 [ 467.644735][ T39] watchdog+0xfd7/0x1030 [ 467.644775][ T39] ? watchdog+0x1c7/0x1030 [ 467.644798][ T39] kthread+0x388/0x470 [ 467.644814][ T39] ? __pfx_watchdog+0x10/0x10 [ 467.644830][ T39] ? __pfx_kthread+0x10/0x10 [ 467.644846][ T39] ret_from_fork+0x514/0xb70 [ 467.644866][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 467.644882][ T39] ? __switch_to+0xc89/0x1420 [ 467.644906][ T39] ? __pfx_kthread+0x10/0x10 [ 467.644923][ T39] ret_from_fork_asm+0x1a/0x30 [ 467.644963][ T39] [ 467.644969][ T39] Sending NMI from CPU 0 to CPUs 1: [ 467.645003][ C1] NMI backtrace for cpu 1 [ 467.645017][ C1] CPU: 1 UID: 0 PID: 31 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 467.645034][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 467.645042][ C1] RIP: 0010:stack_trace_consume_entry+0xcd/0x280 [ 467.645062][ C1] Code: 29 49 89 ff 48 89 74 24 08 49 89 d4 4c 89 04 24 4c 89 cb e8 55 05 81 00 49 89 d9 4c 8b 04 24 4c 89 e2 4c 89 ff 48 8b 74 24 08 <48> 8b 1f 45 8d 79 01 0f b6 44 15 00 84 c0 0f 85 3a 01 00 00 45 89 [ 467.645075][ C1] RSP: 0018:ffffc90000a5e8f8 EFLAGS: 00000246 [ 467.645088][ C1] RAX: 1ffff9200014bd40 RBX: ffffc90000a5ea0c RCX: 0000000000000000 [ 467.645099][ C1] RDX: dffffc0000000000 RSI: ffffffff89824f82 RDI: ffffc90000a5ea00 [ 467.645109][ C1] RBP: 1ffff9200014bd42 R08: ffffc90000a5ea10 R09: 0000000000000008 [ 467.645119][ C1] R10: ffffc90000a5e998 R11: ffffffff81affaf0 R12: 0000000000000000 [ 467.645130][ C1] R13: 1ffff9200014bd41 R14: ffffc90000a5ea08 R15: 1ffff9200014bd41 [ 467.645140][ C1] FS: 0000000000000000(0000) GS:ffff888125d49000(0000) knlGS:0000000000000000 [ 467.645153][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 467.645163][ C1] CR2: 00007f3bc9490a90 CR3: 0000000037eb8000 CR4: 00000000003526f0 [ 467.645177][ C1] Call Trace: [ 467.645182][ C1] [ 467.645187][ C1] ? nft_synproxy_eval_v4+0x362/0x4e0 [ 467.645252][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 467.645268][ C1] arch_stack_walk+0x10f/0x150 [ 467.645287][ C1] ? nft_synproxy_eval_v4+0x362/0x4e0 [ 467.645305][ C1] stack_trace_save+0xa9/0x100 [ 467.645319][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 467.645339][ C1] save_dst_trace_buffer+0x108/0x5b0 [ 467.645360][ C1] ? rt_spin_unlock+0x163/0x200 [ 467.645375][ C1] ? __pfx_save_dst_trace_buffer+0x10/0x10 [ 467.645394][ C1] ? ref_tracker_alloc+0x2d7/0x4c0 [ 467.645407][ C1] ? dst_init+0x255/0x490 [ 467.645425][ C1] ? dst_alloc+0x12a/0x170 [ 467.645442][ C1] ? ip_route_output_key_hash_rcu+0x14ac/0x2720 [ 467.645489][ C1] ? ip_route_output_key_hash+0x18d/0x2a0 [ 467.645504][ C1] ? ip_route_output_flow+0x2a/0x150 [ 467.645518][ C1] ? ip_route_me_harder+0x762/0xfe0 [ 467.645533][ C1] ? synproxy_send_tcp+0x347/0x670 [ 467.645546][ C1] ? synproxy_send_client_synack+0x89b/0xde0 [ 467.645564][ C1] ? nf_hook_slow+0xc5/0x220 [ 467.645584][ C1] ? NF_HOOK+0x21f/0x3c0 [ 467.645602][ C1] ? NF_HOOK+0x336/0x3c0 [ 467.645620][ C1] ? process_backlog+0x564/0xc50 [ 467.645634][ C1] ? trace_kmem_cache_alloc+0x29/0xe0 [ 467.645654][ C1] ? dst_alloc+0x105/0x170 [ 467.645676][ C1] dst_init+0x255/0x490 [ 467.645694][ C1] ? dst_alloc+0x112/0x170 [ 467.645714][ C1] dst_alloc+0x12a/0x170 [ 467.645735][ C1] ip_route_output_key_hash_rcu+0x14ac/0x2720 [ 467.645755][ C1] ? ip_route_output_key_hash+0xd8/0x2a0 [ 467.645772][ C1] ip_route_output_key_hash+0x18d/0x2a0 [ 467.645789][ C1] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 467.645807][ C1] ? lock_acquire+0x115/0x350 [ 467.645828][ C1] ip_route_output_flow+0x2a/0x150 [ 467.645842][ C1] ? ip_route_me_harder+0x74b/0xfe0 [ 467.645857][ C1] ip_route_me_harder+0x762/0xfe0 [ 467.645878][ C1] ? __pfx_ip_route_me_harder+0x10/0x10 [ 467.645900][ C1] ? __cookie_v4_init_sequence+0x273/0x510 [ 467.645924][ C1] synproxy_send_tcp+0x347/0x670 [ 467.645940][ C1] synproxy_send_client_synack+0x89b/0xde0 [ 467.645961][ C1] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 467.645976][ C1] ? nft_osf_eval+0x528/0x880 [ 467.645989][ C1] ? synproxy_pernet+0x45/0x270 [ 467.646007][ C1] nft_synproxy_eval_v4+0x362/0x4e0 [ 467.646025][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 467.646042][ C1] ? nf_ip_checksum+0x13c/0x510 [ 467.646060][ C1] nft_synproxy_do_eval+0x335/0x550 [ 467.646077][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 467.646100][ C1] nft_do_chain+0x48d/0x1b10 [ 467.646124][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 467.646143][ C1] ? __lock_acquire+0x6df/0x2e40 [ 467.646167][ C1] ? __lock_acquire+0x6df/0x2e40 [ 467.646185][ C1] nft_do_chain_inet+0x360/0x4b0 [ 467.646203][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 467.646223][ C1] ? lock_acquire+0x115/0x350 [ 467.646240][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 467.646256][ C1] nf_hook_slow+0xc5/0x220 [ 467.646281][ C1] NF_HOOK+0x21f/0x3c0 [ 467.646298][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 467.646315][ C1] ? NF_HOOK+0x9e/0x3c0 [ 467.646331][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 467.646351][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 467.646373][ C1] ? ip_local_deliver+0x113/0x190 [ 467.646394][ C1] NF_HOOK+0x336/0x3c0 [ 467.646413][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 467.646431][ C1] ? NF_HOOK+0x9e/0x3c0 [ 467.646498][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 467.646518][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 467.646539][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 467.646557][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 467.646575][ C1] ? process_backlog+0x261/0xc50 [ 467.646589][ C1] process_backlog+0x564/0xc50 [ 467.646605][ C1] ? rcu_is_watching+0x15/0xb0 [ 467.646624][ C1] ? __schedule+0x171f/0x5530 [ 467.646646][ C1] __napi_poll+0xae/0x550 [ 467.646662][ C1] net_rx_action+0x621/0xd70 [ 467.646682][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 467.646696][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 467.646718][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 467.646737][ C1] ? lock_acquire+0x115/0x350 [ 467.646757][ C1] handle_softirqs+0x1d9/0x6c0 [ 467.646781][ C1] run_ksoftirqd+0x52/0x180 [ 467.646800][ C1] smpboot_thread_fn+0x57c/0xa80 [ 467.646821][ C1] ? smpboot_thread_fn+0x4e/0xa80 [ 467.646843][ C1] kthread+0x388/0x470 [ 467.646856][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 467.646874][ C1] ? __pfx_kthread+0x10/0x10 [ 467.646888][ C1] ret_from_fork+0x514/0xb70 [ 467.646902][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 467.646916][ C1] ? __switch_to+0xc89/0x1420 [ 467.646936][ C1] ? __pfx_kthread+0x10/0x10 [ 467.646949][ C1] ret_from_fork_asm+0x1a/0x30 [ 467.646970][ C1] [ 467.996422][ T39] Kernel panic - not syncing: hung_task: blocked tasks [ 467.996444][ T39] CPU: 0 UID: 0 PID: 39 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 467.996465][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 467.996476][ T39] Call Trace: [ 467.996484][ T39] [ 467.996492][ T39] vpanic+0x56c/0xa60 [ 467.996515][ T39] ? __pfx___schedule+0x10/0x10 [ 467.996538][ T39] ? __pfx_vpanic+0x10/0x10 [ 467.996571][ T39] panic+0xc5/0xd0 [ 467.996586][ T39] ? __pfx_panic+0x10/0x10 [ 467.996600][ T39] ? preempt_schedule_common+0x82/0xd0 [ 467.996620][ T39] ? preempt_schedule_thunk+0x16/0x40 [ 467.996641][ T39] ? nmi_trigger_cpumask_backtrace+0x314/0x380 [ 467.996661][ T39] ? nmi_trigger_cpumask_backtrace+0x319/0x380 [ 467.996682][ T39] watchdog+0x1030/0x1030 [ 467.996707][ T39] ? watchdog+0x1c7/0x1030 [ 467.996730][ T39] kthread+0x388/0x470 [ 467.996746][ T39] ? __pfx_watchdog+0x10/0x10 [ 467.996762][ T39] ? __pfx_kthread+0x10/0x10 [ 467.996778][ T39] ret_from_fork+0x514/0xb70 [ 467.996798][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 467.996813][ T39] ? __switch_to+0xc89/0x1420 [ 467.996838][ T39] ? __pfx_kthread+0x10/0x10 [ 467.996856][ T39] ret_from_fork_asm+0x1a/0x30 [ 467.996886][ T39] [ 467.997176][ T39] Kernel Offset: disabled