last executing test programs: 9m42.910225187s ago: executing program 4 (id=7689): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r0 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x12, 0x0, 0x57) 9m42.804793115s ago: executing program 4 (id=7692): r0 = syz_clone(0x2100000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$getregset(0x4204, r0, 0x1, &(0x7f0000000300)={0x0}) 9m42.567712583s ago: executing program 4 (id=7696): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x20002001}) 9m42.360457537s ago: executing program 4 (id=7700): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@can_newroute={0x134, 0x18, 0x1, 0x70bd26, 0x25dfdbfe, {0x1d, 0x1, 0x2}, [@CGW_CS_CRC8={0x11e, 0x6, {0xa, 0x6e, 0x55, 0x4, 0x9, "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", 0x1, "bd31eae1975ad6abcbeca9bf95cb4c4b38c63889"}}]}, 0x134}, 0x1, 0x0, 0x0, 0x14}, 0x8044) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="300000001800356a00000000000000000a800000ff0300060000000014000100"], 0x30}}, 0x0) 9m42.220205727s ago: executing program 4 (id=7702): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) fstat(r0, &(0x7f0000000100)) 9m42.114177083s ago: executing program 4 (id=7704): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x7}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}]}}]}, 0x58}}, 0x44080) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100014800c00158008"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 9m27.073028475s ago: executing program 32 (id=7704): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x7}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}]}}]}, 0x58}}, 0x44080) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100014800c00158008"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 8m2.784239266s ago: executing program 5 (id=9153): munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) mmap$KVM_VCPU(&(0x7f0000d10000/0xa000)=nil, 0x930, 0x3000006, 0x28031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) 8m2.614436159s ago: executing program 5 (id=9157): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000e00)=@newqdisc={0x844, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0xfffffe29, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x5ec888eb7598db49}, @TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x9, 0xffe0000, 0x8, 0xfff, 0x8, 0xcba, 0x0, 0x400, 0x2, 0x81, 0x4, 0x8, 0xeaf0, 0x8, 0x7ab, 0x2, 0xfffffffc, 0x6, 0xad22, 0x8, 0x6, 0x5, 0x4, 0x30, 0x8, 0x0, 0x5, 0x7f, 0x2, 0x0, 0x0, 0x0, 0x4, 0x1, 0x1, 0x40, 0x7, 0x9, 0x1, 0xa0e3, 0x0, 0x7fffffff, 0x9, 0x7, 0x0, 0x2, 0x2, 0x7, 0x4, 0x0, 0x2, 0x80000001, 0x69, 0x3, 0x400, 0x4, 0x2, 0xf973, 0x5, 0x0, 0x868, 0x8, 0x100, 0x0, 0x367, 0x1, 0x2, 0x9939, 0x1, 0x38, 0x8, 0xffffffff, 0x0, 0x3, 0x7, 0x4, 0x4, 0x8, 0x5, 0x7ff, 0xc2, 0x7bd, 0x6, 0x8, 0x4, 0x9, 0x10000, 0x3, 0xd, 0x100, 0x7, 0x3ff, 0x4, 0x80000001, 0x4, 0x7, 0x3, 0x5, 0x5, 0x10000, 0x6, 0x83fe, 0x2, 0x5, 0x1000, 0x81, 0xf0, 0x6, 0x8, 0x3, 0x1, 0xdd, 0x9, 0x1ff, 0x6, 0xe, 0xfff, 0x717, 0x7, 0x8, 0x5, 0x10001, 0x6, 0x4, 0x2, 0x6f1, 0x7, 0xffff8924, 0x4, 0x0, 0x6, 0x6, 0x7fffffff, 0x1, 0xa, 0x5, 0x10001, 0x2, 0x6, 0x0, 0xe1b, 0x2, 0x8, 0xfffffffb, 0x2, 0x9, 0xa, 0x4, 0x0, 0x7, 0x80, 0x7, 0x7, 0x2, 0x5, 0x0, 0xd, 0x89e7, 0x3, 0x64e, 0x4f42c7f2, 0x69b, 0x3b3, 0xf3b8, 0xf, 0x5, 0x80000001, 0x1, 0x7, 0x1, 0x200, 0x4, 0x7, 0x4, 0xe, 0x0, 0x4, 0x1, 0x10, 0xacc, 0xda, 0x8, 0x6b540000, 0x1ff, 0x6, 0x401, 0xe, 0x6, 0x5, 0x4, 0xb, 0x900, 0x0, 0xe, 0x0, 0x9, 0x1, 0xffff0001, 0x8, 0x2, 0xe00000, 0xb57, 0x5, 0x7, 0x6, 0x2, 0x10001, 0x8, 0x1, 0xe, 0x6, 0x6, 0x7, 0xb91, 0xffff8000, 0x4, 0x3695b842, 0x101, 0x6, 0x3, 0x5, 0x3559, 0x8, 0x9, 0x401, 0xc, 0x2f8, 0x800, 0x5, 0x9, 0x5, 0x6, 0x5, 0x2, 0x5, 0x1, 0xfffffff8, 0x7106, 0x7, 0x0, 0xffff924f, 0x100, 0x3, 0x8c1, 0x9, 0x4, 0xfffffff7, 0x51c4, 0xba2, 0xb, 0x9, 0x100, 0xe, 0x2e, 0x100]}, @TCA_TBF_PTAB={0x404, 0x3, [0x4, 0x2, 0x8, 0xfff, 0x0, 0x8ba, 0xa1, 0x4d91, 0x7fffffff, 0x63e4, 0x0, 0x8000, 0x8, 0xff, 0x6, 0x6, 0xd81, 0x3, 0xa, 0xa, 0x7, 0x6, 0x2, 0x200, 0x1, 0x5, 0xb96, 0x7, 0x0, 0xffffffff, 0x8, 0x3, 0x3, 0x7c, 0xfffffffc, 0x5, 0x1, 0x2, 0x8, 0x6, 0x1, 0x101, 0x80, 0xe, 0x80, 0x90000000, 0x3800000, 0x0, 0xfffff30b, 0x0, 0xf5, 0x81, 0xfffffffa, 0x80, 0x101, 0x3f, 0xfffffbff, 0x36a5, 0x4, 0x6, 0x200, 0x1ba, 0x9, 0xab, 0x6, 0xfffffff7, 0x6, 0x0, 0x3, 0x1, 0x963, 0x1ff, 0x2, 0xfffffffd, 0x6, 0x9, 0x0, 0x3, 0x0, 0xb09, 0x3ff, 0x7, 0x8000, 0x4, 0x8, 0x1000, 0x101, 0x5, 0x3, 0x6, 0x9, 0x3, 0x1, 0x8762, 0x8e, 0x5, 0xfffff76b, 0x0, 0x4, 0x4275c4e9, 0x8, 0x5, 0x800, 0x0, 0x955, 0x5, 0x6cdf13a0, 0x9, 0x3, 0x5, 0x10001, 0x80000001, 0x7fffffff, 0xed2, 0x1, 0xfffffffa, 0x2, 0x18d1, 0xfcf9, 0x3, 0x6, 0x80, 0x2, 0x80000000, 0xdb, 0x3, 0x80, 0xffff8000, 0x5, 0x8, 0x9, 0x1, 0x2, 0x8, 0x2, 0x0, 0x2, 0x7e, 0x3, 0x1, 0x6bf, 0x7, 0xea, 0x4, 0xc1, 0x9, 0x1, 0x5, 0x283, 0xb, 0x4, 0x40, 0x7, 0x4, 0x7, 0xff, 0x400, 0x8, 0x7fffffff, 0xfffffff8, 0x8, 0xfffffff4, 0x8, 0xc, 0x96, 0x6, 0x4, 0x62cc, 0x2, 0x7, 0x2eb7, 0x10001, 0xcbf, 0x10000, 0x101, 0x9, 0xbffffffa, 0x5, 0x100008, 0x800, 0x8001, 0xf, 0x5, 0x8, 0x8d, 0xffffffff, 0x2, 0x7, 0x1, 0x61, 0xffffffff, 0x494, 0xb, 0x1, 0x1, 0x2d1, 0xd, 0x9, 0x1002, 0xffffffff, 0x6, 0x3, 0xfffffffb, 0xffff, 0xff, 0x5, 0xe, 0x401, 0x2, 0x8cc5, 0x8, 0x159, 0xfffffff7, 0x800081, 0x382ae49b, 0x9, 0xffffffff, 0xffff, 0xdf3b, 0xfffffffb, 0x6, 0xfffffeff, 0x8dc3, 0x20000001, 0x5, 0x9, 0x2, 0xfffff801, 0x0, 0x5, 0x5, 0x7, 0x7, 0x7c, 0x7, 0x1, 0x0, 0xfffffffe, 0xdfed, 0xb, 0x77, 0x103, 0xff, 0xb331, 0x9, 0x6, 0x9, 0x7, 0x5, 0x400, 0x10001, 0x1, 0x800, 0x6000, 0xfe000000, 0x4]}]}}]}, 0x844}}, 0x0) 8m2.484170725s ago: executing program 5 (id=9161): r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b3325fe80000000000000dc8b850f238466ccfec07a000000ad6e911b51818462b4002c00", 0x30}], 0x1}, 0x0) 8m2.322887226s ago: executing program 5 (id=9166): ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0x7005, 0x0) r0 = gettid() getpgid(r0) 8m2.184449434s ago: executing program 5 (id=9168): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) utime(&(0x7f0000000000)='.\x00', &(0x7f0000000040)={0x2, 0x6}) 8m1.97396713s ago: executing program 5 (id=9173): syz_open_dev$admmidi(&(0x7f0000000300), 0x20, 0x1) syz_open_dev$admmidi(&(0x7f0000000300), 0x20, 0x1) close(0x3) 7m46.900013636s ago: executing program 33 (id=9173): syz_open_dev$admmidi(&(0x7f0000000300), 0x20, 0x1) syz_open_dev$admmidi(&(0x7f0000000300), 0x20, 0x1) close(0x3) 5m3.359058942s ago: executing program 1 (id=11592): socket(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'erspan0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r1, 0x89a2, &(0x7f0000000200)='bridge0\x00') 5m3.067110612s ago: executing program 1 (id=11595): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r1 = socket$inet6(0xa, 0x80002, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r2}, &(0x7f0000000340), &(0x7f0000000440)=r1}, 0x20) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x84, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 5m2.976625133s ago: executing program 1 (id=11596): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000010140)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) getsockopt(r0, 0x1, 0x52, 0x0, &(0x7f0000000900)) 5m2.918192598s ago: executing program 1 (id=11598): mkdir(&(0x7f00000020c0)='./file0\x00', 0x1c8) mount$bind(&(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x315901c, 0x0) chroot(&(0x7f0000001140)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000002c0)='./file0\x00') 5m2.865788347s ago: executing program 1 (id=11599): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0d00000005000000040000000100000000000000", @ANYRES32=r0], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1}, &(0x7f0000000840), &(0x7f0000000880)=r0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000e80)={r1, &(0x7f0000000d40), 0x0}, 0x20) 5m0.88042948s ago: executing program 1 (id=11612): socket$can_bcm(0x1d, 0x2, 0x2) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x100d, 0xde8bef52389a5434) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000280)={r0, 0x0, {0x0, 0x0, 0x0, 0x2000000000, 0x4000000000000004, 0x0, 0x0, 0x12, 0x14, "996a78edc5cac93c3e473f65d9eb5297f0ca82d56dcddb164e29606b4f2cf0b60d9b92b3cf1597f6b7ff9c4fbf4326f66eccdbf05411d4a42e798491c54e3e6f", "3c54d63cef61aa187f941933694c882f4835e79819ddc15edb9ca42b19129e446327fbe58f617cc4617f5347a395cacecf34365db4d55dace1d4e9d56e6fa42e", "fd0000e7744b74eaa2317fdd9db2fea7e7d63f9a007866063c8c162b99d845fb", [0x61, 0x4]}}) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c06, 0x4) 5m0.491408309s ago: executing program 34 (id=11612): socket$can_bcm(0x1d, 0x2, 0x2) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x100d, 0xde8bef52389a5434) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000280)={r0, 0x0, {0x0, 0x0, 0x0, 0x2000000000, 0x4000000000000004, 0x0, 0x0, 0x12, 0x14, "996a78edc5cac93c3e473f65d9eb5297f0ca82d56dcddb164e29606b4f2cf0b60d9b92b3cf1597f6b7ff9c4fbf4326f66eccdbf05411d4a42e798491c54e3e6f", "3c54d63cef61aa187f941933694c882f4835e79819ddc15edb9ca42b19129e446327fbe58f617cc4617f5347a395cacecf34365db4d55dace1d4e9d56e6fa42e", "fd0000e7744b74eaa2317fdd9db2fea7e7d63f9a007866063c8c162b99d845fb", [0x61, 0x4]}}) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c06, 0x4) 4m40.316408883s ago: executing program 6 (id=11758): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000480)=ANY=[], 0xd0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={r1, @in6={{0xa, 0x3, 0x4, @rand_addr=' \x01\x00'}}}, &(0x7f0000000040)=0x84) 4m40.080616893s ago: executing program 6 (id=11759): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="7f454c4607100701040000000000000003003e00f7ffffffd80100000000000040000000000000002302000000000000080000000600380003"], 0xe8) lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0) close(r0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 4m39.964504999s ago: executing program 6 (id=11761): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) 4m38.613011584s ago: executing program 6 (id=11770): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0/file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) 4m38.431980208s ago: executing program 6 (id=11773): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000001c0)={"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"}) 4m36.844888872s ago: executing program 6 (id=11786): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x0, 0x36, 0x0, 0x8}, 0x28) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) unshare(0x20000400) utimensat(r0, 0x0, &(0x7f0000000080), 0x0) 4m36.427321582s ago: executing program 35 (id=11786): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x0, 0x36, 0x0, 0x8}, 0x28) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) unshare(0x20000400) utimensat(r0, 0x0, &(0x7f0000000080), 0x0) 2m51.450781691s ago: executing program 3 (id=12434): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x100) r2 = openat$binfmt(0xffffffffffffff9c, r0, 0x2, 0x0) close(r2) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, &(0x7f0000000280)={[&(0x7f00000000c0)='\\3\x06\xc7F\xb2?=']}, 0x1000) 2m51.232978895s ago: executing program 3 (id=12436): socket$kcm(0xa, 0x1, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000180)={0x53, 0xffffffffffffffff, 0x0, 0xa, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000280), 0x0, 0x0, 0x22, 0x0, 0x0}) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x200000, 0x0, 0xff, 0x1, 0x0, 0xfffe}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000200)={@mcast2, 0x200000, 0x2, 0x0, 0xb, 0x96}, 0x20) 2m51.081265382s ago: executing program 3 (id=12439): syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x48e80, 0x0) r1 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_create(0x2, 0x0, &(0x7f0000bbdffc)=0x0) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{0x77359400}, {0x0, 0x9}}, 0x0) timer_settime(r2, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) read(r0, 0x0, 0x21) 2m50.386107242s ago: executing program 3 (id=12444): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000002c0)=0xb, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000540)={0xa, 0x4e22, 0x7, @empty, 0x1fc}, 0x1c) listen(r1, 0x80000003) 2m50.113294743s ago: executing program 3 (id=12446): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000040)=0x5, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) 2m49.766293787s ago: executing program 3 (id=12451): syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0xd5) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000240)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0xffffffff80000202, 0x0, 0xfffd, 0x605, 0x6}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x109081, 0x34) fcntl$lock(r2, 0x5, &(0x7f0000000200)={0x1, 0x0, 0x700}) 2m34.557628858s ago: executing program 36 (id=12451): syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0xd5) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000240)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0xffffffff80000202, 0x0, 0xfffd, 0x605, 0x6}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x109081, 0x34) fcntl$lock(r2, 0x5, &(0x7f0000000200)={0x1, 0x0, 0x700}) 2m17.198621006s ago: executing program 2 (id=12584): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000040)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) r2 = syz_open_procfs(0x0, &(0x7f0000000480)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) 2m17.07918097s ago: executing program 2 (id=12585): socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000080), &(0x7f0000000280)=r1}, 0x20) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r1, r3}, 0x14) syz_emit_ethernet(0x80, &(0x7f0000000a00)={@empty, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x7, 0x6, "acdaea", 0x4a, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, {[], {{0x4e20, 0x4e24, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x8, 0x2, 0x0, 0x2, {[@exp_smc={0xfe, 0x6}]}}, {"ffaf37c94bd77d95f8a7484ed5752f3c6fb324fa40e0752e7aeed8dbcb9f5dec2fac17c637d154e0e3e643c5c4ad"}}}}}}}, 0x0) 2m15.17283464s ago: executing program 2 (id=12591): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'vlan0\x00'}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="740200001900000229bd7000fedb"], 0x274}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 2m12.542180009s ago: executing program 2 (id=12598): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000c0], 0x11, 0x0, &(0x7f00000000c0)=ANY=[]}, 0x78) syz_open_dev$vim2m(&(0x7f00000001c0), 0x7, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000080), 0x8100, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, 0x0) ioctl$DMA_BUF_SET_NAME_A(0xffffffffffffffff, 0x40086203, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 1m57.587307778s ago: executing program 2 (id=12622): socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f00000000c0)) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) 1m55.448453178s ago: executing program 2 (id=12629): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='P', @ANYBLOB="010000000000"], 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB], &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x1, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x7, &(0x7f00000001c0)=0x7, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0xffffffff, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0xffffffff, 0x6361, 0x7, 0xfffffffd, 0x40000004}}}}]}, 0x4c}}, 0x20000804) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r6, {}, {0xd, 0xb}, {0xffe0, 0xd}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x9, 0xb, 0x4}}}}]}, 0x40}}, 0x4010004) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="640000004ec6"}) 1m39.735086714s ago: executing program 37 (id=12629): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='P', @ANYBLOB="010000000000"], 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB], &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x1, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x7, &(0x7f00000001c0)=0x7, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0xffffffff, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0xffffffff, 0x6361, 0x7, 0xfffffffd, 0x40000004}}}}]}, 0x4c}}, 0x20000804) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r6, {}, {0xd, 0xb}, {0xffe0, 0xd}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x9, 0xb, 0x4}}}}]}, 0x40}}, 0x4010004) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="640000004ec6"}) 57.916744888s ago: executing program 9 (id=12720): openat$iommufd(0xffffffffffffff9c, 0x0, 0x509300, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1, 0xc, &(0x7f0000000980)=ANY=[@ANYRES64], 0x0, 0x4, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001b80)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000300)={0x2, 0x4e23, @loopback}, 0x10, 0x0}}], 0x2, 0x4000000) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f00000003c0)) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="21032cbd7000fedbdf3501000000040003001c0002800c00018008000100060000000c000180080001"], 0x34}, 0x1, 0x0, 0x0, 0x24044094}, 0x4) 55.444773716s ago: executing program 9 (id=12723): socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000780)=ANY=[@ANYRES32, @ANYBLOB="0500000069de89a95a6ba164ed140ef9dfac0147533811b02ebdd5c8b2195720ba6681bcf079b033e2c23581b0698cb6c63ecb56e0e4b06c0c2d35d89c3d5ecf7b3d794d5a4f4c01b28bec251b4cfad0bcd830e34d921720c088bf728069d8466eb15f0d6ae62d617ca04f7a607e4af538918985549e88dff5ab4a92fc9a74b94bcda448e8c49b6e18", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sched_setattr(0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='oom_score_adj\x00') writev(r1, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) r2 = syz_clone(0x200000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x4206, r2) ptrace(0x4208, r2) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81802) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000140)) lsm_get_self_attr(0x64, &(0x7f0000000040), &(0x7f0000000000)=0x101, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 50.16168145s ago: executing program 9 (id=12728): r0 = epoll_create(0x80) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup3(r1, r0, 0x0) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) accept4(r4, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x7fffffff) r5 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000001840)=@udp6=r5}, 0x20) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, 0x0, 0x0) listen(r2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x0, 0x419}}}, 0x7) 46.010586512s ago: executing program 9 (id=12735): syz_io_uring_setup(0x7b67, &(0x7f0000000400)={0x0, 0x5961, 0x10000, 0x0, 0xea}, &(0x7f0000000100), &(0x7f0000000000), &(0x7f0000000080)) socket$netlink(0x10, 0x3, 0xb) mount$9p_virtio(0x0, 0x0, 0x0, 0x3200006, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x5, &(0x7f0000000000), 0x4) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$comedi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/comedi3\x00', 0x400, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp6\x00') lseek(r1, 0x2000, 0x0) syz_usbip_server_init(0x5) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001300050027bd", @ANYRES32=0x0, @ANYBLOB="0000000001060400140003007665746830000000000000000089f6001400168053"], 0x48}}, 0x48000) write(0xffffffffffffffff, &(0x7f00000002c0)="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", 0xfc) r3 = socket(0x840000000002, 0x3, 0x100) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r3, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) 42.594554182s ago: executing program 8 (id=12738): socket$inet(0x2, 0x1, 0x100) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, 0x0, &(0x7f0000000040)='c:::\x00', 0x0) socket(0x2, 0x3, 0x6) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4c0c8) tkill(0x0, 0xb) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x66, 0x0, 0x132, 0x3}) 38.276447787s ago: executing program 8 (id=12740): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x1d2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$inet(r2, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x1e1730a30afb6559, 0x8014) ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80086f53, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x140480d1}, 0x4000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) write$sysctl(r3, 0x0, 0x0) write$sysctl(r3, &(0x7f00000000c0)='2\x00', 0x2) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)}, 0x40000) 36.480595824s ago: executing program 8 (id=12742): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={0x0}}, 0x20000000) sched_setattr(0x0, &(0x7f0000000180)={0x4b, 0x3, 0x8, 0x5, 0x0, 0x29, 0x3ff, 0x2, 0xfa11, 0x4146}, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000580)='dctcp', 0x5) getsockopt$inet_tcp_buf(r3, 0x6, 0x1a, 0x0, &(0x7f0000000040)) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, 0x0, 0x0) getrlimit(0xc, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f00000001c0)='net/llc/core\x00') syz_open_procfs(0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, 0x0, 0x5000) close(0x3) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0xd, &(0x7f0000000080)=ANY=[@ANYRESOCT=r1, @ANYRES64=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000000000060000008500000018000000850000000500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0x0, 0x0, &(0x7f00000008c0), 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 35.607843007s ago: executing program 8 (id=12744): ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x101, 0x0, 0xf, 0x0, 0x0}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x22882, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000140)='\b', 0x1}], 0x1) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x32) ioctl$PPPIOCGL2TPSTATS(r3, 0x80487436, &(0x7f0000000180)) write$cgroup_subtree(r1, 0x0, 0x3261e) syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') r5 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000940)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000008c0)=[0x0], &(0x7f0000000900), 0x0, 0x1, 0x0, 0x0, r6}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x13, r1, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x16, 0x301, 0x70bd24, 0xfffffffc, {0x2e}}, 0x14}, 0x1, 0x0, 0x0, 0x200448d3}, 0x0) r7 = socket$rds(0x15, 0x5, 0x0) bind$rds(r7, &(0x7f00000000c0)={0xa}, 0x1c) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$USBDEVFS_FORBID_SUSPEND(r0, 0x5521) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r9, 0x0, 0x0) setsockopt$sock_int(r9, 0x1, 0x7, &(0x7f0000000080)=0x9, 0x4) connect$inet6(r8, &(0x7f0000000180)={0xa, 0x4001, 0xffffffff, @loopback={0x1000000}, 0xd}, 0x1c) 34.868365144s ago: executing program 8 (id=12745): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000a27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) 33.683899144s ago: executing program 8 (id=12746): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000ec0)={'syz0\x00', {0x0, 0x0, 0x0, 0x9}, 0x0, [0x0, 0x0, 0x200, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x0, 0xffffffff, 0x5, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x53, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x8, 0xb16, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x6, 0x1000, 0x81, 0xf, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0xffffffff, 0xfffffffe, 0x0, 0xff, 0xfffffffd, 0xfffffffd, 0x0, 0xfffffffa, 0x0, 0x80000000, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0xe, 0xffffffff, 0x0, 0xfffffffe], [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xddc, 0x0, 0x0, 0xfffffffc, 0xff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0xe, 0x1, 0x0, 0x0, 0x4, 0x0, 0xfffffffc, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x8, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x7, 0x4], [0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xc045, 0x10, 0x16, 0x0, 0x4, 0x0, 0x80, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x80000000, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffe, 0x0, 0x0, 0xffffffff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x4, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000001340)={'syz0\x00', {0x4, 0xd, 0x7fff, 0x8}, 0x56, [0xf, 0x5, 0xd881, 0x2, 0x0, 0x60, 0xa18, 0x4, 0x112, 0x8, 0x10000, 0x9, 0xfffffffb, 0x53, 0x8, 0x4, 0x2, 0x6, 0x0, 0x9d6e, 0xffff0001, 0xffff, 0x7, 0x4, 0xddf, 0x1, 0x7, 0x1ff, 0x7, 0x0, 0x9, 0x6, 0x7, 0x8, 0x4, 0x6, 0x4, 0x5, 0xfffffff3, 0x8, 0x7, 0x7, 0xfffffff5, 0xe3, 0xc, 0xa5f, 0x4e40, 0x2, 0x3, 0x6, 0x3, 0x10, 0x5, 0xe, 0x6, 0x1, 0x9, 0x679, 0x0, 0x6c2fa8e6, 0x8, 0x5, 0x0, 0x7], [0x1, 0xe81f, 0x9, 0x1, 0x5, 0x270, 0x9, 0x1000, 0x101, 0x5, 0x5, 0x0, 0x4, 0x8, 0x2, 0x5200, 0x7fff, 0xfffffff8, 0xfa, 0x3, 0x5, 0x9, 0x5, 0x5, 0x4, 0x7ff, 0x0, 0xffffffff, 0xa, 0x1, 0x0, 0x8, 0xae77, 0x7, 0x6, 0x9, 0x6c, 0x4, 0xff2, 0x10, 0x3ff, 0x10000, 0x7fff, 0x2, 0x7a83ba40, 0x400, 0x73f1, 0x3, 0x6, 0xa77c, 0x4, 0x82d8, 0x9, 0xff, 0x4, 0x2, 0x7, 0xd6e3, 0x0, 0x4, 0x5288, 0x80000001, 0xfff, 0xfffffffe], [0x9198, 0x7, 0x6, 0x5, 0x7, 0x3, 0xffff, 0x9, 0x100, 0x5, 0x3, 0x5, 0x5, 0x783, 0x3, 0xffffff00, 0xffff7fff, 0x9, 0x7fff, 0x8e4a, 0x5, 0x281, 0x0, 0x8, 0x6, 0x6, 0x1, 0x7, 0x7f, 0x20, 0x8, 0xb7, 0x5, 0x888a, 0x7, 0x8, 0x41, 0x2, 0xe267, 0x0, 0xefab, 0x6, 0x9, 0x3, 0x9a77, 0x101, 0xb60, 0x8, 0x24, 0x1e7, 0x5f0, 0xb40, 0x3ff, 0x4, 0x2, 0xffffffff, 0xc03, 0x0, 0x8, 0x2, 0x5, 0x8001, 0x80000000, 0x9], [0x1000000, 0xc, 0x29e, 0x8, 0x4, 0x4c8, 0x0, 0xabde, 0x61, 0x8, 0x0, 0xffffff7f, 0x0, 0xb233, 0x80000000, 0x8, 0x4, 0xc2c4, 0x80000001, 0x2, 0x9e6, 0x8, 0x8001, 0x3ff, 0x9, 0x80000001, 0x8, 0x9, 0xc, 0x5f1, 0x6, 0x5, 0xffffffff, 0xffffff7f, 0x4, 0x1, 0x80000000, 0xc, 0x200, 0x81, 0x3, 0x7, 0x9, 0xd, 0xb, 0x101, 0x2, 0x904, 0x48c, 0xfffffffa, 0x4, 0x9, 0x7, 0x73ba865f, 0xff, 0xa, 0x5, 0x1, 0x6, 0x2, 0x7, 0x9d, 0xfd, 0x3]}, 0x45c) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') write$nci(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[], 0x102) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=ANY=[@ANYBLOB="8400000010000304000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="00030000000000005c001280080001007369740050000280080002000a01010108000100", @ANYRES32=r4, @ANYBLOB="08008100", @ANYRES32=r4, @ANYBLOB="06000d00020000000500090000000000060008000900000014000b00fe880000000000000000000000000001050005004c00000008000a00", @ANYRES32=r4, @ANYBLOB], 0x84}, 0x1, 0x0, 0x0, 0x4}, 0x8044) r5 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7dff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000bc0)={0x1, @sdr={0x41416770, 0x66c2}}) fcntl$F_GET_FILE_RW_HINT(r5, 0x40d, &(0x7f0000000140)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000020811204000000000095000000000000000852d36fd7456c7fb21b511b1cc3a538c9c46968bb9b3eaf1dec1399c16e"], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 33.44910209s ago: executing program 9 (id=12748): socket$inet(0x2, 0x3, 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={0x0, 0xfc}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$video(0x0, 0x7, 0x0) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x80580, 0x0) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000080)={0x6, "abacd2110800170063377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) r6 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r6, 0x4112, 0x0) close_range(r3, r5, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000040), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='mpo']) dup(0xffffffffffffffff) 30.947711883s ago: executing program 9 (id=12751): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_DETACH(r0, 0x7aa, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x1) r1 = openat$fb0(0xffffffffffffff9c, 0x0, 0x40, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) madvise(&(0x7f0000439000/0x3000)=nil, 0x3000, 0x18) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4800000002060500000000000000000003000000050022"], 0x48}}, 0x0) ioctl$FBIOPUTCMAP(r1, 0x4605, &(0x7f0000000140)={0x240000, 0xfd6b, 0x0, 0x0, 0x0, 0xffffffffffffffff}) mount_setattr(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x1900, &(0x7f000001a240)={0xfe, 0x80, 0x60000}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x4, 0x4, 0x4, 0x10005, 0x800}, 0x48) close(r5) r6 = syz_open_procfs(0x0, &(0x7f0000000100)='pagemap\x00') pread64(r6, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'hsr0\x00'}) 18.190169715s ago: executing program 38 (id=12746): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000ec0)={'syz0\x00', {0x0, 0x0, 0x0, 0x9}, 0x0, [0x0, 0x0, 0x200, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x0, 0xffffffff, 0x5, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x53, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x8, 0xb16, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x6, 0x1000, 0x81, 0xf, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0xffffffff, 0xfffffffe, 0x0, 0xff, 0xfffffffd, 0xfffffffd, 0x0, 0xfffffffa, 0x0, 0x80000000, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0xe, 0xffffffff, 0x0, 0xfffffffe], [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xddc, 0x0, 0x0, 0xfffffffc, 0xff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0xe, 0x1, 0x0, 0x0, 0x4, 0x0, 0xfffffffc, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x8, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x7, 0x4], [0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xc045, 0x10, 0x16, 0x0, 0x4, 0x0, 0x80, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x80000000, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffe, 0x0, 0x0, 0xffffffff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x4, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000001340)={'syz0\x00', {0x4, 0xd, 0x7fff, 0x8}, 0x56, [0xf, 0x5, 0xd881, 0x2, 0x0, 0x60, 0xa18, 0x4, 0x112, 0x8, 0x10000, 0x9, 0xfffffffb, 0x53, 0x8, 0x4, 0x2, 0x6, 0x0, 0x9d6e, 0xffff0001, 0xffff, 0x7, 0x4, 0xddf, 0x1, 0x7, 0x1ff, 0x7, 0x0, 0x9, 0x6, 0x7, 0x8, 0x4, 0x6, 0x4, 0x5, 0xfffffff3, 0x8, 0x7, 0x7, 0xfffffff5, 0xe3, 0xc, 0xa5f, 0x4e40, 0x2, 0x3, 0x6, 0x3, 0x10, 0x5, 0xe, 0x6, 0x1, 0x9, 0x679, 0x0, 0x6c2fa8e6, 0x8, 0x5, 0x0, 0x7], [0x1, 0xe81f, 0x9, 0x1, 0x5, 0x270, 0x9, 0x1000, 0x101, 0x5, 0x5, 0x0, 0x4, 0x8, 0x2, 0x5200, 0x7fff, 0xfffffff8, 0xfa, 0x3, 0x5, 0x9, 0x5, 0x5, 0x4, 0x7ff, 0x0, 0xffffffff, 0xa, 0x1, 0x0, 0x8, 0xae77, 0x7, 0x6, 0x9, 0x6c, 0x4, 0xff2, 0x10, 0x3ff, 0x10000, 0x7fff, 0x2, 0x7a83ba40, 0x400, 0x73f1, 0x3, 0x6, 0xa77c, 0x4, 0x82d8, 0x9, 0xff, 0x4, 0x2, 0x7, 0xd6e3, 0x0, 0x4, 0x5288, 0x80000001, 0xfff, 0xfffffffe], [0x9198, 0x7, 0x6, 0x5, 0x7, 0x3, 0xffff, 0x9, 0x100, 0x5, 0x3, 0x5, 0x5, 0x783, 0x3, 0xffffff00, 0xffff7fff, 0x9, 0x7fff, 0x8e4a, 0x5, 0x281, 0x0, 0x8, 0x6, 0x6, 0x1, 0x7, 0x7f, 0x20, 0x8, 0xb7, 0x5, 0x888a, 0x7, 0x8, 0x41, 0x2, 0xe267, 0x0, 0xefab, 0x6, 0x9, 0x3, 0x9a77, 0x101, 0xb60, 0x8, 0x24, 0x1e7, 0x5f0, 0xb40, 0x3ff, 0x4, 0x2, 0xffffffff, 0xc03, 0x0, 0x8, 0x2, 0x5, 0x8001, 0x80000000, 0x9], [0x1000000, 0xc, 0x29e, 0x8, 0x4, 0x4c8, 0x0, 0xabde, 0x61, 0x8, 0x0, 0xffffff7f, 0x0, 0xb233, 0x80000000, 0x8, 0x4, 0xc2c4, 0x80000001, 0x2, 0x9e6, 0x8, 0x8001, 0x3ff, 0x9, 0x80000001, 0x8, 0x9, 0xc, 0x5f1, 0x6, 0x5, 0xffffffff, 0xffffff7f, 0x4, 0x1, 0x80000000, 0xc, 0x200, 0x81, 0x3, 0x7, 0x9, 0xd, 0xb, 0x101, 0x2, 0x904, 0x48c, 0xfffffffa, 0x4, 0x9, 0x7, 0x73ba865f, 0xff, 0xa, 0x5, 0x1, 0x6, 0x2, 0x7, 0x9d, 0xfd, 0x3]}, 0x45c) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') write$nci(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[], 0x102) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=ANY=[@ANYBLOB="8400000010000304000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="00030000000000005c001280080001007369740050000280080002000a01010108000100", @ANYRES32=r4, @ANYBLOB="08008100", @ANYRES32=r4, @ANYBLOB="06000d00020000000500090000000000060008000900000014000b00fe880000000000000000000000000001050005004c00000008000a00", @ANYRES32=r4, @ANYBLOB], 0x84}, 0x1, 0x0, 0x0, 0x4}, 0x8044) r5 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7dff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000bc0)={0x1, @sdr={0x41416770, 0x66c2}}) fcntl$F_GET_FILE_RW_HINT(r5, 0x40d, &(0x7f0000000140)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000020811204000000000095000000000000000852d36fd7456c7fb21b511b1cc3a538c9c46968bb9b3eaf1dec1399c16e"], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 13.71361114s ago: executing program 39 (id=12751): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_DETACH(r0, 0x7aa, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x1) r1 = openat$fb0(0xffffffffffffff9c, 0x0, 0x40, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) madvise(&(0x7f0000439000/0x3000)=nil, 0x3000, 0x18) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4800000002060500000000000000000003000000050022"], 0x48}}, 0x0) ioctl$FBIOPUTCMAP(r1, 0x4605, &(0x7f0000000140)={0x240000, 0xfd6b, 0x0, 0x0, 0x0, 0xffffffffffffffff}) mount_setattr(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x1900, &(0x7f000001a240)={0xfe, 0x80, 0x60000}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x4, 0x4, 0x4, 0x10005, 0x800}, 0x48) close(r5) r6 = syz_open_procfs(0x0, &(0x7f0000000100)='pagemap\x00') pread64(r6, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'hsr0\x00'}) 9.496364637s ago: executing program 0 (id=12770): mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="66643d0c79d3846101009049ca56f0a2f705fb78526dce", @ANYRESHEX, @ANYRESDEC=0x0, @ANYBLOB=',group_i']) syz_open_dev$sg(&(0x7f00000001c0), 0x508d48d4, 0x40902) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b", 0xe3}], 0x1, &(0x7f00000008c0)=ANY=[@ANYBLOB="b800000000d983fd49e32f4399000000a0000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4a0342bed8a3c79acd4bb1f9f46ef28a63b329e09a86c62f907539c9af6f1b0bc00510c"], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d4", 0x7a}, {&(0x7f0000000ac0)="3fe4c8a3288f09", 0x7}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc", 0x2a}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec", 0xa7}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58", 0xa8}], 0x5, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$loop(&(0x7f0000000500), 0x6, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x12, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x5}, {{}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}, @jmp={0x5, 0x1, 0x4, 0x0, 0x9, 0xfffffffffffffff8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x3}, 0x94) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000340)={0x10000, 0x2, 0x8000000, 0x2000, &(0x7f0000001000/0x2000)=nil}) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 6.349421712s ago: executing program 0 (id=12773): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000040)={@empty, @multicast1, 0x2, "4f6fb4d1af0f724e6118ecfbac0200843af29708e2355d0e7ea0c543011a00", 0x5a4, 0x4, 0x20081, 0x81}, 0x3c) socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0x9f9, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x2, 0x400) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x20, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0xc1105518, &(0x7f0000000040)={{0x404, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0xa7, 0x1, 0x8000000000000000, 0x0, 0xfffffffffffffffe, 0xb, 0x0, 0x6, 0x0, 0xfffffffd, 0xffffffff, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x8, 0x0, 0x0, 0x4, 0x0, 0x2000100, 0x80000000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffd, 0x8, 0x7, 0x4, 0x800000, 0x0, 0x101, 0x1, 0x10001, 0x0, 0x78d, 0x0, 0x0, 0x1, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x58, 0x4, 0x0, 0x3, 0x4000000, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000006fd, 0x0, 0x2, 0x0, 0x800000]}) shutdown(0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f0000004a00)}}], 0x1, 0x10122, 0x0) syz_80211_inject_frame(&(0x7f00000001c0)=@broadcast, &(0x7f0000000500)=@data_frame={@msdu=@type11={{0x0, 0x2, 0x7, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x46}, @device_b, @device_b, @broadcast, {0x9}, @broadcast}}, 0x1e) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x0) 5.121669338s ago: executing program 7 (id=12774): connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfa}}, 0x7ffe}, 0x1c) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0b0000000500000001"], 0x50) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r1, &(0x7f0000001bc0)=[{{&(0x7f0000000080)={0x2, 0x0, @private=0xa010102}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='~', 0x1}], 0x1}}, {{&(0x7f00000022c0)={0x2, 0x20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000600)=[{&(0x7f00000003c0)="ef964a4ef58b78eb622331dbdc4464f5d2d7ce9ee50979fd01e900a2", 0x1c}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x3, 0x1005) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000180)={0x2, [0x0, 0x0]}, &(0x7f00000001c0)=0xc) r2 = fanotify_init(0x1, 0x80000) write$binfmt_elf64(r2, &(0x7f00000006c0)=ANY=[@ANYBLOB="7f454c4622"], 0x18) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000040)="02000000", 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xff, 0x4, 0x6, 0x6}, 0x4, r4}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x20006094) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000000), 0x4) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0x4a, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400100142603600e1208000b0000000401a80016000500014003001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x10) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac95ab194f93f8e795a9b294a0fa62d", 0x11}], 0x1}}], 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x8, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32], 0x0, 0x7, 0x0, 0x0, 0x41000, 0xf72cb191e650caa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r5 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r6, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000002c0)={r6, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 5.008438248s ago: executing program 7 (id=12775): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x56}, 0x28) r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = creat(0x0, 0x102) r3 = open$dir(0x0, 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x12, r3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$P9_RVERSION(r2, &(0x7f0000000c40)=ANY=[], 0x13) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000006, 0x12, r1, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r5, 0x3) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14, 0x10, 0x20}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1886c301}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xa4}, 0x1, 0x0, 0x0, 0x20004040}, 0x0) write$P9_RWRITE(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x400, &(0x7f0000000000)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r5}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x4) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0x5, 0x40, 0x80000001}, &(0x7f0000000200)=0x14) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000340)={r6, 0x6f, 0x1000, 0x6}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r4, 0x13, &(0x7f0000000380)=[0x0, 0x9308], 0x2) 4.592704502s ago: executing program 0 (id=12776): socket$inet6(0xa, 0x2, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) landlock_create_ruleset(&(0x7f0000000140)={0x19a1, 0x9, 0x3, 0x0, 0x0, 0x1}, 0x30, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x404c0, 0xbd) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x39) syz_open_dev$radio(&(0x7f0000000100), 0x3, 0x2) syz_open_dev$sg(&(0x7f00000001c0), 0x508d48d4, 0x40902) openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1bc2, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x2bc}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) r2 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x10}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="10", 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4020845) io_uring_enter(r1, 0x4bcf, 0x7721, 0x3f, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) socket(0x10, 0x3, 0x0) syz_open_dev$loop(0x0, 0x6, 0x0) 4.519442121s ago: executing program 7 (id=12777): unshare(0x40200) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) ioprio_set$pid(0x3, 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='mountinfo\x00') sendfile(r3, r3, &(0x7f0000000000)=0x2eb4, 0x2000007ff) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0xffff, 0x3fd, 0x0, 0xb2, 0x0, 0x2}, 0x9c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000940)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4) pipe(0x0) splice(r5, 0x0, 0xffffffffffffffff, 0x0, 0x39000, 0x0) write$binfmt_elf64(r6, &(0x7f0000001b40)=ANY=[], 0xfffffe3e) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=']) 3.402430668s ago: executing program 7 (id=12778): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000200), 0x20400, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000003c0)={0xc}) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, 0x0, 0x106) socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @const={0x0, 0x0, 0x0, 0xb}, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x3e}, 0x20) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_RW(0xffffffffffffffff, 0x3ba0, &(0x7f0000000600)={0x48, 0x8, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, 0x4}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc}) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) ioctl$KDFONTOP_GET(r6, 0x4b72, &(0x7f0000000a80)={0x1, 0x1, 0x1d, 0x14, 0x174, &(0x7f0000000680)}) ioctl$DRM_IOCTL_GET_CAP(r5, 0xc010640c, &(0x7f0000000180)={0x13}) socket(0x2d, 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newtaction={0x60, 0x30, 0xffff, 0x70bd28, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xbf, 0x7, 0x8, 0x400, 0x4}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x800) 3.351878467s ago: executing program 0 (id=12779): openat$cachefiles(0xffffffffffffff9c, 0x0, 0x800, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket(0x2, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x60, 0x887}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x40) chdir(&(0x7f00000000c0)='./bus\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r6 = creat(&(0x7f0000000040)='./file1\x00', 0x108) r7 = fanotify_init(0xf00, 0x1) fanotify_mark(r7, 0x105, 0x40009975, r6, 0x0) fallocate(r5, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r5, 0x0) 2.155014264s ago: executing program 7 (id=12780): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40000, 0x940}}, 0x20}}, 0x4000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[], 0xc0}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$vbi(&(0x7f0000000080), 0x2, 0x2) sendmsg$nl_xfrm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newspdinfo={0x1c, 0x24, 0x21, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x1c}}, 0x0) io_uring_setup(0x104b, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000020000000a3c000000120a01010000000000000000020000000900020073797a310000000008000440000000000900010073797a30000000000800034000000002140000001100010000000000000000000000000af3bed000bd1acefe014d9128371d7f2a27fcc462f42d45d73f58f09d663f50d969a3c81424f984ded714b1f1c35ce020a8d9ee970ff715bb44fb80bf653f6b261b9bd04bf2dc4eeaeeec4fdcf65d"], 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) connect$inet(r1, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r6, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r5, 0x0, 0x40000c0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x28, 0x10, 0x503, 0x70bd2a, 0x600, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1aca6}, [@IFLA_MASTER={0x8, 0xa, r6}]}, 0x28}}, 0x0) read$alg(0xffffffffffffffff, &(0x7f0000000100)=""/98, 0x62) connect$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x19, r6, 0x1, 0x8, 0x6, @local}, 0x14) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x4e22, 0x0, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="4d59f8def9cb", 0x6}], 0x1}}], 0x1, 0x4400c800) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x20000000) sendto$inet6(r0, &(0x7f0000000280)="cfc8", 0x2, 0x3b00, 0x0, 0x0) 1.699238175s ago: executing program 0 (id=12781): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) socket$kcm(0x10, 0x2, 0x0) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f00000000c0)=@usbdevfs_connect) kexec_load(0x0, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0x40000000, 0x1980000}], 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x600}, 0x4000000) 120.159273ms ago: executing program 0 (id=12782): socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000780)=ANY=[@ANYRES32, @ANYBLOB="0500000069de89a95a6ba164ed140ef9dfac0147533811b02ebdd5c8b2195720ba6681bcf079b033e2c23581b0698cb6c63ecb56e0e4b06c0c2d35d89c3d5ecf7b3d794d5a4f4c01b28bec251b4cfad0bcd830e34d921720c088bf728069d8466eb15f0d6a", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sched_setattr(0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='oom_score_adj\x00') writev(r1, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) r2 = syz_clone(0x200000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x4206, r2) ptrace(0x4208, r2) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81802) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000140)) lsm_get_self_attr(0x64, &(0x7f0000000040)={0x0, 0x0, 0xdf, 0xbf, ""/191}, &(0x7f0000000180)=0xdf, 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r3) 0s ago: executing program 7 (id=12783): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) mq_timedsend(r0, 0x0, 0x0, 0x4, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8946, &(0x7f0000000040)={'dummy0\x00', @random='\x00\x00\x00\x00\x00 '}) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) pread64(0xffffffffffffffff, 0x0, 0x0, 0x1000000000) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x7, 0x7ff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) listxattr(0x0, 0x0, 0x0) set_mempolicy(0x4005, &(0x7f0000000080)=0x4, 0x8) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x58}}, 0x10) sendto(r3, 0x0, 0x0, 0x40008c1, 0x0, 0x0) syz_emit_ethernet(0x2a, 0x0, 0x0) pselect6(0x40, &(0x7f0000000080)={0x1ff, 0x9, 0x2, 0xfffffffffffffff9, 0x9, 0x4, 0x8, 0x1}, &(0x7f00000000c0)={0x8, 0x8, 0x8001, 0x0, 0x7, 0x6, 0xfffffffffffffffc, 0xa0000000000}, &(0x7f0000000100)={0xffffffff00000001, 0x1, 0x8, 0xfffffffffffffff9, 0x1, 0x9, 0x7ff, 0x8000000000000001}, &(0x7f0000000140)={0x0, 0x3938700}, &(0x7f00000001c0)={&(0x7f0000000180)={[0xa860]}, 0x8}) kernel console output (not intermixed with test programs): eg 1 prio class 2 [ 724.568262][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 724.568548][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 724.568603][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 724.568723][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 724.568769][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 724.568802][ T2017] ldm_validate_partition_table(): Disk read failed. [ 724.568890][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 724.568997][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 724.569220][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 724.569270][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 724.580656][ T2019] loop5: detected capacity change from 7 to 0 [ 724.672304][ T2017] Dev loop5: unable to read RDB block 0 [ 724.672340][ T2017] loop5: unable to read partition table [ 724.672517][ T2017] loop5: partition table beyond EOD, truncated [ 724.672584][ T2017] loop_reread_partitions: partition scan of loop5 (íðÉÔn/C>|¶×n˜èªÐ˨“Ò,l¤-"@Iy}˜“c¤9¬ás„GQäªa§üG%xÔ?) failed (rc=-5) [ 725.174979][ T5741] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 725.175040][ T5741] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 725.270580][ T1905] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.279895][ T5858] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 725.378919][ T5741] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000010. ret = -EPROTO [ 725.378992][ T5741] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 725.420730][ T5741] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 725.454524][ T5858] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 725.454578][ T5858] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 725.454599][ T5858] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 725.454915][ T5741] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 725.507005][ T5858] usb 3-1: config 0 descriptor?? [ 725.517185][ T5741] usb 4-1: USB disconnect, device number 97 [ 725.531689][ T5858] pwc: Askey VC010 type 2 USB webcam detected. [ 725.935314][ T5858] pwc: recv_control_msg error -32 req 02 val 2b00 [ 726.139812][ T5858] pwc: recv_control_msg error -71 req 02 val 2c00 [ 726.142066][ T5858] pwc: recv_control_msg error -71 req 04 val 1000 [ 726.142986][ T5858] pwc: recv_control_msg error -71 req 04 val 1300 [ 726.143454][ T5858] pwc: recv_control_msg error -71 req 04 val 1400 [ 726.143980][ T5858] pwc: recv_control_msg error -71 req 02 val 2000 [ 726.144531][ T5858] pwc: recv_control_msg error -71 req 02 val 2100 [ 726.144982][ T5858] pwc: recv_control_msg error -71 req 04 val 1500 [ 726.146507][ T5858] pwc: recv_control_msg error -71 req 02 val 2500 [ 726.147674][ T5858] pwc: recv_control_msg error -71 req 02 val 2400 [ 726.148129][ T5858] pwc: recv_control_msg error -71 req 02 val 2600 [ 726.148591][ T5858] pwc: recv_control_msg error -71 req 02 val 2900 [ 726.149024][ T5858] pwc: recv_control_msg error -71 req 02 val 2800 [ 726.149637][ T5858] pwc: recv_control_msg error -71 req 04 val 1100 [ 726.150260][ T5858] pwc: recv_control_msg error -71 req 04 val 1200 [ 726.270604][ T5858] pwc: Registered as video103. [ 726.275887][ T5858] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input55 [ 726.298516][ T5858] usb 3-1: USB disconnect, device number 91 [ 727.216688][ T5333] kernel read not supported for file /vga_arbiter (pid: 5333 comm: kworker/1:3) [ 727.505261][ T86] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 727.625307][T16475] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 727.794020][ T86] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 728.006648][ T66] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 728.200357][ T2178] program syz.1.10538 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 728.766753][ T2205] sg_write: data in/out 373125/136 bytes for SCSI command 0x0-- guessing data in; [ 728.766753][ T2205] program syz.2.10548 not setting count and/or reply_len properly [ 729.225466][ T2234] netlink: 76 bytes leftover after parsing attributes in process `syz.0.10558'. [ 729.409197][ T2243] veth0: entered promiscuous mode [ 729.409626][ T2243] veth0: left promiscuous mode [ 730.735936][ T2298] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10582'. [ 731.048682][ T2305] sg_write: data in/out 286720/136 bytes for SCSI command 0x0-- guessing data in; [ 731.048682][ T2305] program syz.2.10585 not setting count and/or reply_len properly [ 731.808082][ T2336] bridge0: port 2(bridge_slave_1) entered listening state [ 731.939953][ T2349] loop9: detected capacity change from 0 to 524287998 [ 732.159427][ T2362] netlink: 27 bytes leftover after parsing attributes in process `syz.3.10607'. [ 732.221429][ T4914] Bluetooth: hci4: command 0x0405 tx timeout [ 733.548249][ T2423] netlink: 'syz.1.10629': attribute type 14 has an invalid length. [ 734.678006][ T5333] hid_parser_main: 470 callbacks suppressed [ 734.678031][ T5333] hid-generic 0006:0008:0001.001E: unknown main item tag 0x0 [ 734.678061][ T5333] hid-generic 0006:0008:0001.001E: unknown main item tag 0x0 [ 734.678094][ T5333] hid-generic 0006:0008:0001.001E: unknown main item tag 0x0 [ 734.678117][ T5333] hid-generic 0006:0008:0001.001E: unknown main item tag 0x0 [ 734.678139][ T5333] hid-generic 0006:0008:0001.001E: unknown main item tag 0x0 [ 734.678162][ T5333] hid-generic 0006:0008:0001.001E: unknown main item tag 0x0 [ 734.678186][ T5333] hid-generic 0006:0008:0001.001E: unknown main item tag 0x0 [ 734.678209][ T5333] hid-generic 0006:0008:0001.001E: unknown main item tag 0x0 [ 734.678234][ T5333] hid-generic 0006:0008:0001.001E: unknown main item tag 0x0 [ 734.678259][ T5333] hid-generic 0006:0008:0001.001E: unknown main item tag 0x0 [ 734.796533][ T5333] hid-generic 0006:0008:0001.001E: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 735.805194][ T2534] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 735.942894][ T5741] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 736.101526][ T5741] usb 2-1: Using ep0 maxpacket: 32 [ 736.112744][ T5741] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 736.112770][ T5741] usb 2-1: config 0 has no interface number 0 [ 736.112811][ T5741] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 736.112835][ T5741] usb 2-1: config 0 interface 85 has no altsetting 0 [ 736.148413][ T5741] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 736.148440][ T5741] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 736.148459][ T5741] usb 2-1: Product: syz [ 736.148472][ T5741] usb 2-1: Manufacturer: syz [ 736.148485][ T5741] usb 2-1: SerialNumber: syz [ 736.168037][ T5741] usb 2-1: config 0 descriptor?? [ 736.787012][ T5741] appletouch 2-1:0.85: Geyser mode initialized. [ 736.796671][ T5741] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.85/input/input56 [ 736.996993][ T11] usb 2-1: USB disconnect, device number 104 [ 737.147763][ T11] appletouch 2-1:0.85: input: appletouch disconnected [ 737.170929][ T2602] bridge0: port 2(bridge_slave_1) entered disabled state [ 738.747116][ T2694] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 738.747147][ T2694] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 739.444144][ T2720] netlink: 'syz.6.10716': attribute type 2 has an invalid length. [ 739.444165][ T2720] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10716'. [ 740.224587][ T2765] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10730'. [ 740.224750][ T2765] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10730'. [ 740.894499][ T2792] tun0: tun_chr_ioctl cmd 1074025675 [ 740.894520][ T2792] tun0: persist disabled [ 741.044377][ T2801] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10742'. [ 741.298198][ T2816] netlink: 'syz.6.10744': attribute type 7 has an invalid length. [ 742.148559][ T2865] overlayfs: failed to create directory ./file0/work (errno: 13); mounting read-only [ 742.148583][ T2865] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 742.148784][ T2865] overlayfs: failed to get uuid (2264/file2, err=-13); falling back to uuid=null. [ 742.266380][ T2860] virt_wifi0 speed is unknown, defaulting to 1000 [ 742.286718][ T2860] wg0 speed is unknown, defaulting to 1000 [ 743.210018][ T37] kauditd_printk_skb: 15 callbacks suppressed [ 743.210037][ T37] audit: type=1326 audit(742.753:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2928 comm="syz.2.10770" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4db4aede59 code=0x7ffc0000 [ 743.247100][ T37] audit: type=1326 audit(742.753:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2928 comm="syz.2.10770" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4db4aede59 code=0x7ffc0000 [ 743.248371][ T37] audit: type=1326 audit(742.793:860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2928 comm="syz.2.10770" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f4db4aede59 code=0x7ffc0000 [ 743.248684][ T37] audit: type=1326 audit(742.793:861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2928 comm="syz.2.10770" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4db4aede59 code=0x7ffc0000 [ 743.248958][ T37] audit: type=1326 audit(742.793:862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2928 comm="syz.2.10770" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4db4aede59 code=0x7ffc0000 [ 743.347857][ T37] audit: type=1326 audit(742.793:863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2928 comm="syz.2.10770" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7f4db4aede59 code=0x7ffc0000 [ 743.347909][ T37] audit: type=1326 audit(742.793:864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2928 comm="syz.2.10770" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4db4aede59 code=0x7ffc0000 [ 743.347948][ T37] audit: type=1326 audit(742.813:865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2928 comm="syz.2.10770" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4db4aede59 code=0x7ffc0000 [ 743.347986][ T37] audit: type=1326 audit(742.813:866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2928 comm="syz.2.10770" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7f4db4aede59 code=0x7ffc0000 [ 743.348025][ T37] audit: type=1326 audit(742.813:867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2928 comm="syz.2.10770" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4db4aede59 code=0x7ffc0000 [ 744.238000][ T2960] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10781'. [ 744.270971][ T2960] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10781'. [ 745.096450][ T2985] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10791'. [ 745.584571][ T2985] veth0_macvtap: left promiscuous mode [ 745.871508][ T2985] netlink: 'syz.2.10791': attribute type 1 has an invalid length. [ 745.871531][ T2985] netlink: 'syz.2.10791': attribute type 2 has an invalid length. [ 746.059916][ T3010] loop6: detected capacity change from 0 to 524288000 [ 746.180455][ T3019] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10803'. [ 746.605564][ T3016] Invalid logical block size (255) [ 746.626857][ T3031] netlink: 'syz.0.10807': attribute type 9 has an invalid length. [ 747.619376][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.619493][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.452205][ T3105] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10837'. [ 748.595776][ T5741] hid_parser_main: 7 callbacks suppressed [ 748.595799][ T5741] hid-generic 0005:0C45:1010.001F: unknown main item tag 0x0 [ 748.595827][ T5741] hid-generic 0005:0C45:1010.001F: unknown main item tag 0x0 [ 749.186734][ T5741] hid-generic 0005:0C45:1010.001F: hidraw0: BLUETOOTH HID vc3.36 Device [syz0] on aa:aa:aa:aa:aa:aa [ 750.744310][ T3219] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10876'. [ 751.918174][ T3273] netlink: 112 bytes leftover after parsing attributes in process `syz.1.10895'. [ 752.158349][ T37] kauditd_printk_skb: 1 callbacks suppressed [ 752.158365][ T37] audit: type=1326 audit(751.703:869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3290 comm="syz.1.10902" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcc805de59 code=0x7ffc0000 [ 752.159101][ T37] audit: type=1326 audit(751.703:870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3290 comm="syz.1.10902" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcc805de59 code=0x7ffc0000 [ 752.160497][ T37] audit: type=1326 audit(751.703:871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3290 comm="syz.1.10902" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7fdcc805de59 code=0x7ffc0000 [ 752.180915][ T37] audit: type=1326 audit(751.723:872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3290 comm="syz.1.10902" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcc805de59 code=0x7ffc0000 [ 752.180970][ T37] audit: type=1326 audit(751.723:873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3290 comm="syz.1.10902" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7fdcc805de59 code=0x7ffc0000 [ 752.181010][ T37] audit: type=1326 audit(751.723:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3290 comm="syz.1.10902" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcc805de59 code=0x7ffc0000 [ 752.550977][ T5858] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 752.701665][ T5858] usb 3-1: Using ep0 maxpacket: 8 [ 752.718388][ T5858] usb 3-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 254, changing to 11 [ 752.718417][ T5858] usb 3-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 752.718441][ T5858] usb 3-1: config 0 interface 0 has no altsetting 0 [ 752.718470][ T5858] usb 3-1: New USB device found, idVendor=046d, idProduct=c626, bcdDevice= 0.00 [ 752.718488][ T5858] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 752.787497][ T5858] usb 3-1: config 0 descriptor?? [ 753.249569][ T5858] logitech 0003:046D:C626.0020: unknown main item tag 0x0 [ 753.249605][ T5858] logitech 0003:046D:C626.0020: unknown main item tag 0x0 [ 753.249630][ T5858] logitech 0003:046D:C626.0020: unknown main item tag 0x0 [ 753.249655][ T5858] logitech 0003:046D:C626.0020: unknown main item tag 0x0 [ 753.249680][ T5858] logitech 0003:046D:C626.0020: unknown main item tag 0x0 [ 753.249705][ T5858] logitech 0003:046D:C626.0020: unknown main item tag 0x0 [ 753.249730][ T5858] logitech 0003:046D:C626.0020: unknown main item tag 0x0 [ 753.249755][ T5858] logitech 0003:046D:C626.0020: unknown main item tag 0x0 [ 753.328960][ T5858] logitech 0003:046D:C626.0020: hidraw1: USB HID v0.00 Device [HID 046d:c626] on usb-dummy_hcd.2-1/input0 [ 753.426196][ T5858] usb 3-1: USB disconnect, device number 92 [ 753.455432][ T3358] program syz.6.10921 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 753.665305][ T3357] fido_id[3357]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 754.412164][ T37] audit: type=1326 audit(753.963:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3406 comm="syz.6.10937" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53c6d5de59 code=0x7ffc0000 [ 754.412217][ T37] audit: type=1326 audit(753.963:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3406 comm="syz.6.10937" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53c6d5de59 code=0x7ffc0000 [ 754.418407][ T37] audit: type=1326 audit(753.963:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3406 comm="syz.6.10937" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f53c6d5de59 code=0x7ffc0000 [ 754.418986][ T37] audit: type=1326 audit(753.963:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3406 comm="syz.6.10937" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53c6d5de59 code=0x7ffc0000 [ 757.588318][ T3509] Context (ID=0x1) not attached to queue pair (handle=0x0:0x2) [ 757.779515][ T3518] input: syz1 as /devices/virtual/input/input60 [ 759.620925][ T201] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 759.721249][ T37] kauditd_printk_skb: 6 callbacks suppressed [ 759.721265][ T37] audit: type=1326 audit(759.263:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3568 comm="syz.2.10991" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4db4aede59 code=0x0 [ 759.780973][ T201] usb 2-1: Using ep0 maxpacket: 32 [ 759.788304][ T201] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 759.788329][ T201] usb 2-1: config 0 has no interface number 0 [ 759.794628][ T201] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 759.794657][ T201] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 759.794675][ T201] usb 2-1: Product: syz [ 759.794688][ T201] usb 2-1: Manufacturer: syz [ 759.794701][ T201] usb 2-1: SerialNumber: syz [ 759.871747][ T201] usb 2-1: config 0 descriptor?? [ 759.876540][ T201] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 760.109436][ T201] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 760.139466][ T201] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 760.313519][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 100 [ 760.515514][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 760.518120][ T6293] usb 2-1: USB disconnect, device number 105 [ 760.556070][ T6293] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 760.691165][ T3597] netlink: 'syz.2.10995': attribute type 1 has an invalid length. [ 760.736228][ T6293] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 760.746334][ T6293] quatech2 2-1:0.51: device disconnected [ 761.010965][ T201] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 761.160861][ T201] usb 3-1: Using ep0 maxpacket: 32 [ 761.163541][ T201] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 761.163565][ T201] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 761.163582][ T201] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 761.163638][ T201] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 761.163657][ T201] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 761.163678][ T201] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 761.164430][ T201] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 761.164454][ T201] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 761.166124][ T3616] bond0: entered promiscuous mode [ 761.166142][ T3616] bond_slave_1: entered promiscuous mode [ 761.177060][ T3616] batadv0: entered promiscuous mode [ 761.233227][ T3616] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 761.282888][ T5741] kernel write not supported for file /admmidi2 (pid: 5741 comm: kworker/1:6) [ 761.303525][ T201] usb 3-1: config 0 descriptor?? [ 761.416936][ T3616] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 761.534646][ T3607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 761.539277][ T3607] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 761.732105][ T3637] vcan0: tx drop: invalid da for name 0x00000000000000c7 [ 761.763171][ T201] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 93 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 761.848179][ T201] usb 3-1: USB disconnect, device number 93 [ 761.872001][ T201] usblp0: removed [ 762.158103][ T3666] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11009'. [ 762.170986][ T201] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 762.311070][ T5741] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 762.320917][ T201] usb 3-1: Using ep0 maxpacket: 16 [ 762.324181][ T201] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 157 [ 762.326713][ T201] usb 3-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 762.326738][ T201] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 762.326755][ T201] usb 3-1: Product: syz [ 762.326764][ T201] usb 3-1: Manufacturer: syz [ 762.326772][ T201] usb 3-1: SerialNumber: syz [ 762.379527][ T201] usb 3-1: config 0 descriptor?? [ 762.415461][ C0] port100 3-1:0.0: NFC: Urb failure (status -71) [ 762.484511][ T5741] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 762.484536][ T5741] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 762.484553][ T5741] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 762.484571][ T5741] usb 2-1: config 220 has no interface number 2 [ 762.484636][ T5741] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 762.484660][ T5741] usb 2-1: config 220 interface 0 has no altsetting 0 [ 762.484676][ T5741] usb 2-1: config 220 interface 76 has no altsetting 0 [ 762.484692][ T5741] usb 2-1: config 220 interface 1 has no altsetting 0 [ 762.487124][ T5741] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 762.487150][ T5741] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 762.487169][ T5741] usb 2-1: Product: syz [ 762.487182][ T5741] usb 2-1: Manufacturer: syz [ 762.487195][ T5741] usb 2-1: SerialNumber: syz [ 762.590704][ C0] port100 3-1:0.0: NFC: Urb failure (status -71) [ 762.629440][ T201] port100 3-1:0.0: NFC: Could not get supported command types [ 762.656268][ T201] usb 3-1: USB disconnect, device number 94 [ 762.785742][ T5741] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 762.785776][ T5741] uvcvideo 2-1:220.0: No valid video chain found. [ 762.785832][ T5741] usb 2-1: selecting invalid altsetting 0 [ 762.903227][ T5741] usb 2-1: selecting invalid altsetting 0 [ 762.903261][ T5741] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 762.914917][ T5741] usb 2-1: USB disconnect, device number 106 [ 763.059459][ T3702] program syz.6.11014 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 763.750520][ T3735] input: syz0 as /devices/virtual/input/input61 [ 764.144127][ T3757] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11035'. [ 764.438729][ T3760] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 765.734075][ T11] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 765.761183][ T5636] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 765.909098][ T11] usb 4-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 765.909126][ T11] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 765.909142][ T11] usb 4-1: Product: syz [ 765.909155][ T11] usb 4-1: Manufacturer: syz [ 765.909167][ T11] usb 4-1: SerialNumber: syz [ 765.921280][ T5636] usb 3-1: Using ep0 maxpacket: 32 [ 765.925149][ T5636] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 765.925173][ T5636] usb 3-1: config 0 has no interface number 0 [ 765.925214][ T5636] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 765.925238][ T5636] usb 3-1: config 0 interface 85 has no altsetting 0 [ 765.928961][ T5636] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 765.928986][ T5636] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 765.929003][ T5636] usb 3-1: Product: syz [ 765.929015][ T5636] usb 3-1: Manufacturer: syz [ 765.929028][ T5636] usb 3-1: SerialNumber: syz [ 765.947517][ T5636] usb 3-1: config 0 descriptor?? [ 766.037973][ T11] usb 4-1: config 0 descriptor?? [ 766.266597][ T11] usb 4-1: ignoring: probably an ADSL modem [ 766.597826][ T5636] appletouch 3-1:0.85: Geyser mode initialized. [ 766.602264][ T5636] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input62 [ 766.680596][ T11] cxacru 4-1:0.0: usbatm_usb_probe: bind failed: -19! [ 766.807759][ T11] usb 3-1: USB disconnect, device number 95 [ 766.898679][ T5858] usb 4-1: USB disconnect, device number 98 [ 767.339083][ T11] appletouch 3-1:0.85: input: appletouch disconnected [ 767.911554][ T6293] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 768.064465][ T6293] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 768.064495][ T6293] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 768.075419][ T6293] usb 4-1: config 0 descriptor?? [ 768.098711][ T6293] cp210x 4-1:0.0: cp210x converter detected [ 768.467777][ T3931] gtp1: entered promiscuous mode [ 768.467801][ T3931] gtp1: entered allmulticast mode [ 768.495015][ T6293] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 768.752359][ T6293] usb 4-1: cp210x converter now attached to ttyUSB0 [ 768.766913][ T6293] usb 4-1: USB disconnect, device number 99 [ 768.780135][ T6293] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 768.915083][ T3812] syz.1.11057 (3812): drop_caches: 2 [ 769.069864][ T6293] cp210x 4-1:0.0: device disconnected [ 769.124685][ T3965] netlink: 48 bytes leftover after parsing attributes in process `syz.1.11087'. [ 769.364270][ T3970] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 769.487124][ T3963] nbd: socks must be embedded in a SOCK_ITEM attr [ 769.519458][ T3963] block nbd0: shutting down sockets [ 769.555885][ T3983] netlink: 'syz.0.11094': attribute type 32 has an invalid length. [ 769.555907][ T3983] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11094'. [ 769.779578][ T3983] bond4: option coupled_control: invalid value (10) [ 769.819889][ T3983] bond4 (unregistering): Released all slaves [ 770.047874][ T4062] program syz.6.11100 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 770.752468][ T4089] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11110'. [ 771.095244][ T4104] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 771.278357][ T4115] netlink: 'syz.3.11120': attribute type 8 has an invalid length. [ 771.278783][ T4115] sch_fq: defrate 0 ignored. [ 771.464260][ T4133] netlink: 'syz.6.11125': attribute type 1 has an invalid length. [ 771.464365][ T4133] netlink: 208 bytes leftover after parsing attributes in process `syz.6.11125'. [ 771.641111][ T5636] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 771.803638][ T5636] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 771.803685][ T5636] usb 4-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00 [ 771.803706][ T5636] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 771.814663][ T5636] usb 4-1: config 0 descriptor?? [ 771.816814][ T4125] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 772.249948][ T5636] asus 0003:0B05:1ABE.0021: unknown main item tag 0x0 [ 772.249982][ T5636] asus 0003:0B05:1ABE.0021: unknown main item tag 0x0 [ 772.250008][ T5636] asus 0003:0B05:1ABE.0021: unknown main item tag 0x0 [ 772.250034][ T5636] asus 0003:0B05:1ABE.0021: unknown main item tag 0x0 [ 772.250059][ T5636] asus 0003:0B05:1ABE.0021: unknown main item tag 0x0 [ 772.250084][ T5636] asus 0003:0B05:1ABE.0021: unknown main item tag 0x0 [ 772.250110][ T5636] asus 0003:0B05:1ABE.0021: unknown main item tag 0x0 [ 772.250135][ T5636] asus 0003:0B05:1ABE.0021: unknown main item tag 0x0 [ 772.252828][ T5636] asus 0003:0B05:1ABE.0021: unknown main item tag 0x0 [ 772.252863][ T5636] asus 0003:0B05:1ABE.0021: unknown main item tag 0x0 [ 772.266659][ T5636] asus 0003:0B05:1ABE.0021: unexpected long global item [ 772.269025][ T5636] asus 0003:0B05:1ABE.0021: Asus hid parse failed: -22 [ 772.269138][ T5636] asus 0003:0B05:1ABE.0021: probe with driver asus failed with error -22 [ 772.470091][ T5636] usb 4-1: USB disconnect, device number 100 [ 773.137347][ T5741] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 773.286632][ T5741] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 773.286650][ T5741] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 773.286660][ T5741] usb 2-1: Product: syz [ 773.286667][ T5741] usb 2-1: Manufacturer: syz [ 773.286675][ T5741] usb 2-1: SerialNumber: syz [ 773.297100][ T5741] usb 2-1: config 0 descriptor?? [ 773.320657][ T5741] ch341 2-1:0.0: ch341-uart converter detected [ 773.940903][ T11] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 774.091063][ T11] usb 4-1: Using ep0 maxpacket: 32 [ 774.093336][ T11] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 774.093364][ T11] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 774.093411][ T11] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 774.093432][ T11] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 774.138189][ T11] usb 4-1: config 0 descriptor?? [ 774.143522][ T5741] usb 2-1: failed to send control message: -71 [ 774.143579][ T5741] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 774.169261][ T11] hub 4-1:0.0: USB hub found [ 774.171620][ T5741] usb 2-1: USB disconnect, device number 107 [ 774.195664][ T5741] ch341 2-1:0.0: device disconnected [ 774.378329][ T11] hub 4-1:0.0: 3 ports detected [ 774.597943][ T11] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 774.597969][ T11] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 774.621030][ T11] usbhid 4-1:0.0: can't add hid device: -71 [ 774.621136][ T11] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 774.645565][ T11] usb 4-1: USB disconnect, device number 101 [ 776.253793][ T4327] program syz.0.11186 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 777.005889][ T4352] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11196'. [ 777.007215][ T4353] program syz.0.11197 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 777.009364][ T4352] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11196'. [ 777.548384][ T4389] netlink: 'syz.6.11210': attribute type 29 has an invalid length. [ 777.565225][ T4389] netlink: 'syz.6.11210': attribute type 29 has an invalid length. [ 777.600251][ T4386] vlan3: entered promiscuous mode [ 777.600274][ T4386] macvlan1: entered promiscuous mode [ 777.626475][ T4393] netlink: 'syz.6.11210': attribute type 29 has an invalid length. [ 777.845127][ T4401] netlink: 'syz.6.11214': attribute type 4 has an invalid length. [ 778.445780][ T4435] program syz.6.11226 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 778.518193][ T4439] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11228'. [ 778.518228][ T4439] netlink: 'syz.0.11228': attribute type 7 has an invalid length. [ 778.518240][ T4439] netlink: 'syz.0.11228': attribute type 8 has an invalid length. [ 778.518252][ T4439] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11228'. [ 778.591133][ T4439] gretap0: entered promiscuous mode [ 778.595124][ T4439] gretap0: left promiscuous mode [ 779.009293][ T4457] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 779.761400][ T4497] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 779.800583][ T4497] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 780.266040][ T4520] program syz.3.11259 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 780.616392][ T201] kernel write not supported for file /bluetooth/6lowpan_control (pid: 201 comm: kworker/0:2) [ 781.019376][ T4552] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11271'. [ 781.039982][ T4554] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11272'. [ 782.580951][ T5636] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 782.743710][ T5636] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 782.743740][ T5636] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 782.743764][ T5636] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 782.747120][ T5636] usb 4-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 782.747147][ T5636] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 782.747165][ T5636] usb 4-1: Product: syz [ 782.747178][ T5636] usb 4-1: Manufacturer: syz [ 782.747190][ T5636] usb 4-1: SerialNumber: syz [ 782.818615][ T5636] usb 4-1: config 0 descriptor?? [ 785.178677][ T4675] netlink: 'syz.6.11313': attribute type 12 has an invalid length. [ 785.178699][ T4675] netlink: 'syz.6.11313': attribute type 3 has an invalid length. [ 785.179207][ T4675] netlink: 136 bytes leftover after parsing attributes in process `syz.6.11313'. [ 785.365059][ T4681] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11316'. [ 785.987849][ T4700] sctp: [Deprecated]: syz.1.11324 (pid 4700) Use of struct sctp_assoc_value in delayed_ack socket option. [ 785.987849][ T4700] Use struct sctp_sack_info instead [ 787.409042][ T4744] loop8: detected capacity change from 0 to 7 [ 787.518812][ T4744] Dev loop8: unable to read RDB block 7 [ 787.518861][ T4744] loop8: unable to read partition table [ 787.519217][ T4744] loop8: partition table beyond EOD, truncated [ 787.519624][ T4744] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 788.989721][ T4787] batadv_slave_0: entered promiscuous mode [ 789.018530][ T4786] batadv_slave_0: left promiscuous mode [ 789.673895][ T4802] tipc: Enabled bearer , priority 10 [ 791.777723][ T4877] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11392'. [ 791.845508][ T4878] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11392'. [ 792.036828][ T4881] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11393'. [ 792.040113][ T4881] netlink: 64 bytes leftover after parsing attributes in process `syz.6.11393'. [ 793.030685][ T4924] netlink: 'syz.6.11406': attribute type 4 has an invalid length. [ 793.103566][ T4929] Bluetooth: MGMT ver 1.23 [ 793.850083][ T4958] pim6reg0: tun_chr_ioctl cmd 1074025680 [ 796.157063][ T5018] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11438'. [ 796.916702][ T37] audit: type=1326 audit(796.463:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5030 comm="syz.1.11444" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcc805de59 code=0x7ffc0000 [ 796.916777][ T37] audit: type=1326 audit(796.463:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5030 comm="syz.1.11444" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcc805de59 code=0x7ffc0000 [ 796.928144][ T37] audit: type=1326 audit(796.473:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5030 comm="syz.1.11444" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcc805de59 code=0x7ffc0000 [ 796.930366][ T37] audit: type=1326 audit(796.473:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5030 comm="syz.1.11444" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=128 compat=0 ip=0x7fdcc805de59 code=0x7ffc0000 [ 796.930411][ T37] audit: type=1326 audit(796.473:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5030 comm="syz.1.11444" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcc805de59 code=0x7ffc0000 [ 796.930449][ T37] audit: type=1326 audit(796.473:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5030 comm="syz.1.11444" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcc805de59 code=0x7ffc0000 [ 796.930488][ T37] audit: type=1326 audit(796.473:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5030 comm="syz.1.11444" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcc805de59 code=0x7ffc0000 [ 796.933833][ T37] audit: type=1326 audit(796.483:893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5030 comm="syz.1.11444" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcc805de59 code=0x7ffc0000 [ 796.933878][ T37] audit: type=1326 audit(796.483:894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5030 comm="syz.1.11444" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcc805de59 code=0x7ffc0000 [ 796.935101][ T37] audit: type=1326 audit(796.483:895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5030 comm="syz.1.11444" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fdcc805de59 code=0x7ffc0000 [ 797.378947][ T5053] sctp: [Deprecated]: syz.2.11452 (pid 5053) Use of int in maxseg socket option. [ 797.378947][ T5053] Use struct sctp_assoc_value instead [ 797.455741][ T5057] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11454'. [ 797.549522][ T5059] program syz.0.11455 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 798.847253][ T5104] syz_tun: left promiscuous mode [ 798.866898][ T5104] team0: left promiscuous mode [ 798.866920][ T5104] team_slave_0: left promiscuous mode [ 798.867047][ T5104] team_slave_1: left promiscuous mode [ 798.895976][ T5104] 8021q: adding VLAN 0 to HW filter on device team0 [ 798.948553][ T5104] bridge_slave_1: entered promiscuous mode [ 799.054820][ T5111] sctp: [Deprecated]: syz.6.11477 (pid 5111) Use of struct sctp_assoc_value in delayed_ack socket option. [ 799.054820][ T5111] Use struct sctp_sack_info instead [ 799.078500][ T5104] veth1_to_hsr: left promiscuous mode [ 799.251360][ T5104] vlan0: left promiscuous mode [ 799.483116][ T5104] tipc: Resetting bearer [ 799.798162][ T5104] veth0_macvtap: entered promiscuous mode [ 799.852835][ T5104] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 799.908587][ T5132] netlink: 68 bytes leftover after parsing attributes in process `syz.6.11487'. [ 800.147199][ T5104] 8021q: adding VLAN 0 to HW filter on device bond1 [ 800.237000][ T5104] 8021q: adding VLAN 0 to HW filter on device bond2 [ 800.248358][ T5104] bridge4: left promiscuous mode [ 800.399088][ T5104] bridge8: left promiscuous mode [ 800.406935][ T5104] 8021q: adding VLAN 0 to HW filter on device bond3 [ 800.520250][ T5104] vlan2: left promiscuous mode [ 800.520434][ T5104] bridge0: left promiscuous mode [ 800.575288][ T5104] geneve3: left promiscuous mode [ 800.579788][ T5104] vlan3: left promiscuous mode [ 800.579813][ T5104] macvlan1: left promiscuous mode [ 801.865706][ T5178] trusted_key: syz.0.11504 sent an empty control message without MSG_MORE. [ 803.271741][ T5636] iguanair 4-1:0.0: failed to get version [ 803.272148][ T5636] iguanair 4-1:0.0: probe with driver iguanair failed with error -110 [ 803.321021][ T5636] usb 4-1: USB disconnect, device number 102 [ 803.765681][ T5250] 9pnet: p9_errstr2errno: server reported unknown error [ 804.004263][ T5273] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11535'. [ 806.781483][ T5741] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 806.964912][ T5741] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 806.964938][ T5741] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 806.966377][ T5741] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 806.966406][ T5741] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 806.966425][ T5741] usb 4-1: SerialNumber: syz [ 807.306058][ T5741] usb 4-1: 0:2 : does not exist [ 807.725075][ T5741] usb 4-1: USB disconnect, device number 103 [ 807.971497][ T5384] udevd[5384]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 808.132867][ T5460] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11564'. [ 808.388505][ T5473] syz_tun: entered allmulticast mode [ 808.491844][ T5473] pim6reg: entered allmulticast mode [ 809.024372][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.024439][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.839027][ T5561] loop8: detected capacity change from 0 to 8 [ 809.921662][ T5561] Dev loop8: unable to read RDB block 8 [ 809.921728][ T5561] loop8: unable to read partition table [ 809.921931][ T5561] loop8: partition table beyond EOD, truncated [ 809.921964][ T5561] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 810.035356][ T5566] kvm: user requested TSC rate below hardware speed [ 810.349332][ T5591] netlink: 84 bytes leftover after parsing attributes in process `syz.1.11590'. [ 810.483471][ T5600] bridge0: port 3(erspan0) entered blocking state [ 810.483667][ T5600] bridge0: port 3(erspan0) entered disabled state [ 810.483867][ T5600] erspan0: entered allmulticast mode [ 810.517354][ T5600] erspan0: entered promiscuous mode [ 810.626153][ T5600] bridge0: port 3(erspan0) entered blocking state [ 810.626357][ T5600] bridge0: port 3(erspan0) entered forwarding state [ 811.002470][ T5636] usb 3-1: new full-speed USB device number 96 using dummy_hcd [ 811.230874][ T5636] usb 3-1: config 0 has an invalid interface number: 214 but max is 0 [ 811.230899][ T5636] usb 3-1: config 0 has no interface number 0 [ 811.230940][ T5636] usb 3-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 811.230962][ T5636] usb 3-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 811.232626][ T5636] usb 3-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 811.232645][ T5636] usb 3-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 811.232656][ T5636] usb 3-1: Manufacturer: syz [ 811.232664][ T5636] usb 3-1: SerialNumber: syz [ 811.240110][ T5636] usb 3-1: config 0 descriptor?? [ 812.562194][ T5636] input: syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.214/input/input64 [ 813.229541][ T5858] usb 3-1: USB disconnect, device number 96 [ 813.545705][T16481] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 814.039774][ T4914] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 814.146618][ T4914] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 814.175473][ T4914] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 814.215314][ T4914] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 814.243241][ T4914] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 815.071227][T16481] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 815.577395][T16481] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 815.715997][ T5700] virt_wifi0 speed is unknown, defaulting to 1000 [ 815.719325][ T5700] wg0 speed is unknown, defaulting to 1000 [ 815.956405][T16481] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 816.461232][ T4914] Bluetooth: hci5: command tx timeout [ 816.558477][ T5637] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 818.049856][ T5920] overlayfs: invalid origin (00000079007a6b616c6c657231000000000000328c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 818.541610][ T5637] Bluetooth: hci5: command tx timeout [ 818.780040][ T5700] bridge0: port 1(bridge_slave_0) entered blocking state [ 818.780397][ T5700] bridge0: port 1(bridge_slave_0) entered disabled state [ 818.780638][ T5700] bridge_slave_0: entered allmulticast mode [ 818.815812][ T5700] bridge_slave_0: entered promiscuous mode [ 819.060261][ T5700] bridge0: port 2(bridge_slave_1) entered blocking state [ 819.060465][ T5700] bridge0: port 2(bridge_slave_1) entered disabled state [ 819.060706][ T5700] bridge_slave_1: entered allmulticast mode [ 819.072070][ T5700] bridge_slave_1: entered promiscuous mode [ 819.403972][ T5700] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 819.537114][ T5700] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 819.812435][T16481] erspan0: left allmulticast mode [ 819.812481][T16481] erspan0: left promiscuous mode [ 819.812739][T16481] bridge0: port 3(erspan0) entered disabled state [ 820.107768][T16481] bridge_slave_1: left allmulticast mode [ 820.107802][T16481] bridge_slave_1: left promiscuous mode [ 820.108704][T16481] bridge0: port 2(bridge_slave_1) entered disabled state [ 820.276334][T16481] bridge_slave_0: left allmulticast mode [ 820.276369][T16481] bridge_slave_0: left promiscuous mode [ 820.276609][T16481] bridge0: port 1(bridge_slave_0) entered disabled state [ 820.621212][ T5637] Bluetooth: hci5: command tx timeout [ 821.981041][ T1906] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 822.180915][ T1906] usb 4-1: Using ep0 maxpacket: 16 [ 822.186534][ T1906] usb 4-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 822.186568][ T1906] usb 4-1: New USB device strings: Mfr=1, Product=6, SerialNumber=3 [ 822.186586][ T1906] usb 4-1: Product: syz [ 822.186597][ T1906] usb 4-1: Manufacturer: syz [ 822.186609][ T1906] usb 4-1: SerialNumber: syz [ 822.233532][ T1906] usb 4-1: config 0 descriptor?? [ 822.248311][ T1906] ums-onetouch 4-1:0.0: USB Mass Storage device detected [ 822.509444][ T1906] usb 4-1: USB disconnect, device number 104 [ 822.576697][ T6063] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11675'. [ 822.701045][ T5637] Bluetooth: hci5: command tx timeout [ 823.732981][T16481] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 823.811650][T16481] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 823.856852][T16481] bond0 (unregistering): Released all slaves [ 823.870419][T16481] bond1 (unregistering): Released all slaves [ 823.888519][T16481] bond2 (unregistering): Released all slaves [ 823.908875][T16481] bond3 (unregistering): Released all slaves [ 823.928716][T16481] bond4 (unregistering): Released all slaves [ 823.952833][T16481] bond5 (unregistering): Released all slaves [ 824.051362][ T5260] 8021q: adding VLAN 0 to HW filter on device eth9 [ 824.391798][ T5700] team0: Port device team_slave_0 added [ 824.405691][ T5700] team0: Port device team_slave_1 added [ 824.757261][ T5700] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 824.757277][ T5700] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 824.757299][ T5700] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 824.760558][ T5700] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 824.760571][ T5700] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 824.760592][ T5700] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 825.075285][ T5700] hsr_slave_0: entered promiscuous mode [ 825.076644][ T5700] hsr_slave_1: entered promiscuous mode [ 825.077580][ T5700] debugfs: 'hsr0' already exists in 'hsr' [ 825.077602][ T5700] Cannot create hsr debugfs directory [ 825.080924][ T36] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 825.271242][ T36] usb 4-1: Using ep0 maxpacket: 16 [ 825.276955][ T36] usb 4-1: config 3 has an invalid interface number: 20 but max is 0 [ 825.276982][ T36] usb 4-1: config 3 has no interface number 0 [ 825.277011][ T36] usb 4-1: config 3 interface 20 has no altsetting 0 [ 825.285105][ T36] usb 4-1: New USB device found, idVendor=05ac, idProduct=0246, bcdDevice=27.b1 [ 825.285133][ T36] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 825.285150][ T36] usb 4-1: Product: syz [ 825.285163][ T36] usb 4-1: Manufacturer: syz [ 825.285176][ T36] usb 4-1: SerialNumber: syz [ 825.543588][ T6151] loop5: detected capacity change from 0 to 7 [ 826.046579][ T6151] Dev loop5: unable to read RDB block 7 [ 826.046629][ T6151] loop5: unable to read partition table [ 826.046832][ T6151] loop5: partition table beyond EOD, truncated [ 826.046865][ T6151] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 826.168409][ T36] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:3.20/input/input66 [ 826.271628][ T4950] bcm5974 4-1:3.20: could not read from device [ 826.384866][ T36] usb 4-1: USB disconnect, device number 105 [ 827.060422][ T6318] loop8: detected capacity change from 0 to 7 [ 827.102805][ T6318] Dev loop8: unable to read RDB block 7 [ 827.102856][ T6318] loop8: unable to read partition table [ 827.103061][ T6318] loop8: partition table beyond EOD, truncated [ 827.103093][ T6318] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 827.247115][ T6327] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11706'. [ 827.416174][ T5260] 8021q: adding VLAN 0 to HW filter on device eth10 [ 827.980241][ T5637] block nbd0: Receive control failed (result -107) [ 828.220296][ T5700] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 828.275494][ T5700] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 828.340351][ T5700] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 828.578339][ T5700] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 828.590346][ T5700] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 828.692330][ T5700] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 829.118163][ T5700] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 829.160990][ T5700] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 829.547353][ T6422] loop5: detected capacity change from 0 to 6 [ 829.549501][ T6422] Dev loop5: unable to read RDB block 6 [ 829.549538][ T6422] loop5: AHDI p1 p2 [ 829.549559][ T6422] loop5: partition table partially beyond EOD, truncated [ 829.549854][ T6422] loop5: p1 start 1702059890 is beyond EOD, truncated [ 829.747543][ T5260] 8021q: adding VLAN 0 to HW filter on device eth11 [ 830.134678][ T5700] 8021q: adding VLAN 0 to HW filter on device bond0 [ 830.396874][ T5700] 8021q: adding VLAN 0 to HW filter on device team0 [ 830.525697][ T157] bridge0: port 1(bridge_slave_0) entered blocking state [ 830.527658][ T157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 830.575783][ T3378] bridge0: port 2(bridge_slave_1) entered blocking state [ 830.578146][ T3378] bridge0: port 2(bridge_slave_1) entered forwarding state [ 830.851126][T16481] hsr_slave_0: left promiscuous mode [ 830.892352][T16481] hsr_slave_1: left promiscuous mode [ 830.893555][T16481] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 830.893578][T16481] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 830.964290][T16481] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 830.964309][T16481] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 831.160704][T16481] veth1_macvtap: left promiscuous mode [ 831.160909][T16481] veth0_macvtap: left promiscuous mode [ 832.591467][T16481] team0 (unregistering): Port device team_slave_1 removed [ 832.932351][T16481] team0 (unregistering): Port device team_slave_0 removed [ 833.397645][ T5260] 8021q: adding VLAN 0 to HW filter on device eth12 [ 833.798238][ T6527] Invalid argument reading file caps for ./file0 [ 836.131477][T16481] IPVS: stop unused estimator thread 0... [ 836.642148][ T6593] program syz.3.11781 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 837.281583][ T5700] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 837.924446][ T4914] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 837.974130][ T4914] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 838.013293][ T4914] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 838.038944][ T4914] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 838.058219][ T4914] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 838.495185][T16481] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 839.227798][ T5700] veth0_vlan: entered promiscuous mode [ 839.258696][ T5700] veth1_vlan: entered promiscuous mode [ 839.336391][ T6632] virt_wifi0 speed is unknown, defaulting to 1000 [ 839.400228][ T6684] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11805'. [ 839.400260][ T6684] netlink: 'syz.0.11805': attribute type 30 has an invalid length. [ 839.453559][ T6685] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11805'. [ 839.453580][ T6685] netlink: 'syz.0.11805': attribute type 30 has an invalid length. [ 839.635111][T16481] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 839.798175][ T6632] wg0 speed is unknown, defaulting to 1000 [ 839.821963][ T6684] vxlan0: entered promiscuous mode [ 839.821985][ T6684] vxlan0: entered allmulticast mode [ 839.951593][ T6685] vxlan1: entered promiscuous mode [ 839.951609][ T6685] vxlan1: entered allmulticast mode [ 840.112437][ T3378] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 840.130554][ T3378] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 840.208219][ T3378] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 840.380923][ T5637] Bluetooth: hci0: command tx timeout [ 840.756297][ T6705] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input67 [ 840.855472][T16481] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 841.047927][ T3378] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 841.598422][T16481] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 841.673447][ T6735] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11815'. [ 841.731208][ T5700] veth0_macvtap: entered promiscuous mode [ 841.755754][ T5700] veth1_macvtap: entered promiscuous mode [ 841.942703][ T5700] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 841.980713][ T5700] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 842.075838][ T3378] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 842.076753][ T3378] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 842.076795][ T3378] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 842.076826][ T3378] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 842.462627][ T5637] Bluetooth: hci0: command tx timeout [ 842.491681][ C1] vxcan1: j1939_tp_rxtimer: 0xffff8880257c6800: rx timeout, send abort [ 842.504507][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff8880257c6800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 844.549933][ T5637] Bluetooth: hci0: command tx timeout [ 844.708410][ T37] kauditd_printk_skb: 9 callbacks suppressed [ 844.708427][ T37] audit: type=1326 audit(844.253:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6837 comm="syz.0.11829" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e284dde59 code=0x7ffc0000 [ 844.708468][ T37] audit: type=1326 audit(844.253:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6837 comm="syz.0.11829" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e284dde59 code=0x7ffc0000 [ 844.795995][ T37] audit: type=1326 audit(844.333:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6837 comm="syz.0.11829" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f3e284dde59 code=0x7ffc0000 [ 844.796050][ T37] audit: type=1326 audit(844.333:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6837 comm="syz.0.11829" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e284dde59 code=0x7ffc0000 [ 844.796093][ T37] audit: type=1326 audit(844.333:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6837 comm="syz.0.11829" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e284dde59 code=0x7ffc0000 [ 844.803698][ C0] vcan0: j1939_tp_rxtimer: 0xffff888030d43000: rx timeout, send abort [ 844.803991][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888030d43000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 846.168414][ T6632] bridge0: port 1(bridge_slave_0) entered blocking state [ 846.168535][ T6632] bridge0: port 1(bridge_slave_0) entered disabled state [ 846.168771][ T6632] bridge_slave_0: entered allmulticast mode [ 846.179509][ T6632] bridge_slave_0: entered promiscuous mode [ 846.268106][ T6632] bridge0: port 2(bridge_slave_1) entered blocking state [ 846.268224][ T6632] bridge0: port 2(bridge_slave_1) entered disabled state [ 846.268451][ T6632] bridge_slave_1: entered allmulticast mode [ 846.326090][ T6632] bridge_slave_1: entered promiscuous mode [ 846.621063][ T5637] Bluetooth: hci0: command tx timeout [ 846.721982][ T1181] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 846.722002][ T1181] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 846.805787][ T6632] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 846.988935][T16481] bridge_slave_1: left allmulticast mode [ 846.988970][T16481] bridge_slave_1: left promiscuous mode [ 846.989225][T16481] bridge0: port 2(bridge_slave_1) entered disabled state [ 847.532862][T16481] bridge_slave_0: left allmulticast mode [ 847.532897][T16481] bridge_slave_0: left promiscuous mode [ 847.533146][T16481] bridge0: port 1(bridge_slave_0) entered disabled state [ 849.301563][T16481] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 849.383199][T16481] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 849.423203][T16481] bond0 (unregistering): Released all slaves [ 849.465955][ T6632] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 849.466268][ T6905] pim6reg1: entered promiscuous mode [ 849.466282][ T6905] pim6reg1: entered allmulticast mode [ 849.611669][ T5260] 8021q: adding VLAN 0 to HW filter on device eth13 [ 850.457452][ T6980] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11848'. [ 850.815537][ T6632] team0: Port device team_slave_0 added [ 851.127879][ T86] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 851.127899][ T86] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 851.129324][ T6632] team0: Port device team_slave_1 added [ 851.130252][ T7005] wlan0 speed is unknown, defaulting to 1000 [ 851.647669][ T7005] wlan0 speed is unknown, defaulting to 1000 [ 851.714147][ T7005] wlan0 speed is unknown, defaulting to 1000 [ 851.735948][ T7005] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 851.735980][ T7005] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 851.736018][ T7005] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 851.798680][ T7005] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 851.842481][ T6632] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 851.842508][ T6632] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 851.842527][ T6632] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 851.929609][ T6632] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 851.929625][ T6632] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 851.929649][ T6632] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 852.167428][ T6632] hsr_slave_0: entered promiscuous mode [ 852.168276][ T6632] hsr_slave_1: entered promiscuous mode [ 852.168824][ T6632] debugfs: 'hsr0' already exists in 'hsr' [ 852.168842][ T6632] Cannot create hsr debugfs directory [ 852.309344][ T7005] wlan0 speed is unknown, defaulting to 1000 [ 852.355212][ T7005] wlan0 speed is unknown, defaulting to 1000 [ 852.586958][ T7005] wlan0 speed is unknown, defaulting to 1000 [ 852.621069][ T7005] wlan0 speed is unknown, defaulting to 1000 [ 852.669903][ T7005] wlan0 speed is unknown, defaulting to 1000 [ 852.748160][ T7005] wlan0 speed is unknown, defaulting to 1000 [ 853.453577][T16481] hsr_slave_0: left promiscuous mode [ 853.535517][T16481] hsr_slave_1: left promiscuous mode [ 853.583511][T16481] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 853.583541][T16481] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 853.646799][T16481] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 853.646825][T16481] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 853.812161][ T7166] input: syz0 as /devices/virtual/input/input68 [ 853.990374][T16481] veth1_macvtap: left promiscuous mode [ 854.004626][T16481] veth0_macvtap: left promiscuous mode [ 854.004904][T16481] veth1_vlan: left promiscuous mode [ 854.005020][T16481] veth0_vlan: left promiscuous mode [ 854.552653][ T7191] netlink: 104 bytes leftover after parsing attributes in process `syz.0.11870'. [ 856.045794][T16481] team0 (unregistering): Port device team_slave_1 removed [ 856.101733][T16481] team0 (unregistering): Port device team_slave_0 removed [ 856.510861][ T5260] 8021q: adding VLAN 0 to HW filter on device eth14 [ 857.828989][ T7279] gretap0: left promiscuous mode [ 857.970204][ T7285] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 858.026753][ T7279] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 858.029461][ T7279] bond1: left promiscuous mode [ 858.029623][ T7279] vxcan3: left promiscuous mode [ 858.030326][ T7279] bridge1: left promiscuous mode [ 858.422172][ T6632] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 858.688559][ T6632] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 858.731781][ T6632] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 858.999988][ T6632] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 859.016454][ T6632] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 859.311163][ T6632] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 859.330710][ T6632] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 859.499646][ T6632] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 859.966374][T16481] IPVS: stop unused estimator thread 0... [ 859.970388][ T6632] 8021q: adding VLAN 0 to HW filter on device bond0 [ 860.069957][ T6632] 8021q: adding VLAN 0 to HW filter on device team0 [ 860.193531][ T3378] bridge0: port 1(bridge_slave_0) entered blocking state [ 860.208745][ T3378] bridge0: port 1(bridge_slave_0) entered forwarding state [ 860.334635][ T4318] bridge0: port 2(bridge_slave_1) entered blocking state [ 860.334710][ T4318] bridge0: port 2(bridge_slave_1) entered forwarding state [ 862.101893][ T7396] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11911'. [ 862.705859][ T6632] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 863.218508][ T7426] netlink: 'syz.2.11898': attribute type 12 has an invalid length. [ 863.218541][ T7426] netlink: 'syz.2.11898': attribute type 29 has an invalid length. [ 863.218553][ T7426] netlink: 148 bytes leftover after parsing attributes in process `syz.2.11898'. [ 863.218575][ T7426] netlink: 'syz.2.11898': attribute type 1 has an invalid length. [ 863.218588][ T7426] netlink: 47 bytes leftover after parsing attributes in process `syz.2.11898'. [ 864.329160][ T6632] veth0_vlan: entered promiscuous mode [ 864.372879][ T6632] veth1_vlan: entered promiscuous mode [ 864.602823][ T6632] veth0_macvtap: entered promiscuous mode [ 864.652564][ T6632] veth1_macvtap: entered promiscuous mode [ 864.783404][ T6632] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 864.897166][ T6632] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 864.935320][ T2414] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 864.935796][ T2414] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 865.006633][ T4318] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 865.009569][ T4318] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 867.735289][ T7508] block device autoloading is deprecated and will be removed. [ 868.114772][ T5260] 8021q: adding VLAN 0 to HW filter on device eth15 [ 868.209574][ T7277] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 868.209600][ T7277] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 868.377379][T16481] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 868.377399][T16481] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 868.985766][ T7585] netlink: 'syz.2.11947': attribute type 10 has an invalid length. [ 869.072079][ T7585] syz_tun: entered promiscuous mode [ 869.339649][ T7605] ip6erspan0: entered allmulticast mode [ 869.394395][ T5260] 8021q: adding VLAN 0 to HW filter on device eth16 [ 869.722804][ T7625] netlink: 4 bytes leftover after parsing attributes in process `syz.8.11957'. [ 870.421104][ T36] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 870.464236][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.464306][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.581063][ T36] usb 3-1: Using ep0 maxpacket: 32 [ 870.589294][ T36] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 870.589325][ T36] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 870.589347][ T36] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 870.589367][ T36] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 870.589390][ T36] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 870.604306][ T36] usb 3-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 870.604334][ T36] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 870.604351][ T36] usb 3-1: Product: syz [ 870.604363][ T36] usb 3-1: Manufacturer: syz [ 870.604428][ T36] usb 3-1: SerialNumber: syz [ 870.615400][ T36] usb 3-1: config 0 descriptor?? [ 871.112675][ T7675] sg_write: data in/out 503296/136 bytes for SCSI command 0x0-- guessing data in; [ 871.112675][ T7675] program syz.0.11967 not setting count and/or reply_len properly [ 871.431103][ T5741] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 871.560697][ T36] iforce 3-1:0.0: usb_submit_urb failed: -32 [ 871.561928][ T36] input input69: Device does not respond to id packet M [ 871.594225][ T5741] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 871.594259][ T5741] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 871.594332][ T5741] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 871.594371][ T5741] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 871.594393][ T5741] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 871.644028][ T5741] usb 4-1: config 0 descriptor?? [ 871.941756][ T36] iforce 3-1:0.0: usb_submit_urb failed: -32 [ 871.941808][ T36] input input69: Device does not respond to id packet P [ 871.943755][ T36] iforce 3-1:0.0: usb_submit_urb failed: -32 [ 871.943851][ T36] input input69: Device does not respond to id packet B [ 871.944542][ T36] input input69: Device does not respond to id packet N [ 872.376188][ T36] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 872.376631][ T36] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 872.377059][ T36] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 872.386153][ T36] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 872.539717][ T36] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input69 [ 872.698144][ T36] usb 3-1: USB disconnect, device number 97 [ 873.227962][ T5741] plantronics 0003:047F:FFFF.0022: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 873.260165][ T5741] usb 4-1: USB disconnect, device number 106 [ 873.898025][ T7742] fido_id[7742]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 874.690928][ T7689] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 874.863036][ T7689] usb 4-1: Using ep0 maxpacket: 16 [ 874.892284][ T7689] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 874.892308][ T7689] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 874.897837][ T7689] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 874.897944][ T7689] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 874.897964][ T7689] usb 4-1: Product: syz [ 874.897977][ T7689] usb 4-1: Manufacturer: syz [ 874.897991][ T7689] usb 4-1: SerialNumber: syz [ 874.920233][ T7689] usb 4-1: 0:2 : does not exist [ 875.120512][ T7689] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 875.286754][ T7689] usb 4-1: USB disconnect, device number 107 [ 875.752201][ T5384] udevd[5384]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 877.278967][ T7867] serio: Serial port ptm0 [ 878.054183][ T7884] netlink: 208 bytes leftover after parsing attributes in process `syz.0.12011'. [ 878.157688][ T7894] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11998'. [ 878.724859][ T7915] bridge_slave_0: left allmulticast mode [ 878.724889][ T7915] bridge_slave_0: left promiscuous mode [ 878.725103][ T7915] bridge0: port 1(bridge_slave_0) entered disabled state [ 878.941067][ T7915] bridge_slave_1: left allmulticast mode [ 878.941100][ T7915] bridge_slave_1: left promiscuous mode [ 878.941327][ T7915] bridge0: port 2(bridge_slave_1) entered disabled state [ 879.233099][ T7915] bond0: (slave bond_slave_0): Releasing backup interface [ 879.324995][ T7915] bond0: (slave bond_slave_1): Releasing backup interface [ 879.417985][ T7915] team0: Port device team_slave_0 removed [ 879.589342][ T7915] team0: Port device team_slave_1 removed [ 879.673628][ T7915] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 879.673653][ T7915] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 879.838185][ T7915] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 879.838221][ T7915] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 879.939056][ T7915] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 880.423740][ T7956] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12035'. [ 880.911015][ T1906] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 881.063219][ T1906] usb 4-1: unable to get BOS descriptor or descriptor too short [ 881.064700][ T1906] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 881.064721][ T1906] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 881.134890][ T1906] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 881.134918][ T1906] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 881.134936][ T1906] usb 4-1: Product: syz [ 881.134948][ T1906] usb 4-1: Manufacturer: syz [ 881.134961][ T1906] usb 4-1: SerialNumber: syz [ 881.217462][ T1906] usb 4-1: selecting invalid altsetting 1 [ 881.371529][ T1906] usb 4-1: unit 6 not found! [ 881.956535][ T8008] binder: 8006:8008 ioctl c0306201 200000000080 returned -14 [ 882.060365][ T1906] usb 4-1: 2:0: failed to get current value for ch 0 (-71) [ 882.228980][ T1906] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 882.251893][ T1906] usb 4-1: USB disconnect, device number 108 [ 882.318119][ T5384] udevd[5384]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 884.250460][ T8109] Bluetooth: MGMT ver 1.23 [ 886.100908][ T5632] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 886.223273][ T8187] netlink: 16 bytes leftover after parsing attributes in process `syz.3.12080'. [ 886.266287][ T5632] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 886.266317][ T5632] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 886.266337][ T5632] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 886.266359][ T5632] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 886.269197][ T5632] usb 9-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 886.269227][ T5632] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 886.269244][ T5632] usb 9-1: Product: syz [ 886.269257][ T5632] usb 9-1: Manufacturer: syz [ 886.269271][ T5632] usb 9-1: SerialNumber: syz [ 886.367275][ T5632] usb 9-1: config 0 descriptor?? [ 886.602573][ T5632] adutux 9-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 886.656807][ T8207] syzkaller1: entered promiscuous mode [ 886.656831][ T8207] syzkaller1: entered allmulticast mode [ 886.896930][ T8219] Invalid logical block size (7) [ 886.960986][ T5632] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 887.088541][ T5333] usb 9-1: USB disconnect, device number 2 [ 887.113437][ T5632] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 887.113460][ T5632] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 887.115197][ T5632] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 887.115226][ T5632] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 887.115251][ T5632] usb 4-1: SerialNumber: syz [ 887.444044][ T5632] usb 4-1: 0:2 : does not exist [ 887.521389][ T5632] usb 4-1: USB disconnect, device number 109 [ 887.609271][T27290] udevd[27290]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 888.630919][ T5754] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 888.797274][ T5754] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 888.797322][ T5754] usb 9-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00 [ 888.797342][ T5754] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 888.847547][ T5754] usb 9-1: config 0 descriptor?? [ 888.857774][ T8294] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 889.093243][ T8294] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 889.116568][ T8294] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 889.128933][ T8294] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 889.129537][ T8294] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 889.408963][ T5754] hid_parser_main: 429 callbacks suppressed [ 889.410551][ T5754] uclogic 0003:5543:0064.0023: unknown main item tag 0x0 [ 889.410587][ T5754] uclogic 0003:5543:0064.0023: unknown main item tag 0x0 [ 889.410619][ T5754] uclogic 0003:5543:0064.0023: unknown main item tag 0x0 [ 889.410642][ T5754] uclogic 0003:5543:0064.0023: unknown main item tag 0x0 [ 889.410666][ T5754] uclogic 0003:5543:0064.0023: unknown main item tag 0x0 [ 889.410691][ T5754] uclogic 0003:5543:0064.0023: unknown main item tag 0x0 [ 889.410717][ T5754] uclogic 0003:5543:0064.0023: unknown main item tag 0x0 [ 889.468547][ T5754] uclogic 0003:5543:0064.0023: unknown main item tag 0x0 [ 889.468590][ T5754] uclogic 0003:5543:0064.0023: unknown main item tag 0x0 [ 889.468623][ T5754] uclogic 0003:5543:0064.0023: unknown main item tag 0x0 [ 889.518827][ T5754] uclogic 0003:5543:0064.0023: hidraw0: USB HID v7b.fd Device [HID 5543:0064] on usb-dummy_hcd.8-1/input0 [ 889.632166][ T36] usb 9-1: USB disconnect, device number 3 [ 889.765947][ T8328] fido_id[8328]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/9-1/report_descriptor': No such file or directory [ 892.054085][ T8378] virt_wifi0 speed is unknown, defaulting to 1000 [ 892.084609][ T8378] wg0 speed is unknown, defaulting to 1000 [ 892.105016][ T8378] wlan0 speed is unknown, defaulting to 1000 [ 894.194344][ T8433] sit1: entered allmulticast mode [ 894.637550][ T8447] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 895.249664][ T37] audit: type=1326 audit(894.793:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8476 comm="syz.8.12137" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1147bde59 code=0x7ffc0000 [ 895.249712][ T37] audit: type=1326 audit(894.793:911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8476 comm="syz.8.12137" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1147bde59 code=0x7ffc0000 [ 895.250647][ T37] audit: type=1326 audit(894.793:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8476 comm="syz.8.12137" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1147bde59 code=0x7ffc0000 [ 895.250684][ T37] audit: type=1326 audit(894.793:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8476 comm="syz.8.12137" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1147bde59 code=0x7ffc0000 [ 895.264071][ T37] audit: type=1326 audit(894.813:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8476 comm="syz.8.12137" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fc1147bde59 code=0x7ffc0000 [ 895.264116][ T37] audit: type=1326 audit(894.813:915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8476 comm="syz.8.12137" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1147bde59 code=0x7ffc0000 [ 895.264154][ T37] audit: type=1326 audit(894.813:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8476 comm="syz.8.12137" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1147bde59 code=0x7ffc0000 [ 895.301616][ T37] audit: type=1326 audit(894.853:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8476 comm="syz.8.12137" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1147bde59 code=0x7ffc0000 [ 895.301858][ T37] audit: type=1326 audit(894.853:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8476 comm="syz.8.12137" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1147bde59 code=0x7ffc0000 [ 895.301903][ T37] audit: type=1326 audit(894.853:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8476 comm="syz.8.12137" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7fc1147bde59 code=0x7ffc0000 [ 895.887353][ T8487] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12140'. [ 895.887373][ T8487] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12140'. [ 899.031116][ T36] usb 4-1: new full-speed USB device number 110 using dummy_hcd [ 899.192889][ T36] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 899.192922][ T36] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 899.192948][ T36] usb 4-1: config 0 interface 0 has no altsetting 0 [ 899.192979][ T36] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 899.193000][ T36] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 899.226056][ T36] usb 4-1: config 0 descriptor?? [ 899.226802][ T8566] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 899.674012][ T36] hid_parser_main: 355 callbacks suppressed [ 899.674035][ T36] elan 0003:04F3:0755.0024: unknown main item tag 0x0 [ 899.674062][ T36] elan 0003:04F3:0755.0024: unknown main item tag 0x0 [ 899.674087][ T36] elan 0003:04F3:0755.0024: unknown main item tag 0x0 [ 899.674110][ T36] elan 0003:04F3:0755.0024: unknown main item tag 0x0 [ 899.674133][ T36] elan 0003:04F3:0755.0024: unknown main item tag 0x0 [ 899.674157][ T36] elan 0003:04F3:0755.0024: unknown main item tag 0x0 [ 899.674181][ T36] elan 0003:04F3:0755.0024: unknown main item tag 0x0 [ 899.674206][ T36] elan 0003:04F3:0755.0024: unknown main item tag 0x0 [ 899.674230][ T36] elan 0003:04F3:0755.0024: unknown main item tag 0x0 [ 899.674254][ T36] elan 0003:04F3:0755.0024: unknown main item tag 0x0 [ 899.736690][ T36] elan 0003:04F3:0755.0024: hidraw0: USB HID v0.03 Device [HID 04f3:0755] on usb-dummy_hcd.3-1/input0 [ 899.888364][ T36] usb 4-1: USB disconnect, device number 110 [ 899.911107][ T8612] fido_id[8612]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 901.893513][ T8696] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12198'. [ 901.893550][ T8696] netlink: 'syz.2.12198': attribute type 7 has an invalid length. [ 901.893563][ T8696] netlink: 'syz.2.12198': attribute type 8 has an invalid length. [ 901.893575][ T8696] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12198'. [ 905.102193][ T8785] netlink: 20 bytes leftover after parsing attributes in process `syz.7.12224'. [ 905.113648][ T8785] netlink: 20 bytes leftover after parsing attributes in process `syz.7.12224'. [ 905.134301][T16475] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 905.135272][T16475] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 905.135322][T16475] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 905.135351][T16475] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 905.250953][ T5632] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 905.412986][ T5632] usb 9-1: config 220 has an invalid interface number: 76 but max is 2 [ 905.413012][ T5632] usb 9-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 905.413038][ T5632] usb 9-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 905.413054][ T5632] usb 9-1: config 220 has no interface number 2 [ 905.413120][ T5632] usb 9-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 905.413143][ T5632] usb 9-1: config 220 interface 0 has no altsetting 0 [ 905.413159][ T5632] usb 9-1: config 220 interface 76 has no altsetting 0 [ 905.413174][ T5632] usb 9-1: config 220 interface 1 has no altsetting 0 [ 905.415651][ T5632] usb 9-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 905.415678][ T5632] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 905.415695][ T5632] usb 9-1: Product: syz [ 905.415708][ T5632] usb 9-1: Manufacturer: syz [ 905.415720][ T5632] usb 9-1: SerialNumber: syz [ 905.771552][ T5632] usb 9-1: selecting invalid altsetting 0 [ 905.772195][ T5632] uvcvideo 9-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 905.772223][ T5632] uvcvideo 9-1:220.0: No valid video chain found. [ 905.814936][ T5632] usb 9-1: selecting invalid altsetting 0 [ 905.814979][ T5632] usbtest 9-1:220.1: probe with driver usbtest failed with error -22 [ 905.841909][ T5632] usb 9-1: USB disconnect, device number 4 [ 906.948577][ T8842] netlink: 4 bytes leftover after parsing attributes in process `syz.7.12237'. [ 907.000173][ T8843] netlink: 4 bytes leftover after parsing attributes in process `syz.7.12237'. [ 907.380621][ T8850] netlink: 4 bytes leftover after parsing attributes in process `syz.8.12239'. [ 908.301097][ T5632] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 908.450990][ T5632] usb 4-1: Using ep0 maxpacket: 16 [ 908.453001][ T5632] usb 4-1: config 0 has no interfaces? [ 908.455255][ T5632] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 908.455271][ T5632] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 908.455281][ T5632] usb 4-1: Product: syz [ 908.455288][ T5632] usb 4-1: Manufacturer: syz [ 908.455296][ T5632] usb 4-1: SerialNumber: syz [ 908.459077][ T5632] usb 4-1: config 0 descriptor?? [ 908.668780][ T36] usb 4-1: USB disconnect, device number 111 [ 910.476953][ T8891] netlink: 44 bytes leftover after parsing attributes in process `syz.3.12251'. [ 915.415848][ T8850] gretap0: entered promiscuous mode [ 915.416029][ T8850] macvtap1: entered promiscuous mode [ 915.416127][ T8850] macvtap1: entered allmulticast mode [ 915.416134][ T8850] gretap0: entered allmulticast mode [ 915.522040][ T8854] gretap0: left allmulticast mode [ 915.522276][ T8854] gretap0: left promiscuous mode [ 915.571165][ T8854] macvtap1: left promiscuous mode [ 915.571186][ T8854] macvtap1: left allmulticast mode [ 917.825058][ T8966] binder: 8964:8966 ioctl c0306201 200000000640 returned -22 [ 918.131155][ T5333] usb 9-1: new full-speed USB device number 5 using dummy_hcd [ 918.296911][ T5333] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 918.296939][ T5333] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 918.296956][ T5333] usb 9-1: Product: syz [ 918.296968][ T5333] usb 9-1: Manufacturer: syz [ 918.296980][ T5333] usb 9-1: SerialNumber: syz [ 918.305286][ T5333] usb 9-1: config 0 descriptor?? [ 918.574151][ T5333] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 919.577938][ T5333] dvb_usb_rtl28xxu 9-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 919.593784][ T5333] usb 9-1: USB disconnect, device number 5 [ 920.060925][ T8953] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 920.362546][ T9049] bridge0: port 1(bridge_slave_0) entered disabled state [ 920.364382][ T9049] bridge0: port 2(bridge_slave_1) entered disabled state [ 920.481999][ T5333] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 920.672152][ T5333] usb 9-1: Using ep0 maxpacket: 32 [ 920.680375][ T5333] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 920.680403][ T5333] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 920.680438][ T5333] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 920.680459][ T5333] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 920.735648][ T5333] usb 9-1: config 0 descriptor?? [ 920.927638][ T5333] hub 9-1:0.0: USB hub found [ 921.006901][ T5333] hub 9-1:0.0: 1 port detected [ 921.886700][ T9092] netlink: 'syz.0.12300': attribute type 83 has an invalid length. [ 922.022898][ T9098] netlink: 'syz.2.12303': attribute type 1 has an invalid length. [ 922.037223][ T5333] hub 9-1:0.0: activate --> -90 [ 922.147425][ T9098] 8021q: adding VLAN 0 to HW filter on device bond4 [ 922.173856][ T5754] usb 9-1: USB disconnect, device number 6 [ 922.179188][ T7689] hub 9-1:0.0: hub_ext_port_status failed (err = -71) [ 923.050978][ T5333] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 923.214075][ T5333] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 129, changing to 7 [ 923.214132][ T5333] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 255, changing to 7 [ 923.265081][ T5333] usb 4-1: New USB device found, idVendor=0e41, idProduct=4247, bcdDevice= 0.40 [ 923.265109][ T5333] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 923.265127][ T5333] usb 4-1: Product: syz [ 923.265139][ T5333] usb 4-1: Manufacturer: syz [ 923.265152][ T5333] usb 4-1: SerialNumber: syz [ 923.495731][ T9179] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 923.621207][ T5333] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 923.772909][ T5333] usb 4-1: USB disconnect, device number 112 [ 923.997874][ T8902] udevd[8902]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 924.254384][ T7689] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 924.430966][ T7689] usb 3-1: Using ep0 maxpacket: 32 [ 924.553315][ T7689] usb 3-1: config 0 has no interfaces? [ 924.555413][ T7689] usb 3-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 924.555437][ T7689] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 924.555455][ T7689] usb 3-1: Product: syz [ 924.555468][ T7689] usb 3-1: Manufacturer: syz [ 924.555480][ T7689] usb 3-1: SerialNumber: syz [ 924.574097][ T7689] usb 3-1: config 0 descriptor?? [ 924.671048][ T5754] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 924.838503][ T5754] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 924.838520][ T5754] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 924.838530][ T5754] usb 4-1: config 220 has no interface number 2 [ 924.838567][ T5754] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 924.838581][ T5754] usb 4-1: config 220 interface 0 has no altsetting 0 [ 924.838590][ T5754] usb 4-1: config 220 interface 76 has no altsetting 0 [ 924.838599][ T5754] usb 4-1: config 220 interface 1 has no altsetting 0 [ 924.907481][ T5754] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 924.907509][ T5754] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 924.907526][ T5754] usb 4-1: Product: syz [ 924.907539][ T5754] usb 4-1: Manufacturer: syz [ 924.907550][ T5754] usb 4-1: SerialNumber: syz [ 925.023974][ T36] usb 3-1: USB disconnect, device number 98 [ 925.174489][ T5754] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 925.174527][ T5754] uvcvideo 4-1:220.0: No valid video chain found. [ 925.174586][ T5754] usb 4-1: selecting invalid altsetting 0 [ 925.236586][ T5754] usb 4-1: selecting invalid altsetting 0 [ 925.236620][ T5754] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 925.273018][ T5754] usb 4-1: USB disconnect, device number 113 [ 926.754396][ T9308] netlink: 12 bytes leftover after parsing attributes in process `syz.8.12334'. [ 930.032674][ T7689] usb 9-1: new full-speed USB device number 7 using dummy_hcd [ 930.198990][ T7689] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 930.199018][ T7689] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 930.199036][ T7689] usb 9-1: Product: syz [ 930.199048][ T7689] usb 9-1: Manufacturer: syz [ 930.199062][ T7689] usb 9-1: SerialNumber: syz [ 930.255985][ T7689] usb 9-1: config 0 descriptor?? [ 930.485911][ T7689] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 931.913930][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.914010][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.943155][ T7689] dvb_usb_rtl28xxu 9-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 931.962269][ T7689] usb 9-1: USB disconnect, device number 7 [ 934.966250][T31851] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 935.115672][ T9518] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12367'. [ 935.115697][ T9518] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12367'. [ 935.132477][T31851] usb 4-1: Using ep0 maxpacket: 32 [ 935.161640][T31851] usb 4-1: New USB device found, idVendor=1039, idProduct=2120, bcdDevice= 2.a7 [ 935.161667][T31851] usb 4-1: New USB device strings: Mfr=10, Product=2, SerialNumber=3 [ 935.161685][T31851] usb 4-1: Product: syz [ 935.161698][T31851] usb 4-1: Manufacturer: syz [ 935.161711][T31851] usb 4-1: SerialNumber: syz [ 935.193484][T31851] usb 4-1: config 0 descriptor?? [ 935.475063][ T9506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 935.478095][ T9506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 936.502163][T31851] usb 4-1: reset high-speed USB device number 114 using dummy_hcd [ 937.343949][T31851] usb 4-1: [UEAGLE-ATM] interface 1 not found [ 937.343970][T31851] ueagle-atm 4-1:0.0: usbatm_usb_probe: bind failed: -19! [ 937.355462][T31851] usb 4-1: USB disconnect, device number 114 [ 937.563562][T31851] kernel write not supported for file bpf-prog (pid: 31851 comm: kworker/0:0) [ 939.260958][ T9551] Bluetooth: hci5: command 0x0406 tx timeout [ 940.970949][ T7689] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 941.155156][ T7689] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 941.155201][ T7689] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 941.155222][ T7689] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 941.184632][ T7689] usb 9-1: config 0 descriptor?? [ 941.417867][ T7689] usbhid 9-1:0.0: can't add hid device: -71 [ 941.417975][ T7689] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 941.492316][ T7689] usb 9-1: USB disconnect, device number 8 [ 941.770131][ T9667] 8021q: VLANs not supported on pim6reg [ 941.807165][ T9669] netlink: 64467 bytes leftover after parsing attributes in process `syz.7.12428'. [ 941.879747][ T9671] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12429'. [ 941.883765][ T9671] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12429'. [ 942.013346][ T7689] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 942.193071][ T7689] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 942.193119][ T7689] usb 9-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 942.193139][ T7689] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 942.208165][ T7689] usb 9-1: config 0 descriptor?? [ 942.827237][ T9701] serio: Serial port ptm0 [ 943.032960][ T7689] aiptek 9-1:0.0: Aiptek using 400 ms programming speed [ 943.102059][ T7689] input: Aiptek as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input72 [ 943.628219][ C1] aiptek 9-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 943.628284][ T7689] usb 9-1: USB disconnect, device number 9 [ 944.442288][ T9759] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 944.801727][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 945.785181][ T9780] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12455'. [ 945.899892][ T9780] bond5: (slave bridge9): Enslaving as an active interface with an up link [ 949.627391][ T9891] netlink: 36 bytes leftover after parsing attributes in process `syz.7.12477'. [ 949.997563][ T9903] netlink: 4 bytes leftover after parsing attributes in process `syz.8.12485'. [ 950.130408][ T9918] netlink: 20 bytes leftover after parsing attributes in process `syz.7.12487'. [ 951.469366][ T9944] siw: device registration error -23 [ 951.560094][ T9944] smbdirect: ib_dev[syz1] removed [ 952.047551][ T9953] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 952.465453][ T9979] netlink: 4 bytes leftover after parsing attributes in process `syz.8.12504'. [ 952.496550][ T9979] netlink: 4 bytes leftover after parsing attributes in process `syz.8.12504'. [ 952.496704][ T9818] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 952.504496][T16481] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 952.505192][T16481] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 952.505227][T16481] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 952.885833][ T37] kauditd_printk_skb: 8 callbacks suppressed [ 952.885850][ T37] audit: type=1326 audit(952.433:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10000 comm="syz.7.12507" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff80ba2de59 code=0x0 [ 952.911008][ T1906] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 953.084268][ T1906] usb 9-1: Using ep0 maxpacket: 8 [ 953.099908][ T9989] netlink: 'syz.8.12505': attribute type 2 has an invalid length. [ 953.099921][ T9989] netlink: 44 bytes leftover after parsing attributes in process `syz.8.12505'. [ 953.111034][ T1906] usb 9-1: unable to get BOS descriptor or descriptor too short [ 953.112025][ T1906] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 953.112065][ T1906] usb 9-1: can't read configurations, error -71 [ 953.835717][T10015] netlink: 28 bytes leftover after parsing attributes in process `syz.7.12509'. [ 954.301361][ T1906] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 954.451033][ T1906] usb 9-1: Using ep0 maxpacket: 32 [ 954.453073][ T1906] usb 9-1: config 0 has an invalid interface number: 184 but max is 0 [ 954.453097][ T1906] usb 9-1: config 0 has no interface number 0 [ 954.453130][ T1906] usb 9-1: config 0 interface 184 has no altsetting 0 [ 954.455372][ T1906] usb 9-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 954.455397][ T1906] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 954.455415][ T1906] usb 9-1: Product: syz [ 954.455427][ T1906] usb 9-1: Manufacturer: syz [ 954.455435][ T1906] usb 9-1: SerialNumber: syz [ 954.460434][ T1906] usb 9-1: config 0 descriptor?? [ 955.108649][ T1906] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 955.108677][ T1906] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 955.307685][ T9970] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 956.648214][ T1906] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 956.648245][ T1906] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 956.648263][ T1906] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 956.648553][ T1906] smsc75xx 9-1:0.184: probe with driver smsc75xx failed with error -71 [ 956.686528][ T1906] usb 9-1: USB disconnect, device number 12 [ 959.857703][ T9551] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 959.907853][ T9551] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 959.924942][ T9551] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 959.930994][ T9551] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 959.957296][ T9551] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 960.737455][ T37] audit: type=1326 audit(960.283:929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10136 comm="syz.8.12538" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc1147bde59 code=0x0 [ 960.872355][T10120] wg0 speed is unknown, defaulting to 1000 [ 960.900233][T10120] wlan0 speed is unknown, defaulting to 1000 [ 961.365917][T10120] bridge0: port 1(bridge_slave_0) entered blocking state [ 961.366046][T10120] bridge0: port 1(bridge_slave_0) entered disabled state [ 961.366368][T10120] bridge_slave_0: entered allmulticast mode [ 961.368091][T10120] bridge_slave_0: entered promiscuous mode [ 961.370186][T10120] bridge0: port 2(bridge_slave_1) entered blocking state [ 961.370303][T10120] bridge0: port 2(bridge_slave_1) entered disabled state [ 961.370408][T10120] bridge_slave_1: entered allmulticast mode [ 961.373776][T10120] bridge_slave_1: entered promiscuous mode [ 961.448717][T10120] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 961.456713][T10120] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 961.660522][T10120] team0: Port device team_slave_0 added [ 961.676056][T10120] team0: Port device team_slave_1 added [ 961.778111][T10120] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 961.778126][T10120] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 961.778150][T10120] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 961.862049][T10120] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 961.862061][T10120] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 961.862076][T10120] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 962.638614][ T5637] Bluetooth: hci4: command tx timeout [ 962.710599][T10311] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 962.786430][T10311] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 962.916620][T10314] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 963.434752][T10120] hsr_slave_0: entered promiscuous mode [ 963.453844][T10120] hsr_slave_1: entered promiscuous mode [ 963.455003][T10120] debugfs: 'hsr0' already exists in 'hsr' [ 963.455026][T10120] Cannot create hsr debugfs directory [ 963.795427][T10368] overlayfs: failed to clone upperpath [ 964.365679][T10388] kvm: pic: level sensitive irq not supported [ 964.365786][T10388] kvm: pic: level sensitive irq not supported [ 964.366287][T10388] kvm: pic: single mode not supported [ 964.366299][T10388] kvm: pic: level sensitive irq not supported [ 964.366350][T10388] kvm: pic: single mode not supported [ 964.366359][T10388] kvm: pic: level sensitive irq not supported [ 964.366445][T10388] kvm: pic: single mode not supported [ 964.366482][T10388] kvm: pic: single mode not supported [ 964.366565][T10388] kvm: pic: level sensitive irq not supported [ 964.366603][T10388] kvm: pic: level sensitive irq not supported [ 964.435002][T10388] kvm: pic: level sensitive irq not supported [ 964.435048][T10388] kvm: pic: level sensitive irq not supported [ 964.435133][T10388] kvm: pic: single mode not supported [ 964.435171][T10388] kvm: pic: single mode not supported [ 964.998731][ T9551] Bluetooth: hci4: command tx timeout [ 966.730958][ T5632] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 966.731211][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 966.835633][T10462] binder_alloc: 10461: pid 10461 spamming oneway? 1 buffers allocated for a total size of 4096 [ 966.842309][T10462] binder_alloc: 10461: pid 10461 spamming oneway? 2 buffers allocated for a total size of 5120 [ 967.279144][ T9551] Bluetooth: hci4: command tx timeout [ 967.433681][T10469] hub 8-0:1.0: USB hub found [ 967.485513][ T5632] usb 3-1: device descriptor read/64, error -32 [ 968.155985][T10469] hub 8-0:1.0: 1 port detected [ 968.631610][ T5632] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 968.743280][T10120] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 968.800910][ T5632] usb 3-1: Using ep0 maxpacket: 32 [ 969.557411][ T9551] Bluetooth: hci4: command tx timeout [ 970.364639][T10120] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 970.370057][T10120] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 970.598516][T10120] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 970.600123][T10120] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 970.675603][T10120] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 970.745603][T10120] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 970.955028][T10120] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 971.846158][ T37] audit: type=1326 audit(971.383:930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10519 comm="syz.7.12570" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff80ba2de59 code=0x7ffc0000 [ 971.846211][ T37] audit: type=1326 audit(971.383:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10519 comm="syz.7.12570" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff80ba2de59 code=0x7ffc0000 [ 971.846244][ T37] audit: type=1326 audit(971.383:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10519 comm="syz.7.12570" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff80ba2de59 code=0x7ffc0000 [ 971.846280][ T37] audit: type=1326 audit(971.383:933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10519 comm="syz.7.12570" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7ff80ba2de59 code=0x7ffc0000 [ 971.846309][ T37] audit: type=1326 audit(971.383:934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10519 comm="syz.7.12570" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff80ba2de59 code=0x7ffc0000 [ 971.846338][ T37] audit: type=1326 audit(971.383:935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10519 comm="syz.7.12570" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7ff80ba2de59 code=0x7ffc0000 [ 971.846368][ T37] audit: type=1326 audit(971.383:936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10519 comm="syz.7.12570" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7ff80ba2de59 code=0x7ffc0000 [ 972.264576][ T5632] usb 3-1: unable to read config index 0 descriptor/all [ 972.264623][ T5632] usb 3-1: can't read configurations, error -71 [ 972.265130][ T5632] usb usb3-port1: attempt power cycle [ 972.396665][T10120] 8021q: adding VLAN 0 to HW filter on device bond0 [ 972.450074][T10120] 8021q: adding VLAN 0 to HW filter on device team0 [ 972.508492][T10537] binder: BINDER_SET_CONTEXT_MGR already set [ 972.508506][T10537] binder: 10536:10537 ioctl 4018620d 200000004a80 returned -16 [ 972.580394][ T7126] bridge0: port 1(bridge_slave_0) entered blocking state [ 972.582780][ T7126] bridge0: port 1(bridge_slave_0) entered forwarding state [ 973.618198][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 975.158597][ T7126] bridge0: port 2(bridge_slave_1) entered blocking state [ 975.158762][ T7126] bridge0: port 2(bridge_slave_1) entered forwarding state [ 978.719205][T10120] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 981.393242][T10120] veth0_vlan: entered promiscuous mode [ 981.410660][T10120] veth1_vlan: entered promiscuous mode [ 981.554881][T10120] veth0_macvtap: entered promiscuous mode [ 982.284252][ T5858] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 982.341651][T10120] veth1_macvtap: entered promiscuous mode [ 982.418066][T10658] overlayfs: failed to clone upperpath [ 982.435613][T10120] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 982.453926][ T5858] usb 9-1: Using ep0 maxpacket: 32 [ 982.455285][ T5858] usb 9-1: config 0 has an invalid interface number: 188 but max is 0 [ 982.455300][ T5858] usb 9-1: config 0 has no interface number 0 [ 982.455324][ T5858] usb 9-1: config 0 interface 188 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 576 [ 982.455337][ T5858] usb 9-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 982.456799][T10120] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 982.458882][ T5858] usb 9-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 982.458896][ T5858] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 982.458905][ T5858] usb 9-1: Product: syz [ 982.458912][ T5858] usb 9-1: Manufacturer: syz [ 982.458920][ T5858] usb 9-1: SerialNumber: syz [ 982.511983][ T5858] usb 9-1: config 0 descriptor?? [ 982.524011][T10641] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 982.524190][T10641] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 982.620426][ T2414] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 982.638066][ T2414] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 982.686304][ T2414] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 982.756089][T10641] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 982.756211][T10641] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 983.219896][ T2414] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 987.219882][ T5858] asix 9-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 987.220164][ T5858] asix 9-1:0.188: probe with driver asix failed with error -71 [ 988.500050][ T5858] usb 9-1: USB disconnect, device number 13 [ 989.058447][ T157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 989.058467][ T157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 990.182262][ T4318] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 990.182281][ T4318] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 990.346836][T10726] overlayfs: failed to clone upperpath [ 992.798179][T10759] netlink: 28 bytes leftover after parsing attributes in process `syz.7.12614'. [ 993.355854][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.355923][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 998.483751][T10809] tipc: Enabled bearer , priority 0 [ 998.484771][T10809] syzkaller0: entered promiscuous mode [ 998.484792][T10809] syzkaller0: entered allmulticast mode [ 999.908040][T10809] tipc: Resetting bearer [ 1001.984355][T10808] tipc: Resetting bearer [ 1002.228736][T10849] netlink: 4 bytes leftover after parsing attributes in process `syz.9.12635'. [ 1004.934949][T10808] tipc: Disabling bearer [ 1008.707534][T10893] netlink: 20 bytes leftover after parsing attributes in process `syz.8.12644'. [ 1009.510801][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 1009.580797][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 1010.467653][ T5632] IPVS: starting estimator thread 0... [ 1010.474920][T10907] IPVS: wrr: SCTP 172.20.20.187:0 - no destination available [ 1010.558433][T10908] IPVS: using max 12 ests per chain, 28800 per kthread [ 1011.946554][ T37] audit: type=1326 audit(1011.483:937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10917 comm="syz.0.12651" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3e284dde59 code=0x0 [ 1013.844420][T10940] netlink: 8 bytes leftover after parsing attributes in process `syz.8.12654'. [ 1013.905001][T10940] gtp0: entered promiscuous mode [ 1013.905025][T10940] gtp0: entered allmulticast mode [ 1020.452204][ T5637] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1020.553630][ T5637] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1020.560721][ T5637] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1020.572248][ T5637] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1020.641723][ T5637] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1020.710793][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 1020.730803][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 1020.740816][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 1020.750806][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 1020.760816][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 1020.770805][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 1020.780812][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 1023.122399][ T9551] Bluetooth: hci6: command tx timeout [ 1025.206675][ T9551] Bluetooth: hci6: command tx timeout [ 1025.352242][T10986] wg0 speed is unknown, defaulting to 1000 [ 1025.370692][T10986] wlan0 speed is unknown, defaulting to 1000 [ 1025.774216][T11050] fuse: Bad value for 'fd' [ 1026.916022][T11061] netlink: 'syz.7.12674': attribute type 2 has an invalid length. [ 1027.266782][ T9551] Bluetooth: hci6: command tx timeout [ 1029.899264][ T9551] Bluetooth: hci6: command tx timeout [ 1030.176900][T11061] : entered promiscuous mode [ 1031.905126][T11170] netlink: 12 bytes leftover after parsing attributes in process `syz.9.12683'. [ 1032.935787][T11170] netlink: 12 bytes leftover after parsing attributes in process `syz.9.12683'. [ 1032.999642][T10986] bridge0: port 1(bridge_slave_0) entered blocking state [ 1032.999925][T10986] bridge0: port 1(bridge_slave_0) entered disabled state [ 1033.000147][T10986] bridge_slave_0: entered allmulticast mode [ 1033.003744][T10986] bridge_slave_0: entered promiscuous mode [ 1033.016357][T10986] bridge0: port 2(bridge_slave_1) entered blocking state [ 1033.016574][T10986] bridge0: port 2(bridge_slave_1) entered disabled state [ 1033.016773][T10986] bridge_slave_1: entered allmulticast mode [ 1033.019565][T10986] bridge_slave_1: entered promiscuous mode [ 1033.181085][T10986] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1033.268266][T10986] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1033.537776][T10986] team0: Port device team_slave_0 added [ 1033.561517][T11170] netlink: 12 bytes leftover after parsing attributes in process `syz.9.12683'. [ 1034.834512][T10986] team0: Port device team_slave_1 added [ 1039.267741][T10986] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1039.267757][T10986] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1039.267780][T10986] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1039.270232][T10986] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1039.270266][T10986] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1039.270289][T10986] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1039.330510][T10986] hsr_slave_0: entered promiscuous mode [ 1039.332465][T10986] hsr_slave_1: entered promiscuous mode [ 1039.333358][T10986] debugfs: 'hsr0' already exists in 'hsr' [ 1039.333383][T10986] Cannot create hsr debugfs directory [ 1044.009833][T11401] bond1: option min_links: invalid value (18446744073709551612) [ 1044.009856][T11401] bond1: option min_links: allowed values 0 - 2147483647 [ 1045.118211][T11401] bond1 (unregistering): Released all slaves [ 1046.396383][T11406] veth1_macvtap: left promiscuous mode [ 1049.047064][T11534] netdevsim netdevsim7: loading /lib/firmware/. failed with error -22 [ 1049.047089][T11534] netdevsim netdevsim7: Direct firmware load for . failed with error -22 [ 1049.047099][T11534] netdevsim netdevsim7: Falling back to sysfs fallback for: . [ 1049.527544][T11543] input: syz0 as /devices/virtual/input/input73 [ 1051.842131][T26817] bond0: (slave syz_tun): Releasing backup interface [ 1053.399822][T11577] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1053.613988][T11588] netlink: 8 bytes leftover after parsing attributes in process `syz.7.12716'. [ 1055.497323][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 1055.497384][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 1057.292078][T11646] netlink: 20 bytes leftover after parsing attributes in process `syz.7.12722'. [ 1058.299138][T10500] IPVS: starting estimator thread 0... [ 1058.462971][T11659] IPVS: using max 9 ests per chain, 21600 per kthread [ 1058.518505][ T5260] veth1_macvtap: entered promiscuous mode [ 1058.838008][ T37] audit: type=1326 audit(1058.383:938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11660 comm="syz.9.12723" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3c8e9dde59 code=0x0 [ 1068.346429][T11741] tmpfs: Unknown parameter 'mpo' [ 1069.379039][T11743] netlink: 40 bytes leftover after parsing attributes in process `syz.9.12735'. [ 1069.489657][T11737] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(11) [ 1069.489807][T11737] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1069.499089][T11737] vhci_hcd vhci_hcd.0: Device attached [ 1070.096545][T11747] vhci_hcd: connection closed [ 1070.474767][ T9551] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 1070.487907][ T9551] Bluetooth: hci4: Injecting HCI hardware error event [ 1070.498345][ T9551] Bluetooth: hci4: hardware error 0x00 [ 1070.709694][ T3364] vhci_hcd vhci_hcd.9: stop threads [ 1070.709712][ T3364] vhci_hcd vhci_hcd.9: release socket [ 1071.110430][ T3364] vhci_hcd vhci_hcd.9: disconnect device [ 1072.586720][T31851] usb usb52-port1: attempt power cycle [ 1075.581119][T31851] usb usb52-port1: unable to enumerate USB device [ 1078.039857][ T4914] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1078.118857][ T4914] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1078.135656][ T4914] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1078.142146][ T4914] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1078.232814][ T4914] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1078.787874][ T9551] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1080.986731][T11828] tmpfs: Unknown parameter 'mpos/kernel/debug/sync/sw_sync' [ 1082.305195][ T9551] Bluetooth: hci2: command tx timeout [ 1084.380971][ T9551] Bluetooth: hci2: command tx timeout [ 1086.376432][T11843] ceph: No mds server is up or the cluster is laggy [ 1086.465088][ T9551] Bluetooth: hci2: command tx timeout [ 1087.755968][ T7689] libceph: connect (1)[c::]:6789 error -101 [ 1087.954493][ T7689] libceph: mon0 (1)[c::]:6789 connect error [ 1088.518218][ T36] libceph: connect (1)[c::]:6789 error -101 [ 1088.518396][ T36] libceph: mon0 (1)[c::]:6789 connect error [ 1088.587878][ T9551] Bluetooth: hci2: command tx timeout [ 1090.348779][T10763] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1090.348812][T10763] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1091.734155][T11829] IPv6: sit1: Disabled Multicast RS [ 1093.060637][T11830] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1093.562451][T11830] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1093.916940][ T9551] Bluetooth: hci5: command 0x0406 tx timeout [ 1095.613291][ T36] libceph: connect (1)[c::]:6789 error -101 [ 1095.613487][ T36] libceph: mon0 (1)[c::]:6789 connect error [ 1095.758913][T11830] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1095.758991][T11830] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 1095.900166][ T36] libceph: connect (1)[c::]:6789 error -101 [ 1095.901791][ T36] libceph: mon0 (1)[c::]:6789 connect error [ 1095.909858][T11898] ceph: No mds server is up or the cluster is laggy [ 1096.142794][ T9551] Bluetooth: hci5: command 0x0406 tx timeout [ 1097.821013][ T9551] Bluetooth: hci6: command 0x0c1a tx timeout [ 1099.096333][T11830] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 1100.424013][ T9551] Bluetooth: hci6: command 0x0c1a tx timeout [ 1100.705261][T11830] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1100.705311][T11830] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1101.243361][T11830] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1102.494559][ T9551] Bluetooth: hci6: command 0x0c1a tx timeout [ 1103.275930][T11974] Invalid argument reading file caps for ./file0 [ 1103.942370][ T4914] Bluetooth: hci2: command 0x0c1a tx timeout [ 1104.246930][ T4914] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1104.443344][ T4914] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1104.463966][T11790] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1104.464505][ T4914] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1104.523037][T11790] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1104.548897][ T4914] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1104.548920][T11790] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1104.577760][T11790] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1104.619885][T11790] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1104.626616][T11790] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1105.807563][T10763] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1105.807597][T10763] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1106.065317][ T5637] Bluetooth: hci2: command 0x0c1a tx timeout [ 1107.174236][ T5637] Bluetooth: hci7: command tx timeout [ 1107.441169][ T5637] Bluetooth: hci8: command tx timeout [ 1107.939462][T12016] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1108.536914][ T5637] Bluetooth: hci2: command 0x0c1a tx timeout [ 1108.950263][ T37] audit: type=1804 audit(1108.423:939): pid=12027 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.7.12775" name="file0" dev="tmpfs" ino=1386 res=1 errno=0 [ 1108.991716][ T37] audit: type=1804 audit(1108.503:940): pid=12028 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.7.12775" name="file0" dev="tmpfs" ino=1386 res=1 errno=0 [ 1109.197386][ T5637] Bluetooth: hci7: command tx timeout [ 1109.516075][ T5637] Bluetooth: hci8: command tx timeout [ 1111.297356][ T5637] Bluetooth: hci7: command tx timeout [ 1111.422431][T10763] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1111.422458][T10763] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1111.592820][ T5637] Bluetooth: hci8: command tx timeout [ 1111.614765][T11777] wg0 speed is unknown, defaulting to 1000 [ 1111.860575][T12059] netlink: 4 bytes leftover after parsing attributes in process `syz.7.12780'. [ 1111.901102][T12059] netlink: 'syz.7.12780': attribute type 1 has an invalid length. [ 1112.454653][T12073] hub 8-0:1.0: USB hub found [ 1112.462860][T12073] hub 8-0:1.0: 1 port detected [ 1113.437747][ T5637] Bluetooth: hci7: command tx timeout [ 1113.577062][T11777] wlan0 speed is unknown, defaulting to 1000 [ 1113.661006][ T5637] Bluetooth: hci8: command tx timeout [ 1114.668000][ T37] audit: type=1326 audit(1114.173:941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12083 comm="syz.0.12782" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3e284dde59 code=0x0 [ 1116.249225][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.249305][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.874087][ T38] INFO: task syz.3.12451:9752 blocked for more than 165 seconds. [ 1116.874195][ T38] Tainted: G L syzkaller #0 [ 1116.874207][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1116.874262][ T38] task:syz.3.12451 state:D stack:24872 pid:9752 tgid:9752 ppid:5624 task_flags:0x400040 flags:0x00080003 [ 1116.874390][ T38] Call Trace: [ 1116.874398][ T38] [ 1116.874458][ T38] __schedule+0x16dc/0x5500 [ 1116.874650][ T38] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1116.874744][ T38] ? rt_mutex_slowunlock+0x4ee/0xa20 [ 1116.874861][ T38] ? rt_spin_lock+0x1e0/0x400 [ 1116.874924][ T38] ? __pfx___schedule+0x10/0x10 [ 1116.875000][ T38] ? schedule+0x90/0x2b0 [ 1116.875058][ T38] schedule+0x164/0x2b0 [ 1116.875113][ T38] fuse_chan_send+0x1068/0x1ad0 [ 1116.875266][ T38] ? __pfx_fuse_chan_send+0x10/0x10 [ 1116.875341][ T38] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1116.875372][ T38] ? pid_nr_ns+0xcb/0x140 [ 1116.875488][ T38] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1116.875542][ T38] ? __lock_acquire+0x683/0x2ce0 [ 1116.875615][ T38] ? __fuse_simple_request+0x7a/0xb0 [ 1116.875729][ T38] fuse_flush+0x677/0x8b0 [ 1116.875829][ T38] ? __pfx_fuse_flush+0x10/0x10 [ 1116.875893][ T38] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1116.875942][ T38] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1116.876019][ T38] ? rt_spin_unlock+0x157/0x200 [ 1116.876081][ T38] ? __pfx_fuse_flush+0x10/0x10 [ 1116.876138][ T38] filp_flush+0xc0/0x190 [ 1116.876269][ T38] filp_close+0x1d/0x40 [ 1116.876327][ T38] __se_sys_close_range+0x3d6/0x910 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1116.876426][ T38] ? __pfx___se_sys_close_range+0x10/0x10 [ 1116.876455][ T38] ? do_user_addr_fault+0xc4a/0x1340 [ 1116.876548][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1116.876672][ T38] do_syscall_64+0x174/0x580 [ 1116.876762][ T38] ? trace_irq_disable+0x3b/0x140 [ 1116.876886][ T38] ? clear_bhb_loop+0x40/0x90 [ 1116.876943][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1116.877004][ T38] RIP: 0033:0x7faf6be1de59 [ 1116.877071][ T38] RSP: 002b:00007ffd5dd3f6d8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1116.877125][ T38] RAX: ffffffffffffffda RBX: 00007faf6c0a7da0 RCX: 00007faf6be1de59 [ 1116.877141][ T38] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1116.877183][ T38] RBP: 00007faf6c0a7da0 R08: 00007faf6c0a6128 R09: 0000000000000000 [ 1116.877197][ T38] R10: 00000000005f601c R11: 0000000000000246 R12: 00000000000e6921 [ 1116.877251][ T38] R13: 00007faf6c0a618c R14: 00000000000e66b3 R15: 00007faf6c0a6180 [ 1116.877357][ T38] [ 1116.877453][ T38] [ 1116.877453][ T38] Showing all locks held in the system: [ 1116.877468][ T38] 2 locks held by kworker/0:1/11: [ 1116.877480][ T38] 1 lock held by ktimers/0/16: [ 1116.877489][ T38] #0: ffff8880b883b920 (&rq->__lock){-...}-{2:2}, at: raw_spin_rq_lock_nested+0xb2/0x160 [ 1116.877698][ T38] 1 lock held by khungtaskd/38: [ 1116.877746][ T38] #0: ffffffff8dfc2fc0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1116.877864][ T38] 3 locks held by kworker/u8:4/66: [ 1116.877875][ T38] #0: ffff888032865938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1116.877994][ T38] #1: ffffc9000151fc40 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1116.878155][ T38] #2: ffffffff8f3716b8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 1116.878323][ T38] 10 locks held by kworker/u8:5/86: [ 1116.878336][ T38] 6 locks held by kworker/0:1H/97: [ 1116.878417][ T38] 5 locks held by kworker/0:3/1906: [ 1116.878451][ T38] 2 locks held by getty/5353: [ 1116.878461][ T38] #0: ffff8880368c30a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1116.878636][ T38] #1: ffffc90003cbe2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x460/0x1360 [ 1116.878792][ T38] 3 locks held by kworker/1:5/7689: [ 1116.878803][ T38] #0: ffff88801a041538 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1116.878976][ T38] #1: ffffc90005947c40 ((work_completion)(&(&ssp->srcu_sup->work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1116.879094][ T38] #2: ffffffff8dfc3e18 (&ssp->srcu_sup->srcu_gp_mutex){+.+.}-{4:4}, at: process_srcu+0x6c/0x16f0 [ 1116.879329][ T38] 3 locks held by kworker/0:5/10500: [ 1116.879342][ T38] 5 locks held by kworker/u8:18/10763: [ 1116.884133][ T38] #0: ffff88801b2a8938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1116.884299][ T38] #1: ffffc9002096fc40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1116.884439][ T38] #2: ffffffff8f362b20 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810 [ 1116.985300][ T38] #3: ffff88803f181160 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x129/0x420 [ 1116.985568][ T38] #4: ffff88803b1fe310 (&devlink->lock_key){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x142/0x420 [ 1116.985681][ T38] 6 locks held by syz-executor/10986: [ 1116.985729][ T38] #0: ffff888035834500 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 1116.985899][ T38] #1: ffff88805bae8878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 1116.986071][ T38] #2: ffff888028e9b5a8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 1116.986242][ T38] #3: ffffffff8ebe7118 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 1116.986328][ T38] #4: ffff8880298fc160 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb9/0x880 [ 1116.986511][ T38] #5: ffff8880298f4310 (&devlink->lock_key#5){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x160 [ 1116.986634][ T38] 4 locks held by syz-executor/11777: [ 1116.986690][ T38] 2 locks held by syz-executor/11907: [ 1116.986749][ T38] #0: ffffffff8f362b20 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4e2/0x720 [ 1116.986861][ T38] #1: ffffffff8f3716b8 (rtnl_mutex){+.+.}-{4:4}, at: register_netdev+0x18/0x60 [ 1116.987030][ T38] 2 locks held by syz-executor/11960: [ 1116.987042][ T38] #0: ffffffff8f362b20 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4e2/0x720 [ 1117.226854][ T38] #1: ffffffff8f3716b8 (rtnl_mutex){+.+.}-{4:4}, at: register_nexthop_notifier+0x8b/0x290 [ 1117.227003][ T38] 1 lock held by syz.0.12782/12085: [ 1117.227015][ T38] 1 lock held by syz.7.12783/12090: [ 1117.227025][ T38] #0: ffff88801a016658 (&n->list_lock){+.+.}-{3:3}, at: __refill_objects_node+0x89/0x5b0 [ 1117.227100][ T38] 1 lock held by dhcpcd-run-hook/12101: [ 1117.227110][ T38] [ 1117.227114][ T38] ============================================= [ 1117.227114][ T38] [ 1117.227122][ T38] NMI backtrace for cpu 1 [ 1117.227143][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1117.227162][ T38] Tainted: [L]=SOFTLOCKUP [ 1117.227166][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1117.227174][ T38] Call Trace: [ 1117.227184][ T38] [ 1117.227192][ T38] dump_stack_lvl+0xe8/0x150 [ 1117.227216][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 1117.227302][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1117.227352][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 1117.227373][ T38] sys_info+0x135/0x170 [ 1117.227391][ T38] watchdog+0xfd7/0x1030 [ 1117.227414][ T38] ? watchdog+0x1c7/0x1030 [ 1117.227433][ T38] kthread+0x388/0x470 [ 1117.227475][ T38] ? __pfx_watchdog+0x10/0x10 [ 1117.227488][ T38] ? __pfx_kthread+0x10/0x10 [ 1117.227502][ T38] ret_from_fork+0x514/0xb70 [ 1117.227560][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1117.227575][ T38] ? __switch_to+0xc89/0x1420 [ 1117.227614][ T38] ? __pfx_kthread+0x10/0x10 [ 1117.227629][ T38] ret_from_fork_asm+0x1a/0x30 [ 1117.227659][ T38] [ 1117.227681][ T38] Sending NMI from CPU 1 to CPUs 0: [ 1117.227709][ C0] NMI backtrace for cpu 0 [ 1117.227731][ C0] CPU: 0 UID: 0 PID: 5632 Comm: kworker/0:4 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1117.227759][ C0] Tainted: [L]=SOFTLOCKUP [ 1117.227763][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1117.227773][ C0] Workqueue: wg-crypt-wg0 wg_packet_tx_worker [ 1117.227837][ C0] RIP: 0010:__lock_acquire+0x18fa/0x2ce0 [ 1117.227855][ C0] Code: 13 25 ff 0f 00 00 39 05 b0 d6 d7 11 73 06 89 05 a8 d6 d7 11 48 8b 02 48 89 df 4c 39 e8 0f 84 34 fe ff ff 4c 89 78 30 48 8b 00 <4c> 39 e8 75 f4 48 89 df e9 20 fe ff ff 48 89 fb 48 c7 c7 b0 02 e9 [ 1117.227866][ C0] RSP: 0018:ffffc90004656c60 EFLAGS: 00000002 [ 1117.227876][ C0] RAX: ffffffff963e0928 RBX: 00000000000003cd RCX: 00000000000000bb [ 1117.227885][ C0] RDX: ffffffff95ff6ab8 RSI: ffff888038ce6ac0 RDI: 00000000000003cd [ 1117.227895][ C0] RBP: 85b5287d2b739021 R08: ffffc90004656c28 R09: 0000000000000020 [ 1117.227903][ C0] R10: 0000000000000000 R11: ffffffff81a124a0 R12: 00000000000000ba [ 1117.227912][ C0] R13: ffffffff931af810 R14: ffff888038ce5d00 R15: ffffffff9605fce8 [ 1117.227921][ C0] FS: 0000000000000000(0000) GS:ffff888126111000(0000) knlGS:0000000000000000 [ 1117.227932][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1117.227941][ C0] CR2: 0000200000003000 CR3: 000000007d502000 CR4: 00000000003526f0 [ 1117.227953][ C0] Call Trace: [ 1117.227959][ C0] [ 1117.227974][ C0] ? ktime_get+0x45/0x220 [ 1117.227989][ C0] lock_acquire+0x106/0x350 [ 1117.228003][ C0] ? ktime_get+0x45/0x220 [ 1117.228018][ C0] ? finish_task_switch+0x15d/0xc60 [ 1117.228032][ C0] ? lock_acquire+0x106/0x3[ 1117.228032][ C0] ? lock_acquire+0x106/0x350 [ 1117.228046][ C0] ? finish_task_switch+0x15d/0xc60 [ 1117.228061][ C0] ? ktime_get+0x45/0x220 [ 1117.228073][ C0] seqcount_lockdep_reader_access+0x55/0x100 [ 1117.228088][ C0] ? ktime_get+0x45/0x220 [ 1117.228101][ C0] ktime_get+0x45/0x220 [ 1117.228115][ C0] finish_task_switch+0x307/0xc60 [ 1117.228132][ C0] __schedule+0x16e4/0x5500 [ 1117.228155][ C0] ? __pfx___schedule+0x10/0x10 [ 1117.228168][ C0] ? irqentry_exit+0x218/0x8f0 [ 1117.228181][ C0] ? trace_irq_disable+0x3b/0x140 [ 1117.228199][ C0] ? preempt_schedule_thunk+0x16/0x40 [ 1117.228218][ C0] preempt_schedule_common+0x82/0xd0 [ 1117.228232][ C0] preempt_schedule_thunk+0x16/0x40 [ 1117.228252][ C0] rt_spin_lock+0x316/0x400 [ 1117.228270][ C0] ? __pfx_rt_spin_lock+0x10/0x10 [ 1117.228290][ C0] __refill_objects_node+0x89/0x5b0 [ 1117.228304][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1117.228318][ C0] ? rt_mutex_slowunlock+0x4ee/0xa20 [ 1117.228340][ C0] refill_objects+0x56/0x350 [ 1117.228355][ C0] __pcs_replace_empty_main+0x330/0x690 [ 1117.228401][ C0] ? rt_spin_trylock+0x13a/0x2b0 [ 1117.228419][ C0] __kmalloc_cache_noprof+0x468/0x6b0 [ 1117.228434][ C0] ? ref_tracker_alloc+0x15e/0x4c0 [ 1117.228490][ C0] ? ref_tracker_alloc+0x15e/0x4c0 [ 1117.228506][ C0] ref_tracker_alloc+0x15e/0x4c0 [ 1117.228521][ C0] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1117.228539][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1117.228555][ C0] ? ___neigh_create+0xd0f/0x2390 [ 1117.228595][ C0] ___neigh_create+0xdc0/0x2390 [ 1117.228610][ C0] ip6_finish_output2+0x6d6/0x1410 [ 1117.228648][ C0] ? ip6_mtu+0x7d/0x490 [ 1117.228680][ C0] ? ip6_output+0x11e/0x540 [ 1117.228689][ C0] ip6_output+0x337/0x540 [ 1117.228699][ C0] udp_tunnel6_xmit_skb+0x6e3/0xdc0 [ 1117.228716][ C0] send6+0x5ce/0x920 [ 1117.228731][ C0] ? send6+0x255/0x920 [ 1117.228749][ C0] ? __pfx_send6+0x10/0x10 [ 1117.228760][ C0] ? rcu_is_watching+0x15/0xb0 [ 1117.228775][ C0] ? rcu_is_watching+0x15/0xb0 [ 1117.228785][ C0] ? __local_bh_disable_ip+0x3c/0x420 [ 1117.228838][ C0] ? wg_socket_send_skb_to_peer+0x59/0x200 [ 1117.228850][ C0] ? wg_socket_send_skb_to_peer+0x59/0x200 [ 1117.228861][ C0] wg_socket_send_skb_to_peer+0x128/0x200 [ 1117.228874][ C0] wg_packet_tx_worker+0x1c8/0x7e0 [ 1117.228886][ C0] ? rcu_is_watching+0x15/0xb0 [ 1117.228898][ C0] ? process_scheduled_works+0xa20/0x14e0 [ 1117.228911][ C0] process_scheduled_works+0xa8e/0x14e0 [ 1117.228929][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1117.228942][ C0] ? assign_work+0x3cf/0x5d0 [ 1117.228954][ C0] worker_thread+0xa47/0xfb0 [ 1117.228971][ C0] ? __kthread_parkme+0x71/0x1f0 [ 1117.228981][ C0] kthread+0x388/0x470 [ 1117.228990][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1117.229001][ C0] ? __pfx_kthread+0x10/0x10 [ 1117.229011][ C0] ret_from_fork+0x514/0xb70 [ 1117.229021][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1117.229031][ C0] ? __switch_to+0xc89/0x1420 [ 1117.229040][ C0] ? __pfx_kthread+0x10/0x10 [ 1117.229049][ C0] ret_from_fork_asm+0x1a/0x30 [ 1117.229063][ C0] [ 1118.131142][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 1118.131166][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1118.131199][ T38] Tainted: [L]=SOFTLOCKUP [ 1118.131206][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1118.131216][ T38] Call Trace: [ 1118.131225][ T38] [ 1118.131234][ T38] vpanic+0x56c/0xa60 [ 1118.131263][ T38] ? __pfx___schedule+0x10/0x10 [ 1118.131285][ T38] ? __pfx_vpanic+0x10/0x10 [ 1118.131315][ T38] panic+0xc5/0xd0 [ 1118.131335][ T38] ? __pfx_panic+0x10/0x10 [ 1118.131355][ T38] ? preempt_schedule_common+0x82/0xd0 [ 1118.131374][ T38] ? preempt_schedule_thunk+0x16/0x40 [ 1118.131401][ T38] ? nmi_trigger_cpumask_backtrace+0x314/0x380 [ 1118.131430][ T38] ? nmi_trigger_cpumask_backtrace+0x319/0x380 [ 1118.131459][ T38] watchdog+0x1030/0x1030 [ 1118.131487][ T38] ? watchdog+0x1c7/0x1030 [ 1118.131514][ T38] kthread+0x388/0x470 [ 1118.131534][ T38] ? __pfx_watchdog+0x10/0x10 [ 1118.131552][ T38] ? __pfx_kthread+0x10/0x10 [ 1118.131572][ T38] ret_from_fork+0x514/0xb70 [ 1118.131595][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1118.131615][ T38] ? __switch_to+0xc89/0x1420 [ 1118.131634][ T38] ? __pfx_kthread+0x10/0x10 [ 1118.131654][ T38] ret_from_fork_asm+0x1a/0x30 [ 1118.131688][ T38] [ 1118.132002][ T38] Kernel Offset: disabled