last executing test programs: 29.53360436s ago: executing program 2 (id=1471): socket(0x40000000015, 0x5, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, 0x0) ioctl$KVM_SET_XCRS(r0, 0x4188aea7, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000e0220000"]) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000016c0)={0x1, &(0x7f0000001680)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) wait4(0x0, 0x0, 0x40000000, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000060a0b040000000000000200000008000940000000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a00000d98e866affdb2a9419cfa6c8a824df1f8fae4d2e6705ce8630b89c14258c6b9773ebb237de64f056842018ebd1cd46f12d18ec4cf50015c157e23130a50ce5f8fc560924140c0012f75b1e6005944b413028de88fa369229e56e896d69c537abe93a53e2655a2307bc8878d43af2bcb22d01a0a8b48adab8d22e477147d8d88a83182449977acba3eafe863d77421795ba1e43bfb1e3b75bcc65522fa52537c1bb05b5bdcd38b25592dc9a34f82c2b5c88a3452370335a8f95eb1e5de1ef25e50aca0e7dd52968947e0"], 0x5c}}, 0x0) io_setup(0x0, &(0x7f00000000c0)=0x0) io_submit(r2, 0x0, &(0x7f0000000100)) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000080)=0x1494) fcntl$setstatus(r3, 0x4, 0x0) write$binfmt_script(r0, &(0x7f0000000140)={'#! ', './file0', [{0x20, '/dev/vcsa\x00'}, {0x20, '/dev/vcsa\x00'}, {0x20, '\x00'}], 0xa, "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"}, 0xe1b) socket$unix(0x1, 0x0, 0x0) syz_usb_connect$uac1(0x1, 0x8a, &(0x7f0000011180)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x78, 0x3, 0x1, 0x0, 0x70, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x5}, [@extension_unit={0x8, 0x24, 0x8, 0x4, 0x0, 0x7, 'p'}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x0, 0x3f}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x6, 0x5, 0x5, 0x0, "2ae3"}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x0, 0x23, 0x0, {0x3, 0x25, 0x1, 0x1, 0x1, 0xfffc}}}}}}}]}}, &(0x7f0000011700)={0xa, &(0x7f0000011240)={0xa, 0x6, 0x0, 0x7, 0x35, 0x6}, 0x24, &(0x7f0000011280)=ANY=[@ANYBLOB="01000080000000000c000004ff0300540a1004000000000000000a100300000000000000"], 0x6, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x4, &(0x7f0000011680)=@lang_id={0x4, 0x3, 0x440a}}, {0x0, 0x0}]}) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000011800)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) io_setup(0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x7fff) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r0, 0x80083314, &(0x7f0000000040)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, 0x0, 0x0) accept4$inet(r0, 0x0, 0x0, 0x80800) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x0) 26.338082526s ago: executing program 2 (id=1476): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x1, 0x1, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x1c) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f00000038c0), 0x8) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080), 0x400002, 0x0) sendmsg$nl_xfrm(r2, 0x0, 0x80800) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r3 = socket(0x10, 0x80803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005e00010200"/20, @ANYRES32=0x0, @ANYBLOB="bf"], 0x1c}}, 0x0) recvmmsg(r3, &(0x7f0000001bc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10001, 0x0) futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000040), 0x2}], 0x1, 0x0, 0x0, 0x0) getpid() sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@newqdisc={0x13c, 0x24, 0x100, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x8, 0xfff2}, {0xfff1, 0xfff1}, {0xffe0, 0x8}}, [@TCA_STAB={0x118, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0x7, 0xab32, 0x9e, 0x0, 0x3, 0x2, 0x1}}, {0x6, 0x2, [0x8]}}, {{0x1c, 0x1, {0x9, 0x1, 0x5, 0x2, 0x1, 0xa53b, 0x37c, 0x8}}, {0x14, 0x2, [0x28f, 0x0, 0x5, 0xfffd, 0x50, 0xfffd, 0x5, 0x5de3]}}, {{0x1c, 0x1, {0x0, 0x18, 0x7ff, 0x6, 0x1, 0x2, 0xc, 0x3}}, {0xa, 0x2, [0x5, 0xe, 0x10]}}, {{0x1c, 0x1, {0x39, 0x0, 0x8, 0x9, 0x1, 0x7, 0x9, 0x1}}, {0x6, 0x2, [0x6]}}, {{0x1c, 0x1, {0xe, 0x9, 0x2, 0xa, 0x3, 0x1, 0x1}}, {0x4}}, {{0x1c, 0x1, {0xec, 0x6, 0x8, 0x2, 0x1, 0xffffffff, 0x9, 0x9}}, {0x16, 0x2, [0x0, 0x2, 0x10, 0xfff, 0x2, 0xa1, 0xfffe, 0x2, 0x8000]}}, {{0x1c, 0x1, {0x8, 0x5, 0x2, 0x7, 0x0, 0x3b}}, {0x4}}]}]}, 0x13c}}, 0x0) r4 = socket(0x10, 0x803, 0x0) sendto(r4, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x810) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x78}}, 0x0) recvmmsg(r4, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x680}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 22.862899681s ago: executing program 2 (id=1478): openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) syz_emit_vhci(0x0, 0x22) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="04040a00000000000054679202ce9eaa48b326b038d97544c8b681bad547412afab3663029531077c8c4fa2f7501610d4eae6214096ae92430cd63486f07b04d9c519ab15a6e842e1352398f95ff35f5115a2c6c50f63336179b5e6b1f774a63506e8cb76bba42c6bee078240ec871a2bcf7dd5691833ac53a02f3614eae3afb9549df1b77ce0baebc9f6306644f6f08bbd3ca3229d272acd3483bf3ae4228f7a2b839594856918b10ca47ad4dc249d99c244aba277d101b5ac305"], 0xd) syz_emit_vhci(&(0x7f00000007c0)=ANY=[], 0x14) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000780), 0x208e24b) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x58}}, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfecc) getdents(0xffffffffffffffff, 0x0, 0x48) ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, &(0x7f00000002c0)={0x0, &(0x7f0000000340)=""/121, 0x79}) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000ac0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xfffffffc, 0xffffffffffffffe1, 0x0, 0x0, 0x10001, 0xfffffffffffff924], 0x2}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) socket$inet6(0xa, 0x6, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close_range(r4, 0xffffffffffffffff, 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r5, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c000000040a01040000000000000000020000000900010073797a300000000008000a4000000003100008800c00014000000000ffffffff0900030073797a31000000000800054000000000d1a33ea3db306d057801737f97839c50db8676ef5534a9d50a53104dd77926"], 0x4c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4008800) unshare(0x40040000) syz_clone(0x2020100, &(0x7f0000002300)="215da9eb4fe8b0daa718bfb5ec7832d67022c7c263f8d6c3108825743dfdf2d47ad279f8aad709e824d0dafad038daf8eebb673f323244d1144c6d5ee08fc7177652ae8a549c637d483b3fd0445087eecceba035ceefb9cb6c", 0x59, &(0x7f0000002380), &(0x7f00000023c0), &(0x7f0000002400)="976b6469995d4e15c3e0fcff35bdba90cfe1d2d09d05ba1c16aabe5198879e70be37d9e6350c4876c8ef4cf28364c647203872047e35b910b6b083cd8f9646e6c38f82c5e58bd06b82edb943d7e5fad541affe7431bf9f8fb8383932b058969b8f1e788924cfb78e78ef075ccc2eccee5870a1bdd1b2") getgroups(0x2, &(0x7f0000002700)=[0xee01, 0xffffffffffffffff]) 20.492567586s ago: executing program 2 (id=1483): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x1, 0x1, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x1c) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f00000038c0), 0x8) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080), 0x400002, 0x0) sendmsg$nl_xfrm(r2, 0x0, 0x80800) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r3 = socket(0x10, 0x80803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005e00010200"/20, @ANYRES32=0x0, @ANYBLOB="bf"], 0x1c}}, 0x0) recvmmsg(r3, &(0x7f0000001bc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10001, 0x0) futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000040), 0x2}], 0x1, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@newqdisc={0x13c, 0x24, 0x100, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x8, 0xfff2}, {0xfff1, 0xfff1}, {0xffe0, 0x8}}, [@TCA_STAB={0x118, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0x7, 0xab32, 0x9e, 0x0, 0x3, 0x2, 0x1}}, {0x6, 0x2, [0x8]}}, {{0x1c, 0x1, {0x9, 0x1, 0x5, 0x2, 0x1, 0xa53b, 0x37c, 0x8}}, {0x14, 0x2, [0x28f, 0x0, 0x5, 0xfffd, 0x50, 0xfffd, 0x5, 0x5de3]}}, {{0x1c, 0x1, {0x0, 0x18, 0x7ff, 0x6, 0x1, 0x2, 0xc, 0x3}}, {0xa, 0x2, [0x5, 0xe, 0x10]}}, {{0x1c, 0x1, {0x39, 0x0, 0x8, 0x9, 0x1, 0x7, 0x9, 0x1}}, {0x6, 0x2, [0x6]}}, {{0x1c, 0x1, {0xe, 0x9, 0x2, 0xa, 0x3, 0x1, 0x1}}, {0x4}}, {{0x1c, 0x1, {0xec, 0x6, 0x8, 0x2, 0x1, 0xffffffff, 0x9, 0x9}}, {0x16, 0x2, [0x0, 0x2, 0x10, 0xfff, 0x2, 0xa1, 0xfffe, 0x2, 0x8000]}}, {{0x1c, 0x1, {0x8, 0x5, 0x2, 0x7, 0x0, 0x3b}}, {0x4}}]}]}, 0x13c}}, 0x0) r4 = socket(0x10, 0x803, 0x0) sendto(r4, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x810) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x78}}, 0x0) recvmmsg(r4, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x680}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 19.483267348s ago: executing program 2 (id=1485): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) unshare(0x40c80) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x1de) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_SET_MASTER(r2, 0x641e) getpid() r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x0, 0x10}, 0xc) sendto$inet(r4, &(0x7f00000000c0)='}', 0x1, 0x0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r4, &(0x7f0000000280)='p', 0x1, 0x0, 0x0, 0x0) sendto$inet(r4, &(0x7f0000000300)="ab", 0x34000, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x1c0, 0x0, 0xb, 0x148, 0x98, 0x148, 0x128, 0x242, 0x240, 0x128, 0x215, 0x3, 0x0, {[{{@ip={@broadcast, @empty, 0x0, 0x0, 'geneve1\x00', 'ipvlan0\x00'}, 0x0, 0x70, 0x98, 0x0, {0xff0f000000000000}}, @common=@unspec=@NFQUEUE2={0x28}}, {{@uncond, 0xec010000, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x220) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000200)={0x0, 0x0, r6}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2, &(0x7f0000000080)=0x87f2, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000000300)={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x1c) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='rpcb_getport\x00', r8}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x2, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 18.461670741s ago: executing program 2 (id=1486): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x21, 0x3, 0x2b0, 0x268, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private2, @local, [], [], 'geneve1\x00', 'syzkaller1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48}}, {{@ipv6={@empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'erspan0\x00', 'veth1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$MON_IOCH_MFLUSH(0xffffffffffffffff, 0x9208, 0x557d) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge_slave_0\x00'}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='oom_adj\x00') pread64(r1, 0x0, 0x0, 0x0) ioctl$IOMMU_DESTROY$ioas(0xffffffffffffffff, 0x3b80, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x10, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x29, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) ioprio_set$uid(0x3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x4, 0x200000005c831, 0xffffffffffffffff, 0x0) r4 = syz_io_uring_setup(0x7250, &(0x7f0000000500), &(0x7f0000000440), 0x0) flock(r4, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x2, 0x40, 0x40, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000240), 0x1000, r5}, 0x38) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000b80)={r5, &(0x7f00000005c0), 0x0}, 0x20) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000340), 0x7f9582, 0x0) 14.022286081s ago: executing program 1 (id=1491): openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) syz_emit_vhci(0x0, 0x22) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="04040a00000000000054679202ce9eaa48b326b038d97544c8b681bad547412afab3663029531077c8c4fa2f7501610d4eae6214096ae92430cd63486f07b04d9c519ab15a6e842e1352398f95ff35f5115a2c6c50f63336179b5e6b1f774a63506e8cb76bba42c6bee078240ec871a2bcf7dd5691833ac53a02f3614eae3afb9549df1b77ce0baebc9f6306644f6f08bbd3ca3229d272acd3483bf3ae4228f7a2b839594856918b10ca47ad4dc249d99c244aba277d101b5ac305"], 0xd) syz_emit_vhci(&(0x7f00000007c0)=ANY=[@ANYBLOB], 0x14) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000780), 0x208e24b) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x58}}, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfecc) getdents(0xffffffffffffffff, 0x0, 0x48) ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, &(0x7f00000002c0)={0x0, &(0x7f0000000340)=""/121, 0x79}) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000ac0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xfffffffc, 0xffffffffffffffe1, 0x0, 0x0, 0x10001, 0xfffffffffffff924], 0x2}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) socket$inet6(0xa, 0x6, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close_range(r4, 0xffffffffffffffff, 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r5, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c000000040a01040000000000000000020000000900010073797a300000000008000a4000000003100008800c00014000000000ffffffff0900030073797a31000000000800054000000000d1a33ea3db306d057801737f97839c50db8676ef5534a9d50a53104dd77926"], 0x4c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4008800) unshare(0x40040000) syz_clone(0x2020100, &(0x7f0000002300)="215da9eb4fe8b0daa718bfb5ec7832d67022c7c263f8d6c3108825743dfdf2d47ad279f8aad709e824d0dafad038daf8eebb673f323244d1144c6d5ee08fc7177652ae8a549c637d483b3fd0445087eecceba035ceefb9cb6c", 0x59, &(0x7f0000002380), &(0x7f00000023c0), &(0x7f0000002400)="976b6469995d4e15c3e0fcff35bdba90cfe1d2d09d05ba1c16aabe5198879e70be37d9e6350c4876c8ef4cf28364c647203872047e35b910b6b083cd8f9646e6c38f82c5e58bd06b82edb943d7e5fad541affe7431bf9f8fb8383932b058969b8f1e788924cfb78e78ef075ccc2eccee5870a1bdd1b2") getgroups(0x2, &(0x7f0000002700)=[0xee01, 0xffffffffffffffff]) 11.624351575s ago: executing program 1 (id=1494): openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x6002, 0x12) fanotify_init(0x200, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = socket$qrtr(0x2a, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000300), 0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0x10) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), r1) sendmsg$TIPC_NL_LINK_SET(r4, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="d30b7674c0c8195289c92f0000", @ANYRES16=r5, @ANYBLOB="000226bd7000fddbdf25090000001c000780080002004c720000080002000200000008000200790900001800078008000200060000000c0004000000000000000090"], 0x48}, 0x1, 0x0, 0x0, 0x20000004}, 0xbe9ad5817ce3da8a) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f00000027c0)={r6}, 0x8) socket(0x40000000015, 0x0, 0x0) r7 = socket(0x15, 0x5, 0x0) getsockopt(r7, 0x200000000114, 0x2713, 0x0, &(0x7f0000000100)) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_CT_DIRECTION={0x5}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r9, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_CHANNELS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8}]}, 0x28}}, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(r0, 0x8919, 0x0) 11.051194028s ago: executing program 3 (id=1496): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x11, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index}) ioctl$TIOCSTI(r1, 0x5423, &(0x7f0000000080)=0x7) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) getpid() openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f0000000200)=@overlay={0x2, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "12848098"}}) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000040)={0xf0f046}) io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0xb35e, 0x40, 0xfffffffe, 0x0, 0x0, r0}) open(0x0, 0x20403, 0x0) 10.600625494s ago: executing program 1 (id=1498): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000013c0), 0x43c}}, 0x0) recvmmsg(r3, &(0x7f0000000b40)=[{{0x0, 0x0, &(0x7f0000010100)=[{&(0x7f0000000280)=""/195, 0xc3}], 0x1}}], 0x1, 0x12020, 0x0) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0x8, 0x0, 0x0, 0x0, 0x0, {[@window={0x9, 0x3}, @generic={0x0, 0x8, "d58838068b91"}]}}}}}}, 0x42) 10.160390644s ago: executing program 1 (id=1500): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f00000020c0)="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", 0x2000, &(0x7f0000006e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7c, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000300)={0x12000, 0x1, 0x4, 0x0, 0xfa}) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000040)=0x1) io_uring_setup(0x3410, &(0x7f0000000000)={0x0, 0x0, 0x624}) r3 = syz_io_uring_setup(0x24fa, &(0x7f0000000180)={0x0, 0x0, 0x10100}, 0x0, &(0x7f00000000c0)=0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000040)=ANY=[@ANYBLOB='0'], 0x118) syz_io_uring_submit(0x0, r4, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r3, 0x2d3e, 0x0, 0x0, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000380)=@filter={'filter\x00', 0x42, 0x4, 0x318, 0xffffffff, 0xb0, 0x1b0, 0xb0, 0xffffffff, 0xffffffff, 0x280, 0x280, 0x280, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'wg1\x00', 'nr0\x00'}, 0x0, 0x70, 0xb0, 0x1ba, {0x46010000, 0x2c000000000000}}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "6bc128419cfb67daad5b4809088400ed0000006c00000000000100040500"}}}, {{@uncond, 0x287, 0xd8, 0x100, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@unspec=@statistic={{0x38}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x4}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x378) sendmsg$NFT_BATCH(r6, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000340)='system.posix_acl_default\x00', 0x0, 0x0, 0x3) r8 = socket$kcm(0x29, 0x5, 0x0) recvmsg$kcm(r8, &(0x7f0000000280)={&(0x7f0000000140)=@hci, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/51, 0x33}, {&(0x7f0000000e40)=""/4096, 0x1000}, {&(0x7f0000000380)=""/219, 0xdb}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000500)=""/165, 0xa5}, {&(0x7f0000006ec0)=""/4096, 0x1000}], 0x6}, 0x0) 9.200798829s ago: executing program 0 (id=1503): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0xc, &(0x7f00000000c0)=0x20001, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', &(0x7f00000000c0)={0x0, 0x0, 0x3}, 0x65) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x33, 0x0, 0x0) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_dccp_int(r1, 0x21, 0x6, &(0x7f0000000100)=0x5, 0x4) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs2/custom1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x0, 0xfffffffffffffffd}) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2002, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x78, 0x0, &(0x7f0000000440)=[@increfs_done={0x40106308, 0x4000000000}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f00000002c0)={@fd={0x66642a85, 0x0, r1}, @fda={0x66646185, 0x0, 0x2, 0x22}, @ptr={0x70742a85, 0x1, &(0x7f00000007c0)=""/4096, 0x1000, 0x1, 0x800000000000017}}, &(0x7f0000000340)={0x0, 0x18, 0x38}}, 0x400}, @release, @clear_death={0x400c630f, 0x2}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000740), 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000380)='2', 0x1}], 0x1) set_mempolicy(0x2, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000000)={@loopback={0xfec0ffff00000000}, @remote, @loopback, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2050242}) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x42031, 0xffffffffffffffff, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(r6, 0x0, r6) setsockopt$inet_tcp_int(r6, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) 9.078153s ago: executing program 1 (id=1504): openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) syz_emit_vhci(0x0, 0x22) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="04040a00000000000054679202ce9eaa48b326b038d97544c8b681bad547412afab3663029531077c8c4fa2f7501610d4eae6214096ae92430cd63486f07b04d9c519ab15a6e842e1352398f95ff35f5115a2c6c50f63336179b5e6b1f774a63506e8cb76bba42c6bee078240ec871a2bcf7dd5691833ac53a02f3614eae3afb9549df1b77ce0baebc9f6306644f6f08bbd3ca3229d272acd3483bf3ae4228f7a2b839594856918b10ca47ad4dc249d99c244aba277d101b5ac305"], 0xd) syz_emit_vhci(&(0x7f00000007c0)=ANY=[@ANYBLOB], 0x14) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000780), 0x208e24b) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x58}}, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfecc) getdents(0xffffffffffffffff, 0x0, 0x48) ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, &(0x7f00000002c0)={0x0, &(0x7f0000000340)=""/121, 0x79}) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000ac0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xfffffffc, 0xffffffffffffffe1, 0x0, 0x0, 0x10001, 0xfffffffffffff924], 0x2}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) socket$inet6(0xa, 0x6, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close_range(r4, 0xffffffffffffffff, 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r5, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c000000040a01040000000000000000020000000900010073797a300000000008000a4000000003100008800c00014000000000ffffffff0900030073797a31000000000800054000000000d1a33ea3db306d057801737f97839c50db8676ef5534a9d50a53104dd77926"], 0x4c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4008800) unshare(0x40040000) syz_clone(0x2020100, &(0x7f0000002300)="215da9eb4fe8b0daa718bfb5ec7832d67022c7c263f8d6c3108825743dfdf2d47ad279f8aad709e824d0dafad038daf8eebb673f323244d1144c6d5ee08fc7177652ae8a549c637d483b3fd0445087eecceba035ceefb9cb6c", 0x59, &(0x7f0000002380), &(0x7f00000023c0), &(0x7f0000002400)="976b6469995d4e15c3e0fcff35bdba90cfe1d2d09d05ba1c16aabe5198879e70be37d9e6350c4876c8ef4cf28364c647203872047e35b910b6b083cd8f9646e6c38f82c5e58bd06b82edb943d7e5fad541affe7431bf9f8fb8383932b058969b8f1e788924cfb78e78ef075ccc2eccee5870a1bdd1b2") getgroups(0x2, &(0x7f0000002700)=[0xee01, 0xffffffffffffffff]) 8.596711694s ago: executing program 1 (id=1505): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0xc, &(0x7f00000000c0)=0x20001, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', &(0x7f00000000c0)={0x0, 0x0, 0x3}, 0x65) sched_setaffinity(0x0, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x33, 0x0, 0x0) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_dccp_int(r1, 0x21, 0x6, &(0x7f0000000100)=0x5, 0x4) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs2/custom1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x0, 0xfffffffffffffffd}) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2002, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x2c, 0x0, &(0x7f0000000440)=[@increfs_done={0x40106308, 0x4000000000}, @release, @clear_death={0x400c630f, 0x2}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000740), 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000380)='2', 0x1}], 0x1) set_mempolicy(0x2, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000000)={@loopback={0xfec0ffff00000000}, @remote, @loopback, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2050242}) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x42031, 0xffffffffffffffff, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(r6, 0x0, r6) setsockopt$inet_tcp_int(r6, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) 7.841452541s ago: executing program 0 (id=1508): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x0, 0x0}, 0x10) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001f00)=""/4062, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x800}, 0x8) futex_waitv(0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) preadv(r0, &(0x7f00000007c0)=[{&(0x7f000001cac0)=""/102389, 0x18ff5}], 0x1, 0x9, 0x7) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) openat$sequencer(0xffffffffffffff9c, 0x0, 0x78d84, 0x0) write$sndseq(r2, &(0x7f0000000080), 0x0) fanotify_init(0x202, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0xa8040, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000280)=ANY=[@ANYRES8=r0, @ANYRES16=r1, @ANYRES8], 0x0) dup(r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_TPROXY_REG_ADDR={0x8}]}}}]}]}], {0x14}}, 0x7c}}, 0x0) socket(0x0, 0x0, 0x0) pipe(0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x1000000000, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000005c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f200011800e000100636f6e6e6c696d69740000000c0002800800014000000000400000000c0a01020000000000000000010000000900020073797a320000000014000380100000800800034000000002040400800900010073797a30"], 0xe4}}, 0x0) 7.7719496s ago: executing program 3 (id=1510): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000013c0), 0x43c}}, 0x0) recvmmsg(r3, &(0x7f0000000b40)=[{{0x0, 0x0, &(0x7f0000010100)=[{&(0x7f0000000280)=""/195, 0xc3}], 0x1}}], 0x1, 0x12020, 0x0) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0x8, 0x0, 0x0, 0x0, 0x0, {[@window={0x9, 0x3}, @generic={0x0, 0x8, "d58838068b91"}]}}}}}}, 0x42) 7.221289893s ago: executing program 0 (id=1512): r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000a80)={{0x2, 0x0, @empty}, {0x0, @remote}, 0x4a, {}, 'lo\x00'}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) preadv(r1, &(0x7f0000000740)=[{&(0x7f0000002300)=""/250, 0xfa}, {&(0x7f0000000500)=""/97, 0x4c}, {&(0x7f0000000780)=""/133, 0x95}, {&(0x7f0000000640)=""/52, 0x33}], 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000000080)={0x4000000}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r5 = dup(r4) ioctl$KVM_SET_VAPIC_ADDR(r5, 0x4008ae93, &(0x7f00000000c0)=0xffff) ioctl$KVM_RUN(r5, 0xae80, 0x0) 7.132304035s ago: executing program 4 (id=1513): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000001c0)=0x0) prlimit64(r0, 0x1, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20000004) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r3 = creat(&(0x7f0000000180)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000640)=[{{&(0x7f00000002c0)=@nfc_llcp, 0x80, &(0x7f0000000340), 0x0, &(0x7f00000003c0)=""/10, 0xa}, 0x4}, {{&(0x7f0000000540)=@xdp, 0x80, &(0x7f00000005c0)=[{0x0}], 0x1, &(0x7f0000000600)=""/45, 0x2d}, 0x5}], 0x2, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r4, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0xf000) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r4, 0x84, 0x79, &(0x7f0000000400)=ANY=[@ANYBLOB="f875b427a228b4"], 0x8) 6.959776243s ago: executing program 3 (id=1514): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001800), 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) syz_open_dev$video(&(0x7f0000000100), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0xffffffffffffffca, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r2, &(0x7f0000000100), 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) ioctl$IOMMU_TEST_OP_ADD_RESERVED(0xffffffffffffffff, 0x3ba0, 0x0) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmmsg$alg(r6, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmsg$nl_route_sched_retired(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000013c0), 0x43c}}, 0x0) recvmmsg(r6, &(0x7f0000000b40)=[{{0x0, 0xffffffffffffffb8, &(0x7f0000010100)=[{&(0x7f0000010040)=""/136, 0x75}, {&(0x7f0000000280)=""/195, 0xc3}, {&(0x7f0000010000)=""/22}], 0x2}}], 0x1, 0x12020, 0x0) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x0, {[@window={0x9, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 5.114351068s ago: executing program 4 (id=1515): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x18, 0x301, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8}, [@FRA_DST={0x14, 0x1, @mcast1={0xff, 0x5}}]}, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYBLOB="080001"], 0x2c}}, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x20000000, &(0x7f0000000240)={0x2, 0x0, @local}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000040)={'vxcan1\x00'}) r4 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005bc0), 0x0, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={0x0}}, 0x0) recvmmsg(r6, &(0x7f0000001100)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) ioctl$MON_IOCX_GETX(r4, 0x4018920a, &(0x7f0000000180)={&(0x7f0000000140), &(0x7f0000000580)=""/196, 0xc4}) socket$igmp(0x2, 0x3, 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r7 = memfd_create(&(0x7f00000008c0)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xadNaC\xa6\xf9\xa7>c\x84\xd8\xfa\xf1\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8g8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xd8\x12\x8cXc5%\x03\x8d`\xdayC\x9b\x9a\xd9c\xe9\xb4\v\x99\x87\xe4\x00\x8a\x8eS\x8e\f\x05YH\xa2\x0e\xbc\x9c\x95\b2Cf6\x9a\xe7\xb9\x86\xbe\xd0\xda\x91\xc1sl\x11PA\x93\xa5\x93\xc8\xf1w\x7fp6z\xbf\xe8[\'u\xb8\xd2$K\x12\rt\x87\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00r\xe2`\xdf\xd2\xb3\xaf\xe9\xc4!Z\xb4&\xa2\x12\xe2i\x91kC$A\xafR\xb3\xff\x1d=\xec\x10\xb4+\x13\'\x92>\x14\x00\a\xb6R\x8b\xdcz\xc3\xd1Y\xd6\xd9;s \xb0\x938\xb7D9\xdcN\xbd\xdbn\xe35\xa7\x02\x9c\xc1\xd9\x13?\xc9\xd7\xab\x9c\xf3\x82\xd1\xee^kk\xce\xdbn\x02\x1f\x80\t\xdbr\xa9\xcc\xf1\xcb\x9f@\x8c\xfc\x02W/p\x97\xb0\xbd\x8f\xdb|n2a\xee\x95u\x83\xca\x8a>}\xd3\xd0\xff6.pa\x17\xe3e\xd2\x7f\xf6\xbc\x9d\x112\x1b\x14p\xa1\xd6u\xefn\xb4\xa3\x05D\x8c\xc5l\xcc\b\xeb\xf42\xe9\xf15\xf3\xf2\xee\xd6\xed\t\xb3\xf7\x1a\x7f\xe6\xb4z\x19\xe1\xb4w\xf7\xa6\xd7\\\xfa\x96\xe2', 0x7) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x0, 0x13, r7, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) dup3(r7, r8, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x2c011, r8, 0x0) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x9) bind$netlink(r5, &(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000400)={{}, 0x0, 0x7fffffffffffffff, 0x1}) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 4.919430075s ago: executing program 0 (id=1516): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x11, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index}) ioctl$TIOCSTI(r1, 0x5423, &(0x7f0000000080)=0x7) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) getpid() openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_DQBUF(r2, 0xc0585611, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000040)={0xf0f046}) io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0xb35e, 0x40, 0xfffffffe, 0x0, 0x0, r0}) open(&(0x7f0000000000)='.\x00', 0x20403, 0x0) 4.14969232s ago: executing program 4 (id=1517): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0xc, &(0x7f00000000c0)=0x20001, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', &(0x7f00000000c0)={0x0, 0x0, 0x3}, 0x65) sched_setaffinity(0x0, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x33, 0x0, 0x0) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_dccp_int(r1, 0x21, 0x6, &(0x7f0000000100)=0x5, 0x4) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs2/custom1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x0, 0xfffffffffffffffd}) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2002, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x2c, 0x0, &(0x7f0000000440)=[@increfs_done={0x40106308, 0x4000000000}, @release, @clear_death={0x400c630f, 0x2}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000740), 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000380)='2', 0x1}], 0x1) set_mempolicy(0x2, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000000)={@loopback={0xfec0ffff00000000}, @remote, @loopback, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2050242}) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x42031, 0xffffffffffffffff, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(r6, 0x0, r6) setsockopt$inet_tcp_int(r6, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) 3.887577788s ago: executing program 3 (id=1518): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0xc, &(0x7f00000000c0)=0x20001, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', &(0x7f00000000c0)={0x0, 0x0, 0x3}, 0x65) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x33, 0x0, 0x0) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_dccp_int(r1, 0x21, 0x6, &(0x7f0000000100)=0x5, 0x4) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs2/custom1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x0, 0xfffffffffffffffd}) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2002, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x78, 0x0, &(0x7f0000000440)=[@increfs_done={0x40106308, 0x4000000000}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f00000002c0)={@fd={0x66642a85, 0x0, r1}, @fda={0x66646185, 0x0, 0x2, 0x22}, @ptr={0x70742a85, 0x1, &(0x7f00000007c0)=""/4096, 0x1000, 0x1, 0x800000000000017}}, &(0x7f0000000340)={0x0, 0x18, 0x38}}, 0x400}, @release, @clear_death={0x400c630f, 0x2}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000740), 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000380)='2', 0x1}], 0x1) set_mempolicy(0x2, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000000)={@loopback={0xfec0ffff00000000}, @remote, @loopback, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2050242}) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x42031, 0xffffffffffffffff, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(r6, 0x0, r6) setsockopt$inet_tcp_int(r6, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) 3.150982991s ago: executing program 4 (id=1519): openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0x0, 0xfffffffffffffe1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f00000002c0)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000380)={@my=0x0}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f0000000080)={{@hyper, 0xffffffff}, @any, 0xd, 0x6, 0x5}) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000000)) pwritev2(r2, &(0x7f0000000600)=[{&(0x7f0000000080)='W', 0x1}], 0x1, 0xbe6b, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x9240004}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001d00020026bd700059dbd0c802000000", @ANYRES32=0x0, @ANYBLOB="00001001"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x40010) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x84}}, 0x0) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r6 = dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r6, 0x0) timer_create(0x3, 0x0, &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) 2.935297788s ago: executing program 3 (id=1520): semget$private(0x0, 0x4000000009, 0x0) semop(0x0, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000140), 0x0, 0x2) r0 = timerfd_create(0x9, 0x0) close(r0) r1 = memfd_create(&(0x7f0000000300)='\x00\x8a\xc4\x17\xb9\x0fg\xa5]X\x87:\xfd\xe7\xd4\x10\xb3\xc7e\xbdh\xbb\xd8\x1a\x99\xc9\xfc\x0eL\xa2\xd5\xcb<\xf5\x98\x1c\x8c\x1c\xa2\xf3\xab53\xf2\xb5!=\x1a\xfb\x86*\xc8\xe0\xa5\xb8P/\xc2\xa3`\xeb\a\xab\\z\x19\x05\x06J1\x1bHC=\xb8\x1f\xc1\xa8+Vyh\xce\xde\x85\x9d\x03\xf1\fP\xe8W82\xe3\x14a\xb4\xa0\xaf`\x9a\x03\"Kj\xdd\xc4\x15m5\xa2#\xf1\xbb\xa6\x9cK@\x029\n\xe5$HwD\x91\xad~\xaa3\x05\xe9I\x00\'\xef%*\xe9YV\x9e\xb0\xd8\xf9Xp\xf7\x83\xe4M\xcd\xd7=C\x98\n\xe3\x1f\xa8\x01\x12\x90\t\xaa\xdew\xc5\'\xa5\x13\xee\x15\xf6\x9a\xfa\x9c;ic\xc65s\x97\x91\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/image_size', 0x0, 0xa) dup3(r1, r2, 0x0) fsetxattr(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="467bcde70200800000"], 0x0, 0x0, 0x0) fremovexattr(r0, &(0x7f0000000080)=@known='user.syz\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000180)={0x0, 0xcd}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r4, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="ff020100000000000000f6b6b4"], 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) r5 = syz_open_dev$dri(0x0, 0xfffffffffffffffe, 0x210680) msync(&(0x7f0000d5c000/0x2000)=nil, 0xfffffffffffffef1, 0x0) ioctl$KVM_SET_CPUID2(r4, 0xc008ae88, &(0x7f00000000c0)=ANY=[@ANYRESOCT, @ANYRES16=r5]) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000640)={0x2, 0xfffd, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 2.125021331s ago: executing program 4 (id=1521): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x6, 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000000)={0x3, &(0x7f0000000100)=[{0x200000000006, 0x3, 0x0, 0x7ffc1ffb}, {0xfc5b, 0x9, 0x1, 0x3927}, {0x4, 0x0, 0x9, 0x5}]}) prctl$PR_SET_NO_NEW_PRIVS(0x38, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) preadv(r2, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r3 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r3, 0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/arp\x00') read$FUSE(r4, &(0x7f0000000500)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_open_procfs$userns(r5, 0x0) connect$tipc(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_GET_CAP(r7, 0xc010640c, 0x0) sendmsg$nl_route(r6, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x8004) r8 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKTRACESETUP(r8, 0x541b, 0x0) syz_open_dev$loop(0x0, 0x0, 0xc2003) creat(&(0x7f0000000600)='./file0\x00', 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x181480, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000140)) socket$packet(0x11, 0x3, 0x300) 1.822252643s ago: executing program 3 (id=1522): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000013c0), 0x43c}}, 0x0) recvmmsg(r3, &(0x7f0000000b40)=[{{0x0, 0x0, &(0x7f0000010100)=[{&(0x7f0000000280)=""/195, 0xc3}], 0x1}}], 0x1, 0x12020, 0x0) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xa, 0x0, 0x0, 0x0, 0x0, {[@timestamp={0x5, 0xa}, @generic={0x0, 0x8, "d58838068b91"}]}}}}}}, 0x4a) 1.700425398s ago: executing program 0 (id=1523): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000001c0)=0x0) prlimit64(r0, 0x1, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20000004) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r3 = creat(&(0x7f0000000180)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000640)=[{{&(0x7f00000002c0)=@nfc_llcp, 0x80, &(0x7f0000000340), 0x0, &(0x7f00000003c0)=""/10, 0xa}, 0x4}, {{&(0x7f0000000540)=@xdp, 0x80, &(0x7f00000005c0)=[{0x0}], 0x1, &(0x7f0000000600)=""/45, 0x2d}, 0x5}], 0x2, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r4, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0xf000) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r4, 0x84, 0x79, &(0x7f0000000400)=ANY=[@ANYBLOB="f875b427a228b4"], 0x8) 1.0467252s ago: executing program 4 (id=1524): r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000a80)={{0x2, 0x0, @empty}, {0x0, @link_local}, 0x4a, {}, 'lo\x00'}) unshare(0x22020400) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r2 = landlock_create_ruleset(&(0x7f0000000100)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x90) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000080)={0x41, 0x0, 0x3}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x2041}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) mount$fuseblk(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0420eb00000000000100090000007fe708000000bdc8a0930136388520a54a95a0a1094ada47f103d4dda5db7d9eddd63c0d1832120bb29b66c45420de69818b4a042d06"]) r6 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000080)='pkcs7_test\x00', 0x0, &(0x7f0000000200)="3081a3", 0x1001, r6) r7 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r7, &(0x7f0000000800)={&(0x7f0000000640)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_retopts={{0x18, 0x0, 0x34, {[@rr={0x7, 0x3}, @ra={0x94, 0x4}]}}}], 0x18}, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) unlink(&(0x7f0000000140)='./cgroup\x00') setns(r1, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'md5-generic\x00'}, 0x5a) r9 = accept4(r8, 0x0, 0x0, 0x0) write(r9, &(0x7f0000000040)="cb", 0xfffffdef) 0s ago: executing program 0 (id=1525): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$dri(0x0, 0x1ff, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r5 = fanotify_init(0x200, 0x0) copy_file_range(r5, 0x0, r4, 0x0, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r6, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) unshare(0x24020400) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) fgetxattr(r7, &(0x7f0000000000)=@known='system.sockprotoname\x00', &(0x7f0000000040)=""/111, 0xfffffffffffffd73) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000240)="652ef20f320f017afcf3660f2092b800008ec8b8580c8ec026643ef30f5dcb67d0dd813ab9b266b9bf090000660f38823866ba000000000f3066b9800000c00f326635010000000f30", 0x49}], 0x1, 0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy_home_node(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0) r8 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r8, 0xc4c85513, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}) r9 = socket$nl_rdma(0x10, 0x3, 0x14) r10 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) dup3(r9, r10, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f00000001c0)={'syztnl0\x00', 0x0, 0x29, 0x0, 0xf3, 0x7, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, @private1, 0x10, 0x0, 0x0, 0x3}}) kernel console output (not intermixed with test programs): 11537] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1268'. [ 570.286570][ T5300] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 570.528006][ T5300] usb 3-1: Using ep0 maxpacket: 16 [ 570.551047][ T5300] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 570.565603][ T5300] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 570.578000][ T5300] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 570.608805][ T5300] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 570.619904][ T5300] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.632116][ T5300] usb 3-1: config 0 descriptor?? [ 571.177426][T11542] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 571.277863][T11542] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 572.291623][T11553] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 572.451733][T11557] netlink: 'syz.3.1275': attribute type 10 has an invalid length. [ 572.513800][ T29] kauditd_printk_skb: 65 callbacks suppressed [ 572.513821][ T29] audit: type=1326 audit(1726204291.157:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11556 comm="syz.3.1275" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f10a077def9 code=0x0 [ 572.576858][T11557] team0: Port device dummy0 added [ 572.770835][T11564] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1277'. [ 573.227890][ T5300] usbhid 3-1:0.0: can't add hid device: -71 [ 573.231770][T11565] tipc: Started in network mode [ 573.265712][ T5300] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 573.285804][T11565] tipc: Node identity 4a90dabcdc51, cluster identity 4711 [ 573.324908][T11565] tipc: Enabled bearer , priority 10 [ 573.332454][ T5300] usb 3-1: USB disconnect, device number 57 [ 573.677468][T11581] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1281'. [ 574.453027][ T5296] tipc: Node number set to 2529286844 [ 574.619940][T11596] netlink: 4096 bytes leftover after parsing attributes in process `syz.1.1284'. [ 574.657079][T11596] openvswitch: netlink: Actions may not be safe on all matching packets [ 574.988654][ T9604] usb 2-1: new low-speed USB device number 59 using dummy_hcd [ 575.190623][ T9604] usb 2-1: Invalid ep0 maxpacket: 32 [ 575.368722][ T9604] usb 2-1: new low-speed USB device number 60 using dummy_hcd [ 575.600506][ T9604] usb 2-1: Invalid ep0 maxpacket: 32 [ 575.652654][ T9604] usb usb2-port1: attempt power cycle [ 575.774612][T11609] vivid-000: ================= START STATUS ================= [ 575.786498][T11609] vivid-000: Radio HW Seek Mode: Bounded [ 575.796654][T11609] vivid-000: Radio Programmable HW Seek: false [ 575.803711][T11609] vivid-000: RDS Rx I/O Mode: Block I/O [ 575.814357][T11609] vivid-000: Generate RBDS Instead of RDS: false [ 575.848956][T11092] Bluetooth: hci1: Opcode 0x206a failed: -110 [ 575.856028][ T4625] Bluetooth: hci1: command 0x206a tx timeout [ 575.869928][T11609] vivid-000: RDS Reception: true [ 575.901035][T11609] vivid-000: RDS Program Type: 0 inactive [ 575.920507][T11609] vivid-000: RDS PS Name: inactive [ 575.927329][T11609] vivid-000: RDS Radio Text: inactive [ 575.937024][T11609] vivid-000: RDS Traffic Announcement: false inactive [ 575.947297][T11609] vivid-000: RDS Traffic Program: false inactive [ 575.996763][T11609] vivid-000: RDS Music: false inactive [ 576.005062][T11609] vivid-000: ================== END STATUS ================== [ 576.129756][ T9604] usb 2-1: new low-speed USB device number 61 using dummy_hcd [ 576.240894][ T9604] usb 2-1: Invalid ep0 maxpacket: 32 [ 576.398685][ T9604] usb 2-1: new low-speed USB device number 62 using dummy_hcd [ 576.449414][ T9604] usb 2-1: Invalid ep0 maxpacket: 32 [ 576.463714][ T9604] usb usb2-port1: unable to enumerate USB device [ 576.665287][ T5290] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 576.869015][ T5290] usb 3-1: Using ep0 maxpacket: 8 [ 576.887750][ T5290] usb 3-1: config 1 has an invalid descriptor of length 129, skipping remainder of the config [ 577.011837][ T5290] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 577.062414][ T5290] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 577.110934][ T5290] usb 3-1: SerialNumber: syz [ 577.143459][ T5290] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 577.444901][ T9604] usb 3-1: USB disconnect, device number 58 [ 577.528649][ T5290] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 577.740306][ T5290] usb 4-1: Using ep0 maxpacket: 16 [ 577.766108][ T5290] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 577.825783][ T5290] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 577.873431][ T5290] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 577.907159][ T5290] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 577.934261][ T5290] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.965379][ T5290] usb 4-1: config 0 descriptor?? [ 578.151340][ T9598] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 578.348619][ T9598] usb 2-1: Using ep0 maxpacket: 16 [ 578.366417][ T9598] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 578.414882][ T9598] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 578.451821][ T9598] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.478612][ T9598] usb 2-1: Product: syz [ 578.508092][ T9598] usb 2-1: Manufacturer: syz [ 578.530836][ T9598] usb 2-1: SerialNumber: syz [ 578.582280][ T9598] usb 2-1: config 0 descriptor?? [ 578.632579][ T9598] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 579.689365][ T1108] usb 2-1: Failed to submit usb control message: -110 [ 579.705917][ T1108] usb 2-1: unable to send the bmi data to the device: -110 [ 579.733545][ T1108] usb 2-1: unable to get target info from device [ 579.754634][ T1108] usb 2-1: could not get target info (-110) [ 579.765841][ T1108] usb 2-1: could not probe fw (-110) [ 579.853790][T11653] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1295'. [ 580.016276][T11654] netlink: 'syz.2.1295': attribute type 63 has an invalid length. [ 580.030365][T11654] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1295'. [ 580.308327][T11657] syz_tun: entered allmulticast mode [ 580.333142][ T5290] usbhid 4-1:0.0: can't add hid device: -71 [ 580.347476][ T5290] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 580.388270][ T5290] usb 4-1: USB disconnect, device number 51 [ 580.680567][ T46] usb 2-1: USB disconnect, device number 63 [ 580.880453][T11655] syz_tun: left allmulticast mode [ 581.370681][T11659] delete_channel: no stack [ 582.022906][T11678] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1304'. [ 582.093721][T11675] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 38166 - 0 [ 582.120012][T11675] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 38166 - 0 [ 582.134946][T11675] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 38166 - 0 [ 582.156053][T11678] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1304'. [ 582.165996][T11675] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 38166 - 0 [ 582.182340][T11675] netdevsim netdevsim2 netdevsim0: set [1, 2] type 2 family 0 port 34780 - 0 [ 582.191521][T11675] netdevsim netdevsim2 netdevsim1: set [1, 2] type 2 family 0 port 34780 - 0 [ 582.232294][T11675] netdevsim netdevsim2 netdevsim2: set [1, 2] type 2 family 0 port 34780 - 0 [ 582.242191][T11675] netdevsim netdevsim2 netdevsim3: set [1, 2] type 2 family 0 port 34780 - 0 [ 582.260536][T11675] geneve2: entered promiscuous mode [ 582.294474][T11675] geneve2: entered allmulticast mode [ 582.350444][T11681] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1306'. [ 582.391408][ T35] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 582.489635][ T5282] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 582.530787][ T5290] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 582.584123][T11092] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 582.594240][T11092] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 582.602939][T11092] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 582.611728][T11092] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 582.622613][T11092] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 582.630720][T11092] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 582.739761][ T5282] usb 3-1: Using ep0 maxpacket: 16 [ 582.756843][ T5290] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 582.780293][ T5282] usb 3-1: config 0 has an invalid descriptor of length 123, skipping remainder of the config [ 582.791321][ T5290] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 582.800829][ T5282] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 582.816063][ T5282] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 582.827383][ T5282] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.866751][ T5290] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 582.876093][ T5290] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 582.884944][ T5290] usb 4-1: SerialNumber: syz [ 582.903625][ T5282] usb 3-1: config 0 descriptor?? [ 583.219897][T11675] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 583.296296][T11675] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 583.390463][ T5282] usb 3-1: string descriptor 0 read error: -71 [ 583.415235][ T5282] usb 3-1: USB disconnect, device number 59 [ 583.514132][T11689] chnl_net:caif_netlink_parms(): no params data found [ 583.602313][ T5290] usb 4-1: 0:2 : does not exist [ 583.624834][ T5290] usb 4-1: unit 5 not found! [ 583.671936][ T5290] usb 4-1: USB disconnect, device number 52 [ 583.818221][ T7759] udevd[7759]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 583.891273][T11689] bridge0: port 1(bridge_slave_0) entered blocking state [ 583.908797][T11689] bridge0: port 1(bridge_slave_0) entered disabled state [ 583.926104][T11689] bridge_slave_0: entered allmulticast mode [ 583.934724][T11689] bridge_slave_0: entered promiscuous mode [ 583.957459][T11689] bridge0: port 2(bridge_slave_1) entered blocking state [ 583.964806][T11689] bridge0: port 2(bridge_slave_1) entered disabled state [ 583.972146][T11689] bridge_slave_1: entered allmulticast mode [ 583.979886][T11689] bridge_slave_1: entered promiscuous mode [ 584.052444][T11689] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 584.083219][T11689] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 584.202169][T11689] team0: Port device team_slave_0 added [ 584.222411][T11689] team0: Port device team_slave_1 added [ 584.425591][T11689] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 584.447753][T11689] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 584.508543][T11689] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 584.548740][T11689] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 584.562720][T11689] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 584.605246][T11689] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 584.730554][ T4625] Bluetooth: hci2: command tx timeout [ 584.747578][T11689] hsr_slave_0: entered promiscuous mode [ 584.757127][T11689] hsr_slave_1: entered promiscuous mode [ 584.769052][T11689] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 584.801446][T11689] Cannot create hsr debugfs directory [ 585.367171][T11689] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.386036][T11689] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 585.533551][T11689] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.571274][T11689] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 585.788294][T11689] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.809112][T11689] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 585.902474][ T29] audit: type=1326 audit(1726204304.537:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11719 comm="syz.1.1313" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbe6357def9 code=0x0 [ 586.011726][T11689] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.042574][T11689] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 586.152095][T11726] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1313'. [ 586.602525][T11689] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 586.655788][T11689] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 586.736565][T11689] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 586.797604][T11689] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 586.810886][ T4625] Bluetooth: hci2: command tx timeout [ 586.977086][T11735] binder: BINDER_SET_CONTEXT_MGR already set [ 587.002690][T11735] binder: 11733:11735 ioctl 4018620d 20000040 returned -16 [ 587.029492][ T5282] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 587.037923][T11735] binder: 11733:11735 ioctl c0306201 0 returned -14 [ 587.203817][T11689] 8021q: adding VLAN 0 to HW filter on device bond0 [ 587.258906][ T5282] usb 4-1: Using ep0 maxpacket: 32 [ 587.307286][ T5282] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 587.315772][T11689] 8021q: adding VLAN 0 to HW filter on device team0 [ 587.340355][ T5282] usb 4-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00 [ 587.402138][ T5282] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 587.431633][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 587.438801][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 587.498957][ T5282] usb 4-1: config 0 descriptor?? [ 587.530716][ T3021] bridge0: port 2(bridge_slave_1) entered blocking state [ 587.537879][ T3021] bridge0: port 2(bridge_slave_1) entered forwarding state [ 587.784407][ T29] audit: type=1326 audit(1726204306.427:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11740 comm="syz.2.1318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe21397def9 code=0x7ffc0000 [ 587.906537][ T29] audit: type=1326 audit(1726204306.427:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11740 comm="syz.2.1318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe21397def9 code=0x7ffc0000 [ 587.951783][T11732] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 587.976132][ T29] audit: type=1326 audit(1726204306.457:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11740 comm="syz.2.1318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7fe21397def9 code=0x7ffc0000 [ 588.045128][ T29] audit: type=1326 audit(1726204306.457:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11740 comm="syz.2.1318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe21397def9 code=0x7ffc0000 [ 588.103038][ T29] audit: type=1326 audit(1726204306.457:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11740 comm="syz.2.1318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe21397def9 code=0x7ffc0000 [ 588.203834][ T29] audit: type=1326 audit(1726204306.477:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11740 comm="syz.2.1318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7fe21397def9 code=0x7ffc0000 [ 588.247645][ T5282] usbhid 4-1:0.0: can't add hid device: -71 [ 588.287708][ T5282] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 588.299184][T11689] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 588.327880][ T29] audit: type=1326 audit(1726204306.477:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11740 comm="syz.2.1318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe21397def9 code=0x7ffc0000 [ 588.373251][ T5282] usb 4-1: USB disconnect, device number 53 [ 588.444299][ T29] audit: type=1326 audit(1726204306.477:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11740 comm="syz.2.1318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe21397c890 code=0x7ffc0000 [ 588.444355][ T29] audit: type=1326 audit(1726204306.507:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11740 comm="syz.2.1318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe21397def9 code=0x7ffc0000 [ 588.580648][T11689] veth0_vlan: entered promiscuous mode [ 588.642604][T11689] veth1_vlan: entered promiscuous mode [ 588.764350][T11756] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 588.906162][ T4625] Bluetooth: hci2: command tx timeout [ 588.952809][T11689] veth0_macvtap: entered promiscuous mode [ 588.983302][T11689] veth1_macvtap: entered promiscuous mode [ 589.009361][T11689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 589.009387][T11689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.009399][T11689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 589.009414][T11689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.009437][T11689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 589.009454][T11689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.030572][T11689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 589.030596][T11689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.030614][T11689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 589.030631][T11689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.030651][T11689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 589.030662][T11689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.030676][T11689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 589.030687][T11689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.030701][T11689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 589.030712][T11689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.030725][T11689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 589.030736][T11689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.033971][T11689] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 589.098758][T11689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 589.382301][T11689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.382320][T11689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 589.382335][T11689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.382345][T11689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 589.382356][T11689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.382375][T11689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 589.382386][T11689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.382400][T11689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 589.382411][T11689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.382424][T11689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 589.382435][T11689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.382449][T11689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 589.382460][T11689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.382474][T11689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 589.382484][T11689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.382498][T11689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 589.382509][T11689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.402015][T11689] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 589.430536][T11760] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1322'. [ 589.457308][T11689] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.457342][T11689] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.457365][T11689] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.457387][T11689] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.715084][ T3021] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 589.715106][ T3021] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 589.810459][ T3021] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 589.810482][ T3021] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 589.893012][T11763] IPv6: NLM_F_REPLACE set, but no existing node found! [ 590.086828][T11770] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 590.201066][T11775] netlink: 'syz.3.1324': attribute type 10 has an invalid length. [ 590.224016][T11775] team0: Device ipvlan1 failed to register rx_handler [ 590.574837][T11776] netlink: 'syz.4.1303': attribute type 21 has an invalid length. [ 590.575154][T11776] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1303'. [ 590.836983][T11786] IPv6: NLM_F_REPLACE set, but no existing node found! [ 590.973495][ T4625] Bluetooth: hci2: command tx timeout [ 591.052686][T11791] binder: BINDER_SET_CONTEXT_MGR already set [ 591.052714][T11791] binder: 11787:11791 ioctl 4018620d 20000040 returned -16 [ 591.054075][T11791] binder: 11787:11791 ioctl c0306201 0 returned -14 [ 591.682945][T11794] "syz.4.1329" (11794) uses obsolete ecb(arc4) skcipher [ 592.538590][ T5296] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 592.756946][ T5296] usb 3-1: string descriptor 0 read error: -22 [ 592.774977][ T5296] usb 3-1: New USB device found, idVendor=30c9, idProduct=0093, bcdDevice=18.c6 [ 592.819035][ T5296] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 592.871550][ T5296] usb 3-1: config 0 descriptor?? [ 592.926748][ T5296] usb 3-1: Found UVC 0.00 device (30c9:0093) [ 592.933911][ T5296] usb 3-1: No valid video chain found. [ 593.475212][T11803] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 593.642463][T11825] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1335'. [ 594.109240][T11825] netlink: 'syz.3.1335': attribute type 10 has an invalid length. [ 594.348923][ T5300] IPVS: starting estimator thread 0... [ 594.458592][T11832] IPVS: using max 24 ests per chain, 57600 per kthread [ 594.548713][ T46] usb 4-1: new full-speed USB device number 54 using dummy_hcd [ 594.770892][ T46] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 594.801866][ T46] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 594.849704][ T46] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 576, setting to 64 [ 594.871123][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 594.871144][ T29] audit: type=1326 audit(1726204313.517:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11811 comm="syz.4.1333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9df517def9 code=0x7ffc0000 [ 594.899577][ C0] vkms_vblank_simulate: vblank timer overrun [ 594.905218][ T46] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 594.957598][ T46] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 595.003742][ T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 595.017671][ T29] audit: type=1326 audit(1726204313.537:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11811 comm="syz.4.1333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9df517def9 code=0x7ffc0000 [ 595.045626][ T46] usb 4-1: SerialNumber: syz [ 595.096691][T11823] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 595.122016][ T46] cdc_acm 4-1:1.0: Control and data interfaces are not separated! [ 595.169975][ T29] audit: type=1326 audit(1726204313.547:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11811 comm="syz.4.1333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f9df517def9 code=0x7ffc0000 [ 595.211489][ T9604] usb 3-1: USB disconnect, device number 60 [ 595.213892][ T46] cdc_acm 4-1:1.0: probe with driver cdc_acm failed with error -12 [ 595.302818][ T29] audit: type=1326 audit(1726204313.547:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11811 comm="syz.4.1333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9df517def9 code=0x7ffc0000 [ 595.446974][ T29] audit: type=1326 audit(1726204313.547:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11811 comm="syz.4.1333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9df517def9 code=0x7ffc0000 [ 595.492912][ T29] audit: type=1326 audit(1726204313.547:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11811 comm="syz.4.1333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9df517def9 code=0x7ffc0000 [ 595.516726][ T29] audit: type=1326 audit(1726204313.577:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11811 comm="syz.4.1333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9df517def9 code=0x7ffc0000 [ 595.540195][ T29] audit: type=1326 audit(1726204313.577:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11811 comm="syz.4.1333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f9df517def9 code=0x7ffc0000 [ 595.564858][ T29] audit: type=1326 audit(1726204313.577:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11811 comm="syz.4.1333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9df517def9 code=0x7ffc0000 [ 595.746556][ T29] audit: type=1326 audit(1726204313.577:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11811 comm="syz.4.1333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9df517def9 code=0x7ffc0000 [ 595.983488][T11845] netlink: 'syz.1.1338': attribute type 10 has an invalid length. [ 595.991675][ T5296] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 596.112026][T11845] team0: Device ipvlan1 failed to register rx_handler [ 596.210601][ T5296] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 596.235096][ T5296] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 596.292114][ T5296] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 596.325792][ T5296] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 596.382050][ T5296] usb 3-1: config 0 descriptor?? [ 596.545457][ T5290] usb 4-1: USB disconnect, device number 54 [ 596.874879][ T5296] cm6533_jd 0003:0D8C:0022.0014: unknown main item tag 0x0 [ 596.924813][T11855] IPv6: NLM_F_REPLACE set, but no existing node found! [ 596.933890][ T5296] cm6533_jd 0003:0D8C:0022.0014: unknown main item tag 0x0 [ 596.971375][ T5296] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0D8C:0022.0014/input/input37 [ 597.081336][ T5296] cm6533_jd 0003:0D8C:0022.0014: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0 [ 597.368857][ T4625] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 597.378060][ T4625] Bluetooth: hci5: Injecting HCI hardware error event [ 597.387481][T11092] Bluetooth: hci5: hardware error 0x00 [ 597.444290][T11867] syz.4.1343 (11867): attempted to duplicate a private mapping with mremap. This is not supported. [ 597.933123][T11877] binder: BINDER_SET_CONTEXT_MGR already set [ 597.962843][T11877] binder: 11874:11877 ioctl 4018620d 20000040 returned -16 [ 597.999190][T11877] binder: 11874:11877 ioctl c0306201 0 returned -14 [ 598.288595][ T5300] usb 3-1: reset high-speed USB device number 61 using dummy_hcd [ 598.333328][ T63] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.642046][ T63] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.783364][ T63] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.997364][ T63] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.178697][T11892] wlan1: mtu greater than device maximum [ 599.195473][T11892] team0: Device wlan1 failed to change mtu [ 599.208772][ T46] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 599.363148][ T5296] usb 3-1: USB disconnect, device number 61 [ 599.440180][ T46] usb 5-1: Using ep0 maxpacket: 8 [ 599.448775][T11092] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 599.461197][ T46] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 599.486844][ T46] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 599.500701][ T46] usb 5-1: Product: syz [ 599.505022][ T46] usb 5-1: Manufacturer: syz [ 599.509971][ T46] usb 5-1: SerialNumber: syz [ 599.535691][ T46] usb 5-1: config 0 descriptor?? [ 599.574272][ T63] bridge_slave_1: left allmulticast mode [ 599.606702][ T63] bridge_slave_1: left promiscuous mode [ 599.679176][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 599.701887][ T4625] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 599.716235][ T4625] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 599.725399][ T4625] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 599.735411][ T4625] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 599.745331][ T4625] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 599.752985][ T4625] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 599.848811][ T46] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 599.936920][ T63] bridge_slave_0: left allmulticast mode [ 599.952192][ T63] bridge_slave_0: left promiscuous mode [ 599.969027][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 600.662406][T11913] libceph: resolve '40' (ret=-3): failed [ 601.521894][T11937] xt_limit: Overflow, try lower: 4294967295/4294966784 [ 601.837711][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 601.847079][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 601.849182][ T4625] Bluetooth: hci1: command tx timeout [ 601.855714][ T63] bond0 (unregistering): Released all slaves [ 601.911629][T11923] IPv6: NLM_F_REPLACE set, but no existing node found! [ 602.877202][ T63] hsr_slave_0: left promiscuous mode [ 602.880408][ T63] hsr_slave_1: left promiscuous mode [ 602.920241][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 602.920329][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 602.939875][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 602.939921][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 603.055968][ T63] veth1_macvtap: left promiscuous mode [ 603.056095][ T63] veth0_macvtap: left promiscuous mode [ 603.056340][ T63] veth1_vlan: left promiscuous mode [ 603.056495][ T63] veth0_vlan: left promiscuous mode [ 603.069736][T11955] binder: BINDER_SET_CONTEXT_MGR already set [ 603.069755][T11955] binder: 11953:11955 ioctl 4018620d 20000040 returned -16 [ 603.513735][ T46] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 603.552780][ T46] usb 5-1: USB disconnect, device number 73 [ 603.931020][ T4625] Bluetooth: hci1: command tx timeout [ 605.251619][ T63] team0 (unregistering): Port device team_slave_1 removed [ 605.324774][ T63] team0 (unregistering): Port device team_slave_0 removed [ 606.023314][ T4625] Bluetooth: hci1: command tx timeout [ 606.094742][T11965] bridge0: entered allmulticast mode [ 606.150890][T11973] sch_tbf: burst 480 is lower than device veth1_to_bridge mtu (1514) ! [ 606.344858][T11979] netlink: del zone limit has 8 unknown bytes [ 606.425439][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 606.425459][ T29] audit: type=1326 audit(1726204325.037:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11977 comm="syz.3.1364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10a077def9 code=0x7ffc0000 [ 606.599306][ T29] audit: type=1326 audit(1726204325.037:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11977 comm="syz.3.1364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=445 compat=0 ip=0x7f10a077def9 code=0x7ffc0000 [ 606.682779][ T29] audit: type=1326 audit(1726204325.037:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11977 comm="syz.3.1364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10a077def9 code=0x7ffc0000 [ 606.782474][ T29] audit: type=1326 audit(1726204325.037:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11977 comm="syz.3.1364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10a077def9 code=0x7ffc0000 [ 606.919836][T11899] chnl_net:caif_netlink_parms(): no params data found [ 606.967158][ T29] audit: type=1326 audit(1726204325.037:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11977 comm="syz.3.1364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f10a077def9 code=0x7ffc0000 [ 606.998890][ T9604] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 607.022128][ T29] audit: type=1326 audit(1726204325.037:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11977 comm="syz.3.1364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10a077def9 code=0x7ffc0000 [ 607.055443][ T29] audit: type=1326 audit(1726204325.037:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11977 comm="syz.3.1364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10a077def9 code=0x7ffc0000 [ 607.175735][ T29] audit: type=1326 audit(1726204325.047:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11977 comm="syz.3.1364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f10a077def9 code=0x7ffc0000 [ 607.218180][ T29] audit: type=1326 audit(1726204325.047:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11977 comm="syz.3.1364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10a077def9 code=0x7ffc0000 [ 607.255456][ T29] audit: type=1326 audit(1726204325.047:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11977 comm="syz.3.1364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f10a077def9 code=0x7ffc0000 [ 607.401167][ T9604] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 607.451173][ T9604] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 607.501434][ T9604] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 607.562438][ T9604] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 607.598709][T12007] xt_NFQUEUE: number of total queues is 0 [ 607.638152][ T9604] usb 4-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 607.669517][T12008] IPv6: NLM_F_REPLACE set, but no existing node found! [ 607.685911][ T9604] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 607.722292][ T9604] usb 4-1: Product: syz [ 607.763290][ T9604] usb 4-1: Manufacturer: syz [ 607.789220][ T9604] usb 4-1: SerialNumber: syz [ 607.823777][T11899] bridge0: port 1(bridge_slave_0) entered blocking state [ 607.840829][ T9604] usb 4-1: config 0 descriptor?? [ 607.903542][T11899] bridge0: port 1(bridge_slave_0) entered disabled state [ 607.919732][ T9604] ums-isd200 4-1:0.0: USB Mass Storage device detected [ 607.929223][T11899] bridge_slave_0: entered allmulticast mode [ 607.936697][T11899] bridge_slave_0: entered promiscuous mode [ 607.950548][T11899] bridge0: port 2(bridge_slave_1) entered blocking state [ 607.968390][T11899] bridge0: port 2(bridge_slave_1) entered disabled state [ 608.003905][T11899] bridge_slave_1: entered allmulticast mode [ 608.032891][T11899] bridge_slave_1: entered promiscuous mode [ 608.071637][T12017] xt_CT: You must specify a L4 protocol and not use inversions on it [ 608.088935][ T4625] Bluetooth: hci1: command tx timeout [ 608.247609][T11899] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 608.337390][T11899] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 608.548280][T11899] team0: Port device team_slave_0 added [ 608.641111][T11899] team0: Port device team_slave_1 added [ 608.843725][T11899] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 608.892861][T11899] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 608.918776][ C1] vkms_vblank_simulate: vblank timer overrun [ 609.006636][T11899] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 609.028938][ T5296] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 609.077075][T11899] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 609.100951][T11899] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 609.192934][T11899] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 609.216436][T12024] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1370'. [ 609.383827][ T5296] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 609.402616][ T5296] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 609.454491][ T5296] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 609.517634][ T5296] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 609.533832][ T9604] scsi host1: usb-storage 4-1:0.0 [ 609.606517][ T9604] usb 4-1: USB disconnect, device number 55 [ 609.613593][ T5296] usb 2-1: Manufacturer: syz [ 609.638994][ T5296] usb 2-1: config 0 descriptor?? [ 609.858621][ T5296] rc_core: IR keymap rc-hauppauge not found [ 609.874868][ T5296] Registered IR keymap rc-empty [ 609.889118][T12041] binder: BINDER_SET_CONTEXT_MGR already set [ 609.897354][T12041] binder: 12037:12041 ioctl 4018620d 20000040 returned -16 [ 609.909568][ T5296] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 609.957199][T11899] hsr_slave_0: entered promiscuous mode [ 609.960687][ T5296] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input38 [ 609.996660][T11899] hsr_slave_1: entered promiscuous mode [ 610.011477][T12045] dns_resolver: Unsupported server list version (0) [ 610.033488][T11899] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 610.049001][T11899] Cannot create hsr debugfs directory [ 610.312111][T12026] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1371'. [ 610.355442][T12045] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1371'. [ 610.973952][ T9603] usb 2-1: USB disconnect, device number 64 [ 611.108795][ T9604] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 611.120086][T12063] xt_NFQUEUE: number of total queues is 0 [ 611.338809][ T9604] usb 4-1: Using ep0 maxpacket: 32 [ 611.362499][T12068] misc userio: Can't change port type on an already running userio instance [ 611.373795][ T9604] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 611.406106][ T9604] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 611.474431][ T9604] usb 4-1: config 0 descriptor?? [ 611.499498][ T9604] gspca_main: sunplus-2.14.0 probing 041e:400b [ 612.404028][T12083] Cannot find set identified by id 0 to match [ 612.668797][ T9604] gspca_sunplus: reg_w_riv err -110 [ 612.694253][ T9604] sunplus 4-1:0.0: probe with driver sunplus failed with error -110 [ 613.021337][T11899] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 613.054945][T11899] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 613.124565][T11899] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 613.165173][T11899] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 613.388684][ T9604] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 613.534666][T11899] 8021q: adding VLAN 0 to HW filter on device bond0 [ 613.591207][ T9604] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 613.621705][ T9604] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 613.651004][ T9604] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 613.652114][T11899] 8021q: adding VLAN 0 to HW filter on device team0 [ 613.663027][ T9604] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 613.693763][ T9604] usb 3-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 613.704189][ T9604] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 613.728568][ T9604] usb 3-1: Product: syz [ 613.734531][ T9604] usb 3-1: Manufacturer: syz [ 613.752303][ T8579] bridge0: port 1(bridge_slave_0) entered blocking state [ 613.759533][ T8579] bridge0: port 1(bridge_slave_0) entered forwarding state [ 613.767322][ T9604] usb 3-1: SerialNumber: syz [ 613.832675][ T8579] bridge0: port 2(bridge_slave_1) entered blocking state [ 613.839855][ T8579] bridge0: port 2(bridge_slave_1) entered forwarding state [ 613.871743][ T9604] usb 3-1: config 0 descriptor?? [ 614.103888][ T9604] adutux 3-1:0.0: Could not retrieve serial number [ 614.128306][ T9604] adutux 3-1:0.0: probe with driver adutux failed with error -5 [ 614.270014][T11899] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 614.404196][T11899] veth0_vlan: entered promiscuous mode [ 614.459166][T12110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 614.481621][T11899] veth1_vlan: entered promiscuous mode [ 614.504972][T12110] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 614.531543][T12111] binder: BINDER_SET_CONTEXT_MGR already set [ 614.560407][T12111] binder: 12105:12111 ioctl 4018620d 20000040 returned -16 [ 614.644355][T11899] veth0_macvtap: entered promiscuous mode [ 614.703692][T11899] veth1_macvtap: entered promiscuous mode [ 614.799545][T11899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 614.832577][T11899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 614.864419][T11899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 614.888168][T11899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 614.920996][T11899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 614.982601][T11899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 615.028124][T11899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 615.064004][T11899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 615.095997][T11899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 615.117327][T11899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 615.131314][T11899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 615.143468][T11899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 615.154363][T11899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 615.186237][T11899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 615.222638][T11899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 615.248000][T11899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 615.270035][T11899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 615.285559][T11899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 615.316998][T11899] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 615.367914][T11899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 615.380110][T11899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 615.400197][T11899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 615.413847][T11899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 615.430335][T11899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 615.447960][T11899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 615.461515][T11899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 615.480262][T12121] binder: BINDER_SET_CONTEXT_MGR already set [ 615.488639][T11899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 615.499753][T12121] binder: 12116:12121 ioctl 4018620d 20000040 returned -16 [ 615.517311][T11899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 615.546431][T11899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 615.564836][T11899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 615.584315][T11899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 615.599223][T11899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 615.612750][T11899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 615.625433][T11899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 615.646357][T11899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 615.657493][T11899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 615.670154][T11899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 615.698291][T11899] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 615.727902][T11899] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.753129][T11899] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.785736][T11899] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.831864][T11899] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 616.111206][ T9599] usb 3-1: USB disconnect, device number 62 [ 616.312845][ T1122] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 616.339316][ T1122] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 616.484070][ T3021] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 616.513706][ T3021] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 616.592924][T12140] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1387'. [ 616.614346][T12140] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1387'. [ 616.624564][T12140] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1387'. [ 616.747611][T12143] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1388'. [ 616.780160][T12143] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1388'. [ 616.859264][T12143] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1388'. [ 616.924003][T12151] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:0000:0000:0000 with DS=0xd [ 617.072538][ T29] kauditd_printk_skb: 19 callbacks suppressed [ 617.072559][ T29] audit: type=1326 audit(1726204335.717:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12149 comm="syz.0.1348" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f50e4b7def9 code=0x0 [ 617.418557][ T46] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 617.479529][T12164] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1390'. [ 617.502203][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 617.539209][T12165] binder: BINDER_SET_CONTEXT_MGR already set [ 617.545455][T12165] binder: 12162:12165 ioctl 4018620d 20000040 returned -16 [ 617.625143][ T46] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 617.663690][ T46] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 617.682342][ T46] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 617.705163][ T46] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 617.744474][ T46] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 617.768266][ T46] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 617.820505][ T46] usb 3-1: Product: syz [ 617.835062][ T46] usb 3-1: Manufacturer: syz [ 617.885579][ T46] cdc_wdm 3-1:1.0: skipping garbage [ 617.905353][ T46] cdc_wdm 3-1:1.0: skipping garbage [ 617.922987][ T46] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 617.947702][ T46] cdc_wdm 3-1:1.0: Unknown control protocol [ 617.965878][T12172] IPv6: NLM_F_REPLACE set, but no existing node found! [ 618.137193][ T46] usb 3-1: USB disconnect, device number 63 [ 618.839302][ T9599] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 618.993565][T12196] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 619.053610][ T9599] usb 5-1: unable to get BOS descriptor or descriptor too short [ 619.082751][ T9599] usb 5-1: config 1 has an invalid descriptor of length 205, skipping remainder of the config [ 619.102498][ T9599] usb 5-1: config 1 interface 0 altsetting 127 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 619.142785][ T9599] usb 5-1: config 1 interface 0 has no altsetting 0 [ 619.162169][ T9599] usb 5-1: New USB device found, idVendor=0525, idProduct=fb40, bcdDevice= 0.40 [ 619.173818][ T9599] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 619.201250][ T9599] usb 5-1: Product: syz [ 619.216022][ T9599] usb 5-1: Manufacturer: syz [ 619.232219][ T9599] usb 5-1: SerialNumber: syz [ 619.549058][ T9599] cdc_ether 5-1:1.0: skipping garbage [ 619.561773][ T9599] usb 5-1: bad CDC descriptors [ 619.600316][ T9599] usb 5-1: USB disconnect, device number 74 [ 619.864896][T12181] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1393'. [ 619.877873][T12181] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 619.885971][T12181] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 619.902043][T12181] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 619.909915][T12181] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 620.609734][T12221] binder: BINDER_SET_CONTEXT_MGR already set [ 620.615882][T12221] binder: 12219:12221 ioctl 4018620d 20000040 returned -16 [ 621.986682][ T5300] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 622.188589][ T5300] usb 5-1: Using ep0 maxpacket: 8 [ 622.210708][ T5300] usb 5-1: config 0 has no interfaces? [ 622.231354][ T5300] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 622.259805][ T5300] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 622.304905][ T5300] usb 5-1: Product: syz [ 622.328154][ T5300] usb 5-1: Manufacturer: syz [ 622.338839][ T5300] usb 5-1: SerialNumber: syz [ 622.387991][ T5300] usb 5-1: config 0 descriptor?? [ 622.411332][T11092] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 622.425124][T11092] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 622.434388][T11092] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 622.442787][T11092] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 622.451548][T11092] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 622.459870][T11092] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 622.840398][ T5296] usb 5-1: USB disconnect, device number 75 [ 623.149399][T12247] chnl_net:caif_netlink_parms(): no params data found [ 623.504212][T12247] bridge0: port 1(bridge_slave_0) entered blocking state [ 623.521962][T12247] bridge0: port 1(bridge_slave_0) entered disabled state [ 623.535309][T12247] bridge_slave_0: entered allmulticast mode [ 623.551390][T12247] bridge_slave_0: entered promiscuous mode [ 623.596248][T12247] bridge0: port 2(bridge_slave_1) entered blocking state [ 623.648690][T12247] bridge0: port 2(bridge_slave_1) entered disabled state [ 623.661562][T12247] bridge_slave_1: entered allmulticast mode [ 623.695534][T12247] bridge_slave_1: entered promiscuous mode [ 623.877593][T12247] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 623.912934][T12247] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 623.943550][T12274] xt_NFQUEUE: number of total queues is 0 [ 624.042738][T12247] team0: Port device team_slave_0 added [ 624.095657][T12247] team0: Port device team_slave_1 added [ 624.162715][T12247] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 624.172275][T12247] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 624.207528][T12247] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 624.263930][T12247] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 624.281448][T12247] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 624.354787][T12247] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 624.559287][T12247] hsr_slave_0: entered promiscuous mode [ 624.568730][T11092] Bluetooth: hci6: command tx timeout [ 624.599659][T12247] hsr_slave_1: entered promiscuous mode [ 624.606379][T12247] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 624.624652][T12247] Cannot create hsr debugfs directory [ 624.737251][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.746981][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.038566][ T5290] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 625.166494][T12247] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 625.248190][T12281] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1406'. [ 625.248790][ T5290] usb 3-1: Using ep0 maxpacket: 16 [ 625.273788][ T5290] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 625.289090][ T5290] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 625.338580][ T5290] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 625.384006][ T5290] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 625.400954][T12247] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 625.418343][ T5290] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 625.448358][ T5290] usb 3-1: config 0 descriptor?? [ 625.620162][T12247] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 625.785111][T12247] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 625.872819][T12294] binder: BINDER_SET_CONTEXT_MGR already set [ 625.881259][T12294] binder: 12289:12294 ioctl 4018620d 20000100 returned -16 [ 625.941433][ T29] audit: type=1326 audit(1726204344.577:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12289 comm="syz.4.1409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9df517def9 code=0x7ffc0000 [ 626.017462][ T29] audit: type=1326 audit(1726204344.607:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12289 comm="syz.4.1409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9df517def9 code=0x7ffc0000 [ 626.039867][ C1] vkms_vblank_simulate: vblank timer overrun [ 626.091726][ T29] audit: type=1326 audit(1726204344.617:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12289 comm="syz.4.1409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9df517def9 code=0x7ffc0000 [ 626.131993][ T29] audit: type=1326 audit(1726204344.617:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12289 comm="syz.4.1409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9df517def9 code=0x7ffc0000 [ 626.177476][ T29] audit: type=1326 audit(1726204344.617:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12289 comm="syz.4.1409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9df517c890 code=0x7ffc0000 [ 626.200373][ T5300] usb 2-1: new low-speed USB device number 65 using dummy_hcd [ 626.223129][ T29] audit: type=1326 audit(1726204344.627:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12289 comm="syz.4.1409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9df517dafb code=0x7ffc0000 [ 626.267235][ T29] audit: type=1326 audit(1726204344.627:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12289 comm="syz.4.1409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9df517dafb code=0x7ffc0000 [ 626.289585][ C1] vkms_vblank_simulate: vblank timer overrun [ 626.298906][ T5296] usb 5-1: new full-speed USB device number 76 using dummy_hcd [ 626.327048][ T29] audit: type=1326 audit(1726204344.697:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12289 comm="syz.4.1409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9df517dafb code=0x7ffc0000 [ 626.374882][ T29] audit: type=1326 audit(1726204344.697:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12289 comm="syz.4.1409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9df517dafb code=0x7ffc0000 [ 626.430270][ T5300] usb 2-1: too many configurations: 21, using maximum allowed: 8 [ 626.449855][ T29] audit: type=1326 audit(1726204344.767:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12289 comm="syz.4.1409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9df517dafb code=0x7ffc0000 [ 626.472145][ C1] vkms_vblank_simulate: vblank timer overrun [ 626.503169][ T5300] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 626.514047][ T5296] usb 5-1: config 0 has an invalid descriptor of length 106, skipping remainder of the config [ 626.535774][ T5300] usb 2-1: can't read configurations, error -61 [ 626.544976][ T5296] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 626.572392][ T5296] usb 5-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 626.615598][T12247] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 626.624185][ T5296] usb 5-1: New USB device found, idVendor=413c, idProduct=81d1, bcdDevice=fb.93 [ 626.646623][ T5296] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.661739][T11092] Bluetooth: hci6: command tx timeout [ 626.681024][ T5296] usb 5-1: Product: syz [ 626.699816][ T5296] usb 5-1: Manufacturer: syz [ 626.704584][ T5296] usb 5-1: SerialNumber: syz [ 626.718621][ T5300] usb 2-1: new low-speed USB device number 66 using dummy_hcd [ 626.733049][ T5296] usb 5-1: config 0 descriptor?? [ 626.767664][T12247] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 626.798328][T12247] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 626.827532][T12247] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 626.919903][ T5300] usb 2-1: too many configurations: 21, using maximum allowed: 8 [ 626.933696][ T5300] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 626.988867][ T5300] usb 2-1: can't read configurations, error -61 [ 627.036742][ T5300] usb usb2-port1: attempt power cycle [ 627.182027][T12294] netlink: 'syz.4.1409': attribute type 10 has an invalid length. [ 627.294667][T12247] 8021q: adding VLAN 0 to HW filter on device bond0 [ 627.429707][T12247] 8021q: adding VLAN 0 to HW filter on device team0 [ 627.488512][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 627.488705][ T5300] usb 2-1: new low-speed USB device number 67 using dummy_hcd [ 627.495792][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 627.560970][ T5300] usb 2-1: too many configurations: 21, using maximum allowed: 8 [ 627.592200][ T5300] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 627.643208][ T5300] usb 2-1: can't read configurations, error -61 [ 627.699099][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 627.706311][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 627.828395][ T5290] usbhid 3-1:0.0: can't add hid device: -71 [ 627.839843][ T5290] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 627.864872][ T5290] usb 3-1: USB disconnect, device number 64 [ 627.898679][ T5300] usb 2-1: new low-speed USB device number 68 using dummy_hcd [ 627.969861][ T5300] usb 2-1: too many configurations: 21, using maximum allowed: 8 [ 627.996610][ T5300] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 628.032223][ T5300] usb 2-1: can't read configurations, error -61 [ 628.060819][ T5300] usb usb2-port1: unable to enumerate USB device [ 628.184843][T12247] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 628.316096][T12247] veth0_vlan: entered promiscuous mode [ 628.391232][T12247] veth1_vlan: entered promiscuous mode [ 628.487190][T12247] veth0_macvtap: entered promiscuous mode [ 628.533319][T12247] veth1_macvtap: entered promiscuous mode [ 628.616211][T12247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 628.637799][T12247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 628.651405][T12247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 628.674523][T12247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 628.698647][ T9599] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 628.729198][T11092] Bluetooth: hci6: command tx timeout [ 628.751544][T12247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 628.768544][T12247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 628.799029][ T5300] usb 5-1: USB disconnect, device number 76 [ 628.813062][T12247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 628.824898][T12247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 628.840779][T12247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 628.852456][T12247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 628.864032][T12247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 628.880055][T12247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 628.890970][T12247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 628.904027][T12247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 628.919903][T12247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 628.941180][T12247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 628.955730][ T9599] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 255, changing to 11 [ 628.967738][T12247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 628.988496][ T9599] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 59391, setting to 1024 [ 629.002005][T12247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 629.015887][ T9599] usb 3-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 629.030810][T12247] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 629.038934][ T9599] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 629.072809][T12247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 629.095465][ T9599] usb 3-1: config 0 descriptor?? [ 629.103495][T12247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 629.115873][T12303] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 629.153254][ T4625] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 629.160205][ T9599] gspca_main: spca561-2.14.0 probing abcd:cdee [ 629.169659][T12247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 629.183421][ T4625] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 629.192528][ T4625] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 629.199901][T12247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 629.231007][ T4625] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 629.250954][ T4625] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 629.258596][ T4625] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 629.325975][T12247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 629.377361][T12247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 629.407525][T12303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 629.427235][T12247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 629.467178][T12247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 629.487605][T12247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 629.525320][T12247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 629.541822][T12310] xt_NFQUEUE: number of total queues is 0 [ 629.550006][T12247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 629.572929][T12247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 629.585259][T12247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 629.606251][T12247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 629.619643][T12247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 629.630745][T12247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 629.654372][T12247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 629.668387][T12247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 629.692033][T12247] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 629.708154][T12303] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 629.732563][ T9599] spca561 3-1:0.0: probe with driver spca561 failed with error -22 [ 629.747189][ T9599] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 629.755991][ T9599] usb 3-1: MIDIStreaming interface descriptor not found [ 629.942401][T12247] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.955801][T12247] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.983547][T12247] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.998384][T12247] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.241566][T12303] geneve2: left promiscuous mode [ 630.667439][ T8578] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 630.676864][ T8578] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 630.812678][ T4625] Bluetooth: hci6: command tx timeout [ 630.947887][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 630.957923][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 631.083204][T12308] chnl_net:caif_netlink_parms(): no params data found [ 631.292481][ T4625] Bluetooth: hci7: command tx timeout [ 631.324486][T12328] netlink: del zone limit has 8 unknown bytes [ 631.635215][T12308] bridge0: port 1(bridge_slave_0) entered blocking state [ 631.672477][T12308] bridge0: port 1(bridge_slave_0) entered disabled state [ 631.708921][T12308] bridge_slave_0: entered allmulticast mode [ 631.756100][T12308] bridge_slave_0: entered promiscuous mode [ 631.785196][T12337] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1417'. [ 631.837919][ T9603] usb 3-1: USB disconnect, device number 65 [ 631.967968][T12308] bridge0: port 2(bridge_slave_1) entered blocking state [ 631.991173][T12308] bridge0: port 2(bridge_slave_1) entered disabled state [ 632.071480][T12308] bridge_slave_1: entered allmulticast mode [ 632.080222][T12308] bridge_slave_1: entered promiscuous mode [ 632.363575][T12308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 632.425411][T12348] binder: BINDER_SET_CONTEXT_MGR already set [ 632.432983][T12308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 632.457222][T12348] binder: 12346:12348 ioctl 4018620d 20000040 returned -16 [ 632.488793][ T9603] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 632.579437][T12342] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1418'. [ 632.668122][T12308] team0: Port device team_slave_0 added [ 632.688569][ T9603] usb 3-1: Using ep0 maxpacket: 16 [ 632.716229][T12308] team0: Port device team_slave_1 added [ 632.724374][ T9603] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 632.755895][ T9603] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 632.782032][ T9603] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 632.811747][ T9603] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 632.851326][ T9603] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 632.876110][T12308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 632.899051][ T9603] usb 3-1: config 0 descriptor?? [ 632.908052][T12308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 632.982786][T12308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 633.019275][T12308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 633.043501][T12308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 633.100308][T12308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 633.339714][T12355] xt_NFQUEUE: number of total queues is 0 [ 633.369483][ T4625] Bluetooth: hci7: command tx timeout [ 633.415743][T12308] hsr_slave_0: entered promiscuous mode [ 633.473208][T12308] hsr_slave_1: entered promiscuous mode [ 633.511642][T12308] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 633.525869][T12308] Cannot create hsr debugfs directory [ 633.740146][ T5305] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 633.902912][T12363] bridge0: port 3(erspan0) entered blocking state [ 633.973902][ T5305] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 634.071311][T12363] bridge0: port 3(erspan0) entered disabled state [ 634.079010][ T5305] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 634.099323][T12363] erspan0: entered allmulticast mode [ 634.106395][T12363] erspan0: entered promiscuous mode [ 634.150235][T12363] bridge0: port 3(erspan0) entered blocking state [ 634.157070][T12363] bridge0: port 3(erspan0) entered forwarding state [ 634.188725][ T5305] usb 5-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 634.237262][ T5305] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 634.308257][ T5305] usb 5-1: config 0 descriptor?? [ 634.735387][T12370] SET target dimension over the limit! [ 634.808995][ T5305] appleir 0003:05AC:8241.0015: item fetching failed at offset 5/7 [ 634.843987][ T5305] appleir 0003:05AC:8241.0015: parse failed [ 634.864527][ T5305] appleir 0003:05AC:8241.0015: probe with driver appleir failed with error -22 [ 635.135165][ T9603] usbhid 3-1:0.0: can't add hid device: -71 [ 635.169838][ T9603] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 635.211444][T12308] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 635.212903][ T9603] usb 3-1: USB disconnect, device number 66 [ 635.451066][ T4625] Bluetooth: hci7: command tx timeout [ 635.540285][T12375] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1427'. [ 635.566826][T12375] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1427'. [ 635.609293][T12308] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 635.620295][T12375] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1427'. [ 635.941906][T12308] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.263016][T12308] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.463821][ T5305] usb 5-1: USB disconnect, device number 77 [ 636.648697][ T9599] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 636.858524][ T9599] usb 3-1: Using ep0 maxpacket: 16 [ 636.865458][ T9599] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 636.906281][T12390] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 636.916689][ T9599] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 636.942501][T12390] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 636.979695][ T9599] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 637.009839][ T9599] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 637.030059][ T9599] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 637.056639][ T9599] usb 3-1: config 0 descriptor?? [ 637.076235][T12308] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 637.088607][ T5305] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 637.126226][T12308] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 637.186620][T12308] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 637.220089][T12308] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 637.291809][ T5305] usb 5-1: config 0 has an invalid interface number: 18 but max is 0 [ 637.310394][ T5305] usb 5-1: config 0 has no interface number 0 [ 637.338994][ T5305] usb 5-1: config 0 interface 18 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 637.367015][ T5305] usb 5-1: config 0 interface 18 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 637.398993][ T5305] usb 5-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.10 [ 637.418994][ T5305] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 637.431357][ T5305] usb 5-1: Manufacturer: syz [ 637.454620][ T5305] usb 5-1: config 0 descriptor?? [ 637.498932][ T5296] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 637.531132][ T4625] Bluetooth: hci7: command tx timeout [ 637.690230][ T5300] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 637.700447][ T5296] usb 2-1: Using ep0 maxpacket: 16 [ 637.728099][ T5296] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 637.756009][ T5300] hid-generic 0000:0000:0000.0016: hidraw0: HID v0.00 Device [syz0] on syz1 [ 637.800407][ T5296] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 637.837982][ T5296] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 637.902095][ T5296] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 637.928686][ T5296] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 637.984601][ T5296] usb 2-1: config 0 descriptor?? [ 638.027904][T12308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 638.219502][T12308] 8021q: adding VLAN 0 to HW filter on device team0 [ 638.296464][ T8578] bridge0: port 1(bridge_slave_0) entered blocking state [ 638.303701][ T8578] bridge0: port 1(bridge_slave_0) entered forwarding state [ 638.422049][ T8578] bridge0: port 2(bridge_slave_1) entered blocking state [ 638.429315][ T8578] bridge0: port 2(bridge_slave_1) entered forwarding state [ 639.185464][T12308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 639.601636][T12308] veth0_vlan: entered promiscuous mode [ 639.721290][T12308] veth1_vlan: entered promiscuous mode [ 640.069900][T12308] veth0_macvtap: entered promiscuous mode [ 640.163671][ T5305] usbhid 5-1:0.18: can't add hid device: -71 [ 640.252593][ T5305] usbhid 5-1:0.18: probe with driver usbhid failed with error -71 [ 640.278690][ T9599] usbhid 3-1:0.0: can't add hid device: -71 [ 640.287463][T12308] veth1_macvtap: entered promiscuous mode [ 640.301528][ T9599] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 640.315118][ T5305] usb 5-1: USB disconnect, device number 78 [ 640.371063][ T9599] usb 3-1: USB disconnect, device number 67 [ 640.405523][T12308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 640.465336][T12308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.493143][T12308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 640.540149][ T5296] usbhid 2-1:0.0: can't add hid device: -71 [ 640.550995][ T5296] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 640.568382][ T5296] usb 2-1: USB disconnect, device number 69 [ 640.588828][T12308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.604077][T12308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 640.618991][T12308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.630130][T12308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 640.645205][T12308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.674231][T12308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 640.718845][T12308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.770499][T12308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 640.803787][T12308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.837192][T12308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 640.857094][T12308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.883866][T12308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 640.902170][T12308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.913518][T12308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 640.935440][T12308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.950809][T12308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 640.962329][T12308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 641.009966][T12308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 641.028079][T12407] IPv6: NLM_F_REPLACE set, but no existing node found! [ 641.082577][T12403] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1433'. [ 641.116913][T12308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 641.142646][T12308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 641.153880][T12308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 641.166215][T12308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 641.179891][T12308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 641.192249][T12308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 641.203190][T12308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 641.259977][T12308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 641.308614][T12308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 641.330511][T12308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 641.400238][T12308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 641.428561][ T9599] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 641.458519][T12308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 641.502889][T12308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 641.545623][T12308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 641.576195][T12308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 641.587746][T12308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 641.638324][T12308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 641.650976][ T9599] usb 2-1: Using ep0 maxpacket: 16 [ 641.672749][ T9599] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 641.693048][T12308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 641.709049][ T9599] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 641.726563][T12308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 641.740720][ T9599] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 641.753999][T12308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 641.775179][ T9599] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 641.800899][T12308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 641.811285][ T9599] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 641.849760][ T9599] usb 2-1: config 0 descriptor?? [ 641.901839][T12308] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.932594][T12308] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.982762][T12308] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 642.006647][T12308] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 642.737750][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 642.790182][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 642.798079][ T4625] Bluetooth: hci6: unexpected cc 0x0402 length: 65 > 1 [ 643.085753][ T8578] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 643.130835][ T8578] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 643.605961][ T29] kauditd_printk_skb: 52 callbacks suppressed [ 643.605975][ T29] audit: type=1326 audit(1726204362.247:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12446 comm="syz.0.1410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c2337def9 code=0x7ffc0000 [ 643.796852][ T29] audit: type=1326 audit(1726204362.287:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12446 comm="syz.0.1410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c2337def9 code=0x7ffc0000 [ 643.940539][ T29] audit: type=1326 audit(1726204362.317:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12446 comm="syz.0.1410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6c2337def9 code=0x7ffc0000 [ 644.055589][ T29] audit: type=1326 audit(1726204362.317:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12446 comm="syz.0.1410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c2337def9 code=0x7ffc0000 [ 644.187267][ T29] audit: type=1326 audit(1726204362.317:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12446 comm="syz.0.1410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c2337def9 code=0x7ffc0000 [ 644.289326][ T9599] usbhid 2-1:0.0: can't add hid device: -71 [ 644.295729][ T9599] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 644.315819][ T29] audit: type=1326 audit(1726204362.317:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12446 comm="syz.0.1410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6c2337def9 code=0x7ffc0000 [ 644.359845][ T9599] usb 2-1: USB disconnect, device number 70 [ 644.405844][ T29] audit: type=1326 audit(1726204362.317:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12446 comm="syz.0.1410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c2337def9 code=0x7ffc0000 [ 644.574618][ T29] audit: type=1326 audit(1726204362.317:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12446 comm="syz.0.1410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c2337def9 code=0x7ffc0000 [ 644.678569][ T29] audit: type=1326 audit(1726204362.317:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12446 comm="syz.0.1410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=6 compat=0 ip=0x7f6c2337def9 code=0x7ffc0000 [ 644.795957][ T29] audit: type=1326 audit(1726204362.317:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12446 comm="syz.0.1410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c2337def9 code=0x7ffc0000 [ 644.801808][ T63] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 645.204087][ T63] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 645.607188][ T63] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 645.788693][ T9604] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 645.976518][ T63] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 646.009979][ T9604] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 646.037913][ T9604] usb 3-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 646.068603][ T9604] usb 3-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 646.104978][ T9604] usb 3-1: Product: syz [ 646.139287][ T5246] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 646.151507][T12462] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 646.164564][T12462] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 646.174916][T12462] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 646.183484][T12462] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 646.192895][T12462] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 646.200745][T12462] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 646.214239][T12462] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 646.228685][ T5246] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 646.229470][ T9604] usb 3-1: config 0 descriptor?? [ 646.238678][ T5246] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 646.271231][ T4625] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 646.284889][ T5246] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 646.479157][ T5305] usb 3-1: USB disconnect, device number 68 [ 646.807882][ T63] erspan0: left allmulticast mode [ 646.820415][ T63] erspan0: left promiscuous mode [ 646.834180][ T63] bridge0: port 3(erspan0) entered disabled state [ 646.881409][ T63] bridge_slave_1: left allmulticast mode [ 646.887224][ T63] bridge_slave_1: left promiscuous mode [ 646.899044][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 646.910602][ T63] bridge_slave_0: left allmulticast mode [ 646.916331][ T63] bridge_slave_0: left promiscuous mode [ 646.922359][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 647.633896][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 647.645916][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 647.662332][ T63] bond0 (unregistering): Released all slaves [ 648.329009][ T5246] Bluetooth: hci6: command tx timeout [ 648.336501][T11092] Bluetooth: hci2: command tx timeout [ 648.595086][T12465] chnl_net:caif_netlink_parms(): no params data found [ 648.785128][ T63] hsr_slave_0: left promiscuous mode [ 648.799948][ T5305] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 648.826767][ T63] hsr_slave_1: left promiscuous mode [ 648.873525][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 648.894374][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 648.927521][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 648.947948][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 649.015394][ T63] veth1_macvtap: left promiscuous mode [ 649.021250][ T5305] usb 2-1: Using ep0 maxpacket: 16 [ 649.033474][ T5305] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 649.050108][ T63] veth0_macvtap: left promiscuous mode [ 649.073028][ T63] veth1_vlan: left promiscuous mode [ 649.088780][ T63] veth0_vlan: left promiscuous mode [ 649.099930][ T5305] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 649.124267][ T5305] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 649.144267][ T5305] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 649.153742][ T5305] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 649.186018][ T5305] usb 2-1: config 0 descriptor?? [ 650.412407][T11092] Bluetooth: hci2: command tx timeout [ 650.419762][ T5246] Bluetooth: hci6: command tx timeout [ 650.998029][T12515] xt_NFQUEUE: number of total queues is 0 [ 651.579193][ T5305] usbhid 2-1:0.0: can't add hid device: -71 [ 651.606707][ T5305] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 651.640699][ T5305] usb 2-1: USB disconnect, device number 71 [ 651.891228][ T63] team0 (unregistering): Port device team_slave_1 removed [ 652.156800][ T63] team0 (unregistering): Port device team_slave_0 removed [ 652.488860][T11092] Bluetooth: hci2: command tx timeout [ 652.496557][T11092] Bluetooth: hci6: command tx timeout [ 653.259830][T12466] chnl_net:caif_netlink_parms(): no params data found [ 653.448200][T12535] netlink: 'syz.0.1463': attribute type 29 has an invalid length. [ 653.468846][T12538] netlink: 'syz.0.1463': attribute type 29 has an invalid length. [ 653.969568][T12465] bridge0: port 1(bridge_slave_0) entered blocking state [ 654.000862][T12465] bridge0: port 1(bridge_slave_0) entered disabled state [ 654.021479][T12465] bridge_slave_0: entered allmulticast mode [ 654.058791][T12465] bridge_slave_0: entered promiscuous mode [ 654.094930][T12465] bridge0: port 2(bridge_slave_1) entered blocking state [ 654.114372][T12465] bridge0: port 2(bridge_slave_1) entered disabled state [ 654.156704][T12465] bridge_slave_1: entered allmulticast mode [ 654.202981][T12465] bridge_slave_1: entered promiscuous mode [ 654.393388][T12466] bridge0: port 1(bridge_slave_0) entered blocking state [ 654.406292][T12466] bridge0: port 1(bridge_slave_0) entered disabled state [ 654.426191][T12466] bridge_slave_0: entered allmulticast mode [ 654.441467][T12466] bridge_slave_0: entered promiscuous mode [ 654.548909][T12466] bridge0: port 2(bridge_slave_1) entered blocking state [ 654.568720][ T5246] Bluetooth: hci6: command tx timeout [ 654.578978][ T5246] Bluetooth: hci2: command tx timeout [ 654.597126][T12466] bridge0: port 2(bridge_slave_1) entered disabled state [ 654.628830][T12466] bridge_slave_1: entered allmulticast mode [ 654.636644][T12466] bridge_slave_1: entered promiscuous mode [ 654.885049][T12466] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 654.922557][T12465] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 654.954400][T12465] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 655.045945][T12466] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 655.164826][T12465] team0: Port device team_slave_0 added [ 655.175659][T12568] binder: BINDER_SET_CONTEXT_MGR already set [ 655.184240][T12568] binder: 12565:12568 ioctl 4018620d 20000040 returned -16 [ 655.316516][T12466] team0: Port device team_slave_0 added [ 655.334461][T12465] team0: Port device team_slave_1 added [ 655.527710][T12466] team0: Port device team_slave_1 added [ 655.593305][T12572] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1467'. [ 655.823899][T12466] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 655.838759][T12466] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 655.874624][T12466] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 655.889038][T12465] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 655.900444][T12465] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 655.997968][T12465] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 656.012563][T12465] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 656.019848][T12465] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 656.059493][T12465] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 656.120446][ T63] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 656.144996][T12574] IPv6: NLM_F_REPLACE set, but no existing node found! [ 656.169027][T12466] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 656.188017][T12466] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 656.214765][T12466] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 656.302419][ T63] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 656.371886][T12465] hsr_slave_0: entered promiscuous mode [ 656.379277][T12465] hsr_slave_1: entered promiscuous mode [ 656.388313][T12465] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 656.396335][T12465] Cannot create hsr debugfs directory [ 656.440967][ T63] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 656.464383][T12466] hsr_slave_0: entered promiscuous mode [ 656.471851][T12466] hsr_slave_1: entered promiscuous mode [ 656.478898][T12466] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 656.497039][T12466] Cannot create hsr debugfs directory [ 656.547230][ T63] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 656.949707][T12586] xt_NFQUEUE: number of total queues is 0 [ 657.013349][ T29] kauditd_printk_skb: 58 callbacks suppressed [ 657.013370][ T29] audit: type=1326 audit(1726204375.657:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12584 comm="syz.2.1471" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe21397def9 code=0x0 [ 657.193896][T12592] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1471'. [ 657.488982][ T5305] usb 3-1: new low-speed USB device number 69 using dummy_hcd [ 657.616879][ T63] bridge_slave_1: left allmulticast mode [ 657.631628][ T63] bridge_slave_1: left promiscuous mode [ 657.656452][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 657.686973][ T5305] usb 3-1: unable to get BOS descriptor or descriptor too short [ 657.721494][ T5305] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 657.754462][ T63] bridge_slave_0: left allmulticast mode [ 657.761046][ T5305] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 657.775259][ T63] bridge_slave_0: left promiscuous mode [ 657.782541][ T5305] usb 3-1: config 1 has no interface number 1 [ 657.789128][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 657.796980][ T5305] usb 3-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 6, skipping [ 657.817822][ T5305] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 657.851464][ T5305] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 657.888765][ T5305] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 0 [ 657.926929][ T5305] usb 3-1: string descriptor 0 read error: -22 [ 657.951289][ T5305] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 657.986827][ T5305] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 658.049687][ T5305] usb 3-1: low speed audio streaming not supported [ 658.845318][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 658.862503][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 658.894772][ T63] bond0 (unregistering): Released all slaves [ 659.531823][T12617] netlink: 538 bytes leftover after parsing attributes in process `syz.1.1475'. [ 659.756820][ T63] hsr_slave_0: left promiscuous mode [ 659.788815][ T63] hsr_slave_1: left promiscuous mode [ 659.852044][ T63] veth1_macvtap: left promiscuous mode [ 659.884504][ T63] veth0_macvtap: left promiscuous mode [ 659.904094][ T63] veth1_vlan: left promiscuous mode [ 659.922892][ T63] veth0_vlan: left promiscuous mode [ 659.934464][ T5282] usb 3-1: USB disconnect, device number 69 [ 660.460016][T12613] dlm: no locking on control device [ 661.875657][ T63] team0 (unregistering): Port device team_slave_1 removed [ 662.025349][ T63] team0 (unregistering): Port device team_slave_0 removed [ 664.712962][T12465] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 664.752757][T12465] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 664.831072][T12465] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 664.892873][T12465] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 665.339746][T12466] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 665.376432][T12466] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 665.439439][T12466] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 665.549395][T12466] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 665.959772][T12678] netlink: 'syz.1.1482': attribute type 29 has an invalid length. [ 665.968981][T12684] netlink: 'syz.1.1482': attribute type 29 has an invalid length. [ 666.442897][T12465] 8021q: adding VLAN 0 to HW filter on device bond0 [ 666.613585][T12465] 8021q: adding VLAN 0 to HW filter on device team0 [ 666.718236][ T8579] bridge0: port 1(bridge_slave_0) entered blocking state [ 666.725434][ T8579] bridge0: port 1(bridge_slave_0) entered forwarding state [ 666.823699][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 666.830904][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 666.945361][T12466] 8021q: adding VLAN 0 to HW filter on device bond0 [ 667.055797][T12702] xt_NFQUEUE: number of total queues is 0 [ 667.095607][T12466] 8021q: adding VLAN 0 to HW filter on device team0 [ 667.228329][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 667.235582][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 667.309077][ T8579] bridge0: port 2(bridge_slave_1) entered blocking state [ 667.316277][ T8579] bridge0: port 2(bridge_slave_1) entered forwarding state [ 667.703403][T12465] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 667.920815][T12466] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 668.034010][T12465] veth0_vlan: entered promiscuous mode [ 668.122966][T12465] veth1_vlan: entered promiscuous mode [ 668.293083][T12465] veth0_macvtap: entered promiscuous mode [ 668.355044][T12465] veth1_macvtap: entered promiscuous mode [ 668.403527][T12466] veth0_vlan: entered promiscuous mode [ 668.610933][T12466] veth1_vlan: entered promiscuous mode [ 668.686782][T12465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 668.724872][T12465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 668.755223][T12465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 668.814434][T12465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 668.860480][T12465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 668.904497][T12465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 668.930486][T12465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 668.972822][T12465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 669.005658][T12465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 669.036796][T12465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 669.068926][T12465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 669.098877][T12465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 669.119311][T12465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 669.132628][T12465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 669.143969][T12465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 669.155267][T12465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 669.167892][T12465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 669.187110][T12465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 669.197212][T12465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 669.208331][T12465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 669.221693][T12465] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 669.296899][T12465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 669.335560][T12465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 669.346518][T12465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 669.369310][T12465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 669.398463][T12465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 669.418516][T12465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 669.454705][T12465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 669.510724][T12732] binder: BINDER_SET_CONTEXT_MGR already set [ 669.524845][T12732] binder: 12730:12732 ioctl 4018620d 20000040 returned -16 [ 669.555470][T12465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 669.629819][T12465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 669.679320][T12465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 669.717675][T12465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 669.755524][T12465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 669.789948][T12465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 669.828650][T12465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 669.873426][T12465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 669.924018][T12465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 669.945484][T12465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 669.986348][T12465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.017762][T12465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 670.054073][T12465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.084543][T12465] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 670.210915][T12465] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.239140][T12465] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.266442][T12465] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.283752][T12465] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.297592][T12744] xt_ecn: cannot match TCP bits for non-tcp packets [ 670.488989][T12747] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1488'. [ 670.547353][T12748] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1488'. [ 670.710192][T12753] blktrace: Concurrent blktraces are not allowed on loop3 [ 670.735853][T12466] veth0_macvtap: entered promiscuous mode [ 670.767401][T12466] veth1_macvtap: entered promiscuous mode [ 670.799686][T12466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 670.816254][T12466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.830138][T12466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 670.863679][T12466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.897589][T12466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 670.918070][T12466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.961533][T12466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 670.985042][T12466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 671.007344][T12466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 671.044991][T12466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 671.090623][T12466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 671.129804][T12466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 671.174776][T12466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 671.210953][T12466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 671.590208][T12466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 671.625282][T12466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 671.859865][T12466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 671.891674][T12466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 671.912017][T12466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 671.932134][T12466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 671.952433][T12466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 671.974952][T12466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 672.002768][T12466] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 672.103907][T12466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 672.134514][T12466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 672.158584][T12466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 672.178694][T12466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 672.215767][T12466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 672.238907][T12466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 672.269282][T12466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 672.303821][T12466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 672.337697][T12466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 672.358885][T12466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 672.378553][T12466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 672.398688][T12466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 672.419526][T12466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 672.455643][T12466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 672.496312][T12466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 672.526759][T12466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 672.546820][T12466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 672.558108][T12466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 672.577938][T12466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 672.601644][T12466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 672.617701][T12466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 672.631081][T12466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 672.655226][T12466] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 672.702290][ T1108] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 672.719507][T12466] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 672.731029][ T1108] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 672.751816][T12466] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 672.773954][T12466] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 672.787108][T12466] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 672.993330][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 673.037931][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 673.167156][ T3021] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 673.196973][ T3021] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 673.572243][T12795] IPv6: NLM_F_REPLACE set, but no existing node found! [ 673.779637][ T1108] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 673.798101][ T1108] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 674.296664][T12800] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1447'. [ 674.870578][ T29] audit: type=1326 audit(1726204393.507:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12805 comm="syz.0.1493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c2337def9 code=0x7ffc0000 [ 674.934578][ T29] audit: type=1326 audit(1726204393.517:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12805 comm="syz.0.1493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7f6c2337def9 code=0x7ffc0000 [ 675.024573][ T29] audit: type=1326 audit(1726204393.517:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12805 comm="syz.0.1493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c2337def9 code=0x7ffc0000 [ 675.058733][ T29] audit: type=1326 audit(1726204393.517:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12805 comm="syz.0.1493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c2337def9 code=0x7ffc0000 [ 675.083889][ T29] audit: type=1326 audit(1726204393.547:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12805 comm="syz.0.1493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=87 compat=0 ip=0x7f6c2337def9 code=0x7ffc0000 [ 675.110029][ T29] audit: type=1326 audit(1726204393.547:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12805 comm="syz.0.1493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c2337def9 code=0x7ffc0000 [ 675.140553][ T29] audit: type=1326 audit(1726204393.547:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12805 comm="syz.0.1493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6c2337def9 code=0x7ffc0000 [ 675.193919][ T29] audit: type=1326 audit(1726204393.547:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12805 comm="syz.0.1493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c2337def9 code=0x7ffc0000 [ 675.265608][ T29] audit: type=1326 audit(1726204393.547:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12805 comm="syz.0.1493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f6c2337def9 code=0x7ffc0000 [ 675.307877][ T29] audit: type=1326 audit(1726204393.547:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12805 comm="syz.0.1493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c2337def9 code=0x7ffc0000 [ 675.343173][T12816] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 675.527830][T12821] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 675.538936][T12821] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 675.549066][T12821] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 675.557795][T12821] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 675.598746][T12816] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 676.399279][T12835] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 676.532722][T12835] Cannot find add_set index 0 as target [ 676.723356][ T5246] Bluetooth: hci7: Malformed Event: 0x02 [ 677.324289][T12843] No such timeout policy "syz0" [ 677.396843][T12846] binder: BINDER_SET_CONTEXT_MGR already set [ 677.403108][T12846] binder: 12844:12846 ioctl 4018620d 20000040 returned -16 [ 677.870898][ T3021] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.968092][T12849] xt_NFQUEUE: number of total queues is 0 [ 678.186325][ T3021] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 678.462347][ T3021] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 678.761628][T12861] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1508'. [ 678.773595][T12861] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1508'. [ 678.815892][ T3021] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 679.184075][T11092] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 679.202212][T11092] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 679.210777][T11092] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 679.253306][T11092] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 679.269957][T11092] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 679.278605][T11092] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 679.743562][ T5246] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 679.758621][ T5246] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 679.767776][ T5246] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 679.778957][ T5246] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 679.787358][ T5246] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 679.796249][ T5246] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 680.363025][ T3021] bridge_slave_1: left allmulticast mode [ 680.448506][ T3021] bridge_slave_1: left promiscuous mode [ 680.486344][ T3021] bridge0: port 2(bridge_slave_1) entered disabled state [ 680.516925][ T3021] bridge_slave_0: left allmulticast mode [ 680.530939][ T3021] bridge_slave_0: left promiscuous mode [ 680.542681][ T3021] bridge0: port 1(bridge_slave_0) entered disabled state [ 680.660117][T11092] Bluetooth: hci7: Controller not accepting commands anymore: ncmd = 0 [ 680.670350][T11092] Bluetooth: hci7: Injecting HCI hardware error event [ 680.680127][T11092] Bluetooth: hci7: hardware error 0x00 [ 681.374391][ T5246] Bluetooth: hci5: command tx timeout [ 681.856744][ T5246] Bluetooth: hci8: command tx timeout [ 682.006726][ T3021] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 682.019244][ T3021] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 682.032379][ T3021] bond0 (unregistering): Released all slaves [ 682.102998][T12898] IPv6: NLM_F_REPLACE set, but no existing node found! [ 682.308833][T12907] binder: BINDER_SET_CONTEXT_MGR already set [ 682.314878][T12907] binder: 12905:12907 ioctl 4018620d 20000040 returned -16 [ 682.512719][T12911] binder: BINDER_SET_CONTEXT_MGR already set [ 682.519714][T12911] binder: 12909:12911 ioctl 4018620d 20000040 returned -16 [ 682.641616][ T3021] tipc: Disabling bearer [ 682.655178][ T3021] tipc: Left network mode [ 682.738852][T11092] Bluetooth: hci7: Opcode 0x0c03 failed: -110 [ 683.324860][T12878] chnl_net:caif_netlink_parms(): no params data found [ 683.449442][T11092] Bluetooth: hci5: command tx timeout [ 683.800407][ T3021] hsr_slave_0: left promiscuous mode [ 683.824079][ T3021] hsr_slave_1: left promiscuous mode [ 683.928707][T11092] Bluetooth: hci8: command tx timeout [ 683.985780][ T3021] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 684.004781][ T3021] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 684.026950][ T3021] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 684.063921][ T3021] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 684.146594][ T3021] veth1_macvtap: left promiscuous mode [ 684.160590][ T3021] veth0_macvtap: left promiscuous mode [ 684.176785][ T3021] veth1_vlan: left promiscuous mode [ 684.189989][ T3021] veth0_vlan: left promiscuous mode [ 684.351861][ T29] kauditd_printk_skb: 72 callbacks suppressed [ 684.351884][ T29] audit: type=1326 audit(1726204402.997:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12930 comm="syz.4.1521" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fafa617def9 code=0x0 [ 685.497516][T12952] PKCS7: Unknown OID: [5] 0.0 [ 685.508578][T12952] PKCS7: Only support pkcs7_signedData type [ 685.529838][T11092] Bluetooth: hci5: command tx timeout [ 686.008774][T11092] Bluetooth: hci8: command tx timeout [ 686.175995][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.184486][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.607318][ T3021] team0 (unregistering): Port device team_slave_1 removed [ 686.724678][ T3021] team0 (unregistering): Port device team_slave_0 removed [ 687.449227][ T30] INFO: task syz.1.1207:11170 blocked for more than 143 seconds. [ 687.457203][ T30] Not tainted 6.11.0-rc7-syzkaller-00097-g196145c606d0 #0 [ 687.468178][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 687.477617][ T30] task:syz.1.1207 state:D stack:25088 pid:11170 tgid:11170 ppid:10045 flags:0x00000004 [ 687.488907][ T30] Call Trace: [ 687.492545][ T30] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 687.495576][ T30] __schedule+0x1800/0x4a60 [ 687.500925][ T30] ? __pfx___schedule+0x10/0x10 [ 687.506526][ T30] ? __pfx_lock_release+0x10/0x10 [ 687.514630][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 687.520664][ T30] ? schedule+0x90/0x320 [ 687.525082][ T30] schedule+0x14b/0x320 [ 687.530524][ T30] schedule_preempt_disabled+0x13/0x30 [ 687.536189][ T30] __mutex_lock+0x6a4/0xd70 [ 687.541309][ T30] ? __mutex_lock+0x527/0xd70 [ 687.546128][ T30] ? hugetlb_fault+0x56f/0x3770 [ 687.551731][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 687.556905][ T30] ? __lock_acquire+0x137a/0x2040 [ 687.562639][ T30] hugetlb_fault+0x56f/0x3770 [ 687.567509][ T30] ? __pfx_hugetlb_fault+0x10/0x10 [ 687.576997][ T30] ? reacquire_held_locks+0x3eb/0x690 [ 687.582987][ T30] ? lock_vma_under_rcu+0x2f9/0x6e0 [ 687.596571][ T30] ? __pfx_reacquire_held_locks+0x10/0x10 [ 687.620317][T11092] Bluetooth: hci5: command tx timeout [ 687.639679][ T30] handle_mm_fault+0x1901/0x1bc0 [ 687.679679][ T30] ? mtree_range_walk+0x6fd/0x8e0 [ 687.705882][ T30] ? __pfx_lock_release+0x10/0x10 [ 687.717833][ T30] ? lock_vma_under_rcu+0x2f9/0x6e0 [ 687.728817][ T30] ? __pfx_handle_mm_fault+0x10/0x10 [ 687.734192][ T30] ? lock_vma_under_rcu+0x592/0x6e0 [ 687.740161][ T30] ? lock_vma_under_rcu+0x18a/0x6e0 [ 687.745413][ T30] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 687.751327][ T30] ? exc_page_fault+0x113/0x8c0 [ 687.756232][ T30] exc_page_fault+0x459/0x8c0 [ 687.761105][ T30] asm_exc_page_fault+0x26/0x30 [ 687.766016][ T30] RIP: 0033:0x7f8ca014597c [ 687.771105][ T30] RSP: 002b:00007f8ca045fb88 EFLAGS: 00010246 [ 687.777228][ T30] RAX: 0000000020000d00 RBX: 0000000000000004 RCX: 8000000000000010 [ 687.785362][ T30] RDX: 0000000000000010 RSI: 00007f8c9fc005d5 RDI: 0000000020000d00 [ 687.794581][ T30] RBP: 00007f8ca0337a80 R08: 00007f8ca0000000 R09: 0000000000000001 [ 687.803858][ T30] R10: 0000000000000001 R11: 0000000000000009 R12: 0000000000083a84 [ 687.812104][ T30] R13: 00007f8ca045fc90 R14: 0000000000000032 R15: fffffffffffffffe [ 687.822992][ T30] [ 687.826158][ T30] INFO: task syz.1.1207:11172 blocked for more than 143 seconds. [ 687.834596][ T30] Not tainted 6.11.0-rc7-syzkaller-00097-g196145c606d0 #0 [ 687.842978][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 687.852102][ T30] task:syz.1.1207 state:D stack:24920 pid:11172 tgid:11170 ppid:10045 flags:0x00004006 [ 687.862848][ T30] Call Trace: [ 687.866206][ T30] [ 687.869826][ T30] __schedule+0x1800/0x4a60 [ 687.874417][ T30] ? __pfx___schedule+0x10/0x10 [ 687.880043][ T30] ? __pfx_lock_release+0x10/0x10 [ 687.885159][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 687.891214][ T30] ? schedule+0x90/0x320 [ 687.895499][ T30] schedule+0x14b/0x320 [ 687.902525][ T30] schedule_preempt_disabled+0x13/0x30 [ 687.908030][ T30] __mutex_lock+0x6a4/0xd70 [ 687.913940][ T30] ? __mutex_lock+0x527/0xd70 [ 687.919085][ T30] ? hugetlb_wp+0x104d/0x3a90 [ 687.925890][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 687.931457][ T30] ? __pfx_up_write+0x10/0x10 [ 687.936235][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 687.942173][ T30] ? vma_interval_tree_iter_next+0x193/0x340 [ 687.948214][ T30] hugetlb_wp+0x104d/0x3a90 [ 687.953317][ T30] ? mark_lock+0x9a/0x350 [ 687.957727][ T30] ? __pfx_hugetlb_wp+0x10/0x10 [ 687.963290][ T30] ? __pfx___might_resched+0x10/0x10 [ 687.968975][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 687.974051][ T30] ? do_raw_spin_lock+0x14f/0x370 [ 687.979598][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 687.985032][ T30] ? __filemap_get_folio+0x769/0xc10 [ 687.990952][ T30] hugetlb_fault+0x27b2/0x3770 [ 687.995794][ T30] ? __pfx_hugetlb_fault+0x10/0x10 [ 688.001122][ T30] ? mt_find+0x226/0x850 [ 688.005407][ T30] ? __pfx_lock_release+0x10/0x10 [ 688.012945][ T30] handle_mm_fault+0x1901/0x1bc0 [ 688.017988][ T30] ? mt_find+0x62d/0x850 [ 688.022402][ T30] ? mt_find+0x226/0x850 [ 688.029960][ T30] ? __pfx_mt_find+0x10/0x10 [ 688.034652][ T30] ? __pfx_handle_mm_fault+0x10/0x10 [ 688.040065][ T30] ? find_vma+0xf9/0x170 [ 688.044353][ T30] ? __pfx_find_vma+0x10/0x10 [ 688.049332][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 688.055731][ T30] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 688.061179][ T30] exc_page_fault+0x2b9/0x8c0 [ 688.065958][ T30] asm_exc_page_fault+0x26/0x30 [ 688.071834][ T30] RIP: 0010:rep_movs_alternative+0x4a/0x70 [ 688.077716][ T30] Code: 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 cc cc cc cc 48 89 c8 48 c1 e9 03 83 e0 07 f3 48 a5 89 c1 [ 688.098294][ T30] RSP: 0018:ffffc9000c157ad0 EFLAGS: 00050246 [ 688.102831][T11092] Bluetooth: hci8: command tx timeout [ 688.105948][ T30] RAX: ffffffff84b29901 RBX: 0000000020005f40 RCX: 0000000000000040 [ 688.118240][ T30] RDX: 0000000000000000 RSI: ffffc9000c157b60 RDI: 0000000020005f00 [ 688.132370][ T30] RBP: ffffc9000c157c10 R08: ffffc9000c157b9f R09: 1ffff9200182af73 [ 688.142304][ T30] R10: dffffc0000000000 R11: fffff5200182af74 R12: 0000000000000040 [ 688.150519][ T30] R13: 00000000000058c0 R14: 0000000020005f00 R15: ffffc9000c157b60 [ 688.158815][ T30] ? _copy_from_user+0x91/0xe0 [ 688.163666][ T30] _copy_to_user+0x86/0xb0 [ 688.168168][ T30] rng_dev_read+0x3be/0x6d0 [ 688.173350][ T30] ? __pfx_rng_dev_read+0x10/0x10 [ 688.178522][ T30] ? security_file_permission+0x7f/0xa0 [ 688.184171][ T30] ? rw_verify_area+0x52a/0x6b0 [ 688.189317][ T30] vfs_readv+0x6c2/0xa90 [ 688.193635][ T30] ? __pfx_rng_dev_read+0x10/0x10 [ 688.198780][ T30] ? __pfx_vfs_readv+0x10/0x10 [ 688.203691][ T30] ? __fget_files+0x29/0x470 [ 688.208343][ T30] __x64_sys_preadv+0x1c7/0x2d0 [ 688.213338][ T30] ? __pfx___x64_sys_preadv+0x10/0x10 [ 688.218933][ T30] ? do_syscall_64+0x100/0x230 [ 688.223738][ T30] ? do_syscall_64+0xb6/0x230 [ 688.231248][ T30] do_syscall_64+0xf3/0x230 [ 688.235849][ T30] ? clear_bhb_loop+0x35/0x90 [ 688.242881][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 688.249263][ T30] RIP: 0033:0x7f8ca017def9 [ 688.253717][ T30] RSP: 002b:00007f8ca0f0e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 688.262253][ T30] RAX: ffffffffffffffda RBX: 00007f8ca0335f80 RCX: 00007f8ca017def9 [ 688.270580][ T30] RDX: 0000000000000002 RSI: 0000000020000580 RDI: 0000000000000005 [ 688.278656][ T30] RBP: 00007f8ca01f0b76 R08: 0000000000000000 R09: 0000000000000000 [ 688.286698][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 688.294812][ T30] R13: 0000000000000000 R14: 00007f8ca0335f80 R15: 00007f8ca045fa28 [ 688.302928][ T30] [ 688.307118][ T30] INFO: task syz.1.1207:11174 blocked for more than 144 seconds. [ 688.314965][ T30] Not tainted 6.11.0-rc7-syzkaller-00097-g196145c606d0 #0 [ 688.323278][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 688.335187][ T30] task:syz.1.1207 state:D stack:23904 pid:11174 tgid:11170 ppid:10045 flags:0x00004006 [ 688.345678][ T30] Call Trace: [ 688.352636][ T30] [ 688.355619][ T30] __schedule+0x1800/0x4a60 [ 688.360490][ T30] ? __pfx___schedule+0x10/0x10 [ 688.365404][ T30] ? __pfx_lock_release+0x10/0x10 [ 688.370810][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 688.376964][ T30] ? schedule+0x90/0x320 [ 688.381737][ T30] schedule+0x14b/0x320 [ 688.385987][ T30] io_schedule+0x8d/0x110 [ 688.390753][ T30] folio_wait_bit_common+0x882/0x12b0 [ 688.396201][ T30] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 688.402422][ T30] ? __pfx_wake_page_function+0x10/0x10 [ 688.408031][ T30] ? _raw_spin_unlock+0x28/0x50 [ 688.413318][ T30] ? __vma_reservation_common+0x498/0x7d0 [ 688.419375][ T30] __filemap_get_folio+0xb7/0xc10 [ 688.424468][ T30] hugetlb_fault+0x1b72/0x3770 [ 688.429705][ T30] ? __pfx_hugetlb_fault+0x10/0x10 [ 688.437360][ T30] ? mt_find+0x226/0x850 [ 688.442075][ T30] ? __pfx_lock_release+0x10/0x10 [ 688.447162][ T30] handle_mm_fault+0x1901/0x1bc0 [ 688.452476][ T30] ? mt_find+0x62d/0x850 [ 688.456770][ T30] ? mt_find+0x226/0x850 [ 688.466313][ T30] ? __pfx_mt_find+0x10/0x10 [ 688.471308][ T30] ? __pfx_handle_mm_fault+0x10/0x10 [ 688.476654][ T30] ? find_vma+0xf9/0x170 [ 688.481250][ T30] ? __pfx_find_vma+0x10/0x10 [ 688.486031][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 688.493052][ T30] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 688.498515][ T30] exc_page_fault+0x2b9/0x8c0 [ 688.503387][ T30] asm_exc_page_fault+0x26/0x30 [ 688.508284][ T30] RIP: 0010:__put_user_8+0x11/0x20 [ 688.513627][ T30] Code: 84 00 00 00 00 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <48> 89 01 31 c9 0f 01 ca c3 cc cc cc cc 66 90 90 90 90 90 90 90 90 [ 688.533269][ C0] vkms_vblank_simulate: vblank timer overrun [ 688.542269][ T30] RSP: 0018:ffffc9000c137778 EFLAGS: 00050202 [ 688.548459][ T30] RAX: 0000000000800000 RBX: 0000000000000000 RCX: 0000000020000020 [ 688.556484][ T30] RDX: 0000000000000000 RSI: ffffffff8c0ae6e0 RDI: ffffffff8c608f40 [ 688.565167][ T30] RBP: ffffc9000c137ec8 R08: ffffffff9018766f R09: 1ffffffff2030ecd [ 688.575811][ T30] R10: dffffc0000000000 R11: fffffbfff2030ece R12: 1ffff92001826f7d [ 688.584299][ T30] R13: 1ffff92001826f08 R14: 0000000020800000 R15: 0000000000800000 [ 688.592670][ T30] userfaultfd_ioctl+0x28e7/0x70a0 [ 688.597928][ T30] ? stack_trace_save+0x118/0x1d0 [ 688.603145][ T30] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 688.608750][ T30] ? stack_depot_save_flags+0x29/0x830 [ 688.614257][ T30] ? kasan_save_track+0x51/0x80 [ 688.619307][ T30] ? kasan_save_track+0x3f/0x80 [ 688.624212][ T30] ? kasan_save_free_info+0x40/0x50 [ 688.629488][ T30] ? poison_slab_object+0xe0/0x150 [ 688.634629][ T30] ? __kasan_slab_free+0x37/0x60 [ 688.642832][ T30] ? kfree+0x149/0x360 [ 688.647050][ T30] ? tomoyo_path_number_perm+0x68d/0x880 [ 688.655733][ T30] ? security_file_ioctl+0x75/0xb0 [ 688.661333][ T30] ? __se_sys_ioctl+0x47/0x170 [ 688.666276][ T30] ? do_syscall_64+0xf3/0x230 [ 688.671403][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 688.677531][ T30] ? do_vfs_ioctl+0xf0e/0x2e50 [ 688.684691][ T30] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 688.689926][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 688.696294][ T30] ? tomoyo_path_number_perm+0x208/0x880 [ 688.702088][ T30] ? __pfx_lock_release+0x10/0x10 [ 688.707175][ T30] ? kfree+0x149/0x360 [ 688.711374][ T30] ? tomoyo_path_number_perm+0x208/0x880 [ 688.717053][ T30] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 688.723372][ T30] ? __fget_files+0x29/0x470 [ 688.728007][ T30] ? __fget_files+0x3f6/0x470 [ 688.733037][ T30] ? __fget_files+0x29/0x470 [ 688.737684][ T30] ? bpf_lsm_file_ioctl+0x9/0x10 [ 688.745898][ T30] ? security_file_ioctl+0x87/0xb0 [ 688.751194][ T30] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 688.756708][ T30] __se_sys_ioctl+0xfc/0x170 [ 688.761506][ T30] do_syscall_64+0xf3/0x230 [ 688.766136][ T30] ? clear_bhb_loop+0x35/0x90 [ 688.770922][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 688.776862][ T30] RIP: 0033:0x7f8ca017def9 [ 688.781545][ T30] RSP: 002b:00007f8ca0eed038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 688.792125][ T30] RAX: ffffffffffffffda RBX: 00007f8ca0336058 RCX: 00007f8ca017def9 [ 688.800537][ T30] RDX: 0000000020000000 RSI: 00000000c028aa03 RDI: 0000000000000009 [ 688.808675][ T30] RBP: 00007f8ca01f0b76 R08: 0000000000000000 R09: 0000000000000000 [ 688.816688][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 688.824847][ T30] R13: 0000000000000000 R14: 00007f8ca0336058 R15: 00007f8ca045fa28 [ 688.832999][ T30] [ 688.836172][ T30] [ 688.836172][ T30] Showing all locks held in the system: [ 688.850619][ T30] 1 lock held by khungtaskd/30: [ 688.855593][ T30] #0: ffffffff8e938320 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 688.865649][ T30] 3 locks held by kworker/u8:3/52: [ 688.870985][ T30] 3 locks held by kworker/u8:9/3003: [ 688.876288][ T30] #0: ffff88803001b948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 688.888925][ T30] #1: ffffc9000a447d00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 688.904901][ T30] #2: ffffffff8fc8c308 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x19/0x30 [ 688.914591][ T30] 5 locks held by kworker/u8:10/3021: [ 688.920083][ T30] #0: ffff88801bae5948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 688.931198][ T30] #1: ffffc9000a527d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 688.941927][ T30] #2: ffffffff8fc7f750 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 688.954785][ T30] #3: ffffffff8fc8c308 (rtnl_mutex){+.+.}-{3:3}, at: default_device_exit_batch+0xe9/0xa90 [ 688.965435][ T30] #4: ffffffff8e93d6f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 688.976701][ T30] 1 lock held by dhcpcd/4901: [ 688.981664][ T30] #0: ffffffff8fc8c308 (rtnl_mutex){+.+.}-{3:3}, at: devinet_ioctl+0x2ce/0x1bc0 [ 688.991085][ T30] 2 locks held by getty/4988: [ 688.995956][ T30] #0: ffff8880306af0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 689.005863][ T30] #1: ffffc900031332f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6ac/0x1e00 [ 689.017426][ T30] 2 locks held by kworker/u8:0/8578: [ 689.022898][ T30] 3 locks held by kworker/u8:1/8579: [ 689.028354][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 689.040695][ T30] #1: ffffc9000c707d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 689.054301][ T30] #2: ffffffff8fc8c308 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 689.063725][ T30] 2 locks held by syz.1.1207/11170: [ 689.069289][ T30] #0: ffff888062623c40 (&vma->vm_lock->lock){++++}-{3:3}, at: lock_vma_under_rcu+0x2f9/0x6e0 [ 689.080069][ T30] #1: ffff888020ed0608 (&hugetlb_fault_mutex_table[i]){+.+.}-{3:3}, at: hugetlb_fault+0x56f/0x3770 [ 689.091174][ T30] 2 locks held by syz.1.1207/11172: [ 689.096405][ T30] #0: ffff888034acba98 (&mm->mmap_lock){++++}-{3:3}, at: mmap_read_lock_killable+0x1d/0x70 [ 689.106707][ T30] #1: ffff888020ed0608 (&hugetlb_fault_mutex_table[i]){+.+.}-{3:3}, at: hugetlb_wp+0x104d/0x3a90 [ 689.117581][ T30] 3 locks held by syz.1.1207/11174: [ 689.125071][ T30] #0: ffff888034acba98 (&mm->mmap_lock){++++}-{3:3}, at: mmap_read_lock_killable+0x1d/0x70 [ 689.135585][ T30] #1: ffff888020ed0608 (&hugetlb_fault_mutex_table[i]){+.+.}-{3:3}, at: hugetlb_fault+0x56f/0x3770 [ 689.146615][ T30] #2: ffff888012013ce8 (&resv_map->rw_sema){++++}-{3:3}, at: hugetlb_fault+0x675/0x3770 [ 689.158865][ T30] 2 locks held by syz.3.1375/12055: [ 689.164109][ T30] #0: ffff888055e25580 (&vma->vm_lock->lock){++++}-{3:3}, at: lock_vma_under_rcu+0x2f9/0x6e0 [ 689.174567][ T30] #1: ffff888020ed0608 (&hugetlb_fault_mutex_table[i]){+.+.}-{3:3}, at: hugetlb_fault+0x56f/0x3770 [ 689.185482][ T30] 2 locks held by syz.3.1375/12057: [ 689.190839][ T30] #0: ffff88807d80a798 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0 [ 689.201086][ T30] #1: ffff888020ed0608 (&hugetlb_fault_mutex_table[i]){+.+.}-{3:3}, at: hugetlb_fault+0x56f/0x3770 [ 689.212868][ T30] 2 locks held by syz.0.1392/12175: [ 689.218107][ T30] #0: ffff8880526c9e18 (&mm->mmap_lock){++++}-{3:3}, at: __mm_populate+0x1b0/0x460 [ 689.227776][ T30] #1: ffff888020ed0608 (&hugetlb_fault_mutex_table[i]){+.+.}-{3:3}, at: hugetlb_fault+0x56f/0x3770 [ 689.240119][ T30] 1 lock held by syz-executor/12873: [ 689.245418][ T30] #0: ffffffff8fc8c308 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 689.257073][ T30] 1 lock held by syz-executor/12878: [ 689.262454][ T30] #0: ffffffff8fc8c308 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 689.272072][ T30] 1 lock held by syz.3.1522/12937: [ 689.277199][ T30] #0: ffffffff8fc8c308 (rtnl_mutex){+.+.}-{3:3}, at: __tun_chr_ioctl+0x48f/0x2400 [ 689.286639][ T30] 1 lock held by syz.3.1522/12939: [ 689.292157][ T30] #0: ffffffff8fc8c308 (rtnl_mutex){+.+.}-{3:3}, at: devinet_ioctl+0x2ce/0x1bc0 [ 689.301586][ T30] 1 lock held by syz.4.1524/12951: [ 689.306867][ T30] #0: ffffffff8fc8c308 (rtnl_mutex){+.+.}-{3:3}, at: arp_ioctl+0x356/0x530 [ 689.315732][ T30] 1 lock held by syz.0.1525/12957: [ 689.320923][ T30] #0: ffffffff8fc8c308 (rtnl_mutex){+.+.}-{3:3}, at: dev_ioctl+0x86e/0x1340 [ 689.330046][ T30] [ 689.332428][ T30] ============================================= [ 689.332428][ T30] [ 689.343742][ T30] NMI backtrace for cpu 1 [ 689.348118][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc7-syzkaller-00097-g196145c606d0 #0 [ 689.358649][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 689.368719][ T30] Call Trace: [ 689.372008][ T30] [ 689.374947][ T30] dump_stack_lvl+0x241/0x360 [ 689.379642][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 689.384855][ T30] ? __pfx__printk+0x10/0x10 [ 689.389456][ T30] ? vprintk_emit+0x667/0x7c0 [ 689.394146][ T30] ? __pfx_vprintk_emit+0x10/0x10 [ 689.399208][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 689.404169][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 689.409641][ T30] ? _printk+0xd5/0x120 [ 689.413805][ T30] ? __pfx__printk+0x10/0x10 [ 689.418416][ T30] ? __wake_up_klogd+0xcc/0x110 [ 689.423279][ T30] ? __pfx__printk+0x10/0x10 [ 689.427876][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 689.432917][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 689.438922][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 689.444953][ T30] watchdog+0xff4/0x1040 [ 689.449303][ T30] ? watchdog+0x1ea/0x1040 [ 689.453742][ T30] ? __pfx_watchdog+0x10/0x10 [ 689.458445][ T30] kthread+0x2f0/0x390 [ 689.462539][ T30] ? __pfx_watchdog+0x10/0x10 [ 689.467235][ T30] ? __pfx_kthread+0x10/0x10 [ 689.471837][ T30] ret_from_fork+0x4b/0x80 [ 689.476268][ T30] ? __pfx_kthread+0x10/0x10 [ 689.480864][ T30] ret_from_fork_asm+0x1a/0x30 [ 689.485660][ T30] [ 689.490917][ T30] Sending NMI from CPU 1 to CPUs 0: [ 689.496179][ C0] NMI backtrace for cpu 0 [ 689.496193][ C0] CPU: 0 UID: 0 PID: 8578 Comm: kworker/u8:0 Not tainted 6.11.0-rc7-syzkaller-00097-g196145c606d0 #0 [ 689.496216][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 689.496229][ C0] Workqueue: bat_events batadv_nc_worker [ 689.496259][ C0] RIP: 0010:kasan_check_range+0x64/0x290 [ 689.496291][ C0] Code: 48 c1 eb 03 49 ba 00 00 00 00 00 fc ff df 4e 8d 1c 13 49 ff c8 4d 89 c1 49 c1 e9 03 49 be 01 00 00 00 00 fc ff df 4f 8d 3c 31 <4c> 89 fd 4c 29 dd 48 83 fd 10 7f 29 48 85 ed 0f 84 3e 01 00 00 4c [ 689.496306][ C0] RSP: 0018:ffffc9000ba5f860 EFLAGS: 00000803 [ 689.496322][ C0] RAX: 0000000000000001 RBX: 1ffffffff283c908 RCX: ffffffff816fdf6b [ 689.496336][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff941e4840 [ 689.496349][ C0] RBP: 000000000001ffff R08: ffffffff941e4847 R09: 1ffffffff283c908 [ 689.496363][ C0] R10: dffffc0000000000 R11: fffffbfff283c908 R12: ffff888026728000 [ 689.496377][ C0] R13: ffff888026728ad8 R14: dffffc0000000001 R15: fffffbfff283c909 [ 689.496392][ C0] FS: 0000000000000000(0000) GS:ffff8880b8800000(0000) knlGS:0000000000000000 [ 689.496408][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 689.496422][ C0] CR2: 00005570c7bd2220 CR3: 000000000e734000 CR4: 00000000003526f0 [ 689.496439][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 689.496450][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 689.496462][ C0] Call Trace: [ 689.496470][ C0] [ 689.496478][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 689.496503][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 689.496530][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 689.496563][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 689.496586][ C0] ? nmi_handle+0x14f/0x5a0 [ 689.496604][ C0] ? nmi_handle+0x2a/0x5a0 [ 689.496623][ C0] ? kasan_check_range+0x64/0x290 [ 689.496654][ C0] ? default_do_nmi+0x63/0x160 [ 689.496679][ C0] ? exc_nmi+0x123/0x1f0 [ 689.496702][ C0] ? end_repeat_nmi+0xf/0x53 [ 689.496730][ C0] ? __lock_acquire+0xc8b/0x2040 [ 689.496755][ C0] ? kasan_check_range+0x64/0x290 [ 689.496783][ C0] ? kasan_check_range+0x64/0x290 [ 689.496812][ C0] ? kasan_check_range+0x64/0x290 [ 689.496839][ C0] [ 689.496846][ C0] [ 689.496854][ C0] __lock_acquire+0xc8b/0x2040 [ 689.496887][ C0] lock_acquire+0x1ed/0x550 [ 689.496911][ C0] ? batadv_nc_process_nc_paths+0xb5/0x3a0 [ 689.496944][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 689.496969][ C0] ? batadv_nc_process_nc_paths+0xb5/0x3a0 [ 689.496996][ C0] ? __local_bh_enable_ip+0x168/0x200 [ 689.497020][ C0] ? __pfx_lock_release+0x10/0x10 [ 689.497044][ C0] ? batadv_nc_purge_paths+0x312/0x3b0 [ 689.497073][ C0] ? batadv_nc_purge_paths+0xe8/0x3b0 [ 689.497101][ C0] ? __pfx_batadv_nc_to_purge_nc_path_decoding+0x10/0x10 [ 689.497133][ C0] ? __pfx_batadv_nc_sniffed_purge+0x10/0x10 [ 689.497161][ C0] batadv_nc_process_nc_paths+0xd6/0x3a0 [ 689.497189][ C0] ? batadv_nc_process_nc_paths+0xb5/0x3a0 [ 689.497218][ C0] ? batadv_nc_process_nc_paths+0xb5/0x3a0 [ 689.497248][ C0] batadv_nc_worker+0x52c/0x610 [ 689.497278][ C0] ? process_scheduled_works+0x945/0x1830 [ 689.497301][ C0] process_scheduled_works+0xa2c/0x1830 [ 689.497339][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 689.497368][ C0] ? assign_work+0x364/0x3d0 [ 689.497394][ C0] worker_thread+0x870/0xd30 [ 689.497427][ C0] ? __kthread_parkme+0x169/0x1d0 [ 689.497454][ C0] ? __pfx_worker_thread+0x10/0x10 [ 689.497478][ C0] kthread+0x2f0/0x390 [ 689.497495][ C0] ? __pfx_worker_thread+0x10/0x10 [ 689.497519][ C0] ? __pfx_kthread+0x10/0x10 [ 689.497536][ C0] ret_from_fork+0x4b/0x80 [ 689.497561][ C0] ? __pfx_kthread+0x10/0x10 [ 689.497577][ C0] ret_from_fork_asm+0x1a/0x30 [ 689.497612][ C0] [ 689.521562][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 689.521585][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc7-syzkaller-00097-g196145c606d0 #0 [ 689.521615][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 689.521631][ T30] Call Trace: [ 689.521641][ T30] [ 689.521652][ T30] dump_stack_lvl+0x241/0x360 [ 689.521689][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 689.521717][ T30] ? __pfx__printk+0x10/0x10 [ 689.521739][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 689.521782][ T30] ? vscnprintf+0x5d/0x90 [ 689.521814][ T30] panic+0x349/0x860 [ 689.521841][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 689.521875][ T30] ? __pfx_panic+0x10/0x10 [ 689.521896][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 689.521924][ T30] ? __irq_work_queue_local+0x137/0x410 [ 689.521958][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 689.521985][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 689.522017][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 689.522053][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 689.522090][ T30] watchdog+0x1033/0x1040 [ 689.522127][ T30] ? watchdog+0x1ea/0x1040 [ 689.522166][ T30] ? __pfx_watchdog+0x10/0x10 [ 689.522201][ T30] kthread+0x2f0/0x390 [ 689.522229][ T30] ? __pfx_watchdog+0x10/0x10 [ 689.522262][ T30] ? __pfx_kthread+0x10/0x10 [ 689.522286][ T30] ret_from_fork+0x4b/0x80 [ 689.522334][ T30] ? __pfx_kthread+0x10/0x10 [ 689.522358][ T30] ret_from_fork_asm+0x1a/0x30 [ 689.522414][ T30] [ 689.523838][ T30] Kernel Offset: disabled [ 690.024912][ T30] Rebooting in 86400 seconds..