last executing test programs: 21.09633937s ago: executing program 2 (id=3041): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000005, 0x13, r1, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x0}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVe.:De', 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x104, 0x2, 0x3e8, 0x100, 0x100, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @local, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x434) 20.903848224s ago: executing program 2 (id=3043): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000300)) ioctl$SIOCSIFHWADDR(r0, 0x89e0, &(0x7f0000000900)={'wlan1\x00', @random='\x00\x00\x00 \x00'}) 20.798396088s ago: executing program 2 (id=3044): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) (fail_nth: 4) 19.883716722s ago: executing program 2 (id=3047): socket$inet_tcp(0x2, 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f00000000c0), 0x2, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000040), 0x12) r3 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r3, 0x84, 0x6b, &(0x7f0000000000)=r5, 0x20) write$cgroup_freezer_state(r1, &(0x7f0000000400)='FROZEN\x00', 0x7) 10.322767374s ago: executing program 0 (id=3068): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4d, 0x2}, @cond}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000580)=[{&(0x7f0000000640)=""/102396, 0xfffffd6e}, {&(0x7f0000019740)=""/242}], 0x2, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x8, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000019680)={0x4, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2, r1, 0x0, 0x0, 0x0, 0x10, 0x19000000, @void, @value}, 0x90) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r1, 0x58, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800134800000f6339950000000000000500000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='kfree\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0x44, 0x9, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000240), 0x288, r5}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2, r5}, 0x38) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101201) r7 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$read(0xb, r7, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(r6, 0x8008551c, &(0x7f00000000c0)=@usbdevfs_driver={0x0, 0x1, 0x0}) socket(0x10, 0x80000, 0x5) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) r8 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r8, 0x8982, &(0x7f0000000000)) 10.039620668s ago: executing program 4 (id=3069): r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/dev\x00') r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r2, &(0x7f0000000100)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0x0) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000280)={0x0, @nl=@proc={0x10, 0x0, 0x25dfdbff, 0x8000}, @sco, @nfc={0x27, r4, 0xffffffffffffffff, 0x6}, 0x8, 0x0, 0x0, 0x0, 0x2400, &(0x7f0000000080)='bond_slave_1\x00', 0x3, 0x5, 0x14cd}) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x57) setsockopt$inet_mreqsrc(r1, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) syz_usb_connect$cdc_ecm(0x2, 0x56, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000020000102505a1a4400000000101090244000101000000090400001602020000052417000005240000000d240f0100000000000000000009058103400000000009058202ee010000000905030240"], 0x0) ioprio_set$pid(0x2, 0x0, 0x0) syz_clone(0x21104000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) r6 = socket$inet6_sctp(0xa, 0x3, 0x84) setsockopt$inet_sctp6_SCTP_MAXSEG(r6, 0x3a, 0xd, 0x0, 0x0) r7 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000810087406d040e0a759400000001090212000100000000090400200003"], 0x0) syz_usb_control_io$cdc_ecm(r7, 0x0, 0x0) syz_usb_control_io$printer(r7, &(0x7f0000000140)={0x14, &(0x7f0000000300)={0x0, 0x23, 0x8d, {0x8d, 0xa, "9cdb4c7b2b25e5015ba2a0971cc0d20668005550866dc354516cdc644843c3331f13402e9abaf20a2239c037a2998310c142c708c57075a95d89f11ab73636126db4a049ea9d820bed87d1f82168ecdb99c3380e099562574f5d652d70959b905b50804e3d691cb54ac10903c93ea26ac25543677d08512b66d6c66a108908d4cdfc5b80148509ee74547e"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x449}}}, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r5, 0x8934, &(0x7f0000000000)={'pimreg\x00', 0x2}) lseek(r0, 0xc8, 0x0) 8.999747844s ago: executing program 0 (id=3072): socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) mq_timedsend(0xffffffffffffffff, &(0x7f00000001c0)="285fcd6f495f09f091e4a9757fb679ea1244bdb9f7c9ce2e4e757028e97a944830c4caa6772e4d021a2bcf14538e1ab15dfd81a54e03d4d8f2880f022ecdb1de74a876600549f2", 0x47, 0x9, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d3750820c80a2103be6f000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000240)={0x10, &(0x7f0000000040)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x84, &(0x7f0000000140)=ANY=[@ANYBLOB="8e4fe30a66707f5e731fabe8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000300)=ANY=[@ANYRESOCT, @ANYBLOB="90689f08d8851ae19543e1ec40b964c6a97c7032372d6615c8efb891362fe6b01e38f793385abee7f529ffdf3a5ab6af02983c469f281ce71eed6f2cbb59d09efffa728b22af52e4a1e35f6923890d9905c7a8a60b081470f746e0cd734513524c9a46221b362a8e7087c990d6d9f55d4410a668f804ace71f7df0c20fb0195de66450bbfec5d01c5fa61e738590c9ebb294c8a204c7b6bb34479e943dadefc913d928d7f022e5dcba42bb5046eee71f03e82aa444b830b28a255789a651d067f764cc2879813f8fd0823a6774efcba1c5b27c57", @ANYRESOCT=r1, @ANYRESHEX, @ANYRESOCT=r1, @ANYRESHEX=r2], 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001fc0)={0x2c, &(0x7f0000000dc0)={0x20, 0xb}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000780)={0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="0000000000006ef096d6e2b3af99ef89799d21a8a91497e03d21e295c66100"/57], 0x0, 0x0}) 8.411085572s ago: executing program 1 (id=3075): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) getgid() syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="1f769a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000180)={0x0, 0x7}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000300)=ANY=[@ANYBLOB="02f0020000009c45"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000017c0)={0x44, &(0x7f00000015c0)={0x40, 0x10, 0x2, "a7ed"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000001400)={0x1c, &(0x7f0000001280)={0x20, 0x10, 0x2, "f558"}, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x2, "3095"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r2, 0x6612) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0xfffffffffffffffe, 0x0) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0x4, 0x0, 0x16, 0x9, "4b8b3ea46929dfed0b2f34380d308f95a023d009855a94a9fe9549918ae7fd1f0ece5bc61375b108403362cfe0f4fccffb1b6a2115354d4df15d017a3f00", "2363f18d9acc6c25af21ca2af6d2e80e4caadd6d126cf280c92dc817d44dcdec", [0x1, 0x7]}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f0000000200)={0x0, 0x0, 0x2, "b54d"}, 0x0, 0x0}) 8.251571183s ago: executing program 4 (id=3076): bpf$MAP_CREATE(0x700000000000000, &(0x7f0000000440)=@base={0x1d, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB]) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x10, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000600)={{r5}, &(0x7f0000000540), &(0x7f0000000580)='%pS \x00', 0x2}, 0x20) sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0}, 0xa7dceab572a65cc0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x14c}}, 0x2000c0c0) syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) memfd_create(0x0, 0x0) timer_create(0x4, &(0x7f00000000c0)={0x0, 0x41, 0x1, @thr={&(0x7f0000000340)="2f4d21f3c2e50956574ab26bc638f52cf3743a84ada787ac3b74aff288b68750daa249257b3e1731ba59ef1f27904674481414038879fded4a737f7811d8bee6e6e4edcac1efd293a7581a2cd4b64f16d70d52a5f908967fbd3b52cc7ee7c5ccd53a68a1ee2ff5ea41671c56df5d5b8c1862be01cc2dc9d365cd3cca2e5de8ee0e0458ae5fb06395d05550acd35c8970f9df1bb1c32849d6d42c096fa2ce720d68", &(0x7f0000000b40)}}, &(0x7f0000000400)=0x0) timer_settime(r7, 0x0, 0x0, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000202505a8a440000102030109021b000101000000090400000107010100090501", @ANYBLOB="deb275c1230fe5a335b3e301611eedc1711f9a4bc8625a717dde5c49522c789581e56eb7fc3460069097c3ad62e4b44709c20eee82ccd6a9bb6cd1ada6b1aa85b0d069333226ac0df65379f2ccf0e7de87b50de89a6016f006e472d7a5702bc079bdcde1724c3565199ba4f969fba8cd28e55b41", @ANYRESHEX=r4], 0x0) 5.437734797s ago: executing program 3 (id=3082): socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (fail_nth: 2) 4.718792524s ago: executing program 3 (id=3083): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, 0x0, 0x0, 0x0) vmsplice(r5, &(0x7f0000000040)=[{&(0x7f00000000c0)='c', 0x1}], 0x1, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wg1\x00'}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r3, 0x0, 0x10000008ebc, 0x0) splice(r2, 0x0, r7, 0x0, 0x25a5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.swap.events\x00', 0x26e1, 0x0) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x2, &(0x7f0000000240)=@raw=[@call={0x85, 0x0, 0x0, 0x20}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}], &(0x7f0000000300)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000380)={0x4, 0xd, 0x94, 0x7}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000003c0)=[r8, 0xffffffffffffffff, 0xffffffffffffffff, r8, 0xffffffffffffffff], &(0x7f0000000400)=[{0x5, 0x2, 0x6, 0x1}, {0x1, 0x5, 0x6, 0x9}], 0x10, 0x9, @void, @value}, 0x90) close(r9) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r10, 0x84, 0x21, &(0x7f00000015c0), &(0x7f0000001600)=0x4) 4.718064573s ago: executing program 4 (id=3084): r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x8000, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x1, 0x2, 0x2}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000040)=0x2) r1 = fcntl$dupfd(r0, 0x406, r0) write$USERIO_CMD_REGISTER(r1, &(0x7f00000000c0)={0x0, 0x6}, 0x2) r2 = socket$key(0xf, 0x3, 0x2) getsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, 0x0, &(0x7f0000000080)) r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x70001, 0x0) fstatfs(r4, &(0x7f0000000180)=""/177) r5 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r5, 0x5) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000007a80), 0x101000, 0x0) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0xc3) r7 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r7, 0x2) flock(r0, 0x2) sched_setaffinity(0x0, 0xffffffffffffffca, &(0x7f0000000040)=0x10001) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r5, &(0x7f00000003c0)="a0395bf62577d5f37ae2eea78aa6bc835312d2ced563b60f09ef109784d4407539658ccb9bd8aeed28696d014b27c0a3295cc196789079809cff11e2fafb2ee761fb50c6dbe792cd27f8fca97b54bb57d6c955ebdbd75354b81976f35bac06d72925e19be3ae7fcbc19e6a4c26848f5a6228aa84556c904bb35eed5ecc18da5ae86a25bbf30946797c4bb664905b54ad79a589c38dc0320bd43136727f2f063f955ed73923626626fb81ce6e88b7a509d4c3de32dbdda234abad48024c7e3395963b93027968e04ab71445667b3e44273bbf3a93fb129fbac539", &(0x7f0000000280)=@udp=r3, 0x2}, 0x20) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r8, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r9 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r9, &(0x7f0000000040)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r9, &(0x7f00000001c0), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r9, &(0x7f0000000200), 0x2) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001e00)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff4070000000000000480000000000e1ff95000000000000002ba7e1d30cb599e83f040000f300000000bd01212fb56f040026fbfefc41056bd8174b79ed317142fa9ea4158123751c5c652fbc1626cca2a2ad75806150ae0209e62f51ee988e6e06c8206ac6939fc404000000c788b277be1cb79b0a4dcf23d410f6accd3641110bec4e90a634199e07f8f6eb968f200e011ea665c45a3449abe802f5ab3e89cf6cfdffffffb8580218ce740068720000074e8b1715807ea0ca469e46968eea3fd2f73902ebcfcf49822775985bf313405b367e81c700000040000000000000000000005335000000143ea70c2ab40c7cb70c943a6d60d7c4900282e147d08e0af4b29df814f5691db43a5c00000004000000000089faff01210cce39bf405f1e846c12423a164a33e680846f26ad03dd65873d9f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d6155102b1ced1e8019e63c850af895abba14f6fbd7fb5e2a431ab914040000000000010092c9f4609646b6c5c29647d2f950a959cf9938d6dfcb8ed2cbdc2ba9d580609e31c3fa90812a533ce206e7e57a79d6fce424c2200af6c7784a1975fa807de38a3a61e44a9ecab19bdfb15a32a4fd67ce446adb431d07db79240acaf091231b986e77d05d988d6efdffdf48dca02113a38300cabf2b5543ffc166955709009e000000000061629d1822f720ec23812770d72c700a44e113d17088fdd00600000f7889b8c7044f56ff030000000000006cd4970400cac6f45a6922ded2e29514af463f747c08f4010586903500000000000000000000be34cf652e28e700000000000000b24478a78a0f9d640dd782ac0cbc46903243d0d0f4bc7f253d0500000032daaf281c450e64c33aac8ff7e7d1c94c450503009688b008c370494f6734b771546d9552d3bb2da0d000000000000000009125c97f0000f5e1671bc5eb7739daa7820a91cb0e732df2ae1d39c747e00a4fbfe8942fa859cd28bdaa1509309926c77fbcb15ec58b42b4cbaf5a6b649dd5f13cd776e6c7c4b5c4b0de20e033b378553ead4c8cc530b62c36364e6505992209bdbc6203da7a3797246a6adef071102f0aa2c40095ddd05176f5cb8bd99e1ba0f9568f3e3876bba7bf973334e7919a080000000000000004fb996ad919f7e9672ce107000000ad882f2aead166c94500be902ee7dabc768eb9ec13e434aae9df81ecaf5f744f22f2e45afe2c9e8632276cffe5f1fc215c0797d0244cf1ce269d10525745caaa3f77d1b80116cb9a384002421d898913c45a9ac091a0116f4693133138583da5e10b434697b0443b7b4ddfb3ace29e16e5a881336aad0974269a1025e2a9a135c045a17e9a61c3b064e679508af1aec2926627b43bba1229a7466bdca64f514b7911458da09fe8681916d408d753226a83ae2434ccd3fc508216aea86833030f569d61dc998620fcf4eeb92e7bc511df63c53b82514493b8f3c74f44ba184d40e87612024da1a1ebe316923865f037c01d71b5de81121046d84b18acb5cbea7eecad9b6dd46ed83515cd911e0e5f00019be25b5910a3193e90be231a05fd82e6003969c3f081ff1d0eb50a04d14644234828cbb5aaa0ece702abdd425fa25ae04a2315c89064df633700000000d9e5953ea67310993d01000000000000003ac753358791b1490273ca535e05b11d815237743a5b79ad45de2a3c91257f02c2f30f5513662809073710937ed0055b238f466e1442f8ec7a5b394228035039ceeb452dca75f9ff5332b4c4777a58a0aa9a821667c68549e9da89ad4218cea744b332ab232a09cf1ec375627074ce2d3d7619936768a84a1465fff4eedba55955434f132ab7b8840558b3f918d675a79907a72a8252cd3fbaea5d3006a03507838231a335ae759ed25534f2e90a7def4b3d4af7fd47ab1a701e4b7a7dfc1d12775ed0a31bc7b5855880aa767e68196c7aa5ac115724b6cb8fcebb67719eccd87b06b38566cf61ad2f307a79d2ce9801837bf0bd3af0271de700eef2795d28cb0017000000000000000000e052d93194121b774d21a0317d0346078400004652c769fd3d3e661a2fb511164f1502ab2ac4eb3f19c042163e0bdb88b82de384a8055e8b1e24294b0546cce481ff5618b7b9585dbb64d66debf219fa479abf22f3d64fe82e466ea6f27859946e72f80bb1c9cfcde57b79625e2979fe689a5a246cbbdf6ad488f43f46b2536f175f46dfb27d522946727024de0c59ca3305e66825715e5e4cd5b54c1b05c09f04337a76a30373baac3ecec91fd546eb7c32dbecb18a308a0004be94dfab28c2a51dc856df00000000000000000000dfa4c12254f041804f7f7074356789b1d4dd55f3e045a48241a4ce04d06acb2cf11eab759ba78da5d00f26126d4cf2c73e5f94030000000000000000000000c301985d603403592486204054be3fdda91f9e315886941928e5a8bc1a00e69a98c0a8f7192f6ee93cc4124cf4e7610915efc08c834a44e1d685d6835a40b5bc615949cbcd98d0e68d7eef5d32d5fcc7923d7544fa492aa38717481c55e86dcd7816ad8940bd1995369d89ae6eadeb9117e8b94ab422c8d62fc9dfffeb13b4858875dccdbc89572231ef5d6df6a9c55f8df763c7c64da7cc017e1ef90ed4cb9fe6d19b11d4d38239d318016e622b9683b7e46be64dc097982e23462392a0cd05afb2e060fd42ef00dfbd057311aab94f307d10c7a1af0d8e5a0fcb547475d13c0000000000000000f1cc97103d714d1af45790517c4a0f5c6a5024e3359e8d83e3f6edf9e2afb5ab59c7b2b45cfb0a3c1303a98e4ed531ac11cca1cd744b431de74c7cd6533adaa8ec749061b2959d53da626aa189781dc1be4d5c81aebc0cada819895b377d6cf0a7878ba99864ae84464744c605646caf2e06b13eba7ba10acf77d91b2297e9573abb0a4da534d735a223626402b308daf7835780fa6f4e410000000000fb00000000000000000000b14952139bd4bdbccc5e334c49584655c4fce8c5bb7c54664aef6d78429d358aa54b4b49926c4be9ee4659153d9f9f5d07cc4efdab2c5f4503148d0255d0b748366dafe042d78479c21d832e1431ed6d646d13e8e7230300920a5642bbed1dee9b46b6f02e572024ccf3c8edd82660e5d74c52be71d780c300000000d0267ac40d1130a9000000000045f50812a1a0530b02baed19f4c977ac0d397ed6371ec589bf5943690250bdfa5b676d5d53d2ab3aeee1a6910c1a33b6c06c93386768f8b1bb27ec31cffbd4f5c7b0c2e14e4fc6c2f089ab08567254e93780afdddefb3f0d2143ad73c0bf2467859049d46dc5aa91f918a307e7dcaaccd6cbe66e8a04d201392a487f681f82528a800e27d65200ae10e1b5d39a29d8a2c8ed2dfa77e21249b45806733e674a9e8e72ad1cb0d3bfadb00a18a5008ea1e4c8fb93d311f52a476c576a3f65c9bdd4e4b870aed4cb9906a8aa25986e6e30be249d9911114b42b2fb51168e56000a62b794c193f7797e"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r10, 0x18000000000002a0, 0x160, 0x0, &(0x7f0000000380)="b9e403c6630d698cb8a00b04339c", 0x0, 0x7ec, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) flock(r3, 0x1) close_range(r3, 0xffffffffffffffff, 0x0) 4.60510764s ago: executing program 0 (id=3085): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000040)={0x38, r2, 0x1, 0x300, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'nicvf0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}]}, 0x38}}, 0x0) 4.335553793s ago: executing program 0 (id=3086): r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) (async) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) (async) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000001240)) (async) write$char_usb(0xffffffffffffffff, 0x0, 0x0) (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) (async) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x8, &(0x7f0000001e00)=""/102400, &(0x7f0000000040)=0x19000) (async) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000000000000000104004e20004db0"], 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x3e, 0xbc, 0x67, 0x40, 0x525, 0xa4a3, 0x1c92, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x3, 0x1, 0xe6, 0xef, 0xa2, 0x0, [], [{{0x9, 0x5, 0xc, 0x11}}]}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) (async) fspick(0xffffffffffffff9c, 0x0, 0x0) (async) ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, &(0x7f0000000000)=""/45) 3.716222163s ago: executing program 3 (id=3087): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000380)) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f00000001c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}) bpf$MAP_CREATE(0x0, &(0x7f0000001300)=@bloom_filter={0x1e, 0x4, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r2 = syz_open_pts(r1, 0x0) r3 = dup3(r2, r1, 0x0) read$watch_queue(r1, &(0x7f0000002e00)=""/4088, 0xff8) read$watch_queue(r3, &(0x7f0000001480)=""/4099, 0x1003) r4 = accept4$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000040)=0x1c, 0x80800) bind$inet6(r4, 0x0, 0x0) 2.866052371s ago: executing program 4 (id=3088): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_PMKSA(r1, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x54, r2, 0x2, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x5, 0x24}}}}, [@NL80211_ATTR_SSID={0x16, 0x34, @random="2083f3b781a5eb775812b0e86e357eac69c8"}, @NL80211_ATTR_SSID={0x1a, 0x34, @random="b99e6ebb61dd886c8cdd8d404a8f0da6f0c954008ed1"}]}, 0x54}, 0x1, 0x0, 0x0, 0x801}, 0xc080) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x50}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000a40), 0x2, 0x0) writev(r4, &(0x7f0000000380)=[{&(0x7f0000000100)='\f\x00\x00\x00', 0x4}], 0x1) syz_emit_vhci(0x0, 0x102) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_conn_param_update_rsp={{0x13, 0x81, 0x2}}}}, 0xf) keyctl$join(0x1, 0x0) socket$packet(0x11, 0x0, 0x300) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, 0x0) r5 = syz_io_uring_setup(0x24f8, &(0x7f0000002ec0)={0x0, 0x0, 0x10100}, &(0x7f00000000c0), &(0x7f0000000140)=0x0) r7 = memfd_secret(0x0) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) ftruncate(r7, 0x5) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x11, r7, 0x0) syz_io_uring_submit(r8, r6, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000040), &(0x7f0000000180)='./file0\x00', 0x72}) io_uring_enter(r5, 0x2d3e, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)={{0x14}, [@NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2a}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_OBJ_TYPE={0x8}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x7c}}, 0x0) 2.70629667s ago: executing program 1 (id=3089): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/vmcoreinfo', 0x0, 0x10c) read$FUSE(r0, &(0x7f0000000900)={0x2020}, 0x2020) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r0, &(0x7f0000000040)="d91845a5c81dc1b1d5ab17145e1870de487c5e3ef85df3349150c52eed011b9d50aa928e9143a60aab4cdb8b87c9ec00212e530b1af8564a94669f1f603c733b9f3e1331a575d7300fce476bcc67771b2507cdb72af7b2d4677e6f3b2a33442d2bdf6601807016594ef6fc054f9c00120dd7d8448ba34da8e1018b6ecdb118195c3bf15cadb3c841c010d7bb2070368b4b665e47f958337453aa4d133e9fbdf22de91f8cd6a30d6dc282eb460044412961b59ca01b7b04804fe3a72dd2cba9ba0993fd43328821e4290495bf3a6f7cfce0a3210e862c"}, 0x20) r1 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r1, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r1, 0x0) unshare(0x20000400) 2.705468714s ago: executing program 3 (id=3090): setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000000c0)={'filter\x00', 0x7, 0x4, 0x3f8, 0xf0, 0xf0, 0x200, 0x310, 0x310, 0x310, 0x8000000, 0x0, {[{{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_macvtap\x00', 'wg1\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @empty, @multicast2}}}, {{@arp={@multicast1, @multicast2, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'gre0\x00', 'bridge0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x448) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r1, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r3, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) write$binfmt_script(r2, &(0x7f0000000200), 0xfffffd9d) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_aout(r4, &(0x7f00000002c0)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000005, 0x13, r4, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x104, 0x2, 0x3e8, 0x100, 0x100, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @local, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x434) 2.598778109s ago: executing program 1 (id=3091): socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x88, 0x59, 0xf1, 0x10, 0x582, 0xe6, 0x4e06, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0xe2, 0xb2}}]}}]}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000050000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) r1 = socket$packet(0x11, 0x3, 0x300) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$igmp6(0xa, 0x3, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000070000100000000000000000007000000", @ANYRES32, @ANYBLOB="0c00018008000100000000060c00018008000100000004000c0001800800010000000300e56dbc6c4f05353ad238d5838de9b321b73e47aec8d4488681f1aee84577407621f703430d69d35bee6fa88268a1d8e0817da0c748bd116ca5bd1d5ebee3a8a811cc46dc6533b16c28950027c94971b9516302a74cd7fe6c9d9804a4bde5d07615992e36eff7619659efd2a51fd11894808ac0eda1434d771ff21fa513ebd237db62dd4700bf083cc4c51495ff2df5855cc963815a3e6a2ec1edfc30f5"], 0x3c}, 0x1, 0x5502000000000000}, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x50, 0x50, 0x9, [@func={0xa, 0x0, 0x0, 0xc, 0x3}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0xa}]}, @int={0x9, 0x0, 0x0, 0x1, 0x0, 0x50, 0x0, 0x7e}, @int={0xd, 0x0, 0x0, 0x1, 0x0, 0x5d, 0x0, 0x77, 0x3}, @var={0xb, 0x0, 0x0, 0xe, 0x1, 0x1}]}, {0x0, [0x2e, 0x2e, 0x30, 0x2e, 0x61, 0x30, 0x61]}}, &(0x7f0000000340)=""/178, 0x71, 0xb2, 0x1, 0x3, 0x10000, @value=r1}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000001500)=@bloom_filter={0x1e, 0x22, 0x700, 0xfff, 0x24002, 0x1, 0xffff, '\x00', 0x0, r2, 0x4, 0x3, 0x0, 0x6, @void, @value, @void, @value}, 0x50) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r4) creat(&(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) close(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) syz_io_uring_setup(0x3b, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000), &(0x7f0000000100)=0x0) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000140)=r7) syz_io_uring_setup(0x15aa, &(0x7f0000000180)={0x0, 0xfad0, 0x40, 0x0, 0x35d}, &(0x7f0000000200)=0x0, &(0x7f0000000280)) syz_io_uring_submit(r8, r6, &(0x7f00000014c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="10000000dd79df388b3e9fa1f7cfa600b3cc000000000000000000100000"], 0xb}, 0x0, 0xe3d08660d7cd4e04}) prctl$PR_CAPBSET_READ(0x17, 0xcf) 2.343678078s ago: executing program 4 (id=3092): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000640)={{{@in6=@mcast1, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2f, 0x0, 0xee01}, {0x0, 0x20000000000000, 0x0, 0x84, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x2}, {{@in=@remote, 0x0, 0x33}, 0xa, @in=@empty, 0x0, 0x4}}, 0xe8) sendmmsg$inet6(r0, &(0x7f0000004a80)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @dev}, 0x1c, 0x0}}], 0x1, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) lgetxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)=@known='system.posix_acl_access\x00', &(0x7f0000000740)=""/4096, 0x1000) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r6, @ANYBLOB="1c005a8018000180140005"], 0x38}}, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x100, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x880) 2.283929785s ago: executing program 4 (id=3093): bpf$MAP_CREATE(0x700000000000000, &(0x7f0000000440)=@base={0x1d, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB]) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x10, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000600)={{r5}, &(0x7f0000000540), &(0x7f0000000580)='%pS \x00', 0x2}, 0x20) sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0}, 0xa7dceab572a65cc0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x14c}}, 0x2000c0c0) syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) memfd_create(0x0, 0x0) timer_create(0x4, &(0x7f00000000c0)={0x0, 0x41, 0x1, @thr={&(0x7f0000000340)="2f4d21f3c2e50956574ab26bc638f52cf3743a84ada787ac3b74aff288b68750daa249257b3e1731ba59ef1f27904674481414038879fded4a737f7811d8bee6e6e4edcac1efd293a7581a2cd4b64f16d70d52a5f908967fbd3b52cc7ee7c5ccd53a68a1ee2ff5ea41671c56df5d5b8c1862be01cc2dc9d365cd3cca2e5de8ee0e0458ae5fb06395d05550acd35c8970f9df1bb1c32849d6d42c096fa2ce720d68", &(0x7f0000000b40)}}, &(0x7f0000000400)=0x0) timer_settime(r7, 0x0, 0x0, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000202505a8a440000102030109021b000101000000090400000107010100090501", @ANYBLOB="deb275c1230fe5a335b3e301611eedc1711f9a4bc8625a717dde5c49522c789581e56eb7fc3460069097c3ad62e4b44709c20eee82ccd6a9bb6cd1ada6b1aa85b0d069333226ac0df65379f2ccf0e7de87b50de89a6016f006e472d7a5702bc079bdcde1724c3565199ba4f969fba8cd28e55b41", @ANYRESHEX=r4], 0x0) 2.113461292s ago: executing program 2 (id=3070): r0 = syz_io_uring_setup(0x690b, &(0x7f00000006c0)={0x0, 0x0, 0x10100, 0x3, 0x3}, &(0x7f0000000200), &(0x7f0000000100)=0x0) syz_io_uring_setup(0x1866, 0x0, &(0x7f0000000500)=0x0, &(0x7f0000000240)) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="1201000000000040341a020800000000000109022400010000000009040000020300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "d32052f2"}]}}, 0x0}, 0x0) unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r4 = syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r4, 0x0, 0x0}) io_uring_enter(r0, 0x184c, 0x0, 0x0, 0x0, 0x0) 1.863791306s ago: executing program 0 (id=3094): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000040)={0x0, @reserved}) (fail_nth: 2) 1.827553433s ago: executing program 3 (id=3095): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1, 0x6, {0x1, 0x0, 0x3}}, 0x18) r2 = socket$kcm(0xa, 0x3, 0x3a) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r3}, 0x38) poll(&(0x7f0000000200)=[{0xffffffffffffffff, 0x8008}, {r3}, {0xffffffffffffffff, 0x8200}, {0xffffffffffffffff, 0x8}, {0xffffffffffffffff, 0x400}], 0x200000000000002d, 0xfffff5bf) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@delchain={0x34, 0x5f, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x5, 0x2}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}}, 0x0) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="120100005ab05740450c088085e10000000109021200b8dc0000000904"], 0x0) syz_usb_control_io$hid(r6, 0x0, &(0x7f00000001c0)={0x2c, &(0x7f0000000780)=ANY=[@ANYBLOB="4016e6"], 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2, {r2}}, './file0\x00'}) ioctl$IOC_PR_RELEASE(r7, 0x401070ca, &(0x7f0000000040)={0x98ce, 0x5, 0x1}) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}, 0x3, 0x4}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)='\x00\x00', 0x2}], 0x1, 0x0, 0x0, 0x900}, 0x60) 1.333042939s ago: executing program 0 (id=3096): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYRES8=0x0], 0x0}, 0x0) ioctl$HIDIOCSREPORT(0xffffffffffffffff, 0x81044804, &(0x7f0000000400)={0x1}) syz_usb_control_io$hid(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x7, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000008000/0x3000)=nil) timer_create(0x0, 0x0, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs={0xed88e807f337116b, 0x0, 0x4e21}, 0x6e) r2 = socket$unix(0x1, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) writev(r2, &(0x7f0000000040), 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f00000008c0)={'filter\x00', 0x2, 0x4, 0x3c0, 0x108, 0x108, 0x0, 0x2d8, 0x2d8, 0x2d8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x27e9, 0xfffc}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x410) 610.27892ms ago: executing program 1 (id=3097): unshare(0x20000400) unshare(0x20080) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) 495.653331ms ago: executing program 1 (id=3098): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x1, 0x0, 0x0, {[@mss={0x2, 0x4, 0xa005}]}}}}}}}, 0x0) 218.74906ms ago: executing program 3 (id=3099): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@rthdr={{0x28, 0x29, 0x32, {0x0, 0x2, 0x2, 0x0, 0x0, [@private0]}}}], 0x28}, 0x8000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) flock(r0, 0x2) socket$packet(0x11, 0x2, 0x300) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000380)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r2, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r3, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r2, 0x3b89, &(0x7f00000002c0)={0x18, 0x3, r4, r5, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000280)}) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) close_range(r0, 0xffffffffffffffff, 0x0) r6 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r6, 0x101) r7 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r7, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r7, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x10) r8 = accept4(r6, 0x0, 0x0, 0x0) sendmmsg$unix(r8, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f0000000a00)="ca", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)='Z', 0x1}], 0x1, 0x0, 0x0, 0x10}}], 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000680)={'syztnl0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r8, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000740)={0x14, 0x0, 0x8, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x24000080}, 0x4000054) 202.552064ms ago: executing program 1 (id=3100): socket$can_j1939(0x1d, 0x2, 0x7) socket$packet(0x11, 0x2, 0x300) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x23, 0x44, 0x1d, 0x40, 0x93a, 0x2603, 0xca84, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x87, 0x7c, 0x46}}]}}]}}, 0x0) syz_open_dev$video(&(0x7f0000000000), 0x7fff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0x4048aecb, &(0x7f00000000c0)=ANY=[@ANYRES64=r0, @ANYRES64]) 0s ago: executing program 2 (id=3101): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_PMKSA(r1, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x54, r2, 0x2, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x5, 0x24}}}}, [@NL80211_ATTR_SSID={0x16, 0x34, @random="2083f3b781a5eb775812b0e86e357eac69c8"}, @NL80211_ATTR_SSID={0x1a, 0x34, @random="b99e6ebb61dd886c8cdd8d404a8f0da6f0c954008ed1"}]}, 0x54}, 0x1, 0x0, 0x0, 0x801}, 0xc080) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x50}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000a40), 0x2, 0x0) writev(r3, &(0x7f0000000380)=[{&(0x7f0000000100)='\f\x00\x00\x00', 0x4}], 0x1) syz_emit_vhci(0x0, 0x102) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_conn_param_update_rsp={{0x13, 0x81, 0x2}}}}, 0xf) keyctl$join(0x1, 0x0) socket$packet(0x11, 0x0, 0x300) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, 0x0) r4 = syz_io_uring_setup(0x24f8, &(0x7f0000002ec0)={0x0, 0x0, 0x10100}, &(0x7f00000000c0), &(0x7f0000000140)=0x0) r6 = memfd_secret(0x0) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) ftruncate(r6, 0x5) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x11, r6, 0x0) syz_io_uring_submit(r7, r5, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000040), &(0x7f0000000180)='./file0\x00', 0x72}) io_uring_enter(r4, 0x2d3e, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): e_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 908.154673][ T5224] Bluetooth: hci4: command tx timeout [ 908.181973][T18873] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 908.222619][T18882] bridge0: port 1(bridge_slave_0) entered blocking state [ 908.236134][T18882] bridge0: port 1(bridge_slave_0) entered disabled state [ 908.243364][T18882] bridge_slave_0: entered allmulticast mode [ 908.255820][T18882] bridge_slave_0: entered promiscuous mode [ 908.264140][T18882] bridge0: port 2(bridge_slave_1) entered blocking state [ 908.284880][T18882] bridge0: port 2(bridge_slave_1) entered disabled state [ 908.294659][T11198] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 908.303684][T18882] bridge_slave_1: entered allmulticast mode [ 908.326410][T18882] bridge_slave_1: entered promiscuous mode [ 908.393834][T18873] hsr_slave_0: entered promiscuous mode [ 908.402660][T18873] hsr_slave_1: entered promiscuous mode [ 908.417013][T18882] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 908.445346][T11198] usb 4-1: Using ep0 maxpacket: 16 [ 908.455602][T11198] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 908.460134][T18882] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 908.467786][T11198] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 908.487485][T11198] usb 4-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice=f4.95 [ 908.506100][T11198] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 908.521685][T11198] usb 4-1: Product: syz [ 908.563556][T11198] usb 4-1: Manufacturer: syz [ 908.568665][T11198] usb 4-1: SerialNumber: syz [ 908.590491][T11198] usb 4-1: config 0 descriptor?? [ 908.611402][T18982] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 908.624710][T18982] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 908.640603][T18882] team0: Port device team_slave_0 added [ 908.677365][T18882] team0: Port device team_slave_1 added [ 908.944733][ T2541] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 909.295698][ T2541] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 909.346000][T18882] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 909.373339][T18882] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 909.404621][ C1] vkms_vblank_simulate: vblank timer overrun [ 909.435370][ T5224] Bluetooth: hci9: command tx timeout [ 909.503491][T18882] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 909.612323][ T2541] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 909.735182][T18882] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 909.762610][T18882] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 909.837955][T18882] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 910.232682][ T2541] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 910.243285][ T5224] Bluetooth: hci4: command tx timeout [ 910.405531][T18882] hsr_slave_0: entered promiscuous mode [ 910.423007][T18882] hsr_slave_1: entered promiscuous mode [ 910.441396][T18882] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 910.461872][T18882] Cannot create hsr debugfs directory [ 911.159876][T11198] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 911.170254][T11198] asix 4-1:0.0: probe with driver asix failed with error -71 [ 911.194060][T11198] usb 4-1: USB disconnect, device number 40 [ 911.482887][ T2541] bridge_slave_1: left allmulticast mode [ 911.494576][ T2541] bridge_slave_1: left promiscuous mode [ 911.500339][ T2541] bridge0: port 2(bridge_slave_1) entered disabled state [ 911.566596][ T2541] bridge_slave_0: left allmulticast mode [ 911.572304][ T2541] bridge_slave_0: left promiscuous mode [ 911.578067][ T2541] bridge0: port 1(bridge_slave_0) entered disabled state [ 911.855647][T11198] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 912.006358][T11198] usb 5-1: Using ep0 maxpacket: 8 [ 912.057884][T11198] usb 5-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 912.068357][T11198] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 912.095880][T11198] usb 5-1: Product: syz [ 912.100101][T11198] usb 5-1: Manufacturer: syz [ 912.105488][T11198] usb 5-1: SerialNumber: syz [ 912.130706][T11198] usb 5-1: config 0 descriptor?? [ 912.156614][T11198] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 912.299197][ T2541] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 912.311088][ T2541] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 912.325934][ T2541] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 912.343831][ T2541] bond0 (unregistering): Released all slaves [ 912.366462][T19022] netlink: 'syz.1.2985': attribute type 4 has an invalid length. [ 912.592451][T11198] gspca_sonixj: reg_r err -32 [ 912.598675][T11198] sonixj 5-1:0.0: probe with driver sonixj failed with error -32 [ 912.739908][T18873] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 912.926166][T18873] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 913.009207][ T2541] hsr_slave_0: left promiscuous mode [ 913.023801][ T2541] hsr_slave_1: left promiscuous mode [ 913.030978][ T2541] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 913.043699][ T2541] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 913.075334][ T2541] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 913.095178][ T2541] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 913.153654][ T2541] veth1_macvtap: left promiscuous mode [ 913.166810][ T2541] veth0_macvtap: left promiscuous mode [ 913.178327][ T2541] veth1_vlan: left promiscuous mode [ 913.189389][ T2541] veth0_vlan: left promiscuous mode [ 913.844160][T19067] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2992'. [ 913.858354][T19067] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 914.142064][ T2541] team0 (unregistering): Port device team_slave_1 removed [ 914.206326][ T2541] team0 (unregistering): Port device team_slave_0 removed [ 914.672705][ T5224] Bluetooth: hci11: SCO packet for unknown connection handle 0 [ 914.673738][ T5286] usb 5-1: USB disconnect, device number 30 [ 915.045731][T18873] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 915.174691][ T5281] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 915.212465][T18873] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 915.390329][ T5281] usb 5-1: config 0 has an invalid interface number: 55 but max is 1 [ 915.446418][ T5281] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 915.511182][ T5281] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 915.541070][ T5281] usb 5-1: config 0 has no interface number 0 [ 915.554967][ T5281] usb 5-1: config 0 interface 55 altsetting 2 bulk endpoint 0x3 has invalid maxpacket 16 [ 915.608399][ T5281] usb 5-1: config 0 interface 55 altsetting 2 endpoint 0x2 has an invalid bInterval 159, changing to 11 [ 915.621709][T18882] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 915.654523][ T5281] usb 5-1: config 0 interface 55 altsetting 2 has a duplicate endpoint with address 0x3, skipping [ 915.665631][T18882] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 915.685367][ T5281] usb 5-1: config 0 interface 55 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 915.734854][ T5281] usb 5-1: config 0 interface 55 altsetting 2 bulk endpoint 0x1 has invalid maxpacket 64 [ 915.752381][T18882] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 915.779590][ T5281] usb 5-1: config 0 interface 55 altsetting 2 has 6 endpoint descriptors, different from the interface descriptor's value: 9 [ 915.803995][T18882] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 915.833969][ T5281] usb 5-1: config 0 interface 55 has no altsetting 0 [ 915.856936][T19089] netlink: 'syz.3.2998': attribute type 4 has an invalid length. [ 915.865772][ T5281] usb 5-1: New USB device found, idVendor=093a, idProduct=2601, bcdDevice=31.68 [ 915.889851][ T5281] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 915.936139][ T5281] usb 5-1: Product: syz [ 915.944622][ T5281] usb 5-1: Manufacturer: syz [ 915.950568][ T5281] usb 5-1: SerialNumber: syz [ 915.977849][ T5281] usb 5-1: config 0 descriptor?? [ 915.988063][T18873] 8021q: adding VLAN 0 to HW filter on device bond0 [ 915.996601][T19078] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 916.004337][T19078] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 916.101383][T18873] 8021q: adding VLAN 0 to HW filter on device team0 [ 916.155445][ T6428] bridge0: port 1(bridge_slave_0) entered blocking state [ 916.162722][ T6428] bridge0: port 1(bridge_slave_0) entered forwarding state [ 916.235316][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 916.242439][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 916.289627][T18882] 8021q: adding VLAN 0 to HW filter on device bond0 [ 916.422140][T18882] 8021q: adding VLAN 0 to HW filter on device team0 [ 916.489028][ T6428] bridge0: port 1(bridge_slave_0) entered blocking state [ 916.496166][ T6428] bridge0: port 1(bridge_slave_0) entered forwarding state [ 916.579986][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 916.587185][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 916.683888][T18873] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 916.768940][T18882] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 916.967806][T18873] veth0_vlan: entered promiscuous mode [ 917.004057][T18873] veth1_vlan: entered promiscuous mode [ 917.077333][T18882] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 917.133049][T18873] veth0_macvtap: entered promiscuous mode [ 917.161863][T18873] veth1_macvtap: entered promiscuous mode [ 917.234611][T18579] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 917.237850][T18873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 917.291729][T18873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 917.313780][T18873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 917.338775][T18873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 917.368469][T18873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 917.392200][T18873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 917.414813][T18873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 917.439946][T18873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 917.447196][T18579] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 917.465736][T18873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 917.472104][T18579] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 917.502374][T18873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 917.504430][T18579] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 917.536981][T18873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 917.551404][T18579] usb 4-1: config 0 descriptor?? [ 917.571212][T18873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 917.579353][T18579] pwc: Askey VC010 type 2 USB webcam detected. [ 917.594331][T18873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 917.625772][T18873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 917.670425][T18873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 917.709238][T18873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 917.732409][T18873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 917.763174][T18873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 917.786960][T18873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 917.787129][T18579] pwc: send_video_command error -71 [ 917.812482][T18873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 917.834819][T18579] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 917.849836][T18579] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 917.852572][T18873] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 917.891522][T18579] usb 4-1: USB disconnect, device number 41 [ 917.977930][T18873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 918.019172][T18873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 918.103692][T18873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 918.116212][ T5281] gspca_main: pac7311-2.14.0 probing 093a:2601 [ 918.124532][T18873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 918.124764][ T5281] gspca_pac7311: reg_w() failed index 0xff, value 0x01, error -71 [ 918.153290][T18873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 918.167261][ T5281] pac7311 5-1:0.55: probe with driver pac7311 failed with error -71 [ 918.184501][T18873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 918.213348][ T5281] usb 5-1: USB disconnect, device number 31 [ 918.217057][T18873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 918.244440][T18873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 918.254506][T18873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 918.265085][T18873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 918.277752][T18873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 918.288344][T18873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 918.298259][T18873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 918.312500][T18873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 918.322696][T18873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 918.333293][T18873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 918.354644][T18873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 918.383238][T18873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 918.403732][T18873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 918.425295][ T47] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 918.435009][T18873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 918.458727][T18873] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 918.529497][T18873] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 918.554879][T18873] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 918.583014][T18873] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 918.602737][ T47] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 918.623191][T18873] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 918.632315][ T47] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 918.661055][ T47] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 918.687319][ T47] usb 4-1: config 0 descriptor?? [ 918.709777][ T47] pwc: Askey VC010 type 2 USB webcam detected. [ 918.777979][T18882] veth0_vlan: entered promiscuous mode [ 918.818632][T18882] veth1_vlan: entered promiscuous mode [ 919.115034][ T47] pwc: recv_control_msg error -32 req 02 val 2b00 [ 919.143738][ T47] pwc: recv_control_msg error -32 req 02 val 2700 [ 919.164058][ T47] pwc: recv_control_msg error -32 req 02 val 2c00 [ 919.182392][ T47] pwc: recv_control_msg error -32 req 04 val 1000 [ 919.183039][ T53] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 919.202428][ T47] pwc: recv_control_msg error -32 req 04 val 1300 [ 919.245414][ T47] pwc: recv_control_msg error -32 req 04 val 1400 [ 919.252828][ T47] pwc: recv_control_msg error -32 req 02 val 2000 [ 919.266055][ T47] pwc: recv_control_msg error -32 req 02 val 2100 [ 919.277808][ T47] pwc: recv_control_msg error -32 req 04 val 1500 [ 919.287741][ T47] pwc: recv_control_msg error -32 req 02 val 2500 [ 919.335011][ T47] pwc: recv_control_msg error -32 req 02 val 2400 [ 919.345874][ T47] pwc: recv_control_msg error -32 req 02 val 2600 [ 919.356035][ T47] pwc: recv_control_msg error -32 req 02 val 2900 [ 919.371708][ T47] pwc: recv_control_msg error -32 req 02 val 2800 [ 919.426732][ T53] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 919.487927][ T6428] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 919.506943][T18882] veth0_macvtap: entered promiscuous mode [ 919.514308][ T5224] Bluetooth: hci5: SCO packet for unknown connection handle 0 [ 919.528010][ T6428] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 919.581953][ T47] pwc: Registered as video71. [ 919.608195][ T47] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input200 [ 919.664252][ T53] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 919.848339][T18882] veth1_macvtap: entered promiscuous mode [ 919.851155][ T5281] usb 4-1: USB disconnect, device number 42 [ 919.923472][T17752] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 919.953458][T17752] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 919.963081][T17752] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 919.972894][T17752] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 919.981565][T17752] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 919.992056][T17752] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 920.049614][ T53] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 920.168268][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 920.194661][T18882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 920.196333][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 920.239033][T18882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 920.286127][T18882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 920.307962][T18882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 920.321103][T18882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 920.343555][T18882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 920.375106][T18882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 920.402716][T18882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 920.431510][T18882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 920.467513][T18882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 920.496675][T18882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 920.523154][T18882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 920.533577][T18882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 920.564602][T18882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 920.587781][T18882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 920.621302][T18882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 920.661319][T18882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 920.683327][T18882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 920.728003][T18882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 920.757431][T18882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 920.784951][T18882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 920.815033][T18882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 920.845866][T18882] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 920.925835][T19175] netlink: 'syz.3.3008': attribute type 4 has an invalid length. [ 920.963978][T18882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 920.979910][T18882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 920.990627][T18882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 921.011404][T18882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 921.025215][T18882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 921.040382][T18882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 921.050801][T18882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 921.072262][T18882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 921.085171][T18882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 921.096633][T18882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 921.138056][T18882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 921.167258][T18882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 921.180144][T18882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 921.212348][T18882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 921.225198][T18882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 921.246594][T18882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 921.261397][T18882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 921.273513][T18882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 921.290661][T18882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 921.301715][T18882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 921.312041][T18882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 921.323043][T18882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 921.342113][T18882] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 921.523114][T18882] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 921.548568][T18882] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 921.585014][T18882] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 921.605449][T19192] FAULT_INJECTION: forcing a failure. [ 921.605449][T19192] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 921.624463][T18882] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 921.637521][T19192] CPU: 0 UID: 0 PID: 19192 Comm: syz.1.3009 Not tainted 6.11.0-syzkaller-09959-gabf2050f51fd #0 [ 921.647972][T19192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 921.658045][T19192] Call Trace: [ 921.661344][T19192] [ 921.664291][T19192] dump_stack_lvl+0x241/0x360 [ 921.669013][T19192] ? __pfx_dump_stack_lvl+0x10/0x10 [ 921.674237][T19192] ? __pfx__printk+0x10/0x10 [ 921.678853][T19192] ? __pfx_lock_release+0x10/0x10 [ 921.683907][T19192] should_fail_ex+0x3b0/0x4e0 [ 921.688614][T19192] _copy_to_user+0x2f/0xb0 [ 921.693050][T19192] video_usercopy+0xe5e/0x1180 [ 921.697845][T19192] ? __pfx___video_do_ioctl+0x10/0x10 [ 921.703244][T19192] ? __pfx_video_usercopy+0x10/0x10 [ 921.708475][T19192] ? __fget_files+0x29/0x470 [ 921.713086][T19192] ? __fget_files+0x3f3/0x470 [ 921.717788][T19192] v4l2_ioctl+0x189/0x1e0 [ 921.722139][T19192] ? __pfx_v4l2_ioctl+0x10/0x10 [ 921.727012][T19192] __se_sys_ioctl+0xf9/0x170 [ 921.731628][T19192] do_syscall_64+0xf3/0x230 [ 921.736158][T19192] ? clear_bhb_loop+0x35/0x90 [ 921.740863][T19192] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 921.746780][T19192] RIP: 0033:0x7f26abf7def9 [ 921.751217][T19192] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 921.770855][T19192] RSP: 002b:00007f26accce038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 921.779300][T19192] RAX: ffffffffffffffda RBX: 00007f26ac135f80 RCX: 00007f26abf7def9 [ 921.787293][T19192] RDX: 0000000020000180 RSI: 00000000c0d05605 RDI: 0000000000000003 [ 921.795287][T19192] RBP: 00007f26accce090 R08: 0000000000000000 R09: 0000000000000000 [ 921.803281][T19192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 921.811274][T19192] R13: 0000000000000000 R14: 00007f26ac135f80 R15: 00007f26ac25fa28 [ 921.819282][T19192] [ 921.825570][ T53] bridge_slave_1: left allmulticast mode [ 921.831663][ T53] bridge_slave_1: left promiscuous mode [ 921.861645][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 921.875739][T19196] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3010'. [ 922.086894][ T5224] Bluetooth: hci10: command tx timeout [ 923.295118][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 923.338330][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 923.360944][ T53] bond0 (unregistering): Released all slaves [ 923.445871][T19196] netlink: 'syz.3.3010': attribute type 21 has an invalid length. [ 924.023469][T19155] chnl_net:caif_netlink_parms(): no params data found [ 924.155282][ T5224] Bluetooth: hci10: command tx timeout [ 924.184432][ T53] hsr_slave_0: left promiscuous mode [ 924.271611][ T53] hsr_slave_1: left promiscuous mode [ 924.286402][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 924.312971][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 924.385751][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 924.393514][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 924.440131][T19178] coredump: 220(syz.1.3007): written to core: VMAs: 40, size 97681408; core: 62137671 bytes, pos 97689600 [ 924.472707][ T53] veth1_macvtap: left promiscuous mode [ 924.480305][ T53] veth0_macvtap: left promiscuous mode [ 924.498194][ T53] veth1_vlan: left promiscuous mode [ 924.503549][ T53] veth0_vlan: left promiscuous mode [ 925.555468][T19214] coredump: 227(syz.1.3011): written to core: VMAs: 40, size 97681408; core: 60040519 bytes, pos 97689600 [ 925.703751][ T53] team0 (unregistering): Port device team_slave_1 removed [ 925.804152][ T53] team0 (unregistering): Port device team_slave_0 removed [ 926.241627][ T5224] Bluetooth: hci10: command tx timeout [ 926.571392][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 926.604542][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 926.707887][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 926.715837][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 926.724180][T19155] bridge0: port 1(bridge_slave_0) entered blocking state [ 926.755165][T19155] bridge0: port 1(bridge_slave_0) entered disabled state [ 926.802516][T19155] bridge_slave_0: entered allmulticast mode [ 926.836517][T19155] bridge_slave_0: entered promiscuous mode [ 926.898457][T19155] bridge0: port 2(bridge_slave_1) entered blocking state [ 926.946922][T19155] bridge0: port 2(bridge_slave_1) entered disabled state [ 926.999691][T19155] bridge_slave_1: entered allmulticast mode [ 927.058357][T19155] bridge_slave_1: entered promiscuous mode [ 927.320463][T19155] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 927.405593][T19155] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 927.628166][T19155] team0: Port device team_slave_0 added [ 927.690077][T19155] team0: Port device team_slave_1 added [ 927.858103][T19155] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 927.908529][T19155] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 927.989922][T19155] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 928.059380][T17752] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 928.071916][T17752] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 928.080978][T17752] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 928.089268][T17752] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 928.101046][T17752] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 928.111663][T17752] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 928.128740][T19155] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 928.194194][T19155] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 928.306348][T19155] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 928.317496][T17752] Bluetooth: hci10: command tx timeout [ 928.581401][ T53] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 928.822029][ T53] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 928.878774][T19155] hsr_slave_0: entered promiscuous mode [ 928.889409][T19155] hsr_slave_1: entered promiscuous mode [ 928.913686][T19155] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 928.933206][T19155] Cannot create hsr debugfs directory [ 928.991903][ T53] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 929.128311][ T53] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 929.330452][ T8] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 929.408895][ T53] bridge_slave_1: left allmulticast mode [ 929.418350][ T53] bridge_slave_1: left promiscuous mode [ 929.425614][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 929.440013][ T53] bridge_slave_0: left allmulticast mode [ 929.447412][ T53] bridge_slave_0: left promiscuous mode [ 929.453372][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 929.501200][ T8] usb 3-1: device descriptor read/64, error -71 [ 929.774715][ T8] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 929.924700][ T8] usb 3-1: device descriptor read/64, error -71 [ 930.047884][ T8] usb usb3-port1: attempt power cycle [ 930.052833][T17752] Bluetooth: hci11: SCO packet for unknown connection handle 0 [ 930.161118][T17752] Bluetooth: hci9: command tx timeout [ 930.225689][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 930.275147][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 930.303810][ T53] bond0 (unregistering): Released all slaves [ 930.422448][ T8] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 930.456768][ T8] usb 3-1: device descriptor read/8, error -71 [ 930.558298][T19297] chnl_net:caif_netlink_parms(): no params data found [ 930.734742][ T8] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 930.775245][ T8] usb 3-1: device descriptor read/8, error -71 [ 930.844933][T19297] bridge0: port 1(bridge_slave_0) entered blocking state [ 930.872404][T19297] bridge0: port 1(bridge_slave_0) entered disabled state [ 930.894876][T19297] bridge_slave_0: entered allmulticast mode [ 930.894900][ T8] usb usb3-port1: unable to enumerate USB device [ 930.923052][T19297] bridge_slave_0: entered promiscuous mode [ 930.933258][T19297] bridge0: port 2(bridge_slave_1) entered blocking state [ 930.940656][T19297] bridge0: port 2(bridge_slave_1) entered disabled state [ 930.948059][T19297] bridge_slave_1: entered allmulticast mode [ 930.955801][T19297] bridge_slave_1: entered promiscuous mode [ 931.016194][T19297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 931.039362][ T53] hsr_slave_0: left promiscuous mode [ 931.046635][ T53] hsr_slave_1: left promiscuous mode [ 931.053463][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 931.062653][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 931.073817][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 931.081455][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 931.107614][ T53] veth1_macvtap: left promiscuous mode [ 931.113221][ T53] veth0_macvtap: left promiscuous mode [ 931.118950][ T53] veth1_vlan: left promiscuous mode [ 931.124222][ T53] veth0_vlan: left promiscuous mode [ 931.694961][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.701294][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.749782][T19347] IPVS: dh: SCTP 172.20.20.187:0 - no destination available [ 931.849091][ T53] team0 (unregistering): Port device team_slave_1 removed [ 931.998492][ T53] team0 (unregistering): Port device team_slave_0 removed [ 932.044630][ T5281] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 932.164638][T11198] IPVS: starting estimator thread 0... [ 932.205540][ T5281] usb 4-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 932.222355][ T5281] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 932.234925][T17752] Bluetooth: hci9: command tx timeout [ 932.245118][ T5281] usb 4-1: config 0 descriptor?? [ 932.275180][T19349] IPVS: using max 20 ests per chain, 48000 per kthread [ 932.656303][ T5281] gs_usb 4-1:0.0: Configuring for 1 interfaces [ 933.166498][T19356] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3030'. [ 933.867779][T19297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 933.941684][T19297] team0: Port device team_slave_0 added [ 933.948103][T11198] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 933.976871][T19297] team0: Port device team_slave_1 added [ 934.058231][T19155] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 934.075244][ T5281] gs_usb 4-1:0.0: Disabling termination support for channel 0 (-ETIMEDOUT) [ 934.099436][T19297] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 934.106966][T19297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 934.133393][T11198] usb 3-1: Using ep0 maxpacket: 8 [ 934.141603][T19297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 934.185681][T11198] usb 3-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 934.195157][T11198] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 934.203169][T11198] usb 3-1: Product: syz [ 934.208091][T11198] usb 3-1: Manufacturer: syz [ 934.220007][T11198] usb 3-1: SerialNumber: syz [ 934.220186][T19155] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 934.233167][T11198] usb 3-1: config 0 descriptor?? [ 934.246971][T11198] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 934.260054][T19155] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 934.283700][T19297] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 934.300465][T19297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 934.326565][T17752] Bluetooth: hci9: command tx timeout [ 934.341271][T19297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 934.368788][T19155] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 934.429640][T19297] hsr_slave_0: entered promiscuous mode [ 934.437007][T19297] hsr_slave_1: entered promiscuous mode [ 934.745386][T19155] 8021q: adding VLAN 0 to HW filter on device bond0 [ 934.783198][T19155] 8021q: adding VLAN 0 to HW filter on device team0 [ 934.794738][ C1] IPVS: dh: SCTP 172.20.20.187:0 - no destination available [ 934.914540][ T2541] bridge0: port 1(bridge_slave_0) entered blocking state [ 934.921718][ T2541] bridge0: port 1(bridge_slave_0) entered forwarding state [ 934.972138][ T3035] bridge0: port 2(bridge_slave_1) entered blocking state [ 934.979296][ T3035] bridge0: port 2(bridge_slave_1) entered forwarding state [ 935.148116][T19155] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 935.159208][T11198] usb 4-1: USB disconnect, device number 43 [ 935.353125][T19155] veth0_vlan: entered promiscuous mode [ 935.363441][T19297] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 935.387662][T19297] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 935.403069][T19297] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 935.433189][T19297] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 935.473382][T19155] veth1_vlan: entered promiscuous mode [ 935.599426][T19155] veth0_macvtap: entered promiscuous mode [ 935.637072][T19155] veth1_macvtap: entered promiscuous mode [ 935.699496][T19155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 935.726251][T19155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 935.744594][ T5281] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 935.747710][T19155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 935.768706][T19155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 935.782857][T19155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 935.793989][T19155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 935.805300][T19155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 935.831608][T19155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 935.867729][T19155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 935.883335][T19155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 935.894628][T19155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 935.895177][ T5281] usb 4-1: device descriptor read/64, error -71 [ 935.915980][T19155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 935.938241][T19155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 935.960062][T19155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 935.979419][T19155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 935.993461][T19155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 936.005692][T19155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 936.016505][T19155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 936.027735][T19155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 936.038536][T19155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 936.051818][T19155] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 936.113075][T19155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 936.128978][T19155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 936.140006][T19155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 936.150653][T19155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 936.163615][T19155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 936.164639][ T5281] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 936.174488][T19155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 936.199858][T17752] Bluetooth: hci5: Unknown advertising packet type: 0x19 [ 936.199938][T17752] Bluetooth: hci5: Unknown advertising packet type: 0x1f [ 936.208487][T19155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 936.226544][T19155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 936.241845][T19155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 936.253974][T19155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 936.264093][T19155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 936.276034][T19155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 936.285950][T19155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 936.297999][T19155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 936.307913][T19155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 936.319677][T19155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 936.329563][ T5281] usb 4-1: device descriptor read/64, error -71 [ 936.340680][T19155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 936.352111][T19155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 936.363593][T19155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 936.374206][T19155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 936.387224][T19155] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 936.397296][T17752] Bluetooth: hci9: command tx timeout [ 936.433061][T19155] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 936.434891][ T5281] usb usb4-port1: attempt power cycle [ 936.441946][T19155] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 936.456509][T19155] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 936.466102][T19155] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 936.492423][T19297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 936.538690][T19297] 8021q: adding VLAN 0 to HW filter on device team0 [ 936.601258][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 936.608425][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 936.658470][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 936.665646][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 936.704049][T12959] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 936.712168][T12959] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 936.780496][T18579] usb 3-1: USB disconnect, device number 42 [ 936.808012][ T5227] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 936.824907][ T5281] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 936.849531][T12960] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 936.849852][ T5227] dvb_usb_az6027 2-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 936.886811][ T5227] usb 2-1: USB disconnect, device number 30 [ 936.905683][T12960] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 936.912983][T19297] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 936.925777][ T5281] usb 4-1: device descriptor read/8, error -71 [ 937.055843][T19412] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3038'. [ 937.093364][T19297] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 937.144246][T19412] netlink: 'syz.2.3038': attribute type 21 has an invalid length. [ 937.214950][ T5281] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 937.243014][T19297] veth0_vlan: entered promiscuous mode [ 937.274689][ T5281] usb 4-1: device descriptor read/8, error -71 [ 937.284597][T19297] veth1_vlan: entered promiscuous mode [ 937.334141][T19297] veth0_macvtap: entered promiscuous mode [ 937.344031][T19297] veth1_macvtap: entered promiscuous mode [ 937.384887][ T5281] usb usb4-port1: unable to enumerate USB device [ 937.431085][T19297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 937.466330][T19297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 937.480271][T19297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 937.498544][T19297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 937.515582][T19297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 937.543254][T19297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 937.564657][T19297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 937.586772][T19297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 937.624642][T19297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 937.656353][T19297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 937.669032][T19297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 937.689364][T19297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 937.699660][T19297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 937.716071][T19297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 937.734467][T19297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 937.755114][T19297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 937.772730][T19297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 937.789934][T19297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 937.800994][T19297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 937.818512][T19297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 937.845856][T19297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 937.867143][T19439] FAULT_INJECTION: forcing a failure. [ 937.867143][T19439] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 937.870106][T19297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 937.909109][T19439] CPU: 1 UID: 0 PID: 19439 Comm: syz.2.3044 Not tainted 6.11.0-syzkaller-09959-gabf2050f51fd #0 [ 937.916824][T19297] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 937.919548][T19439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 937.919564][T19439] Call Trace: [ 937.919573][T19439] [ 937.919582][T19439] dump_stack_lvl+0x241/0x360 [ 937.947732][T19439] ? __pfx_dump_stack_lvl+0x10/0x10 [ 937.952963][T19439] ? __pfx__printk+0x10/0x10 [ 937.957592][T19439] ? __pfx_lock_release+0x10/0x10 [ 937.962656][T19439] should_fail_ex+0x3b0/0x4e0 [ 937.967356][T19439] _copy_from_iter+0x1ed/0x1d60 [ 937.972206][T19439] ? __virt_addr_valid+0x183/0x530 [ 937.977308][T19439] ? __pfx_lock_release+0x10/0x10 [ 937.982332][T19439] ? __alloc_skb+0x28f/0x440 [ 937.986960][T19439] ? __pfx__copy_from_iter+0x10/0x10 [ 937.992258][T19439] ? __virt_addr_valid+0x183/0x530 [ 937.997365][T19439] ? __virt_addr_valid+0x183/0x530 [ 938.002471][T19439] ? __virt_addr_valid+0x45f/0x530 [ 938.007579][T19439] ? __check_object_size+0x48e/0x900 [ 938.012865][T19439] netlink_sendmsg+0x73d/0xcb0 [ 938.017643][T19439] ? __pfx_netlink_sendmsg+0x10/0x10 [ 938.022935][T19439] ? aa_sock_msg_perm+0x91/0x160 [ 938.027870][T19439] ? __pfx_netlink_sendmsg+0x10/0x10 [ 938.033158][T19439] __sock_sendmsg+0x221/0x270 [ 938.037849][T19439] ____sys_sendmsg+0x52a/0x7e0 [ 938.042613][T19439] ? __pfx_____sys_sendmsg+0x10/0x10 [ 938.047897][T19439] __sys_sendmsg+0x292/0x380 [ 938.052481][T19439] ? __pfx___sys_sendmsg+0x10/0x10 [ 938.057590][T19439] ? __pfx_vfs_write+0x10/0x10 [ 938.062366][T19439] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 938.068691][T19439] ? do_syscall_64+0x100/0x230 [ 938.073455][T19439] ? do_syscall_64+0xb6/0x230 [ 938.078127][T19439] do_syscall_64+0xf3/0x230 [ 938.082624][T19439] ? clear_bhb_loop+0x35/0x90 [ 938.087300][T19439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 938.093186][T19439] RIP: 0033:0x7f420db7def9 [ 938.097592][T19439] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 938.117192][T19439] RSP: 002b:00007f420e936038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 938.125601][T19439] RAX: ffffffffffffffda RBX: 00007f420dd35f80 RCX: 00007f420db7def9 [ 938.133565][T19439] RDX: 0000000000000000 RSI: 0000000020000a00 RDI: 0000000000000003 [ 938.141533][T19439] RBP: 00007f420e936090 R08: 0000000000000000 R09: 0000000000000000 [ 938.149496][T19439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 938.157459][T19439] R13: 0000000000000000 R14: 00007f420dd35f80 R15: 00007f420de5fa28 [ 938.165432][T19439] [ 938.169887][T19297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 938.187313][T19297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 938.197224][T19297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 938.207716][T19297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 938.217721][T19297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 938.228475][T19297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 938.239692][T19297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 938.253389][T19297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 938.263697][T19297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 938.274532][T19297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 938.284360][T19297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 938.295594][T19297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 938.305563][T19297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 938.316345][T19297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 938.326225][T19297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 938.336694][T19297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 938.347614][T19297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 938.359034][T19297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 938.368904][T19297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 938.379456][T19297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 938.389348][T19297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 938.399989][T19297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 938.412292][T19297] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 938.423334][T19297] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 938.432101][T19297] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 938.442001][T19297] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 938.451827][T19297] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 938.850948][T19446] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3045'. [ 939.001784][ T35] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 939.066848][T19455] vlan2: entered promiscuous mode [ 939.084908][T19455] vlan2: entered allmulticast mode [ 939.151638][ T5224] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 939.170570][ T35] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 939.185008][ T5224] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 939.195179][ T5230] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 939.205010][ T5224] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 939.215753][ T5224] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 939.223618][ T5224] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 939.246629][ T5224] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 939.342007][ T35] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 939.394670][ T5230] usb 5-1: Using ep0 maxpacket: 16 [ 939.401403][ T5230] usb 5-1: config index 0 descriptor too short (expected 539, got 27) [ 939.423677][ T5230] usb 5-1: config 0 has an invalid descriptor of length 144, skipping remainder of the config [ 939.444198][ T5230] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 939.475308][ T5230] usb 5-1: New USB device found, idVendor=061d, idProduct=c160, bcdDevice=8f.9a [ 939.494499][ T5230] usb 5-1: New USB device strings: Mfr=4, Product=2, SerialNumber=3 [ 939.509447][ T5230] usb 5-1: Product: syz [ 939.520603][ T35] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 939.524446][ T5230] usb 5-1: Manufacturer: syz [ 939.558077][ T5230] usb 5-1: SerialNumber: syz [ 939.594741][ T5230] usb 5-1: config 0 descriptor?? [ 939.634711][ T5286] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 939.686735][T12959] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 939.724295][T12959] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 939.826398][ T5286] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 939.836811][T19453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 939.855140][T19453] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 939.876633][ T5286] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 939.926708][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 939.982158][ T5227] usb 5-1: USB disconnect, device number 32 [ 939.993329][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 940.002736][ T5286] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 940.047622][ T35] bridge_slave_1: left allmulticast mode [ 940.053309][ T35] bridge_slave_1: left promiscuous mode [ 940.059274][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 940.071620][ T35] bridge_slave_0: left allmulticast mode [ 940.084037][ T35] bridge_slave_0: left promiscuous mode [ 940.090884][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 940.127596][ T5286] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 940.186758][ T5286] usb 4-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 940.201368][ T5286] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 940.211822][ T5286] usb 4-1: Product: syz [ 940.225925][ T5286] usb 4-1: Manufacturer: syz [ 940.230548][ T5286] usb 4-1: SerialNumber: syz [ 940.243517][ T5286] usb 4-1: config 0 descriptor?? [ 940.271713][ T5286] ums-isd200 4-1:0.0: USB Mass Storage device detected [ 940.827433][ T5281] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 941.008919][ T5281] usb 1-1: New USB device found, idVendor=0c70, idProduct=f010, bcdDevice= 0.00 [ 941.035194][T18579] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 941.043378][ T5281] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 941.063428][ T5281] usb 1-1: config 0 descriptor?? [ 941.179008][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 941.192717][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 941.222966][ T35] bond0 (unregistering): Released all slaves [ 941.252611][T19461] chnl_net:caif_netlink_parms(): no params data found [ 941.274142][T18579] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 941.284996][T17752] Bluetooth: hci5: command tx timeout [ 941.325770][T18579] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 941.360248][T19483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 941.361007][T18579] usb 5-1: config 0 descriptor?? [ 941.415626][T19483] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 941.455187][T18579] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 941.478661][T19483] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 941.506042][T19483] binder_alloc: 19482: binder_alloc_buf, no vma [ 941.784775][ T5281] aquacomputer_d5next 0003:0C70:F010.004A: hidraw0: USB HID vff.fd Device [HID 0c70:f010] on usb-dummy_hcd.0-1/input0 [ 941.967556][ T5281] usb 1-1: USB disconnect, device number 60 [ 942.032966][T19461] bridge0: port 1(bridge_slave_0) entered blocking state [ 942.042432][T19487] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 942.056108][T19487] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 942.067774][T19461] bridge0: port 1(bridge_slave_0) entered disabled state [ 942.082625][T19461] bridge_slave_0: entered allmulticast mode [ 942.106374][T19461] bridge_slave_0: entered promiscuous mode [ 942.162504][T19461] bridge0: port 2(bridge_slave_1) entered blocking state [ 942.184351][T19461] bridge0: port 2(bridge_slave_1) entered disabled state [ 942.201642][T19461] bridge_slave_1: entered allmulticast mode [ 942.222099][T19461] bridge_slave_1: entered promiscuous mode [ 942.252271][ T35] hsr_slave_0: left promiscuous mode [ 942.263694][ T35] hsr_slave_1: left promiscuous mode [ 942.306917][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 942.326558][ T5286] scsi host1: usb-storage 4-1:0.0 [ 942.335945][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 942.369179][ T5286] usb 4-1: USB disconnect, device number 48 [ 942.385714][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 942.408833][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 942.477944][ T35] veth1_macvtap: left promiscuous mode [ 942.495778][T18579] gspca_stv06xx: HDCS-1000/1100 sensor detected [ 942.502213][ T35] veth0_macvtap: left promiscuous mode [ 942.510021][ T35] veth1_vlan: left promiscuous mode [ 942.526188][ T35] veth0_vlan: left promiscuous mode [ 942.727486][T19516] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3057'. [ 943.063285][T19520] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 943.088772][T19520] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 943.115663][ T942] usb 4-1: new full-speed USB device number 49 using dummy_hcd [ 943.289884][ T942] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 943.301393][ T942] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 494, setting to 64 [ 943.309681][ T35] team0 (unregistering): Port device team_slave_1 removed [ 943.333930][ T942] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 943.347889][ T29] audit: type=1326 audit(1727188164.379:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19486 comm="syz.4.3054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40af57def9 code=0x7ffc0000 [ 943.374232][T17752] Bluetooth: hci5: command tx timeout [ 943.381175][ T29] audit: type=1326 audit(1727188164.379:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19486 comm="syz.4.3054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40af57def9 code=0x7ffc0000 [ 943.388327][ T942] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 943.412848][ T942] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 943.421324][ T942] usb 4-1: SerialNumber: syz [ 943.429345][T19519] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 943.454644][ T29] audit: type=1326 audit(1727188164.379:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19486 comm="syz.4.3054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=444 compat=0 ip=0x7f40af57def9 code=0x7ffc0000 [ 943.497121][ T35] team0 (unregistering): Port device team_slave_0 removed [ 943.499766][ T29] audit: type=1326 audit(1727188164.379:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19486 comm="syz.4.3054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40af57def9 code=0x7ffc0000 [ 943.530054][ T29] audit: type=1326 audit(1727188164.379:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19486 comm="syz.4.3054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=446 compat=0 ip=0x7f40af57def9 code=0x7ffc0000 [ 943.552870][ T29] audit: type=1326 audit(1727188164.379:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19486 comm="syz.4.3054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40af57def9 code=0x7ffc0000 [ 943.590306][ T29] audit: type=1326 audit(1727188164.379:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19486 comm="syz.4.3054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40af57def9 code=0x7ffc0000 [ 943.749198][T19522] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 943.778590][T19522] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 944.337218][T19506] netlink: 'syz.3.3055': attribute type 4 has an invalid length. [ 944.360776][T19507] netlink: 'syz.3.3055': attribute type 4 has an invalid length. [ 944.420199][T19487] netlink: 'syz.4.3054': attribute type 10 has an invalid length. [ 944.433895][ T942] cdc_acm 4-1:1.0: ttyACM0: USB ACM device [ 944.451329][T19487] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 944.466287][ T942] usb 4-1: USB disconnect, device number 49 [ 944.499835][T19461] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 944.540625][T18579] STV06xx 5-1:0.0: probe with driver STV06xx failed with error -71 [ 944.541939][T19461] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 944.574310][T18579] usb 5-1: USB disconnect, device number 33 [ 944.710661][T19461] team0: Port device team_slave_0 added [ 944.729559][T19461] team0: Port device team_slave_1 added [ 944.831500][T19461] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 944.845074][T19461] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 944.850090][ T8] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 944.902372][T19461] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 944.945346][T19461] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 944.975749][T19461] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 945.027260][T19461] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 945.038772][ T5281] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 945.101631][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 945.138318][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 945.165419][ T8] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 945.209817][ T5281] usb 5-1: Using ep0 maxpacket: 32 [ 945.214490][ T8] usb 1-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 945.227802][ T5281] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 30130, setting to 1024 [ 945.233539][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 945.257328][ T5281] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 945.276976][T19461] hsr_slave_0: entered promiscuous mode [ 945.313290][T19461] hsr_slave_1: entered promiscuous mode [ 945.316085][ T8] usb 1-1: config 0 descriptor?? [ 945.321145][ T5281] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 945.357508][ T5281] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 945.365827][T19461] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 945.373402][T19461] Cannot create hsr debugfs directory [ 945.399303][ T5281] usb 5-1: Product: syz [ 945.417153][ T5281] usb 5-1: Manufacturer: syz [ 945.424477][ T5281] usb 5-1: SerialNumber: syz [ 945.445193][T17752] Bluetooth: hci5: command tx timeout [ 945.456032][T19531] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 945.675267][T18579] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 945.751734][ T8] acrux 0003:1A34:0802.004B: hidraw0: USB HID v0.00 Device [HID 1a34:0802] on usb-dummy_hcd.0-1/input0 [ 945.779885][ T8] acrux 0003:1A34:0802.004B: no inputs found [ 945.791347][ T8] acrux 0003:1A34:0802.004B: Failed to enable force feedback support, error: -19 [ 945.844712][T18579] usb 4-1: Using ep0 maxpacket: 8 [ 945.852413][T18579] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 945.863493][T18579] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 945.878671][T18579] usb 4-1: New USB device found, idVendor=28bd, idProduct=0075, bcdDevice= 0.00 [ 945.888271][T18579] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 946.053502][ T8] usb 1-1: USB disconnect, device number 61 [ 946.338653][T18579] uclogic 0003:28BD:0075.004C: interface is invalid, ignoring [ 946.590242][T19542] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 946.618942][T19542] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 946.641567][T19461] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 946.668118][T19542] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 946.696307][T19542] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 946.715801][T19461] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 946.728085][T19461] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 946.740565][T19542] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 946.782295][T19542] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 946.785261][T19461] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 946.820225][T19542] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 946.891141][T19542] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 946.928948][T19461] 8021q: adding VLAN 0 to HW filter on device bond0 [ 947.024648][T18579] usb 4-1: USB disconnect, device number 50 [ 947.104246][T19461] 8021q: adding VLAN 0 to HW filter on device team0 [ 947.176353][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 947.183471][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 947.278395][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 947.285543][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 947.515019][T17752] Bluetooth: hci5: command tx timeout [ 947.520721][T19461] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 947.591587][T19573] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3064'. [ 947.659123][T19461] veth0_vlan: entered promiscuous mode [ 947.671957][T19461] veth1_vlan: entered promiscuous mode [ 947.701043][T19461] veth0_macvtap: entered promiscuous mode [ 947.711160][T19461] veth1_macvtap: entered promiscuous mode [ 947.729100][T19461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 947.739669][T19461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 947.749662][T19461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 947.763637][T19461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 947.773638][T19461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 947.784161][T19461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 947.794627][T19461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 947.805435][T19461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 947.815642][T19461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 947.826303][T19461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 947.836460][T19461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 947.846983][T19461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 947.856880][T19461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 947.868873][T19461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 947.880398][T19461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 947.890918][T19461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 947.901068][T19461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 947.911589][T19461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 947.921730][T19461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 947.932485][T19461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 947.942739][T19461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 947.953331][T19461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 947.967211][T19461] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 947.977898][T19461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 947.988418][T19461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 947.998402][T19461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 948.009399][T19461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 948.019352][T19461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 948.030341][T19461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 948.040283][T19461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 948.050855][T19461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 948.060996][T19461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 948.072983][T19461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 948.084485][T19461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 948.095232][T19461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 948.105301][T19461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 948.115996][T19461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 948.126044][T19461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 948.136800][T19461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 948.146899][T19461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 948.157786][T19461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 948.168908][T19461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 948.180625][T19461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 948.190582][T19461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 948.201103][T19461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 948.212447][T19461] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 948.226181][ T5281] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 34 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 948.244028][ T5281] usb 5-1: USB disconnect, device number 34 [ 948.253759][ T5281] usblp0: removed [ 948.264755][T19461] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 948.275813][T19461] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 948.293914][T19461] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 948.304071][T19461] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 948.354905][ T942] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 948.374808][T19584] binder: BINDER_SET_CONTEXT_MGR already set [ 948.380830][T19584] binder: 19583:19584 ioctl 4018620d 20000040 returned -16 [ 948.516291][T19592] netlink: 'syz.4.3069': attribute type 4 has an invalid length. [ 948.566760][T19592] netlink: 'syz.4.3069': attribute type 4 has an invalid length. [ 948.624465][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 948.632312][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 948.647113][ T942] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 948.659709][ T942] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 948.671356][ T2541] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 948.687744][ T2541] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 948.694426][ T942] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 948.741091][ T942] usb 4-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 948.773328][ T942] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 948.828101][ T942] usb 4-1: config 0 descriptor?? [ 948.844702][ T8] usb 5-1: new full-speed USB device number 35 using dummy_hcd [ 948.848646][T19603] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 948.939206][T19599] dccp_close: ABORT with 22 bytes unread [ 949.017239][ T8] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 949.031172][ T8] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 494, setting to 64 [ 949.058895][ T8] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 949.129838][ T8] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 949.145309][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 949.181095][ T8] usb 5-1: SerialNumber: syz [ 949.218009][T19592] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 949.249036][ T5224] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 949.265218][ T5224] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 949.274073][ T5224] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 949.297402][ T5224] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 949.305043][ T942] acrux 0003:1A34:0802.004D: hidraw0: USB HID v0.00 Device [HID 1a34:0802] on usb-dummy_hcd.3-1/input0 [ 949.319307][ T942] acrux 0003:1A34:0802.004D: no inputs found [ 949.325484][ T942] acrux 0003:1A34:0802.004D: Failed to enable force feedback support, error: -19 [ 949.389848][ T5224] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 949.403854][ T5224] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 949.547468][T18579] usb 4-1: USB disconnect, device number 51 [ 949.608366][T19621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 949.646211][T19621] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 949.786237][ T8] cdc_acm 5-1:1.0: ttyACM0: USB ACM device [ 949.818530][ T8] usb 5-1: USB disconnect, device number 35 [ 949.965235][ T5280] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 950.039021][T19616] chnl_net:caif_netlink_parms(): no params data found [ 950.145185][ T5280] usb 1-1: Using ep0 maxpacket: 32 [ 950.173358][ T5280] usb 1-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 950.184437][ T5280] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 950.206664][ T5280] usb 1-1: config 0 descriptor?? [ 950.244561][ T5280] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 950.335484][T19616] bridge0: port 1(bridge_slave_0) entered blocking state [ 950.346124][T19616] bridge0: port 1(bridge_slave_0) entered disabled state [ 950.353438][T19616] bridge_slave_0: entered allmulticast mode [ 950.361731][T19616] bridge_slave_0: entered promiscuous mode [ 950.370890][T19616] bridge0: port 2(bridge_slave_1) entered blocking state [ 950.378557][T19616] bridge0: port 2(bridge_slave_1) entered disabled state [ 950.386318][T19616] bridge_slave_1: entered allmulticast mode [ 950.393538][T19616] bridge_slave_1: entered promiscuous mode [ 950.426537][T19616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 950.460667][T19616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 950.554865][ T5286] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 950.619833][T19616] team0: Port device team_slave_0 added [ 950.646328][T19616] team0: Port device team_slave_1 added [ 950.735355][T19616] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 950.749038][ T5286] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 950.765499][ T5286] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 950.777628][T19616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 950.814549][ T5230] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 950.856974][ T5286] usb 2-1: config 0 descriptor?? [ 950.880598][T19616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 950.942565][T19616] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 950.962414][T19616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 950.992981][T19616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 951.001346][ T5230] usb 5-1: Using ep0 maxpacket: 32 [ 951.043683][ T5230] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 30130, setting to 1024 [ 951.056021][ T5230] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 951.077379][ T5230] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 951.102497][ T5230] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 951.120385][ T5230] usb 5-1: Product: syz [ 951.134644][ T5230] usb 5-1: Manufacturer: syz [ 951.143200][ T5230] usb 5-1: SerialNumber: syz [ 951.184954][T19652] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 951.282393][T19616] hsr_slave_0: entered promiscuous mode [ 951.327150][T19616] hsr_slave_1: entered promiscuous mode [ 951.368569][T19616] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 951.385045][ T29] audit: type=1326 audit(1727188172.419:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19658 comm="syz.3.3080" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1549d7def9 code=0x0 [ 951.394544][T19616] Cannot create hsr debugfs directory [ 951.435631][ T5224] Bluetooth: hci12: command tx timeout [ 952.048801][T19616] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 952.065905][ T5280] gspca_vc032x: reg_r err -32 [ 952.070660][ T5280] gspca_vc032x: I2c Bus Busy Wait 00 [ 952.076198][ T5280] gspca_vc032x: I2c Bus Busy Wait 00 [ 952.094603][ T5280] gspca_vc032x: I2c Bus Busy Wait 00 [ 952.115338][ T5280] gspca_vc032x: I2c Bus Busy Wait 00 [ 952.188445][ T5280] gspca_vc032x: I2c Bus Busy Wait 00 [ 952.198880][ T5280] gspca_vc032x: I2c Bus Busy Wait 00 [ 952.201408][T19616] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 952.227252][ T5280] gspca_vc032x: I2c Bus Busy Wait 00 [ 952.232798][ T5280] gspca_vc032x: I2c Bus Busy Wait 00 [ 952.243562][ T5280] gspca_vc032x: I2c Bus Busy Wait 00 [ 952.268729][ T5280] gspca_vc032x: I2c Bus Busy Wait 00 [ 952.276439][ T5280] gspca_vc032x: I2c Bus Busy Wait 00 [ 952.282200][ T5280] gspca_vc032x: I2c Bus Busy Wait 00 [ 952.288728][ T5280] gspca_vc032x: I2c Bus Busy Wait 00 [ 952.294223][ T5280] gspca_vc032x: I2c Bus Busy Wait 00 [ 952.301398][ T5280] gspca_vc032x: I2c Bus Busy Wait 00 [ 952.307741][ T5280] gspca_vc032x: I2c Bus Busy Wait 00 [ 952.313955][ T5280] gspca_vc032x: I2c Bus Busy Wait 00 [ 952.320329][ T5280] gspca_vc032x: I2c Bus Busy Wait 00 [ 952.328431][ T5280] gspca_vc032x: Unknown sensor... [ 952.336954][ T5280] vc032x 1-1:0.0: probe with driver vc032x failed with error -22 [ 952.478298][T19616] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 952.658643][T19616] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 953.063805][T19616] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 953.092721][T19616] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 953.118687][T19616] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 953.160930][T19616] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 953.308607][T19675] FAULT_INJECTION: forcing a failure. [ 953.308607][T19675] name failslab, interval 1, probability 0, space 0, times 0 [ 953.329728][T19675] CPU: 0 UID: 0 PID: 19675 Comm: syz.3.3082 Not tainted 6.11.0-syzkaller-09959-gabf2050f51fd #0 [ 953.340177][T19675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 953.350257][T19675] Call Trace: [ 953.353548][T19675] [ 953.356487][T19675] dump_stack_lvl+0x241/0x360 [ 953.361220][T19675] ? __pfx_dump_stack_lvl+0x10/0x10 [ 953.366435][T19675] ? __pfx__printk+0x10/0x10 [ 953.371033][T19675] ? kmem_cache_alloc_lru_noprof+0x49/0x2b0 [ 953.376935][T19675] ? __pfx___might_resched+0x10/0x10 [ 953.382217][T19675] ? validate_chain+0x11e/0x5920 [ 953.387155][T19675] should_fail_ex+0x3b0/0x4e0 [ 953.391856][T19675] ? sock_alloc_inode+0x28/0xc0 [ 953.396723][T19675] should_failslab+0xac/0x100 [ 953.401419][T19675] ? sock_alloc_inode+0x28/0xc0 [ 953.406275][T19675] kmem_cache_alloc_lru_noprof+0x71/0x2b0 [ 953.412022][T19675] sock_alloc_inode+0x28/0xc0 [ 953.416705][T19675] ? __pfx_sock_alloc_inode+0x10/0x10 [ 953.422083][T19675] new_inode_pseudo+0x69/0x1a0 [ 953.426866][T19675] __sock_create+0x123/0x920 [ 953.431468][T19675] mptcp_subflow_create_socket+0x132/0xdf0 [ 953.437296][T19675] ? look_up_lock_class+0x77/0x170 [ 953.442418][T19675] ? register_lock_class+0x102/0x980 [ 953.447739][T19675] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 953.454086][T19675] ? __pfx_register_lock_class+0x10/0x10 [ 953.459753][T19675] ? mark_lock+0x9a/0x360 [ 953.464099][T19675] __mptcp_nmpc_sk+0x178/0x800 [ 953.468878][T19675] ? __lock_acquire+0x1384/0x2050 [ 953.473926][T19675] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 953.479233][T19675] mptcp_connect+0x71/0xb20 [ 953.483734][T19675] ? mark_lock+0x9a/0x360 [ 953.488063][T19675] __inet_stream_connect+0x262/0xf30 [ 953.493369][T19675] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 953.499730][T19675] ? __local_bh_enable_ip+0x168/0x200 [ 953.505114][T19675] ? lockdep_hardirqs_on+0x99/0x150 [ 953.510313][T19675] ? __pfx___inet_stream_connect+0x10/0x10 [ 953.516123][T19675] ? __local_bh_enable_ip+0x168/0x200 [ 953.521502][T19675] ? inet_stream_connect+0x50/0xa0 [ 953.526631][T19675] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 953.532355][T19675] inet_stream_connect+0x65/0xa0 [ 953.537312][T19675] ? __pfx_inet_stream_connect+0x10/0x10 [ 953.542960][T19675] __sys_connect+0x2d1/0x300 [ 953.547570][T19675] ? __pfx___sys_connect+0x10/0x10 [ 953.552710][T19675] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 953.559059][T19675] ? do_syscall_64+0x100/0x230 [ 953.563831][T19675] __x64_sys_connect+0x7a/0x90 [ 953.568615][T19675] do_syscall_64+0xf3/0x230 [ 953.573127][T19675] ? clear_bhb_loop+0x35/0x90 [ 953.577815][T19675] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 953.583720][T19675] RIP: 0033:0x7f1549d7def9 [ 953.588130][T19675] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 953.607749][T19675] RSP: 002b:00007f154ab0f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 953.616168][T19675] RAX: ffffffffffffffda RBX: 00007f1549f35f80 RCX: 00007f1549d7def9 [ 953.624138][T19675] RDX: 000000000000001c RSI: 0000000020000180 RDI: 0000000000000003 [ 953.632104][T19675] RBP: 00007f154ab0f090 R08: 0000000000000000 R09: 0000000000000000 [ 953.640243][T19675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 953.648208][T19675] R13: 0000000000000000 R14: 00007f1549f35f80 R15: 00007f154a05fa28 [ 953.656187][T19675] [ 953.693636][ T5224] Bluetooth: hci12: command tx timeout [ 953.694907][T19675] socket: no more sockets [ 953.734333][T19616] 8021q: adding VLAN 0 to HW filter on device bond0 [ 953.817123][ T5230] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 36 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 953.867286][T19616] 8021q: adding VLAN 0 to HW filter on device team0 [ 953.887652][ T5230] usb 5-1: USB disconnect, device number 36 [ 953.909799][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 953.917024][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 953.947876][ T5279] usb 1-1: USB disconnect, device number 62 [ 953.956630][ T5230] usblp0: removed [ 953.997022][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 954.004201][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 954.219565][T19616] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 954.298482][T19616] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 954.427567][T19616] veth0_vlan: entered promiscuous mode [ 954.452038][T19616] veth1_vlan: entered promiscuous mode [ 954.585253][T19616] veth0_macvtap: entered promiscuous mode [ 954.609270][T19616] veth1_macvtap: entered promiscuous mode [ 954.683306][T19616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 954.791684][T19616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 954.806030][ T5230] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 954.810816][T19616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 954.893183][T19616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 954.940361][T19616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 955.042579][T19616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 955.072282][T19616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 955.111855][T19616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 955.146803][ T5230] usb 1-1: config 0 interface 0 altsetting 3 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 955.184556][T19616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 955.196822][ T5230] usb 1-1: config 0 interface 0 altsetting 3 endpoint 0xC has invalid wMaxPacketSize 0 [ 955.224178][T19616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 955.244310][ T5230] usb 1-1: config 0 interface 0 has no altsetting 0 [ 955.265044][ T5230] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice=1c.92 [ 955.279338][T19616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 955.290001][ T5230] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 955.312734][ T5230] usb 1-1: Product: syz [ 955.322710][T19616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 955.338465][ T5230] usb 1-1: Manufacturer: syz [ 955.354586][ T5230] usb 1-1: SerialNumber: syz [ 955.364949][T19616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 955.385697][ T5230] usb 1-1: config 0 descriptor?? [ 955.406337][T19616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 955.446019][T19616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 955.483216][T19616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 955.502372][T19616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 955.532991][T19616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 955.548692][T19616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 955.564837][T19616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 955.576445][T19616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 955.590651][T19616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 955.603097][T19616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 955.605639][ T5230] usbtest 1-1:0.0: Linux user mode ISO test driver [ 955.615061][T19616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 955.653157][ T5286] usb 2-1: Cannot set autoneg [ 955.656823][ T5230] usbtest 1-1:0.0: high-speed {control iso-out} tests (+alt) [ 955.658187][ T5286] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 955.706507][T19616] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 955.724234][ T5286] usb 2-1: USB disconnect, device number 31 [ 955.764800][ T5224] Bluetooth: hci12: command tx timeout [ 955.782836][T19616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 955.808960][T19616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 955.820239][T19616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 955.830845][T19616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 955.843050][T19616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 955.855187][T19616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 955.867103][T19616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 955.878530][T19616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 955.888781][T19616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 955.899337][T19616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 955.909279][T19616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 955.920114][T19616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 955.930065][T19616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 955.940593][T19616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 955.951831][T19616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 955.963646][T19616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 955.973844][T19616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 955.984703][T19616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 955.995459][T19616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 956.006246][T19616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 956.016342][T19616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 956.026991][T19616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 956.036923][T19616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 956.047627][T19616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 956.061716][T19616] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 956.072250][T19616] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 956.081147][T19616] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 956.090192][T19616] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 956.099223][T19616] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 956.132747][T11136] usb 1-1: USB disconnect, device number 63 [ 956.298131][ T3035] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 956.307206][ T3035] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 956.324775][ T5286] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 956.383194][T12960] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 956.413510][T12960] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 956.484578][ T5286] usb 2-1: Using ep0 maxpacket: 16 [ 956.512151][ T5286] usb 2-1: New USB device found, idVendor=0582, idProduct=00e6, bcdDevice=4e.06 [ 956.543603][ T5286] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 956.568138][ T5286] usb 2-1: Product: syz [ 956.572349][ T5286] usb 2-1: Manufacturer: syz [ 956.594552][ T5286] usb 2-1: SerialNumber: syz [ 956.615123][ T5286] usb 2-1: config 0 descriptor?? [ 956.698195][T11243] udevd[11243]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 956.728131][ T47] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 956.767207][T19713] FAULT_INJECTION: forcing a failure. [ 956.767207][T19713] name failslab, interval 1, probability 0, space 0, times 0 [ 956.781265][T11136] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 956.811568][T19713] CPU: 0 UID: 0 PID: 19713 Comm: syz.0.3094 Not tainted 6.11.0-syzkaller-09959-gabf2050f51fd #0 [ 956.822064][T19713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 956.832121][T19713] Call Trace: [ 956.835416][T19713] [ 956.838357][T19713] dump_stack_lvl+0x241/0x360 [ 956.843052][T19713] ? __pfx_dump_stack_lvl+0x10/0x10 [ 956.848255][T19713] ? __pfx__printk+0x10/0x10 [ 956.852854][T19713] ? fs_reclaim_acquire+0x93/0x140 [ 956.857980][T19713] ? __pfx___might_resched+0x10/0x10 [ 956.863290][T19713] should_fail_ex+0x3b0/0x4e0 [ 956.867996][T19713] ? tomoyo_encode+0x26f/0x540 [ 956.872782][T19713] should_failslab+0xac/0x100 [ 956.877473][T19713] ? tomoyo_encode+0x26f/0x540 [ 956.882231][T19713] __kmalloc_noprof+0xd8/0x400 [ 956.886987][T19713] tomoyo_encode+0x26f/0x540 [ 956.891563][T19713] tomoyo_realpath_from_path+0x59e/0x5e0 [ 956.897190][T19713] tomoyo_path_number_perm+0x23a/0x880 [ 956.902636][T19713] ? tomoyo_path_number_perm+0x208/0x880 [ 956.908257][T19713] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 956.914239][T19713] ? __fget_files+0x29/0x470 [ 956.918828][T19713] ? __fget_files+0x3f3/0x470 [ 956.923513][T19713] security_file_ioctl+0xc6/0x2a0 [ 956.928522][T19713] __se_sys_ioctl+0x47/0x170 [ 956.933101][T19713] do_syscall_64+0xf3/0x230 [ 956.934603][ T47] usb 5-1: Using ep0 maxpacket: 32 [ 956.937586][T19713] ? clear_bhb_loop+0x35/0x90 [ 956.937617][T19713] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 956.937640][T19713] RIP: 0033:0x7fb62fb7def9 [ 956.937660][T19713] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 956.977296][T19713] RSP: 002b:00007fb63091c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 956.985707][T19713] RAX: ffffffffffffffda RBX: 00007fb62fd35f80 RCX: 00007fb62fb7def9 [ 956.993683][T19713] RDX: 0000000020000040 RSI: 00000000c0845657 RDI: 0000000000000003 [ 957.001666][T19713] RBP: 00007fb63091c090 R08: 0000000000000000 R09: 0000000000000000 [ 957.009637][T19713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 957.017608][T19713] R13: 0000000000000000 R14: 00007fb62fd35f80 R15: 00007fb62fe5fa28 [ 957.025598][T19713] [ 957.037501][ T47] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 30130, setting to 1024 [ 957.049276][T11136] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 957.064351][ T47] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 957.088944][T19713] ERROR: Out of memory at tomoyo_realpath_from_path. [ 957.098227][T19702] netlink: 'syz.1.3091': attribute type 4 has an invalid length. [ 957.104529][T11136] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 957.125661][T11136] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 957.140327][T11136] usb 3-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 957.151953][T11136] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 957.163745][ T47] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 957.181315][T11136] usb 3-1: config 0 descriptor?? [ 957.186838][ T47] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 957.198233][ T47] usb 5-1: Product: syz [ 957.202582][ T47] usb 5-1: Manufacturer: syz [ 957.207623][ T47] usb 5-1: SerialNumber: syz [ 957.218335][T19709] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 957.294993][ T5279] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 957.325778][ T8] usb 2-1: USB disconnect, device number 32 [ 957.456654][ T5279] usb 4-1: config 220 has too many interfaces: 184, using maximum allowed: 32 [ 957.471297][ T5279] usb 4-1: config 220 has 1 interface, different from the descriptor's value: 184 [ 957.482110][ T5279] usb 4-1: config 220 has no interface number 0 [ 957.490986][ T5279] usb 4-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=e1.85 [ 957.502134][ T5279] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 957.514745][ T5277] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 957.526906][ T5279] gspca_main: sn9c2028-2.14.0 probing 0c45:8008 [ 957.616571][T11136] acrux 0003:1A34:0802.004E: hidraw0: USB HID v0.00 Device [HID 1a34:0802] on usb-dummy_hcd.2-1/input0 [ 957.628406][T11136] acrux 0003:1A34:0802.004E: no inputs found [ 957.636164][T11136] acrux 0003:1A34:0802.004E: Failed to enable force feedback support, error: -19 [ 957.700068][ T5277] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 957.713846][ T5277] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 957.731360][ T5277] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 957.741983][ T5279] gspca_sn9c2028: read1 error -71 [ 957.749421][ T5277] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 957.764291][ T5279] gspca_sn9c2028: read1 error -71 [ 957.770954][ T5277] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 957.785277][ T5277] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 957.796138][ T5279] gspca_sn9c2028: read1 error -71 [ 957.801198][ T5279] sn9c2028 4-1:220.1: probe with driver sn9c2028 failed with error -71 [ 957.814136][ T5277] usb 1-1: Manufacturer: syz [ 957.826986][ T5230] usb 3-1: USB disconnect, device number 43 [ 957.834572][ T5224] Bluetooth: hci12: command tx timeout [ 957.836487][ T5277] usb 1-1: config 0 descriptor?? [ 957.873902][ T5279] usb 4-1: USB disconnect, device number 52 [ 958.593527][T19725] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 962.514872][ T8] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 967.790973][ T5277] sched: DL replenish lagged too much [ 968.497974][ T5277] usbhid 1-1:0.0: can't add hid device: -32 [ 968.503992][ T5277] usbhid 1-1:0.0: probe with driver usbhid failed with error -32 [ 969.710137][ T8] usb 2-1: device descriptor read/all, error -110 [ 993.123116][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.129683][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 1012.090425][T17752] Bluetooth: hci11: command 0x0406 tx timeout [ 1020.384319][ T47] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 37 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1029.841497][T17752] Bluetooth: hci4: command 0x0406 tx timeout [ 1035.975890][T17752] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1035.987589][T17752] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1036.010623][T17752] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1036.024982][T17752] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1036.037341][T17752] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1036.046585][T17752] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1036.458138][ T5224] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1036.506545][ T5224] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1036.520259][ T5224] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1036.531422][ T5224] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1036.543666][ T5224] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 1036.551551][ T5224] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1038.154822][ T5224] Bluetooth: hci5: command tx timeout [ 1038.654939][ T5224] Bluetooth: hci9: command tx timeout [ 1038.887915][T17752] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1038.910441][T17752] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1038.949861][T17752] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1038.959754][T17752] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1038.968170][T17752] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 1038.975961][T17752] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1039.037817][ T5224] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 1039.075687][ T5224] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 1039.088545][ T5224] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 1039.102362][ T5224] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 1039.110186][ T5224] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 1039.117727][ T5224] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 1039.272582][ T5224] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1039.295460][ T5224] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1039.307312][ T5224] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1039.315873][ T5224] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1039.323564][ T5224] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 1039.333141][ T5224] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1039.477341][ T5224] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 1039.498222][ T5224] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 1039.518650][ T5224] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 1039.526822][ T5224] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 1039.547436][ T5224] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 1039.555032][ T5224] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 1040.234865][ T5224] Bluetooth: hci5: command tx timeout [ 1040.715023][ T5224] Bluetooth: hci9: command tx timeout [ 1041.034815][ T5224] Bluetooth: hci10: command tx timeout [ 1041.195366][ T5224] Bluetooth: hci12: command tx timeout [ 1041.434846][ T5224] Bluetooth: hci11: command tx timeout [ 1041.674801][ T5224] Bluetooth: hci13: command tx timeout [ 1042.314959][ T5224] Bluetooth: hci5: command tx timeout [ 1042.804575][ T5224] Bluetooth: hci9: command tx timeout [ 1043.114638][ T5224] Bluetooth: hci10: command tx timeout [ 1043.274685][ T5224] Bluetooth: hci12: command tx timeout [ 1043.514759][ T5224] Bluetooth: hci11: command tx timeout [ 1043.755006][ T5224] Bluetooth: hci13: command tx timeout [ 1044.394901][ T5224] Bluetooth: hci5: command tx timeout [ 1044.874751][ T5224] Bluetooth: hci9: command tx timeout [ 1045.194833][ T5224] Bluetooth: hci10: command tx timeout [ 1045.354706][ T5224] Bluetooth: hci12: command tx timeout [ 1045.595214][ T5224] Bluetooth: hci11: command tx timeout [ 1045.834791][ T5224] Bluetooth: hci13: command tx timeout [ 1047.274730][ T5224] Bluetooth: hci10: command tx timeout [ 1047.434639][ T5224] Bluetooth: hci12: command tx timeout [ 1047.674871][ T5224] Bluetooth: hci11: command tx timeout [ 1047.915069][ T5224] Bluetooth: hci13: command tx timeout [ 1053.105259][ T942] usb 1-1: USB disconnect, device number 64 [ 1054.563326][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.571850][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 1074.447465][ T47] usb 5-1: USB disconnect, device number 37 [ 1075.390041][ T47] usblp0: removed [ 1083.341975][T17752] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 1083.365227][T17752] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 1083.376418][T17752] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 1083.386726][T17752] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 1083.396865][T17752] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 1083.404280][T17752] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 1085.514753][ T5224] Bluetooth: hci14: command tx timeout [ 1087.511587][ T2541] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1087.594593][ T5224] Bluetooth: hci14: command tx timeout [ 1089.675085][ T5224] Bluetooth: hci14: command tx timeout [ 1091.754630][ T5224] Bluetooth: hci14: command tx timeout [ 1092.732459][ T2541] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1093.176418][ T2541] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1097.628815][ T2541] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1099.086318][T17752] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1099.108177][T11244] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1099.122006][T11244] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1099.135144][T11244] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 1099.147944][T11244] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 1099.157364][T11244] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 1099.167618][T11244] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1099.176369][T11244] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 1099.183659][T11244] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 1099.191878][T11244] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1099.205098][T11244] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 1099.219648][T11244] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 1099.636071][ T55] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 1099.648949][ T55] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 1099.666248][ T55] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 1099.675067][ T55] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 1099.683132][ T55] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3 [ 1099.694727][ T55] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 1099.960565][ T55] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1099.976699][ T55] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1099.984991][ T55] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1099.997260][ T55] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1100.008036][ T55] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 1100.017288][ T55] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1101.354785][ T55] Bluetooth: hci9: command tx timeout [ 1101.363860][T11244] Bluetooth: hci15: command tx timeout [ 1101.393853][T19770] chnl_net:caif_netlink_parms(): no params data found [ 1101.476567][ T2541] bridge_slave_1: left allmulticast mode [ 1101.484222][ T2541] bridge_slave_1: left promiscuous mode [ 1101.504765][ T2541] bridge0: port 2(bridge_slave_1) entered disabled state [ 1101.570145][ T2541] bridge_slave_0: left allmulticast mode [ 1101.586965][ T2541] bridge_slave_0: left promiscuous mode [ 1101.592714][ T2541] bridge0: port 1(bridge_slave_0) entered disabled state [ 1101.836713][ T55] Bluetooth: hci16: command tx timeout [ 1102.076368][ T55] Bluetooth: hci10: command tx timeout [ 1103.256936][ T2541] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1103.307089][ T2541] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1103.363168][ T2541] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 1103.391687][ T2541] bond0 (unregistering): Released all slaves [ 1103.445175][ T55] Bluetooth: hci9: command tx timeout [ 1103.450632][ T55] Bluetooth: hci15: command tx timeout [ 1103.731187][T19770] bridge0: port 1(bridge_slave_0) entered blocking state [ 1103.755970][T19770] bridge0: port 1(bridge_slave_0) entered disabled state [ 1103.766855][T19770] bridge_slave_0: entered allmulticast mode [ 1103.795735][T19770] bridge_slave_0: entered promiscuous mode [ 1103.884747][T19770] bridge0: port 2(bridge_slave_1) entered blocking state [ 1103.891872][T19770] bridge0: port 2(bridge_slave_1) entered disabled state [ 1103.914707][ T55] Bluetooth: hci16: command tx timeout [ 1103.944810][T19770] bridge_slave_1: entered allmulticast mode [ 1103.984830][T19770] bridge_slave_1: entered promiscuous mode [ 1104.164651][ T55] Bluetooth: hci10: command tx timeout [ 1104.250055][T19770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1104.388211][T19770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1104.602318][T19770] team0: Port device team_slave_0 added [ 1104.797366][T19770] team0: Port device team_slave_1 added [ 1105.161426][T19770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1105.185223][T19770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1105.234074][T19770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1105.335804][T19787] chnl_net:caif_netlink_parms(): no params data found [ 1105.398844][T19770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1105.424586][T19770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1105.485057][T19770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1105.515557][T11244] Bluetooth: hci15: command tx timeout [ 1105.521100][T11244] Bluetooth: hci9: command tx timeout [ 1105.543447][T19786] chnl_net:caif_netlink_parms(): no params data found [ 1105.589611][T19797] chnl_net:caif_netlink_parms(): no params data found [ 1105.822667][T19794] chnl_net:caif_netlink_parms(): no params data found [ 1105.975344][T19770] hsr_slave_0: entered promiscuous mode [ 1106.005566][T11244] Bluetooth: hci16: command tx timeout [ 1106.022741][T19770] hsr_slave_1: entered promiscuous mode [ 1106.045179][T19770] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1106.055113][T19770] Cannot create hsr debugfs directory [ 1106.245792][T11244] Bluetooth: hci10: command tx timeout [ 1106.453924][T19797] bridge0: port 1(bridge_slave_0) entered blocking state [ 1106.481027][T19797] bridge0: port 1(bridge_slave_0) entered disabled state [ 1106.504281][T19797] bridge_slave_0: entered allmulticast mode [ 1106.532393][T19797] bridge_slave_0: entered promiscuous mode [ 1106.686936][T19787] bridge0: port 1(bridge_slave_0) entered blocking state [ 1106.694071][T19787] bridge0: port 1(bridge_slave_0) entered disabled state [ 1106.725325][T19787] bridge_slave_0: entered allmulticast mode [ 1106.753693][T19787] bridge_slave_0: entered promiscuous mode [ 1106.790397][T19787] bridge0: port 2(bridge_slave_1) entered blocking state [ 1106.814663][T19787] bridge0: port 2(bridge_slave_1) entered disabled state [ 1106.821994][T19787] bridge_slave_1: entered allmulticast mode [ 1106.855858][T19787] bridge_slave_1: entered promiscuous mode [ 1106.877744][T19797] bridge0: port 2(bridge_slave_1) entered blocking state [ 1106.890325][T19797] bridge0: port 2(bridge_slave_1) entered disabled state [ 1106.905120][T19797] bridge_slave_1: entered allmulticast mode [ 1106.924587][T19797] bridge_slave_1: entered promiscuous mode [ 1107.000222][T19786] bridge0: port 1(bridge_slave_0) entered blocking state [ 1107.009610][T19786] bridge0: port 1(bridge_slave_0) entered disabled state [ 1107.026281][T19786] bridge_slave_0: entered allmulticast mode [ 1107.044638][T19786] bridge_slave_0: entered promiscuous mode [ 1107.288394][T19786] bridge0: port 2(bridge_slave_1) entered blocking state [ 1107.304841][T19786] bridge0: port 2(bridge_slave_1) entered disabled state [ 1107.312136][T19786] bridge_slave_1: entered allmulticast mode [ 1107.335844][T19786] bridge_slave_1: entered promiscuous mode [ 1107.389229][T19787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1107.425570][T19787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1107.447352][T19797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1107.477774][T19797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1107.508666][T19794] bridge0: port 1(bridge_slave_0) entered blocking state [ 1107.517956][T19794] bridge0: port 1(bridge_slave_0) entered disabled state [ 1107.534892][T19794] bridge_slave_0: entered allmulticast mode [ 1107.554827][T19794] bridge_slave_0: entered promiscuous mode [ 1107.575952][T19794] bridge0: port 2(bridge_slave_1) entered blocking state [ 1107.583087][T19794] bridge0: port 2(bridge_slave_1) entered disabled state [ 1107.607308][T11244] Bluetooth: hci9: command tx timeout [ 1107.612753][T11244] Bluetooth: hci15: command tx timeout [ 1107.628040][T19794] bridge_slave_1: entered allmulticast mode [ 1107.647264][T19794] bridge_slave_1: entered promiscuous mode [ 1107.899253][T19786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1107.953142][T19786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1107.990898][T19787] team0: Port device team_slave_0 added [ 1108.030647][T19787] team0: Port device team_slave_1 added [ 1108.074641][T11244] Bluetooth: hci16: command tx timeout [ 1108.081236][T19797] team0: Port device team_slave_0 added [ 1108.119355][T19797] team0: Port device team_slave_1 added [ 1108.149199][T19794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1108.206840][T19794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1108.314878][T11244] Bluetooth: hci10: command tx timeout [ 1108.646925][T19786] team0: Port device team_slave_0 added [ 1108.795408][T19787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1108.814468][T19787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1108.894474][T19787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1108.934765][T19787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1108.966306][T19787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1109.023381][T19787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1109.086993][T19797] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1109.093974][T19797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1109.154559][T19797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1109.193229][T19794] team0: Port device team_slave_0 added [ 1109.206405][T19794] team0: Port device team_slave_1 added [ 1109.287272][T19786] team0: Port device team_slave_1 added [ 1109.378974][T19797] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1109.386801][T19797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1109.444555][T19797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1109.489433][T19794] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1109.504514][T19794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1109.564561][T19794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1109.700175][T19787] hsr_slave_0: entered promiscuous mode [ 1109.737787][T19787] hsr_slave_1: entered promiscuous mode [ 1109.747680][T19787] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1109.769429][T19787] Cannot create hsr debugfs directory [ 1109.795430][T19794] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1109.802401][T19794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1109.874525][T19794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1109.900290][T19786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1109.914863][T19786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1109.977269][T19786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1110.014100][T19786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1110.034573][T19786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1110.094596][T19786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1110.240296][T19770] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1110.390550][T19797] hsr_slave_0: entered promiscuous mode [ 1110.422903][T19797] hsr_slave_1: entered promiscuous mode [ 1110.438898][T19797] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1110.454427][T19797] Cannot create hsr debugfs directory [ 1116.008054][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.021279][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.635024][ T30] INFO: task kworker/u8:0:12959 blocked for more than 143 seconds. [ 1116.642984][ T30] Not tainted 6.11.0-syzkaller-09959-gabf2050f51fd #0 [ 1116.670309][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1116.694510][ T30] task:kworker/u8:0 state:D stack:21264 pid:12959 tgid:12959 ppid:2 flags:0x00004000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1116.748162][ T30] Workqueue: 0x0 (events_unbound) [ 1116.753356][ T30] Call Trace: [ 1116.838669][ T30] [ 1116.841664][ T30] __schedule+0x1895/0x4b30 [ 1116.914742][ T30] ? __pfx___schedule+0x10/0x10 [ 1116.919666][ T30] ? __pfx_lock_release+0x10/0x10 [ 1116.957397][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 1116.962908][ T30] ? kthread_data+0x52/0xd0 [ 1117.004832][ T30] ? schedule+0x90/0x320 [ 1117.009141][ T30] ? wq_worker_sleeping+0x66/0x240 [ 1117.014285][ T30] ? schedule+0x90/0x320 [ 1117.064699][ T30] schedule+0x14b/0x320 [ 1117.068923][ T30] schedule_preempt_disabled+0x13/0x30 [ 1117.084694][ T30] __mutex_lock+0x6a7/0xd70 [ 1117.089250][ T30] ? __mutex_lock+0x52a/0xd70 [ 1117.093954][ T30] ? worker_attach_to_pool+0x31/0x390 [ 1117.124578][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1117.132648][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 1117.146144][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1117.152083][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1117.174697][ T30] ? __kasan_kmalloc+0x98/0xb0 [ 1117.179506][ T30] worker_attach_to_pool+0x31/0x390 [ 1117.196428][ T30] create_worker+0x491/0x720 [ 1117.201068][ T30] ? __pfx_create_worker+0x10/0x10 [ 1117.224673][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1117.233680][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1117.255770][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 1117.261021][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 1117.276432][ T30] worker_thread+0x318/0xd30 [ 1117.281083][ T30] ? __kthread_parkme+0x169/0x1d0 [ 1117.296630][ T30] ? __pfx_worker_thread+0x10/0x10 [ 1117.301789][ T30] kthread+0x2f0/0x390 [ 1117.324563][ T30] ? __pfx_worker_thread+0x10/0x10 [ 1117.329726][ T30] ? __pfx_kthread+0x10/0x10 [ 1117.344506][ T30] ret_from_fork+0x4b/0x80 [ 1117.348969][ T30] ? __pfx_kthread+0x10/0x10 [ 1117.365729][ T30] ret_from_fork_asm+0x1a/0x30 [ 1117.370558][ T30] [ 1117.387844][ T30] INFO: task kworker/R-wg-cr:16491 blocked for more than 144 seconds. [ 1117.404462][ T30] Not tainted 6.11.0-syzkaller-09959-gabf2050f51fd #0 [ 1117.411775][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1117.437290][ T30] task:kworker/R-wg-cr state:D stack:29328 pid:16491 tgid:16491 ppid:2 flags:0x00004000 [ 1117.461187][ T30] Call Trace: [ 1117.465137][ T30] [ 1117.468106][ T30] __schedule+0x1895/0x4b30 [ 1117.472656][ T30] ? __pfx___schedule+0x10/0x10 [ 1117.494573][ T30] ? __pfx_lock_release+0x10/0x10 [ 1117.499648][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 1117.518677][ T30] ? kthread_data+0x52/0xd0 [ 1117.523280][ T30] ? schedule+0x90/0x320 [ 1117.554563][ T30] ? wq_worker_sleeping+0x66/0x240 [ 1117.561223][ T30] ? schedule+0x90/0x320 [ 1117.566103][ T30] schedule+0x14b/0x320 [ 1117.570295][ T30] schedule_preempt_disabled+0x13/0x30 [ 1117.586723][ T30] __mutex_lock+0x6a7/0xd70 [ 1117.591271][ T30] ? __mutex_lock+0x52a/0xd70 [ 1117.614544][ T30] ? worker_attach_to_pool+0x31/0x390 [ 1117.619959][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1117.634491][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1117.654692][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 1117.661346][ T30] worker_attach_to_pool+0x31/0x390 [ 1117.674698][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 1117.679940][ T30] rescuer_thread+0x3ed/0x10a0 [ 1117.694840][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1117.701215][ T30] ? rescuer_thread+0x119/0x10a0 [ 1117.724511][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1117.730448][ T30] ? __pfx_rescuer_thread+0x10/0x10 [ 1117.744743][ T30] ? __kthread_parkme+0x169/0x1d0 [ 1117.762119][ T30] ? __pfx_rescuer_thread+0x10/0x10 [ 1117.774586][ T30] kthread+0x2f0/0x390 [ 1117.778691][ T30] ? __pfx_rescuer_thread+0x10/0x10 [ 1117.783915][ T30] ? __pfx_kthread+0x10/0x10 [ 1117.804490][ T30] ret_from_fork+0x4b/0x80 [ 1117.809103][ T30] ? __pfx_kthread+0x10/0x10 [ 1117.813725][ T30] ret_from_fork_asm+0x1a/0x30 [ 1117.834610][ T30] [ 1117.837793][ T30] INFO: task kworker/R-wg-cr:19489 blocked for more than 144 seconds. [ 1117.864224][ T30] Not tainted 6.11.0-syzkaller-09959-gabf2050f51fd #0 [ 1117.884575][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1117.893275][ T30] task:kworker/R-wg-cr state:D stack:29232 pid:19489 tgid:19489 ppid:2 flags:0x00004000 [ 1117.917202][ T30] Call Trace: [ 1117.925197][ T30] [ 1117.928169][ T30] __schedule+0x1895/0x4b30 [ 1117.932723][ T30] ? __pfx___schedule+0x10/0x10 [ 1117.954615][ T30] ? __pfx_lock_release+0x10/0x10 [ 1117.959686][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 1117.977334][ T30] ? kthread_data+0x52/0xd0 [ 1117.981888][ T30] ? schedule+0x90/0x320 [ 1117.995174][ T30] ? wq_worker_sleeping+0x66/0x240 [ 1118.000337][ T30] ? schedule+0x90/0x320 [ 1118.016110][ T30] schedule+0x14b/0x320 [ 1118.020321][ T30] schedule_preempt_disabled+0x13/0x30 [ 1118.045724][ T30] __mutex_lock+0x6a7/0xd70 [ 1118.053245][ T30] ? __mutex_lock+0x52a/0xd70 [ 1118.065850][ T30] ? worker_attach_to_pool+0x31/0x390 [ 1118.071272][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1118.094870][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1118.101247][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 1118.124530][ T30] worker_attach_to_pool+0x31/0x390 [ 1118.129776][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 1118.144847][ T30] rescuer_thread+0x3ed/0x10a0 [ 1118.149681][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1118.174583][ T30] ? rescuer_thread+0x119/0x10a0 [ 1118.179580][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1118.204582][ T30] ? __pfx_rescuer_thread+0x10/0x10 [ 1118.209833][ T30] ? __kthread_parkme+0x169/0x1d0 [ 1118.224845][ T30] ? __pfx_rescuer_thread+0x10/0x10 [ 1118.230215][ T30] kthread+0x2f0/0x390 [ 1118.244471][ T30] ? __pfx_rescuer_thread+0x10/0x10 [ 1118.249719][ T30] ? __pfx_kthread+0x10/0x10 [ 1118.275244][ T30] ret_from_fork+0x4b/0x80 [ 1118.279718][ T30] ? __pfx_kthread+0x10/0x10 [ 1118.284331][ T30] ret_from_fork_asm+0x1a/0x30 [ 1118.292497][ T30] [ 1118.304858][ T30] INFO: task kworker/R-wg-cr:19637 blocked for more than 145 seconds. [ 1118.313063][ T30] Not tainted 6.11.0-syzkaller-09959-gabf2050f51fd #0 [ 1118.344671][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1118.353383][ T30] task:kworker/R-wg-cr state:D stack:27056 pid:19637 tgid:19637 ppid:2 flags:0x00004000 [ 1118.384581][ T30] Workqueue: 0x0 (wg-crypt-wg0) [ 1118.389596][ T30] Call Trace: [ 1118.392891][ T30] [ 1118.414665][ T30] __schedule+0x1895/0x4b30 [ 1118.419251][ T30] ? __pfx___schedule+0x10/0x10 [ 1118.424131][ T30] ? __pfx_lock_release+0x10/0x10 [ 1118.444431][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 1118.450031][ T30] ? kthread_data+0x52/0xd0 [ 1118.474955][ T30] ? schedule+0x90/0x320 [ 1118.479253][ T30] ? wq_worker_sleeping+0x66/0x240 [ 1118.494523][ T30] ? schedule+0x90/0x320 [ 1118.498819][ T30] schedule+0x14b/0x320 [ 1118.503003][ T30] schedule_preempt_disabled+0x13/0x30 [ 1118.524612][ T30] __mutex_lock+0x6a7/0xd70 [ 1118.529184][ T30] ? __mutex_lock+0x52a/0xd70 [ 1118.533899][ T30] ? rescuer_thread+0xaf5/0x10a0 [ 1118.555633][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1118.560725][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 1118.582330][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 1118.596195][ T30] rescuer_thread+0xaf5/0x10a0 [ 1118.601013][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1118.624720][ T30] ? rescuer_thread+0x119/0x10a0 [ 1118.629725][ T30] ? __pfx_rescuer_thread+0x10/0x10 [ 1118.644966][ T30] ? __kthread_parkme+0x169/0x1d0 [ 1118.650044][ T30] ? __pfx_rescuer_thread+0x10/0x10 [ 1118.669108][ T30] kthread+0x2f0/0x390 [ 1118.673268][ T30] ? __pfx_rescuer_thread+0x10/0x10 [ 1118.684581][ T30] ? __pfx_kthread+0x10/0x10 [ 1118.689225][ T30] ret_from_fork+0x4b/0x80 [ 1118.693679][ T30] ? __pfx_kthread+0x10/0x10 [ 1118.722592][ T30] ret_from_fork_asm+0x1a/0x30 [ 1118.728323][ T30] [ 1118.740750][ T30] INFO: task kworker/1:2:19735 blocked for more than 145 seconds. [ 1118.764709][ T30] Not tainted 6.11.0-syzkaller-09959-gabf2050f51fd #0 [ 1118.775703][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1118.794613][ T30] task:kworker/1:2 state:D stack:30096 pid:19735 tgid:19735 ppid:2 flags:0x00004000 [ 1118.817229][ T30] Call Trace: [ 1118.820549][ T30] [ 1118.823501][ T30] __schedule+0x1895/0x4b30 [ 1118.844597][ T30] ? __pfx___schedule+0x10/0x10 [ 1118.849518][ T30] ? __pfx_lock_release+0x10/0x10 [ 1118.864617][ T30] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 1118.884771][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1118.890820][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1118.904513][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1118.910547][ T30] ? schedule+0x90/0x320 [ 1118.926519][ T30] schedule+0x14b/0x320 [ 1118.930728][ T30] ? kthread+0x1c6/0x390 [ 1118.944896][ T30] schedule_preempt_disabled+0x13/0x30 [ 1118.950402][ T30] kthread+0x23b/0x390 [ 1118.966440][ T30] ? __pfx_worker_thread+0x10/0x10 [ 1118.984937][ T30] ? __pfx_kthread+0x10/0x10 [ 1118.989576][ T30] ret_from_fork+0x4b/0x80 [ 1118.994018][ T30] ? __pfx_kthread+0x10/0x10 [ 1119.014414][ T30] ret_from_fork_asm+0x1a/0x30 [ 1119.019254][ T30] [ 1119.022308][ T30] INFO: task kworker/u8:6:19736 blocked for more than 145 seconds. [ 1119.054690][ T30] Not tainted 6.11.0-syzkaller-09959-gabf2050f51fd #0 [ 1119.062022][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1119.094614][ T30] task:kworker/u8:6 state:D stack:30096 pid:19736 tgid:19736 ppid:2 flags:0x00004000 [ 1119.122423][ T30] Call Trace: [ 1119.126178][ T30] [ 1119.129142][ T30] __schedule+0x1895/0x4b30 [ 1119.133695][ T30] ? __pfx___schedule+0x10/0x10 [ 1119.156234][ T30] ? __pfx_lock_release+0x10/0x10 [ 1119.161323][ T30] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 1119.178169][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1119.184114][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1119.207445][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1119.213482][ T30] ? schedule+0x90/0x320 [ 1119.234690][ T30] schedule+0x14b/0x320 [ 1119.238905][ T30] ? kthread+0x1c6/0x390 [ 1119.243168][ T30] schedule_preempt_disabled+0x13/0x30 [ 1119.266215][ T30] kthread+0x23b/0x390 [ 1119.270335][ T30] ? __pfx_worker_thread+0x10/0x10 [ 1119.280822][ T30] ? __pfx_kthread+0x10/0x10 [ 1119.294551][ T30] ret_from_fork+0x4b/0x80 [ 1119.299012][ T30] ? __pfx_kthread+0x10/0x10 [ 1119.314604][ T30] ret_from_fork_asm+0x1a/0x30 [ 1119.319424][ T30] [ 1119.334551][ T30] [ 1119.334551][ T30] Showing all locks held in the system: [ 1119.342298][ T30] 1 lock held by kworker/1:0/25: [ 1119.354783][ T30] #0: ffffffff8e7e24e8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: worker_attach_to_pool+0x31/0x390 [ 1119.383037][ T30] 1 lock held by khungtaskd/30: [ 1119.394592][ T30] #0: ffffffff8e937ee0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 1119.414471][ T30] 1 lock held by kworker/R-write/32: [ 1119.419784][ T30] #0: ffffffff8e7e24e8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: worker_attach_to_pool+0x31/0x390 [ 1119.454576][ T30] 4 locks held by kworker/1:1/47: [ 1119.459643][ T30] 3 locks held by kworker/u8:3/53: [ 1119.474451][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 1119.504598][ T30] #1: ffffc90000be7d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 1119.526032][ T30] #2: ffffffff8fccdc48 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 1119.554525][ T30] 3 locks held by kworker/u8:4/68: [ 1119.559682][ T30] #0: ffff88802d98e148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 1119.584630][ T30] #1: ffffc900020afd00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 1119.624628][ T30] #2: ffffffff8fccdc48 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 [ 1119.634167][ T30] 3 locks held by kworker/u8:7/2541: [ 1119.654624][ T30] #0: ffff88801baed948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 1119.674531][ T30] #1: ffffc9000944fd00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 1119.707751][ T30] #2: ffffffff8fcc1150 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 1119.724409][ T30] 1 lock held by kworker/R-ipv6_/2725: [ 1119.729907][ T30] #0: ffffffff8e7e24e8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: worker_attach_to_pool+0x31/0x390 [ 1119.755527][ T30] 1 lock held by kworker/R-bat_e/2859: [ 1119.761024][ T30] #0: ffffffff8e7e24e8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: worker_attach_to_pool+0x31/0x390 [ 1119.792619][ T30] 3 locks held by kworker/u8:8/3035: [ 1119.806041][ T30] 1 lock held by dhcpcd/4895: [ 1119.812314][ T30] #0: ffffffff8fccdc48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 1119.835578][ T30] 2 locks held by getty/4978: [ 1119.840297][ T30] #0: ffff88814baf60a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1119.866872][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 1119.895139][ T30] 6 locks held by kworker/1:4/5277: [ 1119.900382][ T30] 1 lock held by kworker/0:6/5299: [ 1119.915937][ T30] #0: ffffffff8e7e24e8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: worker_attach_to_pool+0x31/0x390 [ 1119.944663][ T30] 1 lock held by kworker/u8:0/12959: [ 1119.950013][ T30] #0: ffffffff8e7e24e8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: worker_attach_to_pool+0x31/0x390 [ 1119.974616][ T30] 1 lock held by kworker/R-wg-cr/14053: [ 1119.980827][ T30] #0: ffffffff8e7e24e8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: rescuer_thread+0xaf5/0x10a0 [ 1120.015256][ T30] 1 lock held by kworker/R-wg-cr/14965: [ 1120.020844][ T30] #0: ffffffff8e7e24e8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: rescuer_thread+0xaf5/0x10a0 [ 1120.054503][ T30] 1 lock held by kworker/R-wg-cr/15845: [ 1120.060087][ T30] #0: ffffffff8e7e24e8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: rescuer_thread+0xaf5/0x10a0 [ 1120.084626][ T30] 1 lock held by kworker/R-wg-cr/16035: [ 1120.090206][ T30] #0: ffffffff8e7e24e8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: rescuer_thread+0xaf5/0x10a0 [ 1120.124587][ T30] 1 lock held by kworker/R-wg-cr/16059: [ 1120.130175][ T30] #0: ffffffff8e7e24e8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: rescuer_thread+0xaf5/0x10a0 [ 1120.164104][ T30] 1 lock held by kworker/R-wg-cr/16489: [ 1120.184538][ T30] #0: ffffffff8e7e24e8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: rescuer_thread+0xaf5/0x10a0 [ 1120.202211][ T30] 1 lock held by kworker/R-wg-cr/16491: [ 1120.214554][ T30] #0: ffffffff8e7e24e8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: worker_attach_to_pool+0x31/0x390 [ 1120.244651][ T30] 1 lock held by kworker/R-wg-cr/17011: [ 1120.250270][ T30] 1 lock held by kworker/R-bond0/19241: [ 1120.264407][ T30] #0: ffffffff8e7e24e8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: rescuer_thread+0xfbf/0x10a0 [ 1120.286419][ T30] 1 lock held by kworker/R-wg-cr/19488: [ 1120.291994][ T30] #0: ffffffff8e7e24e8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: rescuer_thread+0xaf5/0x10a0 [ 1120.334577][ T30] 1 lock held by kworker/R-wg-cr/19489: [ 1120.340165][ T30] #0: ffffffff8e7e24e8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: worker_attach_to_pool+0x31/0x390 [ 1120.361150][ T30] 1 lock held by kworker/R-wg-cr/19637: [ 1120.374406][ T30] #0: ffffffff8e7e24e8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: rescuer_thread+0xaf5/0x10a0 [ 1120.395498][ T30] 1 lock held by kworker/R-wg-cr/19640: [ 1120.414701][ T30] #0: ffffffff8e7e24e8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: rescuer_thread+0xaf5/0x10a0 [ 1120.434518][ T30] 8 locks held by syz-executor/19770: [ 1120.439924][ T30] #0: ffff88803332e420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x224/0xc90 [ 1120.466220][ T30] #1: ffff8880616acc88 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1ea/0x500 [ 1120.496378][ T30] #2: ffff888141b91878 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20e/0x500 [ 1120.524553][ T30] #3: ffffffff8f56d3e8 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xfc/0x480 [ 1120.544569][ T30] #4: ffff888042b5f0e8 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xce/0x7c0 [ 1120.565405][ T30] #5: ffff888042b5a250 (&devlink->lock_key#81){+.+.}-{3:3}, at: nsim_drv_remove+0x50/0x160 [ 1120.584408][ T30] #6: ffffffff8fccdc48 (rtnl_mutex){+.+.}-{3:3}, at: nsim_destroy+0x71/0x5c0 [ 1120.593356][ T30] #7: ffffffff8e7d1dd0 (cpu_hotplug_lock){++++}-{0:0}, at: unregister_netdevice_many_notify+0x5ea/0x1da0 [ 1120.631835][ T30] 1 lock held by kworker/R-bond0/19778: [ 1120.644407][ T30] #0: ffffffff8e7e24e8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: rescuer_thread+0xd0/0x10a0 [ 1120.664410][ T30] 1 lock held by kworker/R-bond0/19781: [ 1120.669996][ T30] #0: ffffffff8e7e24e8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: rescuer_thread+0xd0/0x10a0 [ 1120.704586][ T30] 1 lock held by syz-executor/19786: [ 1120.709936][ T30] #0: ffffffff8fccdc48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 1120.744569][ T30] 1 lock held by syz-executor/19787: [ 1120.749906][ T30] #0: ffffffff8fccdc48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 1120.774620][ T30] 1 lock held by syz-executor/19794: [ 1120.779954][ T30] #0: ffffffff8fccdc48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 1120.805575][ T30] 1 lock held by syz-executor/19797: [ 1120.810904][ T30] #0: ffffffff8fccdc48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 1120.844609][ T30] 1 lock held by kworker/R-wg-cr/19811: [ 1120.850233][ T30] #0: ffffffff8e7e24e8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: rescuer_thread+0xd0/0x10a0 [ 1120.877280][ T30] 1 lock held by kworker/R-wg-cr/19812: [ 1120.882865][ T30] #0: ffffffff8e7e24e8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: rescuer_thread+0xd0/0x10a0 [ 1120.914530][ T30] 1 lock held by kworker/R-wg-cr/19813: [ 1120.923061][ T30] #0: ffffffff8e7e24e8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: rescuer_thread+0xd0/0x10a0 [ 1120.954605][ T30] 1 lock held by kworker/R-bond0/19828: [ 1120.960195][ T30] #0: ffffffff8e7e24e8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: rescuer_thread+0xd0/0x10a0 [ 1120.984657][ T30] 1 lock held by kworker/R-bond0/19832: [ 1120.990244][ T30] #0: ffffffff8e7e24e8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: rescuer_thread+0xd0/0x10a0 [ 1121.014516][ T30] 1 lock held by kworker/R-bond0/19835: [ 1121.038504][ T30] #0: ffffffff8e7e24e8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: rescuer_thread+0xd0/0x10a0 [ 1121.054429][ T30] 1 lock held by kworker/R-bond0/19836: [ 1121.060008][ T30] #0: ffffffff8e7e24e8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: rescuer_thread+0xd0/0x10a0 [ 1121.094580][ T30] 1 lock held by kworker/R-wg-cr/19840: [ 1121.100173][ T30] #0: ffffffff8e7e24e8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: rescuer_thread+0xd0/0x10a0 [ 1121.134511][ T30] 1 lock held by kworker/R-wg-cr/19842: [ 1121.140101][ T30] #0: ffffffff8e7e24e8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: rescuer_thread+0xd0/0x10a0 [ 1121.174411][ T30] 1 lock held by kworker/R-wg-cr/19843: [ 1121.180006][ T30] #0: ffffffff8e7e24e8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: rescuer_thread+0xd0/0x10a0 [ 1121.212399][ T30] 1 lock held by kworker/R-wg-cr/19845: [ 1121.227976][ T30] #0: ffffffff8e7e24e8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: rescuer_thread+0xd0/0x10a0 [ 1121.254615][ T30] 1 lock held by kworker/R-wg-cr/19847: [ 1121.260196][ T30] #0: ffffffff8e7e24e8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: rescuer_thread+0xd0/0x10a0 [ 1121.284747][ T30] 1 lock held by kworker/R-wg-cr/19848: [ 1121.290323][ T30] #0: ffffffff8e7e24e8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: rescuer_thread+0xd0/0x10a0 [ 1121.316822][ T30] 1 lock held by kworker/R-wg-cr/19850: [ 1121.322410][ T30] #0: ffffffff8e7e24e8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: rescuer_thread+0xd0/0x10a0 [ 1121.354750][ T30] 1 lock held by kworker/R-wg-cr/19854: [ 1121.360339][ T30] #0: ffffffff8e7e24e8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: rescuer_thread+0xd0/0x10a0 [ 1121.394411][ T30] 1 lock held by kworker/R-wg-cr/19855: [ 1121.399995][ T30] #0: ffffffff8e7e24e8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: rescuer_thread+0xd0/0x10a0 [ 1121.425058][ T30] 1 lock held by kworker/R-wg-cr/19861: [ 1121.446236][ T30] #0: ffffffff8e7e24e8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: rescuer_thread+0xd0/0x10a0 [ 1121.464560][ T30] 1 lock held by kworker/R-wg-cr/19864: [ 1121.470169][ T30] #0: ffffffff8e7e24e8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: rescuer_thread+0xd0/0x10a0 [ 1121.504415][ T30] 1 lock held by kworker/R-wg-cr/19865: [ 1121.510001][ T30] #0: ffffffff8e7e24e8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: rescuer_thread+0xd0/0x10a0 [ 1121.534636][ T30] [ 1121.536998][ T30] ============================================= [ 1121.536998][ T30] [ 1121.564641][ T30] NMI backtrace for cpu 0 [ 1121.569009][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-syzkaller-09959-gabf2050f51fd #0 [ 1121.579177][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1121.589250][ T30] Call Trace: [ 1121.592538][ T30] [ 1121.595484][ T30] dump_stack_lvl+0x241/0x360 [ 1121.600187][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1121.605408][ T30] ? __pfx__printk+0x10/0x10 [ 1121.610028][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 1121.614991][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1121.620462][ T30] ? _printk+0xd5/0x120 [ 1121.624643][ T30] ? __pfx__printk+0x10/0x10 [ 1121.629250][ T30] ? __wake_up_klogd+0xcc/0x110 [ 1121.634122][ T30] ? __pfx__printk+0x10/0x10 [ 1121.638731][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 1121.643788][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1121.649795][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 1121.655803][ T30] watchdog+0xff4/0x1040 [ 1121.660075][ T30] ? watchdog+0x1ea/0x1040 [ 1121.664526][ T30] ? __pfx_watchdog+0x10/0x10 [ 1121.669261][ T30] kthread+0x2f0/0x390 [ 1121.673349][ T30] ? __pfx_watchdog+0x10/0x10 [ 1121.678053][ T30] ? __pfx_kthread+0x10/0x10 [ 1121.682666][ T30] ret_from_fork+0x4b/0x80 [ 1121.687103][ T30] ? __pfx_kthread+0x10/0x10 [ 1121.691717][ T30] ret_from_fork_asm+0x1a/0x30 [ 1121.696525][ T30] [ 1121.701286][ T30] Sending NMI from CPU 0 to CPUs 1: [ 1121.707463][ C1] NMI backtrace for cpu 1 [ 1121.707476][ C1] CPU: 1 UID: 0 PID: 5277 Comm: kworker/1:4 Not tainted 6.11.0-syzkaller-09959-gabf2050f51fd #0 [ 1121.707495][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1121.707506][ C1] Workqueue: events nsim_dev_trap_report_work [ 1121.707530][ C1] RIP: 0010:stack_trace_consume_entry+0x0/0x280 [ 1121.707550][ C1] Code: 00 7e 00 e9 6a ff ff ff e8 9d fc 42 0a 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 55 41 57 41 56 41 55 41 54 53 48 83 ec 18 48 89 fb 48 [ 1121.707564][ C1] RSP: 0000:ffffc90000a17af8 EFLAGS: 00000282 [ 1121.707581][ C1] RAX: ffffffff8135ce9b RBX: ffffc90000a17b00 RCX: ffffffff917af000 [ 1121.707594][ C1] RDX: ffffffff9195c401 RSI: ffffffff8135ce9b RDI: ffffc90000a17be0 [ 1121.707605][ C1] RBP: ffffc90000a17b90 R08: ffffc900043d7f20 R09: 0000000000000000 [ 1121.707617][ C1] R10: ffffc90000a17b50 R11: ffffffff81806740 R12: ffff88802dac1e00 [ 1121.707629][ C1] R13: ffffffff81806740 R14: ffffc90000a17be0 R15: 0000000000000000 [ 1121.707641][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 1121.707655][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1121.707666][ C1] CR2: 000000110c32f8f2 CR3: 000000000e734000 CR4: 00000000003506f0 [ 1121.707681][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1121.707691][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1121.707702][ C1] Call Trace: [ 1121.707707][ C1] [ 1121.707715][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 1121.707732][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 1121.707752][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1121.707768][ C1] ? nmi_handle+0x2a/0x5a0 [ 1121.707790][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 1121.707808][ C1] ? nmi_handle+0x14f/0x5a0 [ 1121.707822][ C1] ? nmi_handle+0x2a/0x5a0 [ 1121.707837][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1121.707854][ C1] ? default_do_nmi+0x63/0x160 [ 1121.707872][ C1] ? exc_nmi+0x123/0x1f0 [ 1121.707887][ C1] ? end_repeat_nmi+0xf/0x53 [ 1121.707907][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1121.707924][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1121.707941][ C1] ? ret_from_fork+0x4b/0x80 [ 1121.707959][ C1] ? __init_begin+0x41000/0x41000 [ 1121.707978][ C1] ? no_hash_pointers_enable+0x71/0xe0 [ 1121.707995][ C1] ? ret_from_fork+0x4b/0x80 [ 1121.708013][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1121.708031][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1121.708049][ C1] ? no_hash_pointers_enable+0x71/0xe0 [ 1121.708064][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1121.708082][ C1] [ 1121.708087][ C1] [ 1121.708092][ C1] arch_stack_walk+0x10e/0x150 [ 1121.708110][ C1] ? ret_from_fork+0x4b/0x80 [ 1121.708131][ C1] stack_trace_save+0x118/0x1d0 [ 1121.708148][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1121.708163][ C1] ? stack_trace_save+0x118/0x1d0 [ 1121.708180][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1121.708199][ C1] kasan_save_track+0x3f/0x80 [ 1121.708213][ C1] ? kasan_save_track+0x3f/0x80 [ 1121.708226][ C1] ? __kasan_kmalloc+0x98/0xb0 [ 1121.708240][ C1] ? __kmalloc_node_track_caller_noprof+0x225/0x440 [ 1121.708258][ C1] ? kmalloc_reserve+0x111/0x2a0 [ 1121.708277][ C1] ? __alloc_skb+0x1f3/0x440 [ 1121.708294][ C1] ? synproxy_send_client_synack+0x1ba/0xf30 [ 1121.708312][ C1] ? nft_synproxy_eval_v4+0x3ca/0x610 [ 1121.708329][ C1] ? nft_synproxy_do_eval+0x362/0xa60 [ 1121.708347][ C1] ? nft_do_chain+0x4ad/0x1da0 [ 1121.708364][ C1] ? nft_do_chain_inet+0x418/0x6b0 [ 1121.708381][ C1] ? nf_hook_slow+0xc3/0x220 [ 1121.708396][ C1] ? NF_HOOK+0x29e/0x450 [ 1121.708411][ C1] ? NF_HOOK+0x3a4/0x450 [ 1121.708424][ C1] ? __netif_receive_skb+0x2bf/0x650 [ 1121.708440][ C1] ? process_backlog+0x662/0x15b0 [ 1121.708456][ C1] ? __napi_poll+0xcb/0x490 [ 1121.708470][ C1] ? net_rx_action+0x89b/0x1240 [ 1121.708486][ C1] ? handle_softirqs+0x2c5/0x980 [ 1121.708502][ C1] ? do_softirq+0x11b/0x1e0 [ 1121.708518][ C1] ? __local_bh_enable_ip+0x1bb/0x200 [ 1121.708534][ C1] ? nsim_dev_trap_report_work+0x75d/0xaa0 [ 1121.708552][ C1] ? process_scheduled_works+0xa63/0x1850 [ 1121.708574][ C1] ? worker_thread+0x870/0xd30 [ 1121.708591][ C1] ? kthread+0x2f0/0x390 [ 1121.708619][ C1] __kasan_kmalloc+0x98/0xb0 [ 1121.708635][ C1] __kmalloc_node_track_caller_noprof+0x225/0x440 [ 1121.708652][ C1] ? __alloc_skb+0x1f3/0x440 [ 1121.708671][ C1] ? __alloc_skb+0x1f3/0x440 [ 1121.708689][ C1] kmalloc_reserve+0x111/0x2a0 [ 1121.708709][ C1] __alloc_skb+0x1f3/0x440 [ 1121.708729][ C1] ? __pfx___alloc_skb+0x10/0x10 [ 1121.708752][ C1] synproxy_send_client_synack+0x1ba/0xf30 [ 1121.708772][ C1] ? kasan_quarantine_put+0xdc/0x230 [ 1121.708790][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 1121.708809][ C1] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 1121.708829][ C1] ? synproxy_pernet+0x45/0x270 [ 1121.708849][ C1] nft_synproxy_eval_v4+0x3ca/0x610 [ 1121.708869][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 1121.708888][ C1] ? nf_ip_checksum+0x13a/0x500 [ 1121.708909][ C1] nft_synproxy_do_eval+0x362/0xa60 [ 1121.708929][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 1121.708946][ C1] ? validate_chain+0x11e/0x5920 [ 1121.708964][ C1] ? __pfx_validate_chain+0x10/0x10 [ 1121.708983][ C1] nft_do_chain+0x4ad/0x1da0 [ 1121.709007][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 1121.709025][ C1] ? __local_bh_enable_ip+0x168/0x200 [ 1121.709054][ C1] ? __pfx_nf_nat_inet_fn+0x10/0x10 [ 1121.709076][ C1] nft_do_chain_inet+0x418/0x6b0 [ 1121.709094][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 1121.709111][ C1] ? ipt_do_table+0x312/0x1860 [ 1121.709137][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 1121.709154][ C1] nf_hook_slow+0xc3/0x220 [ 1121.709171][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1121.709186][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1121.709202][ C1] NF_HOOK+0x29e/0x450 [ 1121.709218][ C1] ? NF_HOOK+0x9a/0x450 [ 1121.709232][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 1121.709247][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1121.709265][ C1] ? ip_rcv_finish+0x406/0x560 [ 1121.709281][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1121.709295][ C1] NF_HOOK+0x3a4/0x450 [ 1121.709309][ C1] ? __lock_acquire+0x1384/0x2050 [ 1121.709328][ C1] ? NF_HOOK+0x9a/0x450 [ 1121.709343][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 1121.709356][ C1] ? ip_rcv_core+0x801/0xd10 [ 1121.709371][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1121.709390][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 1121.709405][ C1] __netif_receive_skb+0x2bf/0x650 [ 1121.709422][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 1121.709440][ C1] ? __pfx___netif_receive_skb+0x10/0x10 [ 1121.709456][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1121.709474][ C1] ? __pfx_lock_release+0x10/0x10 [ 1121.709492][ C1] ? _raw_spin_lock_irq+0xdf/0x120 [ 1121.709516][ C1] process_backlog+0x662/0x15b0 [ 1121.709535][ C1] ? process_backlog+0x33b/0x15b0 [ 1121.709555][ C1] ? __pfx_process_backlog+0x10/0x10 [ 1121.709575][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1121.709596][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1121.709617][ C1] __napi_poll+0xcb/0x490 [ 1121.709634][ C1] net_rx_action+0x89b/0x1240 [ 1121.709660][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 1121.709686][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1121.709711][ C1] handle_softirqs+0x2c5/0x980 [ 1121.709730][ C1] ? do_softirq+0x11b/0x1e0 [ 1121.709748][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 1121.709769][ C1] do_softirq+0x11b/0x1e0 [ 1121.709785][ C1] [ 1121.709790][ C1] [ 1121.709796][ C1] ? __pfx_do_softirq+0x10/0x10 [ 1121.709814][ C1] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 1121.709834][ C1] ? rcu_is_watching+0x15/0xb0 [ 1121.709851][ C1] __local_bh_enable_ip+0x1bb/0x200 [ 1121.709868][ C1] ? nsim_dev_trap_report_work+0x75d/0xaa0 [ 1121.709886][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1121.709903][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1121.709921][ C1] ? nsim_dev_trap_report_work+0x6a7/0xaa0 [ 1121.709941][ C1] nsim_dev_trap_report_work+0x75d/0xaa0 [ 1121.709965][ C1] ? process_scheduled_works+0x976/0x1850 [ 1121.709983][ C1] process_scheduled_works+0xa63/0x1850 [ 1121.710012][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1121.710034][ C1] ? assign_work+0x364/0x3d0 [ 1121.710052][ C1] worker_thread+0x870/0xd30 [ 1121.710076][ C1] ? __kthread_parkme+0x169/0x1d0 [ 1121.710095][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1121.710113][ C1] kthread+0x2f0/0x390 [ 1121.710126][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1121.710143][ C1] ? __pfx_kthread+0x10/0x10 [ 1121.710157][ C1] ret_from_fork+0x4b/0x80 [ 1121.710174][ C1] ? __pfx_kthread+0x10/0x10 [ 1121.710188][ C1] ret_from_fork_asm+0x1a/0x30 [ 1121.710213][ C1] [ 1122.637709][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1122.644608][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-syzkaller-09959-gabf2050f51fd #0 [ 1122.654776][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1122.664932][ T30] Call Trace: [ 1122.668222][ T30] [ 1122.671162][ T30] dump_stack_lvl+0x241/0x360 [ 1122.675868][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1122.681090][ T30] ? __pfx__printk+0x10/0x10 [ 1122.685698][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1122.691715][ T30] ? vscnprintf+0x5d/0x90 [ 1122.696069][ T30] panic+0x349/0x880 [ 1122.699980][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 1122.706152][ T30] ? __pfx_panic+0x10/0x10 [ 1122.710581][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 1122.715967][ T30] ? __irq_work_queue_local+0x137/0x410 [ 1122.721544][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 1122.726938][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 1122.733117][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 1122.739293][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 1122.745463][ T30] watchdog+0x1033/0x1040 [ 1122.749809][ T30] ? watchdog+0x1ea/0x1040 [ 1122.754245][ T30] ? __pfx_watchdog+0x10/0x10 [ 1122.758937][ T30] kthread+0x2f0/0x390 [ 1122.763017][ T30] ? __pfx_watchdog+0x10/0x10 [ 1122.767706][ T30] ? __pfx_kthread+0x10/0x10 [ 1122.772313][ T30] ret_from_fork+0x4b/0x80 [ 1122.776746][ T30] ? __pfx_kthread+0x10/0x10 [ 1122.781348][ T30] ret_from_fork_asm+0x1a/0x30 [ 1122.786152][ T30] [ 1122.789378][ T30] Kernel Offset: disabled [ 1122.793695][ T30] Rebooting in 86400 seconds..