last executing test programs: 17m20.613618041s ago: executing program 3 (id=164): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f0000003100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010023bd7000fbdbdf250c00000008000300", @ANYRES32=r3, @ANYBLOB="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"], 0x2c}, 0x1, 0x0, 0x0, 0x2000c054}, 0x0) 17m20.425181453s ago: executing program 3 (id=165): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@alg={0xe0, 0x10, 0x1, 0x72bd28, 0x25dfdbfe, {{'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}}}, 0xe0}, 0x1, 0x0, 0x0, 0x4008004}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) memfd_create(0x0, 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) landlock_restrict_self(0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc80) r5 = getuid() newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) setresuid(r6, r6, 0x0) write$P9_RSTATu(r4, &(0x7f00000001c0)={0x68, 0x7d, 0x1, {{0x0, 0x41, 0x1, 0x0, {0x2, 0x1, 0x6}, 0x200000, 0x1, 0xc0000000, 0x3, 0x2, '^&', 0x7, '}#}H,,/', 0x2, ')-', 0x3, '%^*'}, 0x12, '].\xe1]))[].%&@&+#!+)', r5, 0x0, r6}}, 0x68) 17m19.115010276s ago: executing program 3 (id=168): madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66) mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) r0 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x108}) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x100, &(0x7f00000001c0)=[{0x5, 0x80, 0x80}, {0x4, 0x0, 0x6}], 0x2, 0xe4, 0x0, 0x2, 0x0, 0x2}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001840)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=""/240, 0xf0}, 0x3}, {{&(0x7f0000000240)=@alg, 0x80, &(0x7f0000000580)=[{&(0x7f00000002c0)=""/90, 0x5a}, {&(0x7f0000000340)=""/216, 0xd8}, {&(0x7f0000000440)=""/146, 0x92}, {&(0x7f0000000500)=""/80, 0x50}], 0x4, &(0x7f0000000840)=""/4096, 0x1000}, 0x80000001}], 0x2, 0x40, 0x0) sendto$inet6(r2, &(0x7f0000000080)="d7646dca621d406ce56cfab0ca92bed28d6a2f25741c9ea66e8ec2794015f2687018f40e2eda26b1c35d6004859bde7080", 0x31, 0x20000045, &(0x7f0000000140)={0xa, 0x4001, 0xfffc, @loopback, 0xfffffffd}, 0x1c) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff6000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff0000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) listen(0xffffffffffffffff, 0x5) socket$unix(0x1, 0x1, 0x0) r3 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a0, 0xc000, 0x8000008, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0d00010004000000010004000000000000000000", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00'], 0x50) syz_clone(0x2008400, 0x0, 0x0, 0x0, 0x0, 0x0) 17m16.218140536s ago: executing program 3 (id=173): socket$rds(0x15, 0x5, 0x0) r0 = syz_ublk_setup_io_uring(0x2261, &(0x7f0000000300)={0x0, 0xd58c, 0x80, 0x2, 0x30b}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xffeffffffffffffa]}, 0x8, 0x800) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') lseek(r5, 0x2000, 0x0) syz_io_uring_setup(0xf08, &(0x7f0000000480)={0x0, 0x595d, 0x1000, 0x20002, 0x1000051, 0x0, r5}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r6, r7, r8, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x10, 0x0, @fd=r4, 0x0, 0x0, 0x0, {0x259a}, 0x1}) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r2, r3, &(0x7f0000001a80)=@IORING_OP_FGETXATTR={0x2b, 0x40, 0x0, r0, &(0x7f0000000a00)="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", &(0x7f0000001a40)="0d4d38cc", 0x103f, 0x0, 0x0, {0x0, r9}}) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000980)=@IORING_OP_TIMEOUT={0xb, 0x12, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000000c0), 0x1, 0x40, 0x1}) mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x8000) mount(&(0x7f0000000580)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./file0\x00', &(0x7f0000002280)='f2fs\x00', 0x10000, &(0x7f0000002240)='norecovery') eventfd2(0x1, 0x80001) r10 = eventfd(0xe467) ioctl$IOMMU_IOAS_MAP(0xffffffffffffffff, 0x3b85, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_ublk_setup_io_uring(0x1d, 0x0, 0x0, &(0x7f0000000280), 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000080)=r10, 0x1) 17m15.127739844s ago: executing program 3 (id=179): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) r3 = socket(0x10, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000480)=@gcm_256={{0x303}, "000200", "e123c5876ff425b1ebe250a8486be34705f4f827ae60ecb65e528248d5552bff", "7e25837b", "15d0db2c77179e1a"}, 0x38) write$binfmt_script(r4, &(0x7f0000000500)={'#! ', './file0'}, 0xb) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd87}, &(0x7f0000000240)=0x40) writev(r4, 0x0, 0x0) close_range(r3, r4, 0x0) 17m13.861547274s ago: executing program 3 (id=181): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000d88000/0x1000)=nil, &(0x7f00007f2000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff6000/0xa000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00008f7000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) syz_usb_connect$uac3(0x3, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r0 = io_uring_setup(0x1191, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xcb}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r0, 0x2219, 0xcf74, 0x16, 0x0, 0x700) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x50) 16m58.391563144s ago: executing program 32 (id=181): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000d88000/0x1000)=nil, &(0x7f00007f2000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff6000/0xa000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00008f7000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) syz_usb_connect$uac3(0x3, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r0 = io_uring_setup(0x1191, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xcb}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r0, 0x2219, 0xcf74, 0x16, 0x0, 0x700) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x50) 3m39.643493831s ago: executing program 0 (id=3818): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001940)=ANY=[@ANYBLOB="741300003f0007012bbd700000000000017c00000400fc800c00018008000600", @ANYRES32=0x0, @ANYBLOB="4513028005"], 0x1374}, 0x1, 0x0, 0x0, 0x4c000}, 0x4040) 3m39.473167477s ago: executing program 0 (id=3819): r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) connect$bt_rfcomm(r2, &(0x7f0000000080)={0x1f, @any, 0x4}, 0xa) socket(0x1, 0xa, 0x800) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000002700090025bd7800fddbdf250f000000080001"], 0x1c}}, 0x4000080) 3m37.996654987s ago: executing program 0 (id=3821): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xa, 0x3, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, 0x0, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000002c0)=r3, 0x4) syz_emit_ethernet(0x6a, &(0x7f0000000000)=ANY=[], 0x0) 3m37.656890525s ago: executing program 0 (id=3823): syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="ff010002001a0040e604050000000002030109022000010100803209040000020806"], 0x0) syz_usb_connect$cdc_ecm(0x4, 0x108, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010002020000202504a1a44000010203010902f600010110a007090400ad030206008106240600002805240001000d240f018c0000000000650002a12413f86b387b08415c8d30a84a99fe1d404c5e5f7f9e3bfa57d2ac3f1e39dbe9793099f2ba4fb2052cdf9a91fac8ff62b46530230e81cd1dfd4573d34122dffbe47b4f80bf14e650083cae3991a083d3324a32b5465b37ab6906935fb057ca92caef99395a920c6bdbae39df9404c7bf1df2165870a6af977c1274e5640ae9be4c3243d5b19b8006eba2334b1fd0f135f07d4f1f818eec543bff22019319a12908241c0d00ff090008241c020009e902090581031000949a0709058202400004010009050302ff037a0400"], &(0x7f0000000600)={0xa, &(0x7f0000000400)={0xa, 0x6, 0x200, 0x6b, 0x8, 0xf7, 0xff, 0x2}, 0x4e, &(0x7f0000000440)={0x5, 0xf, 0x4e, 0x6, [@ssp_cap={0x10, 0x10, 0xa, 0x5, 0x1, 0x2, 0xf0f, 0x0, [0xc0c0]}, @ss_container_id={0x14, 0x10, 0x4, 0x2c, "699f8c6cd5faa9ced392ceb44d794c8a"}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x2, 0x10, 0x0, 0x80, 0x6, 0x9}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "f3af70bc0fd845943251c8518e3c9d6c"}]}, 0x3, [{0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x1801}}, {0x9d, &(0x7f0000000700)=ANY=[@ANYBLOB="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"]}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x40f}}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000700)={0x38, r0, 0x1, 0x0, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x20, 0x500]}}]}]}]}, 0x38}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4c000000240001002cbd7000fcdbdf250001000006000300000000000600040080ff"], 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x8080) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000001500010300000000000000000a00000008000200", @ANYRES16], 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0x20000080) sendmsg$NLBL_UNLABEL_C_STATICADD(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x80}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r5, 0x0) syz_open_dev$mouse(&(0x7f0000000680), 0xfffffffffffffff9, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000180)='ns/time_for_children\x00') fsetxattr$system_posix_acl(r7, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000380)={{}, {}, [], {0x4, 0x2}, [], {0x10, 0x3}, {0x20, 0x2}}, 0x24, 0x0) syz_kvm_setup_syzos_vm$x86(r6, &(0x7f0000bfe000/0x400000)=nil) r8 = syz_open_dev$cec(&(0x7f0000000640), 0x0, 0x2000) r9 = socket$netlink(0x10, 0x3, 0x8000000004) r10 = syz_open_dev$tty20(0xc, 0x4, 0x1) writev(r10, &(0x7f0000000280)=[{&(0x7f0000000080)="1785c5355900efcf7e8e903b8cab232f943b5d2208db98a47417df0ea131", 0x1e}, {&(0x7f00000000c0)="8eae09a4c4d1830432e94e36eeca17ced55f871c9e921a20b6e125e6adb75eaae60d349bad683105dee05d504b01213866ff834e832f26c1172d50be9b6a1ac3062fed555b77d47bbc0f1a4a19a4c24c358025cde9e411fefee53ec36dae49a49fbce8e37ca2deeac86e7934623e783a26aa142c66251e421ccc7b9d81715dab9ebe368e", 0x84}, {&(0x7f0000000180)="5358d96d731deb4d3e74e215ca21e31eb19bd9beee1399f4aa129d55fa68af4544ebffdce4d35510f1930e0bbed1580f930737965fbd0ec6a1a674bf2d362561f118df04fa57fae2223c83b9a110fd29", 0x50}], 0x3) ioctl$FICLONERANGE(r10, 0x4020940d, &(0x7f00000006c0)={{r8}, 0x3, 0x8000, 0x80000001}) writev(r9, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a06e7bc45ff810500000000000058000b480000945f64009400050028925a01000000000000008000f0fffeffa809000000fff5dd0000000800030006081000418e00000004fcff", 0x58}], 0x1) 3m36.401678372s ago: executing program 0 (id=3828): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffd}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000005c0)=ANY=[], 0x0) 3m36.150499925s ago: executing program 0 (id=3830): r0 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='addr\x00', &(0x7f0000000180)='127.0.0.1\x00', 0x0) syz_usb_connect(0x5, 0x59, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000001c0)='source\x00', &(0x7f0000000200)='127.0.0.1:/export\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000240)='vers\x00', &(0x7f0000000280)='3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, 0x0, &(0x7f0000000380)='udp\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000004c0)='timeo\x00Ms\xac\xc6Md5\xf5IU\xd5\xed\x9a\xc0{R\xbe\xbf\x93\x88\xd7E\xf9\xff\xff\xff\xd2\xedQQ\xca4\x95N)c]>\x0f$*\xc0\x93?T\xc7HF\xe5pI\xb8>x}\x9f8\x8bT\xf3\xda|)[{\xa5\x97\xef\x86\r\xb7\xc5\xbed\x85\xf2\xbf\'\n\xd5s\xdd\xdbh\xc5\xe9)\xe3\xd8\xfd\xc2E\xec\xc7\b\xf4\t\x8b\xb8\x9e\xf7\xff[\xccmb\xe6}\xde\xc7\xf7\xc7\xe4h\xa2\x9b\xc3\\\x97/\xb5Y\xeehD{\xa4\x88\xd7g\x82\xae\x15^\x02\xd6\xaaeW\xb6\x81\x8dq~W\xec\xf8G\xd0mf\xf1z\xb8hG\xd8SN', &(0x7f0000000400)='1\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 2m54.361670945s ago: executing program 2 (id=3944): syz_emit_ethernet(0x76, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100000008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_adjtime(0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f0000000d40)={0x0, 0x7}, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount$9p_fd(0x0, &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1200880, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[], 0x50}}, 0x840) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000001600)=[{0x0}], 0x1}, 0x0) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000004000/0x3000)=nil) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') preadv(r4, &(0x7f0000010440)=[{&(0x7f0000000180)=""/160, 0xa0}], 0x1, 0xc03, 0x0) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/graphics/fbcon/rotate\x00', 0x1, 0x0) write(r5, &(0x7f0000000300)='1', 0x1) r6 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x88002, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000700)=0x15) 2m52.877703467s ago: executing program 2 (id=3946): munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0xfffff000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xf, 0x204031, 0xffffffffffffffff, 0xec776000) socket$inet_tcp(0x2, 0x1, 0x0) syz_usbip_server_init(0x3) syz_usbip_server_init(0x3) syz_usbip_server_init(0x3) syz_usbip_server_init(0x3) syz_usbip_server_init(0x3) syz_usbip_server_init(0x3) syz_usbip_server_init(0x6) r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0xa0, 0x400) mmap$snddsp_control(&(0x7f0000ffb000/0x2000)=nil, 0x1000, 0x200000b, 0x12, r0, 0x83000000) r1 = socket$rxrpc(0x21, 0x2, 0xa) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x140}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bind$rxrpc(r1, 0x0, 0x0) 2m49.817906631s ago: executing program 2 (id=3953): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b705000000000000cf4877000000000004000000000000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x109180, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000280)={'ipvlan1\x00', 0x400}) (async) ioctl$TUNGETIFF(r1, 0x800454d2, 0x0) (async) close(0x3) 2m47.572579397s ago: executing program 2 (id=3957): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf27, 0x500}, 0x48) r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x4e23, @empty}, {0x0, @local}, 0x0, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'lo\x00'}) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='fdinfo/3\x00') read$eventfd(r1, &(0x7f0000000280), 0x8) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = io_uring_setup(0x2e71, &(0x7f00000003c0)={0x0, 0x800000, 0x400, 0x2, 0x131}) io_uring_register$IORING_UNREGISTER_PBUF_RING(r3, 0x17, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x5}, 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e21, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000000c0)={0x1, 0x1, 0x2, 0x0, 0x0}, &(0x7f0000000100)=0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000180)={@fallback=r5, r5, 0x2f}, 0x20) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)={@fallback=r5, r5, 0x2f, 0x10, 0x4, @void, @value=r5}, 0x20) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000140)={r4, 0x9}, 0xc) sendmsg$inet_sctp(r2, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x2a000}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) ioctl$BTRFS_IOC_QGROUP_LIMIT(r1, 0x8030942b, &(0x7f0000000080)={0xfffffffffffffffc, {0x24, 0x100000000, 0x0, 0x3, 0xf42c}}) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000003340)={r5, 0x0, 0xbe, 0x0, &(0x7f0000000580)="c867ef8b84704f88795f86084e0b783692275e6dbaf5878892aa7c96d3b73b61df2869bc1bbbde91c335355bab8effa26b0bd9482658289a8ef44b8371fb1be4c1d3000a659c1f79212381da985ee436ec145ba1e2c347569fb1dcd22388541b1ad14c9043095b3359172d9fa9353b2a34c34c2d1ece67231adf23b6743a5d7fe7423439fe2b965b5c31e5daad6fbd3f1a991b400d6ec92adc5f4dad51791d4998d829875ad7b77bea7d9447a7bdea721d22e92cde593d0b56f8ca6b347e", 0x0, 0x9, 0x0, 0x1000, 0x0, &(0x7f0000002340)="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", 0x0, 0x2, 0x0, 0x812}, 0x50) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000740)={0x0, 0x1000, "7bd16adf545ca9f2e563865a05c422394a0feef0f209c992b647979a2d0aabde7db4df879aacb304f511dfb01994822268fea236dafd65abed1dea0fc42179ea147ddf0e27a468e8247d1066ecb6089a3eab1d5bcdbe74c9420d89f3695e83cbce59b418da88da42018da73cf620b6ce42638d8b3a603b27293e17c0e4baf7d991fdc58528e84c211ae82e16793368e963ba77954e3aadd9cb23b381ddb68188fab489e344abb153ee31d7678e34154b3b91c4b65bdd199585c97d61a4b20a586fe154ea0448cf995180b7bc5acfe2823fe44eebcab160adb4c67a4f60b75dfd77a785fcc6de815101b5cc64f5a036d5fa3e89e6394ac85e6429b5d0f558951560df19a050f245df21358013b00875f2a73363e3c58e728fee5d9a5969e3fd4e177697501b82bb5343b75de714c26e6f5160fd4fae19f7cf707ab126d18916ef69e896cd5ae805797b84f5b222cdc924358b43b4c68f593026fc9ee3ee03ca4f0c5a8cc71110e184e5090176958ce801b1fd03a1cfe34205b51300434983e69d4fa12a983ed0d2f39b8dbcfde130693f940cb18bfaef64f988378919ee3c7bf63577b13df48727239e1479d907d6239310e89375276066829f77e19010a588fa8a37733f10b5c916f7495d16becad074c0751e51e6437609bf4041f5f10fee7ef22c005fa5551d13524d3a2f22f3b2f4c5bc483031aca37f1980f70bd07aecb5ecda439dc67121069417bf1f2f1c5b6fdc6b0c4b3887af4dea2df0d27502d64d5d5dca837e8cec583bead4ac6ef74d1269fb7beaa140a5e377a3ac75f525b51ff842e65c5d2116f51f5724e26c15635625d4bfa47704d87215144cfebcf58444f5a06b981170813f93ac57a3a8103d155ffb4a7fd1dba398cb7da42f81406a65b590849d4e82e7371694c31ad7cca64f9bf2d80596a37bc011859c811f5a1a7dbd741ad93063d78977999d75d0f6d6b9a252d37efb695169312707e2378aa2f2ecc5006efd01a2671047b3d8b0c673ca5e18c3aea04cdcf3550f0941d0b5a4617285fb4739326490f2ee56ba2959f951386ac14f99522fe93705ce18e6a37bada84e9f8cdce20092b0f0e7853fe5c62747b1909f7ae007a6d0127863d13974cb5130561093072101cea1ea4aa158851632ac499535de39a01fb63a3463cbf5c5b9eef741c82292a7994407a2152cfaaf5d812820a6267f7b1ed527193a012bc3363e751097bce3faa89527fd0632e82b775984302783ff709d2e05c086a55f558bf64c66018c2fe64f2965b8f2f0b0bcc6b3e033b6455257b2c8bb95a4eebb0f3731bf32ed9b1df6440638bf4ee87f50080028e1688993fd86157c8b799a45e3142f1ae58fdded3772339e9d6e208c53eff066d0514007587b108afd5c9764c36c88b0017e723f7780120deb7239f5386d2311f5369e2cecc77b0744f7a4502ec9e9a7b6d6c175cdfdb0dfd5ee0a378b963cc4c6ed42649f099280f72bc7e0515fbbf1a15444f7feef2d28362ea1ae35406f813c540911e0410f96db5a90d67842330beeeb53f28bed5ae55d2716c0ba81011f28ed6ca2ab27904fd81d01e1e78aa11fef91c72d1392ddf556369670072f428aad98470acd2798689cffdd7f468842dd02bc13dc3b5b71db74b8d4b7c85006e0eda7a670a78afc9e5adea70fa8ffad0f3e54cd3a71afd6ab27ab0745e1e4f7d63737c60e320b9104f5b5d22d75f173993951eac927aaddb8259bb6b0a5de5eafebc03375b9b5176220ddd98642e4748eb45238781eec3e2a62c903e6ffb5448e46a5f93250fd1d932c458cb6b2ac88fd41590e28a38564f1d83bcd5ef3819c68a31f282aa7f50493166091fd235197aac2c890aa74e7bc6a31be9e923e69226991ed30374c0df86ff9ecd20320bb3bb7bb6fb89a03ce98cac03553e20fe20482a5401a3c2991bb72cc01a3c36809208efb0aeefe529b0e168fbee32929991b4099d0996dfd250a41c690aa61c13785531db5b948d86f12e30af585f4b2f2d2d712e0f6b4fcf195a63f40ad9971b64748a910394e09eb919fb486d8576d2a28ceb664d4485847d6f0e628d6cb7b1f5a076ef41ac0b6c8328e0b289dfda5ce75a4c0bd515a6656b09e3ecbfb0c3b9b2bc4b077f019c5e21ad054108d954df5c5a745faa4902ae7a8d3ce5185121e3175777ce2c2f0775636dce115c5ddbfb3d56a65cbed0caeb802f06a7281b172239b81f7800c5f9dda94a20237ede5ec14b767fb03d0e8258571bac7c82262ffc71a23e7032da8b85e1ae3e132e20b7144cd31ed599ba5617fd6dcc1648681acf88abb5966b6e839da709161d6382e5aa4cee77c3e6f8d08e51b0641569e3588e48abc94dec7975c2b4e416f683fe0a131b9c2a827c6998ae706ed3d9acbfd37e5fec1c265d282a156d7f3ce5500681a73d5703616b2e4759a3b6abcb668c0e20e4918607d92e7da363c2d267c99ddfabea9079fb5fee8e84f30cf8ee8a8e386e8ac7760d49a8cb5d83124571383c35c427c186c57e897a4c28175aefc203595fa0503fc1234163f0192cf7fd69666f71508acae43f0f4fb085b2c91b4423ace334c0fbb4f9414b68c70288c21232690d1d287422af6c514b43cb47fdbbd2fca61a26cb9347befd564afd483caaf2117435561c8e0367da6d6f246296ee994b7f9410f8afc813e2ac670ae188fc3790348612dda82915ddd3e6d87f2f2d35c7ff14f90b00ce8e475c5504cc5e0e9dc9eaa4d1baac51513a5559a472e416b609cdce8753160c1ca6822b1c623917ddadf3b68a401dda1fc135dc8a3f4711968713b02d17b2415058084b1ca28a0df925afd4fe3e8f9eb8f0de57703bed1dd5a158012c7bc58fed657fa333bc414dd5ad659bfbe575788967e4b7f706404acf47aa48a2529a5a5f282356136fc87538d5fbdc8bb68d05a8d5e16f178f855a11286511c76a0c903a7bd2d9766542fb2e80943d70dcd0daafb6b672baff3872d5ec2bb9682ff3244bca82f8491c50c710a258f09e7665ec5a6d67d387e2509ddcd538cbad2438bd0add4dcb2d45cef4ba9488d63a7da770830f62db7db219940369d9fca58aee7e12e3871e070bee0d8c07037584b9481f40e69e67f1715e742e8a4b9cd341fd76ece72bf397b7a104cdca5690dd6cfcd0622493eff732ba91229d369f7c20bb8c5dbd783ef297a2d9f730d3f237e0feab21dea9b8bf221c7d56776e4bae3c1af9048bb5c27e76bfeb17e8cce43baee83f289be5ee870d590111440d41a82242ad92aed553e4dc6646cc7684f15c03cdb8a1b8cbda01dec6547359ca9d52939fab835c39b4418f491339cd03059bc2c9eb1ecf6eefd264ffc1339d0b5bb38e2679a5fd49c8b82c2764a8aa13ed302dae7c9e87f2aa4338de54207052a9305fa9b7504a7694db755bc6fd5e35b3969153480ccb52f0844889e291add959c1ff66f8cbfbc675543fc44c0d0076f260c83a5adf6e374265f4c7c0fa22213a4127f0f70ca7219bb03e1c4095a2cf91a9615555414a4640663ea64a504d6e77897d2500b30e9baed1702ee2316723497d1449c16a319450ae21c4d891f645dd0d48af8ce27e23ae850d30aa47411c40064a9d7c3359d55a35528d65e4e5b7444741baf4d5aac70240b01536bf150a8781c60c627ed88b5f833bee0cdde026a2190e551e10a9f3d88c8bdcbf7a233eb8cbd22248ac61a3b9e03e9d2ec481de3f716152b7509e72929c13a2c56e9929073128f6afe18ab530def866f6bc42e2c64fca77fd94c1ee060a1bae173a2c4cee6fbd65528d31b99e1450df7cef62700d2da3219db3dfa4d955c733b87335db5a3692ca16bf726e71749cb29a3828b9ef2253ec86156256805ec6cbe8635322bfb0b7045b54747aa98e00cbf925ce7e7cc5e22e60229f057396252350eee913a8e530fdb81025ea0950fb14225c0b53c8d45b926cb4e14fab5c9c2f50efa57bda864557f06380e6252fe3815f3482ddff91f3b18a536f5d7d11e6675b304b7694b134121d29799abe350b4147d3e5b476b83d425a1fe7077df73605e54db1d25e8307b976fcba62a30a99093336e87edcf4d6db26c452242220a019b517817609de69907b43368cf9aff524b4097beac13983d6995eb6deaa1d454f336d31443eca1d8319a660abefe4d0701170f4b9af71ff58f8aec6f60b2d6d740949f2680bcfe79e405d22bf773e459877458e818ee85d0c6004093b26adac016b444c15fa1cc0d08b0e180ca9b93d2afc58c5fc531f5a6e64a5db09562ed9d7b9475b82050e193a2b3b858f99bc1017c4fec832e5985c39b9b3d6ab4e4915371132c2fdc4811eb671caec33b590145d298300dfbcf2874c6497951c96533c3416f1f4248760f75902c499afc3bbb820c7a89eb30011d634d52bc5287c3e53fd72bef73f219b020ebc8ba437b59fcc1ea7eb838eefa73284abe52068f7b03b4340744338752792430e80a9ac5974be060eaaced5bd5b896e76260a48ddb9c52bd3d904037c8735e65561da0661d5fb421d1393d35d4d2f3b93c3aa39287bc18ffa44afbd75719437f55a5270d639ca8c388b1821d96d12aeeeeedfc55b9ae10b07107e85c2b7ef0cedfac94a1a1f0492bdbe270265c494ce655cfc1e16b55744551895a46c1084acfb965f792db6fe46c71bb768afa83fa6fe0ad05ee560ffd89afada1269786262f92c12581feafbbf7f49fcb220287d94cbd4117c927c6bfcc07ca5c0906406d2a0d9124e9a971f2569e56060ea798f677ba1da0d35f8ef191fa0cc37a8410f8e54fb05ce89674286498e12b0138d2d6eb3addb4f8451cf1cfe4d576e0534ff22f82cdb4588db318a77c34232da78d91c966dee26ce3fec19465a115386e16d9687ffc0c87dd90b1cffc98d8abbb9d99ff63c79580d97ebd08fdef5f26664f696285e264d43c174f4b6d2b38ca25c5ccb0c577e74a176537f93c9f11200430d9de2256bd97540bfa514730b3fcf469e785b94d963575f5e480feef265dc7357be64d608ebf2e72578b559d235166b697d5bb28c6a968b2af790b983c3289746700410ca579d2af9671e198c690ab684d276f26738f5bbec56f3cb5fe6cef0f908a2d3e0bb35cf975845867908efead26b788bd2686d747ed87cc577757ef3a3aa93012163c95600b417d7d3a1d0047ab9323b965417aeae53b91c8bd7412233af29afd190efa8aee8900f2d14509c8153ca8d396198c50f588c7be7d993c1c1ebd1301da1d28660a3b1d50d21655d2642c24d283cf6c1d68ddbe708bf15bdb8861baa743ee7c9a683bc135de59998f9928b58c71e0d7f04b5690a1b38a4349f5b4ba603d7f95f8c622a629fbe6d99a183c3fc6e39834a6c937e287677c6f52ce3ea25ab3b4952a17b5b93b25fb2fbaeeb720f0f3167c4771fbd550757b6ba936ec7be33629451176372a8eb6d204b36256ed3e615e27e35f0878c9f4f20e9b372cd303c71580a5e9a052acdb5bb53bf6e659ef207708d03fc70eb2ad5196497ce01d7f4f01f5bcb35f4242e172daeaa91a5635016c4b92e9baee1fa3d2a326763e55483b63f035e1dada5ceac0fceb70f734b1c640d5b956f5545cfbd78676f323cdccbd408b7fa693dfcecd24323294d8dbb4d539ac19f70448e0cb56274eb7b4dd81ba1a43958100beea71c3c332c7c33f6fa0880b6e6a4c11371631a88cbe1cf56ae4fe93f098c88bb4ce5b17d4135c939ccc217e568d2bc3bc6169fdb30397384c4ec129e576c5d0ba3223190951320537db8d32523215a518628c4a991d749985c42f2dcb93df270e1a"}, &(0x7f0000001780)=0x1008) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000180)={r6, @in6={{0xa, 0x4e24, 0x6481, @private2, 0x4}}}, 0x84) 2m46.754847186s ago: executing program 2 (id=3961): ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000040)={'sit0\x00', 0x0, 0x80, 0x20, 0x9, 0x0, {{0x18, 0x4, 0x3, 0x0, 0x60, 0x66, 0x0, 0x8, 0x2f, 0x0, @multicast1, @local, {[@rr={0x7, 0x7, 0x14, [@local]}, @generic={0x86, 0x4, "8a27"}, @ssrr={0x89, 0xf, 0x5a, [@local, @dev={0xac, 0x14, 0x14, 0xe}, @broadcast]}, @generic={0x86, 0xc, "c37294f5ca0757446224"}, @generic={0x88, 0x11, "a672c8e2505dad00c943ac16f10998"}, @end, @noop, @noop, @timestamp={0x44, 0x10, 0x45, 0x0, 0x7, [0x2, 0x663, 0xfffffffb]}]}}}}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)=@newqdisc={0x170, 0x24, 0x100, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r0, {0xc, 0xc}, {0x0, 0x8}, {0xffe0, 0x6}}, [@qdisc_kind_options=@q_drr={0x8}, @TCA_RATE={0x6, 0x5, {0x2, 0x7}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8403}, @TCA_STAB={0xa8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0x80, 0xff, 0x5, 0x2, 0x53, 0x6, 0x1}}, {0x6, 0x2, [0x3]}}, {{0x1c, 0x1, {0xc, 0x4, 0xfff, 0xffffff4f, 0x1, 0x200, 0x0, 0x6}}, {0x10, 0x2, [0x5, 0x9, 0x1, 0x5, 0xfff, 0x3]}}, {{0x1c, 0x1, {0xd, 0x23, 0x0, 0x38, 0x0, 0x8, 0x1, 0x1}}, {0x6, 0x2, [0x5]}}, {{0x1c, 0x1, {0x3, 0xc0, 0x80, 0x2, 0x1, 0x7, 0x5, 0x8}}, {0x14, 0x2, [0x3, 0x5, 0x7, 0xa6a5, 0x1, 0x292, 0xc598, 0xe65]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}, @TCA_RATE={0x6, 0x5, {0xf, 0x3}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8ea7}, @qdisc_kind_options=@q_mqprio={{0xb}, {0x60, 0x2, {{0x3, [0xf, 0xa, 0x0, 0xf9, 0x3, 0x9, 0x8, 0xa, 0x2, 0x10, 0x1, 0x9, 0x7, 0x0, 0xb, 0x1], 0x0, [0x7fff, 0xfff0, 0x4, 0x4, 0xf3bf, 0x8, 0xc082, 0x1, 0x6, 0x5, 0x7, 0x4, 0x4, 0x0, 0x7, 0x5], [0x6, 0x0, 0x6, 0x32, 0x2, 0x6c, 0x2, 0xc000, 0x40, 0x81, 0xae5, 0x0, 0x2, 0x5, 0x3, 0x1]}, [@TCA_MQPRIO_MODE={0x6}]}}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x7f}]}, 0x170}, 0x1, 0x0, 0x0, 0x20048000}, 0x40000) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r1, 0x1, 0x19, 0x0, 0xfe2e) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000040)={'sit0\x00', 0x0, 0x80, 0x20, 0x9, 0x0, {{0x18, 0x4, 0x3, 0x0, 0x60, 0x66, 0x0, 0x8, 0x2f, 0x0, @multicast1, @local, {[@rr={0x7, 0x7, 0x14, [@local]}, @generic={0x86, 0x4, "8a27"}, @ssrr={0x89, 0xf, 0x5a, [@local, @dev={0xac, 0x14, 0x14, 0xe}, @broadcast]}, @generic={0x86, 0xc, "c37294f5ca0757446224"}, @generic={0x88, 0x11, "a672c8e2505dad00c943ac16f10998"}, @end, @noop, @noop, @timestamp={0x44, 0x10, 0x45, 0x0, 0x7, [0x2, 0x663, 0xfffffffb]}]}}}}}) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)=@newqdisc={0x170, 0x24, 0x100, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r0, {0xc, 0xc}, {0x0, 0x8}, {0xffe0, 0x6}}, [@qdisc_kind_options=@q_drr={0x8}, @TCA_RATE={0x6, 0x5, {0x2, 0x7}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8403}, @TCA_STAB={0xa8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0x80, 0xff, 0x5, 0x2, 0x53, 0x6, 0x1}}, {0x6, 0x2, [0x3]}}, {{0x1c, 0x1, {0xc, 0x4, 0xfff, 0xffffff4f, 0x1, 0x200, 0x0, 0x6}}, {0x10, 0x2, [0x5, 0x9, 0x1, 0x5, 0xfff, 0x3]}}, {{0x1c, 0x1, {0xd, 0x23, 0x0, 0x38, 0x0, 0x8, 0x1, 0x1}}, {0x6, 0x2, [0x5]}}, {{0x1c, 0x1, {0x3, 0xc0, 0x80, 0x2, 0x1, 0x7, 0x5, 0x8}}, {0x14, 0x2, [0x3, 0x5, 0x7, 0xa6a5, 0x1, 0x292, 0xc598, 0xe65]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}, @TCA_RATE={0x6, 0x5, {0xf, 0x3}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8ea7}, @qdisc_kind_options=@q_mqprio={{0xb}, {0x60, 0x2, {{0x3, [0xf, 0xa, 0x0, 0xf9, 0x3, 0x9, 0x8, 0xa, 0x2, 0x10, 0x1, 0x9, 0x7, 0x0, 0xb, 0x1], 0x0, [0x7fff, 0xfff0, 0x4, 0x4, 0xf3bf, 0x8, 0xc082, 0x1, 0x6, 0x5, 0x7, 0x4, 0x4, 0x0, 0x7, 0x5], [0x6, 0x0, 0x6, 0x32, 0x2, 0x6c, 0x2, 0xc000, 0x40, 0x81, 0xae5, 0x0, 0x2, 0x5, 0x3, 0x1]}, [@TCA_MQPRIO_MODE={0x6}]}}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x7f}]}, 0x170}, 0x1, 0x0, 0x0, 0x20048000}, 0x40000) (async) socket$kcm(0x2, 0x200000000000001, 0x106) (async) setsockopt$sock_attach_bpf(r1, 0x1, 0x19, 0x0, 0xfe2e) (async) 2m46.424413698s ago: executing program 2 (id=3963): syz_usb_connect$uac1(0x0, 0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="1201500200000040351202804000010203010902720003010380040904000000010100000a240101000a0002"], &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0}) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) (async, rerun: 64) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (rerun: 64) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setparam(r0, &(0x7f00000006c0)=0x4) (async) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, 0x0, 0x0) (async) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x12) (async) socket(0x2, 0xa, 0x300) (async, rerun: 64) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11) (async, rerun: 64) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) (async) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x4000000, @mcast1}}}, 0x32) (async) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x2) r7 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x40000, 0x0) ioctl$PIO_UNISCRNMAP(r7, 0x5453, 0x0) (async) r8 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) 2m30.342140514s ago: executing program 33 (id=3963): syz_usb_connect$uac1(0x0, 0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="1201500200000040351202804000010203010902720003010380040904000000010100000a240101000a0002"], &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0}) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) (async, rerun: 64) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (rerun: 64) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setparam(r0, &(0x7f00000006c0)=0x4) (async) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, 0x0, 0x0) (async) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x12) (async) socket(0x2, 0xa, 0x300) (async, rerun: 64) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11) (async, rerun: 64) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) (async) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x4000000, @mcast1}}}, 0x32) (async) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x2) r7 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x40000, 0x0) ioctl$PIO_UNISCRNMAP(r7, 0x5453, 0x0) (async) r8 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) 8.613269145s ago: executing program 5 (id=4303): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="99e3c2d0b1", 0x5}], 0x1, &(0x7f0000001540)=[{0xc, 0x1, 0x8}], 0xc}, 0x24000010) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="60000000130001002bbd7000fedbdf2500000000", @ANYRES32, @ANYBLOB="242000002019000008001300", @ANYRES32, @ANYBLOB="08002e0002000000180034801400350070696d72656730000000000000000000070000000000000008001f000500000008"], 0x60}, 0x1, 0x0, 0x0, 0xc0000c1}, 0x20048000) 8.440635702s ago: executing program 5 (id=4304): bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) keyctl$dh_compute(0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1, &(0x7f0000002280)=ANY=[]) r3 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000340)='mountaddr\x00', &(0x7f0000000380)='127.0.0.1\x00', 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000040)=0x1b32, 0x4) sendto$inet(r4, &(0x7f0000000540)='v', 0x1, 0x4040, 0x0, 0x0) 7.186358955s ago: executing program 5 (id=4306): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="6000000010004b0426bd417af9e670000000", @ANYRES32=0x0, @ANYBLOB="40180000042c0400400012800b00010062726964676500003000028008000400040000000500170001000000060008"], 0x60}}, 0x24) 7.072448399s ago: executing program 4 (id=4307): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r4, 0x113, 0x3, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, 0x0, 0x4020800) 5.825919271s ago: executing program 4 (id=4308): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYRESHEX=r0, @ANYRES32=r0, @ANYBLOB="06001500070000000c001680080001", @ANYRESHEX=r0, @ANYRES16=r0], 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x10) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000a40)={0x50, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={{{}, {}, @broadcast, @device_a, @from_mac=@broadcast, {0x0, 0xff}}, @ext_ch_sw={0x4, 0x4, {{0x0, 0x0, 0x2}, @val={0x76, 0x6, {0x61, 0x3, 0xd, 0x5}}}}}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x0]}]}, 0x50}, 0x1, 0x0, 0x0, 0xc0}, 0x0) (async) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) 5.697958621s ago: executing program 5 (id=4310): r0 = io_uring_setup(0x2f00, &(0x7f00000001c0)={0x0, 0xe8e2, 0x400, 0x0, 0x2d6}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000040)) r1 = syz_usb_connect(0x0, 0x39, 0x0, 0x0) syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000d80)={0x34, &(0x7f0000000300)={0x20, 0x9, 0x2, '$8'}, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r3, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r2], 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x10) r4 = socket(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) 5.52443084s ago: executing program 1 (id=4311): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_usb_connect$uac1(0x0, 0xb1, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000000000106b1d0101890f0000030109029f0003010000000904000000010100000a24010000000201020d24060000030800000031ce21c798329740594c137d0000000c24020201010608000010000c24020000000300000000000924060006010000000924030000000005000b2406050001", @ANYRES64=r0], 0x0) sendfile(r0, r0, &(0x7f0000000380)=0x6d, 0x9) syz_emit_ethernet(0x4f, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6c370c8900198401fec00000000000000000020000000000fe8000000000000000000000000000aaa5ba94e385673ccfd3fe184ab0643975bcc85fbf438632261b"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f00000009c0)={0x84, &(0x7f0000000000)={0x20, 0x1, 0xa, "ac0000f80ec57ecfbfc0"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000100)=0x7f, 0x4) bind$inet6(r2, &(0x7f0000000440)={0xa, 0x4e23, 0x2, @mcast2, 0xfffffffc}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r3, 0x890b, &(0x7f0000000140)="00000000000000000000000000000000020000") 4.937321636s ago: executing program 5 (id=4312): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_usb_connect$uac1(0x0, 0xb1, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000000000106b1d0101890f0000030109029f0003010000000904000000010100000a24010000000201020d24060000030800000031ce21c798329740594c137d0000000c24020201010608000010000c24020000000300000000000924060006010000000924030000000005000b2406050001", @ANYRES64=r0], 0x0) sendfile(r0, r0, &(0x7f0000000380)=0x6d, 0x9) syz_emit_ethernet(0x4f, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6c370c8900198401fec00000000000000000020000000000fe8000000000000000000000000000aaa5ba94e385673ccfd3fe184ab0643975bcc85fbf438632261b"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f00000009c0)={0x84, &(0x7f0000000000)={0x20, 0x1, 0xa, "ac0000f80ec57ecfbfc0"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000100)=0x7f, 0x4) bind$inet6(r2, &(0x7f0000000440)={0xa, 0x4e23, 0x2, @mcast2, 0xfffffffc}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r3, 0x890b, &(0x7f0000000140)='\x00'/13) 4.032860692s ago: executing program 4 (id=4313): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000003c0)="a6", 0x1, 0x2404c081, &(0x7f0000000300)={0xa, 0x2, 0xd, @loopback, 0x9}, 0x1c) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='cdg', 0x3) shutdown(r0, 0x1) (fail_nth: 2) 3.67240925s ago: executing program 4 (id=4314): bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) keyctl$dh_compute(0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1, &(0x7f0000002280)=ANY=[]) r3 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000340)='mountaddr\x00', &(0x7f0000000380)='127.0.0.1\x00', 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000040)=0x1b32, 0x4) sendto$inet(r4, &(0x7f0000000540)='v', 0x1, 0x4040, 0x0, 0x0) 2.54860823s ago: executing program 4 (id=4315): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = gettid() syz_open_procfs$userns(r3, 0x0) timer_create(0x1, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="a00000001000010400400000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="08910400000000006c00128009000100766c616e000000005c000280100003800c0001597f000000000000000c00020001000000020000000600050088a80000060001000300000006000100010000001c0004800cea1c0064000000020000000c0001000000010004000000060005008100000014000300766c616e30"], 0xa0}}, 0x80) r5 = syz_open_procfs(0x0, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x7, 0xfff, 0x7f, 0x1, 0x5}, 0xffffff80, 0x1, 0x5af3, 0x6, 0x8, 0x56, 0x2, 0xe, 0x3, 0x331799a0, {0xd, 0xe9, 0x40, 0x3, 0x2, 0x5}}}}]}, 0x78}}, 0x4c050) setsockopt$inet_mreqn(r5, 0x0, 0x20, &(0x7f0000000000)={@local, @loopback, r7}, 0xc) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r8, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x81}, 0x1c) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x87) connect$inet6(r9, &(0x7f0000000500)={0xa, 0xfffd, 0xffffffff, @local, 0x6}, 0x1c) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='freezer.parent_freezing\x00', 0x275a, 0x0) write$binfmt_script(r10, &(0x7f0000000440), 0x1000a) sendfile(r9, r10, &(0x7f0000000080)=0x11, 0x7fff) 2.222684271s ago: executing program 1 (id=4316): getcwd(0x0, 0x0) 2.048602434s ago: executing program 1 (id=4317): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000002c0)=0xb, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000006c0)={{0x1, 0x1, 0x18, r0}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) write$UHID_CREATE2(r2, &(0x7f0000001600)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009500050005000000faffffffffffffff050000008934318b55b5e33a1602ecfcb35843f693ded5208ceec5020533718d1cb69acb0035d1502dba1da098bee45b4c349a46bedd9670395ed088eb05f27628140ffda29b15cb67944fe33c6042d138314e4b0233beacfdc7da086af45beb5fe78e683068977c539af28c20aa386bfe1df9fb797648736c829ec055fae1c6de3a12eedbb8f58c9f4b51176d39f684340e945f2cddc9355500"], 0x1ad) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4) setsockopt$sock_int(r2, 0x1, 0x65, &(0x7f0000000100)=0x7ffe, 0xfeb4) bind$inet6(r1, &(0x7f0000000540)={0xa, 0x4e22, 0x7, @empty, 0x1fc}, 0x1c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x1, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) r6 = socket(0x10, 0x803, 0x0) getsockopt$sock_int(r6, 0x1, 0x13, 0x0, &(0x7f0000000040)) read$msr(r2, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000180), 0x78, 0x202) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000140)={0x7, 0x6776, 0x4}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r7, 0x100000000) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x4080) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f0000000440)={{0xffffffffffffffff, 0x0, 0x8, 0x0, 0x5}, 0x9, 0x5, 'id1\x00', 'timer0\x00', 0x0, 0xffff, 0xe, 0x5, 0x2}) sendmsg$NFT_BATCH(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a4c000000090a010400000000000000000200000008000340000000840900020073797a31000000000900010073797a3000000000080005400000000808000a40000000010800084000000001140e00001100010000000000000000000200000a"], 0x74}, 0x1, 0x0, 0x0, 0x4094}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000002c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_NEW_STATION(r8, 0x0, 0x0) sendmmsg$inet6(r4, &(0x7f0000002f00)=[{{&(0x7f0000000240)={0xa, 0x4e24, 0xa, @dev={0xfe, 0x80, '\x00', 0x21}, 0x6}, 0x1c, &(0x7f0000000680)=[{&(0x7f0000000280)='Q', 0x1}], 0x1}}, {{&(0x7f0000000080)={0xa, 0x4e20, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)='\x00', 0x1}], 0x1}}], 0x2, 0x40408d1) socket$netlink(0x10, 0x3, 0x4) 1.777592837s ago: executing program 1 (id=4318): bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000480)=ANY=[@ANYRES32, @ANYBLOB="2e00000002"], 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000140)=ANY=[@ANYBLOB="180800001bc81a000000000000000001851000000600000018000000", @ANYRES32, @ANYBLOB="0000000000000000660000000000000000000000009500000000000000360a000000000000180000002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000021000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2}, 0x94) 1.740063432s ago: executing program 5 (id=4319): setns(0xc9, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket(0x10, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00'}) sendmsg$nl_route_sched(r0, 0x0, 0xc840) socket(0x2, 0x80805, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:00.0/remove\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write(r1, &(0x7f0000000300)='1', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r3, &(0x7f0000000300)='1', 0x1) (fail_nth: 4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) setns(0xc9, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, 0x0) read(r4, &(0x7f0000000640)=""/4096, 0x1000) write(0xffffffffffffffff, &(0x7f00000000c0)="9e", 0x1) 1.48346721s ago: executing program 1 (id=4320): r0 = io_uring_setup(0x2f00, &(0x7f00000001c0)={0x0, 0xe8e2, 0x400, 0x0, 0x2d6}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000040)) r1 = syz_usb_connect(0x0, 0x39, 0x0, 0x0) syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000d80)={0x34, &(0x7f0000000300)={0x20, 0x9, 0x2, '$8'}, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r3, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r2], 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x10) r4 = socket(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) 1.479773006s ago: executing program 4 (id=4321): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) syz_io_uring_setup(0xefd, &(0x7f0000000300)={0x0, 0x0, 0x10000, 0x3, 0x55}, 0x0, 0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(0x0, 0x0, r0, &(0x7f00000001c0)=@IORING_OP_GETXATTR={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000009c80)="f23540f03450120f52436e96c709ad5500530544cc4b7bd9d79eaf4098baf4c5adf3316300cdcc1cde32020a0f40cf", 0x0, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0}}) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r4, 0x5421, &(0x7f0000000100)=0x100000001) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r5, 0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000040), 0x1, 0x0) r6 = creat(&(0x7f0000000540)='./file0\x00', 0x0) close(r6) r7 = socket$packet(0x11, 0x3, 0x300) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000640), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}}) r8 = msgget$private(0x0, 0x1c0) msgsnd(r8, &(0x7f0000000180)={0x1}, 0x8, 0x0) close(r4) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 0s ago: executing program 1 (id=4322): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) syz_io_uring_setup(0xefd, &(0x7f0000000300)={0x0, 0x0, 0x10000, 0x3, 0x55}, 0x0, 0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(0x0, 0x0, r0, &(0x7f00000001c0)=@IORING_OP_GETXATTR={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000009c80)="f23540f03450120f52436e96c709ad5500530544cc4b7bd9d79eaf4098baf4c5adf3316300cdcc1cde32020a0f40cf", 0x0, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0}}) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r4, 0x5421, &(0x7f0000000100)=0x100000001) syz_extract_tcp_res$synack(&(0x7f0000000040), 0x1, 0x0) r5 = creat(&(0x7f0000000540)='./file0\x00', 0x0) close(r5) r6 = socket$packet(0x11, 0x3, 0x300) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000640), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}}) r7 = msgget$private(0x0, 0x1c0) msgsnd(r7, &(0x7f0000000180)={0x1}, 0x8, 0x0) close(r4) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) kernel console output (not intermixed with test programs): UME) 231*1024kB (UME) 18*2048kB (UM) 55*4096kB (UM) = 1221236kB [ 955.873792][T16879] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 955.873882][T16879] Node 1 Normal: 9*4kB (UM) 8*8kB (UM) 6*16kB (UM) 4*32kB (UM) 3*64kB (UM) 2*128kB (UM) 4*256kB (UM) 2*512kB (M) 1*1024kB (M) 1*2048kB (U) 959*4096kB (UM) = 3933956kB [ 955.886869][T16879] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 955.886885][T16879] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 955.886900][T16879] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 955.886915][T16879] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 955.886930][T16879] 63495 total pagecache pages [ 955.886938][T16879] 5 pages in swap cache [ 955.886944][T16879] Free swap = 124976kB [ 955.886951][T16879] Total swap = 124996kB [ 955.886959][T16879] 2097051 pages RAM [ 955.886965][T16879] 0 pages HighMem/MovableOnly [ 955.886972][T16879] 425224 pages reserved [ 955.886978][T16879] 0 pages cma reserved [ 956.338736][T16891] netlink: 'syz.4.3684': attribute type 21 has an invalid length. [ 957.194264][ T5602] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 957.337693][ T5602] usb 3-1: device descriptor read/64, error -71 [ 957.430521][T15839] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 957.535448][T16722] bridge0: port 1(bridge_slave_0) entered blocking state [ 957.535651][T16722] bridge0: port 1(bridge_slave_0) entered disabled state [ 957.563126][T16722] bridge_slave_0: entered allmulticast mode [ 957.574137][ T5602] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 957.576945][T16722] bridge_slave_0: entered promiscuous mode [ 957.615736][T16722] bridge0: port 2(bridge_slave_1) entered blocking state [ 957.615850][T16722] bridge0: port 2(bridge_slave_1) entered disabled state [ 957.616033][T16722] bridge_slave_1: entered allmulticast mode [ 957.630464][T16722] bridge_slave_1: entered promiscuous mode [ 957.714189][ T5602] usb 3-1: device descriptor read/64, error -71 [ 957.778862][T16722] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 957.793345][T16722] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 957.824544][ T5602] usb usb3-port1: attempt power cycle [ 958.146184][T15839] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 958.204245][ T5602] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 958.231263][ T5602] usb 3-1: device descriptor read/8, error -71 [ 958.249364][T16933] netlink: 'syz.4.3704': attribute type 21 has an invalid length. [ 958.406143][T16722] team0: Port device team_slave_0 added [ 958.409706][T16722] team0: Port device team_slave_1 added [ 958.474917][T16722] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 958.474936][T16722] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 958.474961][T16722] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 958.478342][T16722] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 958.478359][T16722] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 958.478384][T16722] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 958.527421][ T5602] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 958.536329][T16722] hsr_slave_0: entered promiscuous mode [ 958.537466][T16722] hsr_slave_1: entered promiscuous mode [ 958.538254][T16722] debugfs: 'hsr0' already exists in 'hsr' [ 958.538276][T16722] Cannot create hsr debugfs directory [ 958.564139][ T5602] usb 3-1: device descriptor read/8, error -71 [ 958.685414][ T5602] usb usb3-port1: unable to enumerate USB device [ 958.983913][T16943] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3705'. [ 959.731124][T16954] IPVS: Scheduler module ip_vs_ not found [ 959.844261][T15024] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 960.004112][T15024] usb 3-1: Using ep0 maxpacket: 16 [ 960.005105][T15024] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 960.006028][T15024] usb 3-1: config 0 has no interfaces? [ 960.055381][T15024] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 960.055408][T15024] usb 3-1: Product: syz [ 960.055421][T15024] usb 3-1: Manufacturer: syz [ 960.055435][T15024] usb 3-1: SerialNumber: syz [ 960.092195][T15024] r8152-cfgselector 3-1: Unknown version 0x0000 [ 960.092221][T15024] r8152-cfgselector 3-1: config 0 descriptor?? [ 961.587011][ T5787] r8152-cfgselector 3-1: USB disconnect, device number 10 [ 962.091775][T15839] bridge_slave_1: left allmulticast mode [ 962.091809][T15839] bridge_slave_1: left promiscuous mode [ 962.092058][T15839] bridge0: port 2(bridge_slave_1) entered disabled state [ 963.274398][T15839] bridge_slave_0: left allmulticast mode [ 963.274431][T15839] bridge_slave_0: left promiscuous mode [ 963.274673][T15839] bridge0: port 1(bridge_slave_0) entered disabled state [ 964.019773][T17005] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3722'. [ 965.304155][T17019] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3726'. [ 966.749033][T17026] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3727'. [ 967.087585][T15839] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 967.244554][T15839] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 967.294693][T15839] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 967.316152][T15839] bond0 (unregistering): Released all slaves [ 967.334512][T17005] vlan0: entered promiscuous mode [ 968.016760][T15839] IPVS: stopping backup sync thread 12265 ... [ 969.299600][T17061] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3740'. [ 969.319640][ T5247] 8021q: adding VLAN 0 to HW filter on device eth5 [ 969.435051][T17066] FAULT_INJECTION: forcing a failure. [ 969.435051][T17066] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 969.435088][T17066] CPU: 0 UID: 0 PID: 17066 Comm: syz.2.3742 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 969.435114][T17066] Tainted: [L]=SOFTLOCKUP [ 969.435120][T17066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 969.435131][T17066] Call Trace: [ 969.435138][T17066] [ 969.435146][T17066] dump_stack_lvl+0xe8/0x150 [ 969.435177][T17066] should_fail_ex+0x46b/0x600 [ 969.435207][T17066] _copy_from_user+0x2d/0xb0 [ 969.435231][T17066] proc_control+0xa8/0x130 [ 969.435254][T17066] ? __pfx_proc_control+0x10/0x10 [ 969.435279][T17066] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 969.435299][T17066] ? mutex_lock_nested+0x152/0x1d0 [ 969.435321][T17066] ? usbdev_ioctl+0x14c/0x2100 [ 969.435342][T17066] usbdev_ioctl+0xc39/0x2100 [ 969.435368][T17066] ? __pfx_usbdev_ioctl+0x10/0x10 [ 969.435385][T17066] ? __fget_files+0x2a/0x420 [ 969.435404][T17066] ? __fget_files+0x3a8/0x420 [ 969.435421][T17066] ? __fget_files+0x2a/0x420 [ 969.435443][T17066] ? bpf_lsm_file_ioctl+0x9/0x20 [ 969.435463][T17066] ? __pfx_usbdev_ioctl+0x10/0x10 [ 969.435484][T17066] __se_sys_ioctl+0xff/0x170 [ 969.435511][T17066] do_syscall_64+0x166/0x520 [ 969.435529][T17066] ? trace_irq_disable+0x3b/0x140 [ 969.435550][T17066] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 969.435569][T17066] ? clear_bhb_loop+0x70/0xc0 [ 969.435592][T17066] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 969.435611][T17066] RIP: 0033:0x7f2fad66e159 [ 969.435628][T17066] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 969.435645][T17066] RSP: 002b:00007f2fab8c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 969.435666][T17066] RAX: ffffffffffffffda RBX: 00007f2fad8f5fa0 RCX: 00007f2fad66e159 [ 969.435680][T17066] RDX: 0000200000000000 RSI: 00000000c0185500 RDI: 0000000000000003 [ 969.435693][T17066] RBP: 00007f2fab8c6090 R08: 0000000000000000 R09: 0000000000000000 [ 969.435708][T17066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 969.435720][T17066] R13: 00007f2fad8f6038 R14: 00007f2fad8f5fa0 R15: 00007ffeecdce248 [ 969.435760][T17066] [ 970.304139][T17096] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3751'. [ 971.880787][T17108] 9p: Bad value for 'rfdno' [ 973.365462][T17139] netlink: 1624 bytes leftover after parsing attributes in process `syz.0.3763'. [ 975.966596][T17179] 9p: Bad value for 'rfdno' [ 976.716842][T17182] input: syz0 as /devices/virtual/input/input23 [ 977.656690][T17191] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3771'. [ 977.841622][T17201] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3777'. [ 977.841650][T17201] openvswitch: netlink: Flow actions attr not present in new flow. [ 977.865500][T15839] hsr_slave_0: left promiscuous mode [ 977.924345][T15839] hsr_slave_1: left promiscuous mode [ 978.001717][T15839] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 978.001744][T15839] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 978.131822][T15839] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 978.131849][T15839] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 978.593125][T15839] veth1_macvtap: left promiscuous mode [ 978.597410][T15839] veth0_macvtap: left promiscuous mode [ 978.597586][T15839] veth1_vlan: left promiscuous mode [ 983.236266][T15839] team0 (unregistering): Port device team_slave_1 removed [ 983.314906][T15839] team0 (unregistering): Port device team_slave_0 removed [ 983.962700][T17270] FAULT_INJECTION: forcing a failure. [ 983.962700][T17270] name failslab, interval 1, probability 0, space 0, times 0 [ 983.962746][T17270] CPU: 0 UID: 0 PID: 17270 Comm: syz.2.3787 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 983.962772][T17270] Tainted: [L]=SOFTLOCKUP [ 983.962779][T17270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 983.962789][T17270] Call Trace: [ 983.962797][T17270] [ 983.962805][T17270] dump_stack_lvl+0xe8/0x150 [ 983.962837][T17270] should_fail_ex+0x46b/0x600 [ 983.962867][T17270] should_failslab+0xa8/0x100 [ 983.962895][T17270] __kmalloc_noprof+0xfb/0x790 [ 983.962919][T17270] ? copy_splice_read+0x16f/0xab0 [ 983.962938][T17270] ? copy_splice_read+0x16f/0xab0 [ 983.962964][T17270] copy_splice_read+0x16f/0xab0 [ 983.962996][T17270] ? __pfx_copy_splice_read+0x10/0x10 [ 983.963015][T17270] ? trace_kmalloc+0x2a/0xf0 [ 983.963038][T17270] ? look_up_lock_class+0x57/0x110 [ 983.963057][T17270] ? register_lock_class+0x31/0x2e0 [ 983.963082][T17270] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 983.963110][T17270] ? alloc_pipe_info+0x35d/0x4c0 [ 983.963134][T17270] ? __pfx_copy_splice_read+0x10/0x10 [ 983.963152][T17270] splice_direct_to_actor+0x496/0xcc0 [ 983.963192][T17270] ? __pfx_direct_splice_actor+0x10/0x10 [ 983.963213][T17270] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 983.963240][T17270] do_splice_direct+0x19b/0x2a0 [ 983.963264][T17270] ? __pfx_do_splice_direct+0x10/0x10 [ 983.963285][T17270] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 983.963313][T17270] ? rw_verify_area+0x209/0x4d0 [ 983.963338][T17270] do_sendfile+0x540/0x7e0 [ 983.963371][T17270] ? __pfx_do_sendfile+0x10/0x10 [ 983.963408][T17270] __se_sys_sendfile64+0x144/0x1a0 [ 983.963435][T17270] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 983.963470][T17270] do_syscall_64+0x166/0x520 [ 983.963488][T17270] ? trace_irq_disable+0x3b/0x140 [ 983.963510][T17270] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 983.963528][T17270] ? clear_bhb_loop+0x70/0xc0 [ 983.963550][T17270] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 983.963569][T17270] RIP: 0033:0x7f2fad66e159 [ 983.963590][T17270] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 983.963606][T17270] RSP: 002b:00007f2fab8a5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 983.963628][T17270] RAX: ffffffffffffffda RBX: 00007f2fad8f6090 RCX: 00007f2fad66e159 [ 983.963642][T17270] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 983.963653][T17270] RBP: 00007f2fab8a5090 R08: 0000000000000000 R09: 0000000000000000 [ 983.963665][T17270] R10: 0000000000000200 R11: 0000000000000246 R12: 0000000000000001 [ 983.963677][T17270] R13: 00007f2fad8f6128 R14: 00007f2fad8f6090 R15: 00007ffeecdce248 [ 983.963707][T17270] [ 984.336957][T17276] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3790'. [ 984.440626][T17274] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 984.794281][T16722] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 984.923772][T16722] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 985.023835][T16722] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 985.143862][T16722] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 985.647334][T17287] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 985.844124][T16722] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 986.148649][T16722] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 986.172611][T16722] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 986.198789][T16722] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 986.545969][T16722] 8021q: adding VLAN 0 to HW filter on device bond0 [ 986.565118][T16722] 8021q: adding VLAN 0 to HW filter on device team0 [ 986.587325][T16009] bridge0: port 1(bridge_slave_0) entered blocking state [ 986.587549][T16009] bridge0: port 1(bridge_slave_0) entered forwarding state [ 986.602025][T16009] bridge0: port 2(bridge_slave_1) entered blocking state [ 986.602230][T16009] bridge0: port 2(bridge_slave_1) entered forwarding state [ 986.810917][T17331] fuse: fd is not a fuse device [ 986.811949][T17329] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3802'. [ 987.129216][T17339] overlayfs: failed to clone upperpath [ 987.159149][T17337] netlink: 'syz.2.3807': attribute type 10 has an invalid length. [ 987.181282][T15839] IPVS: stop unused estimator thread 0... [ 988.463608][T17337] team0: Port device dummy0 added [ 988.674824][T17354] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 988.676313][T17354] CIFS: Attempting to mount //127.0.0.1/share [ 988.685586][T17354] CIFS: VFS: Error connecting to socket. Aborting operation. [ 988.685773][T17354] CIFS: VFS: cifs_mount failed w/return code = -111 [ 989.264312][T17378] netlink: 'syz.0.3818': attribute type 2 has an invalid length. [ 989.264338][T17378] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3818'. [ 989.364729][T16722] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 989.384112][T15024] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 989.535729][T15024] usb 3-1: Using ep0 maxpacket: 8 [ 989.536647][T15024] usb 3-1: New USB device found, idVendor=1163, idProduct=0100, bcdDevice= 0.00 [ 989.538405][T15024] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 989.615428][T15024] cypress_m8 3-1:1.0: DeLorme Earthmate USB converter detected [ 989.951455][T17370] netlink: 88 bytes leftover after parsing attributes in process `syz.2.3816'. [ 989.951481][T17370] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3816'. [ 990.878996][T17391] binder: BINDER_SET_CONTEXT_MGR already set [ 990.879014][T17391] binder: 17368:17391 ioctl 4018620d 200000000040 returned -16 [ 991.006481][T15024] usb 3-1: DeLorme Earthmate USB converter now attached to ttyUSB0 [ 991.018146][T16722] veth0_vlan: entered promiscuous mode [ 991.036851][T16722] veth1_vlan: entered promiscuous mode [ 991.039490][T15024] usb 3-1: USB disconnect, device number 11 [ 991.105145][T15024] earthmate ttyUSB0: DeLorme Earthmate USB converter now disconnected from ttyUSB0 [ 991.113591][T15024] cypress_m8 3-1:1.0: device disconnected [ 991.245285][T16722] veth0_macvtap: entered promiscuous mode [ 991.272552][T17397] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3823'. [ 991.275455][T16722] veth1_macvtap: entered promiscuous mode [ 991.318744][T16722] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 991.447738][T16722] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 992.623060][ T1331] ieee802154 phy1 wpan1: encryption failed: -22 [ 992.631077][T16224] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 992.846576][T16009] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 992.882168][T15839] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 992.883507][T15839] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 992.886105][T16224] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 992.886122][T16224] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 993.703153][T15815] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 993.703174][T15815] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 996.399607][ T5595] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 996.480315][ T5595] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 996.500306][ T5595] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 996.506449][ T5595] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 996.507440][ T5595] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 997.425440][T17472] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3844'. [ 997.425820][T17472] vlan0: entered promiscuous mode [ 998.708423][ T5595] Bluetooth: hci5: command tx timeout [ 999.666851][T17487] usb usb7: check_ctrlrecip: process 17487 (syz.2.3847) requesting ep 01 but needs 81 [ 999.666883][T17487] usb usb7: usbfs: process 17487 (syz.2.3847) did not claim interface 0 before use [ 999.843208][T17469] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3846'. [ 1000.871433][ T5595] Bluetooth: hci5: command tx timeout [ 1001.149344][ T5985] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1002.115462][T17527] CIFS: Attempting to mount //127.0.0.1/share [ 1002.181581][T17532] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3853'. [ 1002.205690][ T5985] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1002.223031][T17528] overlayfs: failed to clone upperpath [ 1002.453906][ T36] audit: type=1326 audit(1790518059.901:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17525 comm="syz.4.3860" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f80126ae159 code=0x0 [ 1002.924560][ T5595] Bluetooth: hci5: command tx timeout [ 1003.102829][T17546] Rounding down aligned max_sectors from 4294967295 to 4294967288 [ 1004.581311][ T5985] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1004.924133][ T5595] Bluetooth: hci2: command 0x0406 tx timeout [ 1005.011736][ T5595] Bluetooth: hci5: command tx timeout [ 1005.097336][T17527] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1005.097370][T17527] CIFS: VFS: cifs_mount failed w/return code = -4 [ 1007.439646][ T36] audit: type=1326 audit(1790518064.021:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17569 comm="syz.1.3869" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff73397e159 code=0x7ffc0000 [ 1007.439706][ T36] audit: type=1326 audit(1790518064.021:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17569 comm="syz.1.3869" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff73397e159 code=0x7ffc0000 [ 1007.439747][ T36] audit: type=1326 audit(1790518064.021:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17569 comm="syz.1.3869" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7ff73397e159 code=0x7ffc0000 [ 1007.439787][ T36] audit: type=1326 audit(1790518064.021:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17569 comm="syz.1.3869" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff73397e159 code=0x7ffc0000 [ 1007.439826][ T36] audit: type=1326 audit(1790518064.021:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17569 comm="syz.1.3869" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff73397e159 code=0x7ffc0000 [ 1007.439864][ T36] audit: type=1326 audit(1790518064.021:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17569 comm="syz.1.3869" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7ff73397e159 code=0x7ffc0000 [ 1007.439902][ T36] audit: type=1326 audit(1790518064.021:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17569 comm="syz.1.3869" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff73397e159 code=0x7ffc0000 [ 1007.439939][ T36] audit: type=1326 audit(1790518064.021:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17569 comm="syz.1.3869" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff73397e159 code=0x7ffc0000 [ 1007.439977][ T36] audit: type=1326 audit(1790518064.031:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17569 comm="syz.1.3869" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7ff73397e159 code=0x7ffc0000 [ 1008.557716][ T5985] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1010.250674][T17454] bridge0: port 1(bridge_slave_0) entered blocking state [ 1010.252952][T17454] bridge0: port 1(bridge_slave_0) entered disabled state [ 1010.253151][T17454] bridge_slave_0: entered allmulticast mode [ 1010.271357][T17454] bridge_slave_0: entered promiscuous mode [ 1010.392505][T17454] bridge0: port 2(bridge_slave_1) entered blocking state [ 1010.392628][T17454] bridge0: port 2(bridge_slave_1) entered disabled state [ 1010.392826][T17454] bridge_slave_1: entered allmulticast mode [ 1010.411432][T17454] bridge_slave_1: entered promiscuous mode [ 1010.553333][T17454] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1010.582917][T17454] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1010.708491][T17454] team0: Port device team_slave_0 added [ 1010.726288][T17454] team0: Port device team_slave_1 added [ 1010.783062][T17454] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1010.783080][T17454] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1010.783103][T17454] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1011.112727][ T5828] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1011.275536][ T5828] usb 3-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 1011.276971][ T5828] usb 3-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 1011.278318][ T5828] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1011.278344][ T5828] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1011.283519][ T5828] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1011.283543][ T5828] usb 3-1: Product: syz [ 1011.283556][ T5828] usb 3-1: Manufacturer: syz [ 1011.283569][ T5828] usb 3-1: SerialNumber: syz [ 1011.603377][ T5828] usb 3-1: Limiting number of CPorts to U8_MAX [ 1011.687459][ T5828] usb 3-1: Unused bulk IN endpoint found: 0x89 [ 1011.687475][ T5828] usb 3-1: Not enough endpoints found in device, aborting! [ 1011.881381][ T5828] usb 3-1: USB disconnect, device number 12 [ 1012.204625][T17629] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3872'. [ 1012.297534][T17636] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3882'. [ 1012.297562][T17636] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3882'. [ 1012.297578][T17636] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3882'. [ 1012.375252][T17454] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1012.375270][T17454] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1012.375295][T17454] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1012.489668][ T36] kauditd_printk_skb: 17 callbacks suppressed [ 1012.489687][ T36] audit: type=1326 audit(1790518069.941:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17637 comm="syz.4.3884" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80126ae159 code=0x7ffc0000 [ 1012.490452][ T36] audit: type=1326 audit(1790518069.941:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17637 comm="syz.4.3884" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80126ae159 code=0x7ffc0000 [ 1012.490713][ T36] audit: type=1326 audit(1790518069.941:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17637 comm="syz.4.3884" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f80126ae159 code=0x7ffc0000 [ 1012.492394][ T36] audit: type=1326 audit(1790518069.941:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17637 comm="syz.4.3884" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80126ae159 code=0x7ffc0000 [ 1012.493926][ T36] audit: type=1326 audit(1790518069.941:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17637 comm="syz.4.3884" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80126ae159 code=0x7ffc0000 [ 1012.636966][ T36] audit: type=1326 audit(1790518070.091:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17637 comm="syz.4.3884" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7f80126ae159 code=0x7ffc0000 [ 1012.637090][ T36] audit: type=1326 audit(2000000000.000:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17637 comm="syz.4.3884" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80126ae159 code=0x7ffc0000 [ 1012.637946][ T36] audit: type=1326 audit(2000000000.000:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17637 comm="syz.4.3884" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80126ae159 code=0x7ffc0000 [ 1012.638059][ T36] audit: type=1326 audit(2000000000.000:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17637 comm="syz.4.3884" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f80126ae159 code=0x7ffc0000 [ 1012.791572][T17627] tipc: Enabling of bearer rejected, failed to enable media [ 1013.077295][ T36] audit: type=1326 audit(2000000000.429:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17637 comm="syz.4.3884" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80126ae159 code=0x7ffc0000 [ 1013.358671][T17454] hsr_slave_0: entered promiscuous mode [ 1013.359896][T17454] hsr_slave_1: entered promiscuous mode [ 1013.364720][T17454] debugfs: 'hsr0' already exists in 'hsr' [ 1013.364744][T17454] Cannot create hsr debugfs directory [ 1013.491318][T17646] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1013.794734][ T5985] bridge_slave_1: left allmulticast mode [ 1013.794771][ T5985] bridge_slave_1: left promiscuous mode [ 1013.795043][ T5985] bridge0: port 2(bridge_slave_1) entered disabled state [ 1013.959637][ T5985] bridge_slave_0: left allmulticast mode [ 1013.959671][ T5985] bridge_slave_0: left promiscuous mode [ 1013.959920][ T5985] bridge0: port 1(bridge_slave_0) entered disabled state [ 1016.015482][T17425] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1016.234232][T17425] usb 3-1: Using ep0 maxpacket: 8 [ 1016.234969][T17425] usb 3-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1016.238512][T17425] usb 3-1: config index 0 descriptor too short (expected 5924, got 36) [ 1016.238530][T17425] usb 3-1: config 250 has an invalid interface number: 228 but max is -1 [ 1016.238540][T17425] usb 3-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 1016.238560][T17425] usb 3-1: config 250 has no interface number 0 [ 1016.238598][T17425] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 1016.238612][T17425] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1016.238625][T17425] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 36 [ 1016.238638][T17425] usb 3-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1016.238652][T17425] usb 3-1: config 250 interface 228 has no altsetting 0 [ 1016.242161][T17425] usb 3-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 1016.242176][T17425] usb 3-1: Product: syz [ 1016.242184][T17425] usb 3-1: SerialNumber: syz [ 1016.430557][T17425] hub 3-1:250.228: bad descriptor, ignoring hub [ 1016.430596][T17425] hub 3-1:250.228: probe with driver hub failed with error -5 [ 1016.801071][T17425] usblp 3-1:250.228: usblp0: USB Bidirectional printer dev 13 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1016.967413][T17699] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1016.967832][T17699] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1017.245298][ C1] usblp0: nonzero read bulk status received: -71 [ 1017.334779][ T5985] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1017.414573][ T5985] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1017.456225][ T5985] bond0 (unregistering): Released all slaves [ 1017.559076][ T5247] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1017.851721][T17701] tipc: Started in network mode [ 1017.851742][T17701] tipc: Node identity 78563412785634122143658721436587, cluster identity 4711 [ 1017.979916][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 1017.979934][ T36] audit: type=1326 audit(2000000005.269:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17707 comm="syz.5.3897" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb741dae159 code=0x0 [ 1018.105539][ T5590] usb 3-1: USB disconnect, device number 13 [ 1018.377579][ T5985] IPVS: stopping backup sync thread 15279 ... [ 1019.366603][T17718] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3900'. [ 1019.734837][ T5590] usblp0: removed [ 1020.623011][T17744] FAULT_INJECTION: forcing a failure. [ 1020.623011][T17744] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1020.623054][T17744] CPU: 1 UID: 0 PID: 17744 Comm: syz.2.3909 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1020.623084][T17744] Tainted: [L]=SOFTLOCKUP [ 1020.623091][T17744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1020.623104][T17744] Call Trace: [ 1020.623113][T17744] [ 1020.623121][T17744] dump_stack_lvl+0xe8/0x150 [ 1020.623156][T17744] should_fail_ex+0x46b/0x600 [ 1020.623190][T17744] get_futex_key+0x1b4/0x1580 [ 1020.623232][T17744] ? __pfx_get_futex_key+0x10/0x10 [ 1020.623263][T17744] ? update_se+0x90/0xef0 [ 1020.623296][T17744] futex_wait_setup+0x4a/0x590 [ 1020.623325][T17744] ? __futex_wait+0xe1/0x410 [ 1020.623352][T17744] __futex_wait+0x161/0x410 [ 1020.623381][T17744] ? __pfx___futex_wait+0x10/0x10 [ 1020.623408][T17744] ? __pfx_futex_wake_mark+0x10/0x10 [ 1020.623437][T17744] ? try_to_wake_up+0x84b/0x1430 [ 1020.623475][T17744] futex_wait+0x121/0x390 [ 1020.623497][T17744] ? __pfx_futex_wait+0x10/0x10 [ 1020.623532][T17744] ? __pfx___sys_bpf+0x10/0x10 [ 1020.623565][T17744] do_futex+0x3e7/0x4e0 [ 1020.623590][T17744] ? __pfx_do_futex+0x10/0x10 [ 1020.623617][T17744] __se_sys_futex+0x3a8/0x450 [ 1020.623654][T17744] ? __pfx___se_sys_futex+0x10/0x10 [ 1020.623674][T17744] ? rcu_is_watching+0x16/0xb0 [ 1020.623710][T17744] ? __x64_sys_futex+0x21/0xf0 [ 1020.623733][T17744] do_syscall_64+0x166/0x520 [ 1020.623754][T17744] ? trace_irq_disable+0x3b/0x140 [ 1020.623779][T17744] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1020.623800][T17744] ? clear_bhb_loop+0x70/0xc0 [ 1020.623825][T17744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1020.623845][T17744] RIP: 0033:0x7f2fad66e159 [ 1020.623864][T17744] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1020.623883][T17744] RSP: 002b:00007f2fab8a50e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1020.623905][T17744] RAX: ffffffffffffffda RBX: 00007f2fad8f6098 RCX: 00007f2fad66e159 [ 1020.623927][T17744] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f2fad8f6098 [ 1020.623941][T17744] RBP: 00007f2fad8f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1020.623954][T17744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1020.623967][T17744] R13: 00007f2fad8f6128 R14: 00007ffeecdce160 R15: 00007ffeecdce248 [ 1020.623993][T17744] [ 1023.289780][T17772] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3914'. [ 1023.289823][T17772] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1023.406231][T15024] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1023.546061][ T5247] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1023.561645][T15024] usb 3-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 1023.563420][T15024] usb 3-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 1023.563450][T15024] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1023.563479][T15024] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1023.623413][T15024] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1023.623442][T15024] usb 3-1: Product: syz [ 1023.623456][T15024] usb 3-1: Manufacturer: syz [ 1023.623479][T15024] usb 3-1: SerialNumber: syz [ 1023.688693][T17782] netlink: 'syz.5.3917': attribute type 3 has an invalid length. [ 1023.688715][T17782] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3917'. [ 1023.866717][T15024] usb 3-1: Limiting number of CPorts to U8_MAX [ 1023.899183][T15024] usb 3-1: Unused bulk IN endpoint found: 0x89 [ 1023.899209][T15024] usb 3-1: Not enough endpoints found in device, aborting! [ 1024.084631][T15024] usb 3-1: USB disconnect, device number 14 [ 1025.666526][ T5590] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1026.095730][ T5590] usb 6-1: Using ep0 maxpacket: 8 [ 1026.144878][ T5590] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1026.146490][ T5590] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1026.146519][ T5590] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1026.146544][ T5590] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1026.146566][ T5590] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1026.146607][ T5590] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1026.444643][ T5590] usb 6-1: GET_CAPABILITIES returned 0 [ 1026.444695][ T5590] usbtmc 6-1:16.0: can't read capabilities [ 1026.514171][ T5985] hsr_slave_0: left promiscuous mode [ 1026.634104][ T5985] hsr_slave_1: left promiscuous mode [ 1026.635357][ T5985] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1026.635383][ T5985] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1027.684463][T17819] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3924'. [ 1028.422925][ T5985] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1028.422949][ T5985] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1028.576403][ T5985] veth1_macvtap: left promiscuous mode [ 1028.576512][ T5985] veth0_macvtap: left promiscuous mode [ 1028.577045][ T5985] veth1_vlan: left promiscuous mode [ 1028.600706][ T5719] usb 6-1: USB disconnect, device number 2 [ 1031.284977][ T5985] team0 (unregistering): Port device team_slave_1 removed [ 1031.325163][ T5985] team0 (unregistering): Port device team_slave_0 removed [ 1031.784980][T17855] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.3935'. [ 1032.279958][ T5828] kernel write not supported for file /input/mice (pid: 5828 comm: kworker/0:8) [ 1032.506454][T17873] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3939'. [ 1032.644310][T17880] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3939'. [ 1032.644333][T17880] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3939'. [ 1032.644349][T17880] netlink: 240 bytes leftover after parsing attributes in process `syz.4.3939'. [ 1032.689049][T17880] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3939'. [ 1032.853679][ T5948] rpcbind: server 127.0.0.1 not responding, timed out [ 1034.138447][T17889] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3941'. [ 1036.774375][T17922] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(11) [ 1036.774424][T17922] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1036.894336][T17922] vhci_hcd vhci_hcd.0: Device attached [ 1036.911313][T17909] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 1036.911342][T17909] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1036.911520][T17916] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(8) [ 1036.911540][T17916] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1036.911602][T17916] vhci_hcd vhci_hcd.0: Device attached [ 1036.912464][T17909] vhci_hcd vhci_hcd.0: Device attached [ 1036.922139][T17927] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(14) [ 1036.922164][T17927] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1036.922224][T17927] vhci_hcd vhci_hcd.0: Device attached [ 1036.969353][T17909] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(7) [ 1036.969380][T17909] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1036.969432][T17909] vhci_hcd vhci_hcd.0: Device attached [ 1037.005737][T17909] vhci_hcd vhci_hcd.0: pdev(2) rhport(5) sockfd(13) [ 1037.005764][T17909] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1037.006218][T17909] vhci_hcd vhci_hcd.0: Device attached [ 1037.027122][T17909] vhci_hcd vhci_hcd.0: pdev(2) rhport(6) sockfd(17) [ 1037.027149][T17909] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1037.027243][T17909] vhci_hcd vhci_hcd.0: Device attached [ 1037.234782][T17937] vhci_hcd: connection closed [ 1037.256083][T15818] vhci_hcd vhci_hcd.2: stop threads [ 1037.257213][T15818] vhci_hcd vhci_hcd.2: release socket [ 1037.316241][T17933] vhci_hcd: connection closed [ 1037.317013][T17928] vhci_hcd: connection closed [ 1037.329062][T17923] vhci_hcd: connection closed [ 1037.341115][T17921] vhci_hcd: connection closed [ 1037.341525][T17920] vhci_hcd: connection closed [ 1037.341763][T17930] vhci_hcd: connection closed [ 1037.664858][T15024] usb 37-3: new high-speed USB device number 2 using vhci_hcd [ 1037.940610][T17454] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1037.985048][T15818] vhci_hcd vhci_hcd.2: disconnect device [ 1037.986717][T17924] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 1037.993926][T17904] Process accounting resumed [ 1038.028797][T15818] vhci_hcd vhci_hcd.2: stop threads [ 1038.028825][T15818] vhci_hcd vhci_hcd.2: release socket [ 1038.029299][T15818] vhci_hcd vhci_hcd.2: disconnect device [ 1038.054033][T15818] vhci_hcd vhci_hcd.2: stop threads [ 1038.054058][T15818] vhci_hcd vhci_hcd.2: release socket [ 1038.054126][T15818] vhci_hcd vhci_hcd.2: disconnect device [ 1038.054187][T15818] vhci_hcd vhci_hcd.2: stop threads [ 1038.054199][T15818] vhci_hcd vhci_hcd.2: release socket [ 1038.054231][T15818] vhci_hcd vhci_hcd.2: disconnect device [ 1038.054369][T15818] vhci_hcd vhci_hcd.2: stop threads [ 1038.054381][T15818] vhci_hcd vhci_hcd.2: release socket [ 1038.054414][T15818] vhci_hcd vhci_hcd.2: disconnect device [ 1038.054534][T15818] vhci_hcd vhci_hcd.2: stop threads [ 1038.054547][T15818] vhci_hcd vhci_hcd.2: release socket [ 1038.054580][T15818] vhci_hcd vhci_hcd.2: disconnect device [ 1038.054700][T15818] vhci_hcd vhci_hcd.2: stop threads [ 1038.054713][T15818] vhci_hcd vhci_hcd.2: release socket [ 1038.054746][T15818] vhci_hcd vhci_hcd.2: disconnect device [ 1038.232090][T17454] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1038.242905][T17454] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1038.310429][T17950] fuse: Bad value for 'fd' [ 1038.310727][T17950] fuse: Bad value for 'fd' [ 1038.311018][T17950] fuse: Bad value for 'fd' [ 1038.311320][T17950] fuse: Bad value for 'fd' [ 1038.312041][T17950] fuse: Bad value for 'fd' [ 1038.336738][T17950] fuse: Bad value for 'fd' [ 1038.337067][T17950] fuse: Bad value for 'fd' [ 1038.337353][T17950] fuse: Bad value for 'fd' [ 1038.337620][T17950] fuse: Bad value for 'fd' [ 1038.337917][T17950] fuse: Bad value for 'fd' [ 1038.338216][T17950] fuse: Bad value for 'fd' [ 1038.436809][T17454] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1038.441857][T17454] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1038.559535][T17454] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1038.591287][T17454] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1038.694877][T17454] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1040.994808][T17454] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1041.026893][T17454] 8021q: adding VLAN 0 to HW filter on device team0 [ 1041.086283][ T4179] bridge0: port 1(bridge_slave_0) entered blocking state [ 1041.086417][ T4179] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1041.147766][ T4179] bridge0: port 2(bridge_slave_1) entered blocking state [ 1041.150138][ T4179] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1041.388510][T18001] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 1043.473059][T18048] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3964'. [ 1043.504139][T15024] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 1043.650404][T18049] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3964'. [ 1043.714155][ T5828] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1043.761742][T18052] tmpfs: Bad value for 'mpol' [ 1043.880485][ T5828] usb 3-1: Using ep0 maxpacket: 16 [ 1043.882132][ T5828] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1043.888433][ T5828] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1043.891142][ T5828] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1043.891166][ T5828] usb 3-1: Product: syz [ 1043.891180][ T5828] usb 3-1: Manufacturer: syz [ 1043.891194][ T5828] usb 3-1: SerialNumber: syz [ 1043.927902][ T5828] usb 3-1: config 0 descriptor?? [ 1043.962106][ T5828] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1043.962144][ T5828] em28xx 3-1:0.0: DVB interface 0 found: isoc [ 1047.252131][ T5828] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 1047.537463][T18072] 9p: Bad value for 'wfdno' [ 1048.535863][ T5828] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1048.535897][ T5828] em28xx 3-1:0.0: board has no eeprom [ 1048.664612][ T5828] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1048.664725][ T5828] em28xx 3-1:0.0: dvb set to isoc mode. [ 1048.710242][T17454] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1048.734465][ T5719] em28xx 3-1:0.0: Binding DVB extension [ 1049.706068][T17454] veth0_vlan: entered promiscuous mode [ 1049.730171][T17454] veth1_vlan: entered promiscuous mode [ 1049.762273][T17454] veth0_macvtap: entered promiscuous mode [ 1049.773510][T17454] veth1_macvtap: entered promiscuous mode [ 1049.804456][T17454] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1049.811751][T17454] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1051.416521][ T5719] em28xx 3-1:0.0: Registering input extension [ 1052.951107][T15815] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1052.951129][T15815] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1053.179403][T18104] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3979'. [ 1053.391579][T15818] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1053.391602][T15818] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1053.535316][T15818] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1053.768694][T15818] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1053.976284][T15818] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1053.997798][T15818] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1054.180913][ T1331] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.222363][T18112] netlink: 3 bytes leftover after parsing attributes in process `syz.5.3977'. [ 1055.854904][ T5595] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1056.060876][ T5595] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1056.468443][ T5595] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1056.712791][ T5595] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1056.713519][ T5595] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1057.534123][T13894] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1058.446447][T13894] usb 6-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice= 1.00 [ 1058.448876][T13894] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 1058.448937][T13894] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 1024 [ 1058.448963][T13894] usb 6-1: config 1 interface 1 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 1058.448988][T13894] usb 6-1: config 1 interface 1 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 255 [ 1058.449038][T13894] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1058.521002][T18139] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1058.890838][ T5590] usb 3-1: USB disconnect, device number 15 [ 1058.919239][ T5590] em28xx 3-1:0.0: Disconnecting em28xx [ 1058.932087][T14556] Bluetooth: hci3: command tx timeout [ 1058.948626][ T5590] em28xx 3-1:0.0: Closing input extension [ 1059.235420][T13894] ims_pcu 6-1:1.0: GET_INFO command failed, error: -71 [ 1059.237489][T13894] ims_pcu 6-1:1.0: probe with driver ims_pcu failed with error -71 [ 1059.897068][ T5595] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1059.999022][ T5595] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1060.002981][ T5595] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1060.055157][ T5595] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1060.065964][ T5595] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1060.749600][ T5590] em28xx: Freeing device [ 1060.832425][T17425] usb 6-1: USB disconnect, device number 3 [ 1060.990804][T18167] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3992'. [ 1061.018723][ T5595] Bluetooth: hci3: command tx timeout [ 1062.322805][T15841] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1062.444843][ T5595] Bluetooth: hci5: command tx timeout [ 1063.589469][ T5595] Bluetooth: hci3: command tx timeout [ 1064.575695][ T5595] Bluetooth: hci5: command tx timeout [ 1065.051986][T15841] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1065.214107][T13894] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1065.367546][T13894] usb 6-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 1065.368752][T13894] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1065.368805][T13894] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1065.368829][T13894] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 1065.368853][T13894] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1065.368895][T13894] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1065.419247][T13894] usb 6-1: probing VID:PID(0424:012C) [ 1065.422574][T13894] usb 6-1: vub300 testing BULK IN EndPoint(0) 81 [ 1065.422604][T13894] usb 6-1: Could not find two sets of bulk-in/out endpoint pairs [ 1065.464448][T13894] vub300 6-1:1.0: probe with driver vub300 failed with error -22 [ 1065.647330][ T5599] Bluetooth: hci3: command tx timeout [ 1065.806343][T15841] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1066.628271][ T5599] Bluetooth: hci5: command tx timeout [ 1066.906872][ T5599] Bluetooth: hci0: command 0x0406 tx timeout [ 1067.873831][ T5590] usb 6-1: USB disconnect, device number 4 [ 1068.157427][T15841] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1069.088302][ T36] audit: type=1800 audit(2000000055.949:71): pid=18230 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.5.4004" name="syzkaller0" dev="sda1" ino=2063 res=0 errno=0 [ 1069.157636][T14556] Bluetooth: hci5: command tx timeout [ 1069.826953][T18129] bridge0: port 1(bridge_slave_0) entered blocking state [ 1069.832708][T18129] bridge0: port 1(bridge_slave_0) entered disabled state [ 1069.857248][T18129] bridge_slave_0: entered allmulticast mode [ 1069.918349][T18129] bridge_slave_0: entered promiscuous mode [ 1069.930669][T18129] bridge0: port 2(bridge_slave_1) entered blocking state [ 1069.930737][T18129] bridge0: port 2(bridge_slave_1) entered disabled state [ 1069.930853][T18129] bridge_slave_1: entered allmulticast mode [ 1069.961690][T18129] bridge_slave_1: entered promiscuous mode [ 1070.205235][T18129] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1070.260643][T18129] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1070.518684][T18240] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4008'. [ 1070.921979][T18129] team0: Port device team_slave_0 added [ 1071.146602][T18129] team0: Port device team_slave_1 added [ 1071.284219][T18246] netlink: NAT attribute type 0 has unexpected length (3 != 0) [ 1071.284417][T18246] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1072.352302][T18129] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1072.352321][T18129] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1072.352347][T18129] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1072.399539][T18129] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1072.399557][T18129] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1072.399588][T18129] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1074.594447][T15841] bridge_slave_1: left allmulticast mode [ 1074.594481][T15841] bridge_slave_1: left promiscuous mode [ 1074.594729][T15841] bridge0: port 2(bridge_slave_1) entered disabled state [ 1074.970811][T15841] bridge_slave_0: left allmulticast mode [ 1074.970850][T15841] bridge_slave_0: left promiscuous mode [ 1074.971211][T15841] bridge0: port 1(bridge_slave_0) entered disabled state [ 1075.668257][T18279] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4017'. [ 1077.075282][T15841] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1077.228741][T15841] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1077.277851][T15841] bond0 (unregistering): Released all slaves [ 1077.421325][T18129] hsr_slave_0: entered promiscuous mode [ 1077.427097][T18129] hsr_slave_1: entered promiscuous mode [ 1077.433626][T18129] debugfs: 'hsr0' already exists in 'hsr' [ 1077.433653][T18129] Cannot create hsr debugfs directory [ 1077.676100][ T36] audit: type=1326 audit(2000000065.029:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18289 comm="syz.1.4019" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff73397e159 code=0x7ffc0000 [ 1077.676149][ T36] audit: type=1326 audit(2000000065.029:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18289 comm="syz.1.4019" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff73397e159 code=0x7ffc0000 [ 1077.676186][ T36] audit: type=1326 audit(2000000065.029:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18289 comm="syz.1.4019" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff73397e159 code=0x7ffc0000 [ 1077.677896][ T36] audit: type=1326 audit(2000000065.029:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18289 comm="syz.1.4019" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff73397e159 code=0x7ffc0000 [ 1077.677940][ T36] audit: type=1326 audit(2000000065.029:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18289 comm="syz.1.4019" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7ff73397e159 code=0x7ffc0000 [ 1077.677976][ T36] audit: type=1326 audit(2000000065.029:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18289 comm="syz.1.4019" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff73397e159 code=0x7ffc0000 [ 1077.678012][ T36] audit: type=1326 audit(2000000065.029:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18289 comm="syz.1.4019" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff73397e159 code=0x7ffc0000 [ 1077.679054][ T36] audit: type=1326 audit(2000000065.029:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18289 comm="syz.1.4019" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff73397e159 code=0x7ffc0000 [ 1077.679097][ T36] audit: type=1326 audit(2000000065.029:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18289 comm="syz.1.4019" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff73397e159 code=0x7ffc0000 [ 1077.679135][ T36] audit: type=1326 audit(2000000065.029:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18289 comm="syz.1.4019" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7ff73397e159 code=0x7ffc0000 [ 1080.711642][ T5247] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1081.481606][T18335] input: syz0 as /devices/virtual/input/input29 [ 1083.752235][T18344] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4027'. [ 1086.068973][T18366] faux_driver vgem: [drm] Unknown color mode 11176; guessing buffer size. [ 1086.088610][T18364] RDS: rds_bind could not find a transport for fc00::1, load rds_tcp or rds_rdma? [ 1086.100535][T18364] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4032'. [ 1086.301412][T18368] FAULT_INJECTION: forcing a failure. [ 1086.301412][T18368] name failslab, interval 1, probability 0, space 0, times 0 [ 1086.301451][T18368] CPU: 0 UID: 0 PID: 18368 Comm: syz.5.4033 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1086.301480][T18368] Tainted: [L]=SOFTLOCKUP [ 1086.301488][T18368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1086.301501][T18368] Call Trace: [ 1086.301509][T18368] [ 1086.301518][T18368] dump_stack_lvl+0xe8/0x150 [ 1086.301552][T18368] should_fail_ex+0x46b/0x600 [ 1086.301585][T18368] should_failslab+0xa8/0x100 [ 1086.301615][T18368] ? security_inode_alloc+0x39/0x310 [ 1086.301636][T18368] kmem_cache_alloc_noprof+0x9e/0x690 [ 1086.301664][T18368] ? security_inode_alloc+0x39/0x310 [ 1086.301691][T18368] security_inode_alloc+0x39/0x310 [ 1086.301713][T18368] inode_init_always_gfp+0x983/0xd40 [ 1086.301739][T18368] ? __pfx_proc_alloc_inode+0x10/0x10 [ 1086.301765][T18368] alloc_inode+0x82/0x1b0 [ 1086.301782][T18368] new_inode+0x1f/0x170 [ 1086.301801][T18368] ? proc_get_inode+0x1a/0x6a0 [ 1086.301829][T18368] proc_get_inode+0x22/0x6a0 [ 1086.301853][T18368] ? proc_fill_super+0x52a/0x760 [ 1086.301884][T18368] proc_fill_super+0x543/0x760 [ 1086.301911][T18368] ? __pfx_proc_fill_super+0x10/0x10 [ 1086.301940][T18368] get_tree_nodev+0xbb/0x150 [ 1086.301967][T18368] vfs_get_tree+0x92/0x2a0 [ 1086.301994][T18368] do_new_mount+0x319/0xdc0 [ 1086.302013][T18368] ? cap_capable+0x123/0x460 [ 1086.302041][T18368] ? __pfx_do_new_mount+0x10/0x10 [ 1086.302065][T18368] ? ns_capable+0x89/0xe0 [ 1086.302094][T18368] ? path_mount+0x647/0x1050 [ 1086.302125][T18368] ? user_path_at+0xd4/0x160 [ 1086.302151][T18368] __se_sys_mount+0x31d/0x420 [ 1086.302179][T18368] ? __pfx___se_sys_mount+0x10/0x10 [ 1086.302207][T18368] ? __x64_sys_mount+0x20/0xc0 [ 1086.302230][T18368] do_syscall_64+0x166/0x520 [ 1086.302251][T18368] ? trace_irq_disable+0x3b/0x140 [ 1086.302276][T18368] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1086.302297][T18368] ? clear_bhb_loop+0x70/0xc0 [ 1086.302322][T18368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1086.302342][T18368] RIP: 0033:0x7fb741dae159 [ 1086.302361][T18368] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1086.302378][T18368] RSP: 002b:00007fb73ff84028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1086.302400][T18368] RAX: ffffffffffffffda RBX: 00007fb742036090 RCX: 00007fb741dae159 [ 1086.302418][T18368] RDX: 00002000000000c0 RSI: 0000200000000080 RDI: 0000000000000000 [ 1086.302433][T18368] RBP: 00007fb741e4506b R08: 0000000000000000 R09: 0000000000000000 [ 1086.302448][T18368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1086.302460][T18368] R13: 00007fb742036128 R14: 00007fb742036090 R15: 00007ffe14533c38 [ 1086.302494][T18368] [ 1086.311186][T18368] proc_fill_super: get root inode failed [ 1086.547946][T18379] sctp: [Deprecated]: syz.1.4034 (pid 18379) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1086.547946][T18379] Use struct sctp_sack_info instead [ 1087.008013][ T5247] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1087.514863][T18159] bridge0: port 1(bridge_slave_0) entered blocking state [ 1087.514962][T18159] bridge0: port 1(bridge_slave_0) entered disabled state [ 1087.515114][T18159] bridge_slave_0: entered allmulticast mode [ 1087.518186][T18159] bridge_slave_0: entered promiscuous mode [ 1087.729880][T18398] FAULT_INJECTION: forcing a failure. [ 1087.729880][T18398] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1087.729917][T18398] CPU: 1 UID: 0 PID: 18398 Comm: syz.5.4038 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1087.729949][T18398] Tainted: [L]=SOFTLOCKUP [ 1087.729956][T18398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1087.729967][T18398] Call Trace: [ 1087.729974][T18398] [ 1087.729982][T18398] dump_stack_lvl+0xe8/0x150 [ 1087.730013][T18398] should_fail_ex+0x46b/0x600 [ 1087.730042][T18398] _copy_from_iter+0x1d3/0x1660 [ 1087.730072][T18398] ? trace_kmem_cache_alloc+0x29/0xe0 [ 1087.730098][T18398] ? __pfx__copy_from_iter+0x10/0x10 [ 1087.730118][T18398] ? __alloc_skb+0x27a/0x7a0 [ 1087.730135][T18398] ? __alloc_skb+0x27a/0x7a0 [ 1087.730157][T18398] ? netlink_sendmsg+0x650/0xb40 [ 1087.730180][T18398] ? skb_put+0x112/0x210 [ 1087.730200][T18398] netlink_sendmsg+0x6c0/0xb40 [ 1087.730222][T18398] ? __lock_acquire+0x747/0x2de0 [ 1087.730252][T18398] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1087.730276][T18398] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1087.730311][T18398] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1087.730332][T18398] sock_sendmsg_nosec+0x13a/0x180 [ 1087.730359][T18398] ____sys_sendmsg+0x565/0x870 [ 1087.730387][T18398] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1087.730415][T18398] ? import_iovec+0x73/0xa0 [ 1087.730443][T18398] ___sys_sendmsg+0x2a5/0x360 [ 1087.730462][T18398] ? __lock_acquire+0x747/0x2de0 [ 1087.730489][T18398] ? __pfx____sys_sendmsg+0x10/0x10 [ 1087.730514][T18398] ? kstrtouint+0x6e/0xe0 [ 1087.730559][T18398] ? __fget_files+0x2a/0x420 [ 1087.730578][T18398] ? __fget_files+0x3a8/0x420 [ 1087.730612][T18398] __sys_sendmmsg+0x279/0x4d0 [ 1087.730638][T18398] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1087.730667][T18398] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1087.730708][T18398] ? ksys_write+0x248/0x270 [ 1087.730731][T18398] ? __pfx_ksys_write+0x10/0x10 [ 1087.730758][T18398] __x64_sys_sendmmsg+0xa0/0xc0 [ 1087.730780][T18398] do_syscall_64+0x166/0x520 [ 1087.730798][T18398] ? trace_irq_disable+0x3b/0x140 [ 1087.730820][T18398] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1087.730839][T18398] ? clear_bhb_loop+0x70/0xc0 [ 1087.730861][T18398] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1087.730879][T18398] RIP: 0033:0x7fb741dae159 [ 1087.730897][T18398] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1087.730913][T18398] RSP: 002b:00007fb740006028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1087.730934][T18398] RAX: ffffffffffffffda RBX: 00007fb742035fa0 RCX: 00007fb741dae159 [ 1087.730948][T18398] RDX: 0400000000000047 RSI: 0000200000000000 RDI: 0000000000000003 [ 1087.730961][T18398] RBP: 00007fb740006090 R08: 0000000000000000 R09: 0000000000000000 [ 1087.730973][T18398] R10: 0000000000003f00 R11: 0000000000000246 R12: 0000000000000001 [ 1087.730985][T18398] R13: 00007fb742036038 R14: 00007fb742035fa0 R15: 00007ffe14533c38 [ 1087.731015][T18398] [ 1088.751411][T18413] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4040'. [ 1088.752861][ T36] kauditd_printk_skb: 50 callbacks suppressed [ 1088.752876][ T36] audit: type=1326 audit(2000000076.109:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18405 comm="syz.4.4040" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80126ae159 code=0x7ffc0000 [ 1088.752919][ T36] audit: type=1326 audit(2000000076.109:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18405 comm="syz.4.4040" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80126ae159 code=0x7ffc0000 [ 1088.752966][ T36] audit: type=1326 audit(2000000076.109:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18405 comm="syz.4.4040" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f80126ae159 code=0x7ffc0000 [ 1088.753003][ T36] audit: type=1326 audit(2000000076.109:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18405 comm="syz.4.4040" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80126ae159 code=0x7ffc0000 [ 1088.753041][ T36] audit: type=1326 audit(2000000076.109:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18405 comm="syz.4.4040" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80126ae159 code=0x7ffc0000 [ 1088.753078][ T36] audit: type=1326 audit(2000000076.109:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18405 comm="syz.4.4040" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f80126ae159 code=0x7ffc0000 [ 1088.753117][ T36] audit: type=1326 audit(2000000076.109:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18405 comm="syz.4.4040" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80126ae159 code=0x7ffc0000 [ 1088.753157][ T36] audit: type=1326 audit(2000000076.109:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18405 comm="syz.4.4040" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80126ae159 code=0x7ffc0000 [ 1088.753195][ T36] audit: type=1326 audit(2000000076.109:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18405 comm="syz.4.4040" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f80126ae159 code=0x7ffc0000 [ 1088.753233][ T36] audit: type=1326 audit(2000000076.109:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18405 comm="syz.4.4040" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80126ae159 code=0x7ffc0000 [ 1088.757953][T18412] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4041'. [ 1089.754216][T15841] hsr_slave_0: left promiscuous mode [ 1089.845620][T15841] hsr_slave_1: left promiscuous mode [ 1089.849339][T15841] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1089.849365][T15841] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1089.890925][T15841] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1089.890951][T15841] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1089.995550][T15841] veth1_macvtap: left promiscuous mode [ 1089.995626][T15841] veth0_macvtap: left promiscuous mode [ 1089.995764][T15841] veth1_vlan: left promiscuous mode [ 1090.003387][T15841] veth0_vlan: left promiscuous mode [ 1090.314767][T13894] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1090.464783][T13894] usb 6-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 1090.469485][T13894] usb 6-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 1090.469505][T13894] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1090.469516][T13894] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1090.471602][T13894] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1090.471626][T13894] usb 6-1: Product: syz [ 1090.471640][T13894] usb 6-1: Manufacturer: syz [ 1090.471653][T13894] usb 6-1: SerialNumber: syz [ 1090.775017][T13894] usb 6-1: Limiting number of CPorts to U8_MAX [ 1090.778464][T13894] usb 6-1: Unused bulk IN endpoint found: 0x89 [ 1090.778479][T13894] usb 6-1: Not enough endpoints found in device, aborting! [ 1090.981422][ T31] usb 6-1: USB disconnect, device number 5 [ 1091.124952][T15841] team0 (unregistering): Port device team_slave_1 removed [ 1091.184686][T15841] team0 (unregistering): Port device team_slave_0 removed [ 1091.355044][T18159] bridge0: port 2(bridge_slave_1) entered blocking state [ 1091.355145][T18159] bridge0: port 2(bridge_slave_1) entered disabled state [ 1091.355272][T18159] bridge_slave_1: entered allmulticast mode [ 1091.358591][T18159] bridge_slave_1: entered promiscuous mode [ 1092.787611][T18159] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1092.811878][T18159] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1092.938629][T18159] team0: Port device team_slave_0 added [ 1092.942393][T18159] team0: Port device team_slave_1 added [ 1094.618318][T18451] macsec0: entered promiscuous mode [ 1094.618501][T18451] macsec0: entered allmulticast mode [ 1094.618510][T18451] veth1_macvtap: entered allmulticast mode [ 1094.619638][T18451] batman_adv: batadv0: Adding interface: macsec0 [ 1094.619652][T18451] batman_adv: batadv0: The MTU of interface macsec0 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1094.619671][T18451] batman_adv: batadv0: Interface activated: macsec0 [ 1094.621696][T18159] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1094.621711][T18159] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1094.621736][T18159] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1094.657391][T18159] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1094.657407][T18159] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1094.657431][T18159] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1094.740425][T18159] hsr_slave_0: entered promiscuous mode [ 1094.741650][T18159] hsr_slave_1: entered promiscuous mode [ 1094.742564][T18159] debugfs: 'hsr0' already exists in 'hsr' [ 1094.742587][T18159] Cannot create hsr debugfs directory [ 1097.488292][T18494] usb usb7: usbfs: interface 0 claimed by hub while 'syz.5.4062' resets device [ 1097.488316][T18494] FAULT_INJECTION: forcing a failure. [ 1097.488316][T18494] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1097.488340][T18494] CPU: 1 UID: 0 PID: 18494 Comm: syz.5.4062 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1097.488355][T18494] Tainted: [L]=SOFTLOCKUP [ 1097.488359][T18494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1097.488365][T18494] Call Trace: [ 1097.488370][T18494] [ 1097.488375][T18494] dump_stack_lvl+0xe8/0x150 [ 1097.488395][T18494] should_fail_ex+0x46b/0x600 [ 1097.488412][T18494] _copy_to_user+0x31/0xb0 [ 1097.488429][T18494] simple_read_from_buffer+0xe1/0x170 [ 1097.488443][T18494] proc_fail_nth_read+0x1be/0x230 [ 1097.488458][T18494] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1097.488472][T18494] ? rw_verify_area+0x250/0x4d0 [ 1097.488485][T18494] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1097.488497][T18494] vfs_read+0x219/0xa90 [ 1097.488513][T18494] ? __pfx_vfs_read+0x10/0x10 [ 1097.488525][T18494] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1097.488537][T18494] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1097.488547][T18494] ? mutex_lock_nested+0x152/0x1d0 [ 1097.488559][T18494] ? fdget_pos+0x252/0x320 [ 1097.488577][T18494] ksys_read+0x156/0x270 [ 1097.488590][T18494] ? __pfx_ksys_read+0x10/0x10 [ 1097.488601][T18494] ? __pfx_usbdev_ioctl+0x10/0x10 [ 1097.488619][T18494] do_syscall_64+0x166/0x520 [ 1097.488628][T18494] ? trace_irq_disable+0x3b/0x140 [ 1097.488642][T18494] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1097.488652][T18494] ? clear_bhb_loop+0x70/0xc0 [ 1097.488664][T18494] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1097.488674][T18494] RIP: 0033:0x7fb741d6e98e [ 1097.488685][T18494] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1097.488694][T18494] RSP: 002b:00007fb740005fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1097.488705][T18494] RAX: ffffffffffffffda RBX: 00007fb7400066c0 RCX: 00007fb741d6e98e [ 1097.488713][T18494] RDX: 000000000000000f RSI: 00007fb7400060a0 RDI: 0000000000000004 [ 1097.488720][T18494] RBP: 00007fb740006090 R08: 0000000000000000 R09: 0000000000000000 [ 1097.488726][T18494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1097.488732][T18494] R13: 00007fb742036038 R14: 00007fb742035fa0 R15: 00007ffe14533c38 [ 1097.488748][T18494] [ 1099.558980][T18514] netlink: 116 bytes leftover after parsing attributes in process `syz.4.4067'. [ 1099.905807][T18129] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1100.129391][T18129] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1100.136698][T18129] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1100.237910][T18129] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1100.240827][T18129] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1100.656276][T18129] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1100.665092][T18533] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4070'. [ 1100.706001][T18129] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1100.809801][T18129] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1102.541461][T18129] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1102.570019][T18129] 8021q: adding VLAN 0 to HW filter on device team0 [ 1102.585809][T15832] bridge0: port 1(bridge_slave_0) entered blocking state [ 1102.586026][T15832] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1102.613906][T15832] bridge0: port 2(bridge_slave_1) entered blocking state [ 1102.625091][T15832] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1104.390079][T18567] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4074'. [ 1104.965041][T18159] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1105.036713][T18159] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1105.058267][T18159] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1105.398196][T18159] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1105.415347][T18159] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1105.684715][T18159] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1105.852008][T18159] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1105.917905][T18159] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1107.408351][T18159] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1107.470279][T18159] 8021q: adding VLAN 0 to HW filter on device team0 [ 1107.518556][T16009] bridge0: port 1(bridge_slave_0) entered blocking state [ 1107.521381][T16009] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1107.558202][T15818] bridge0: port 2(bridge_slave_1) entered blocking state [ 1107.558318][T15818] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1108.889781][T18129] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1108.931734][T18639] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4089'. [ 1109.176580][T18129] veth0_vlan: entered promiscuous mode [ 1109.251167][T18129] veth1_vlan: entered promiscuous mode [ 1109.540809][T18129] veth0_macvtap: entered promiscuous mode [ 1109.558644][T18129] veth1_macvtap: entered promiscuous mode [ 1110.538786][T18662] FAULT_INJECTION: forcing a failure. [ 1110.538786][T18662] name failslab, interval 1, probability 0, space 0, times 0 [ 1110.538826][T18662] CPU: 1 UID: 0 PID: 18662 Comm: syz.5.4095 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1110.538854][T18662] Tainted: [L]=SOFTLOCKUP [ 1110.538861][T18662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1110.538871][T18662] Call Trace: [ 1110.538879][T18662] [ 1110.538888][T18662] dump_stack_lvl+0xe8/0x150 [ 1110.538923][T18662] should_fail_ex+0x46b/0x600 [ 1110.538953][T18662] should_failslab+0xa8/0x100 [ 1110.538985][T18662] __kmalloc_cache_noprof+0xa1/0x680 [ 1110.539012][T18662] ? wakeup_source_sysfs_add+0x57/0x2c0 [ 1110.539031][T18662] ? wakeup_source_sysfs_add+0x57/0x2c0 [ 1110.539057][T18662] wakeup_source_sysfs_add+0x57/0x2c0 [ 1110.539081][T18662] wakeup_source_register+0x17f/0x390 [ 1110.539113][T18662] ep_insert+0x1034/0x1990 [ 1110.539151][T18662] ? __pfx_ep_insert+0x10/0x10 [ 1110.539188][T18662] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1110.539208][T18662] ? mutex_lock_nested+0x152/0x1d0 [ 1110.539232][T18662] ? do_epoll_ctl_file+0x3ff/0xf00 [ 1110.539259][T18662] do_epoll_ctl_file+0x8d5/0xf00 [ 1110.539293][T18662] ? __pfx_do_epoll_ctl_file+0x10/0x10 [ 1110.539320][T18662] ? __fget_files+0x3a8/0x420 [ 1110.539339][T18662] ? __fget_files+0x2a/0x420 [ 1110.539368][T18662] __se_sys_epoll_ctl+0x162/0x230 [ 1110.539395][T18662] ? __pfx___se_sys_epoll_ctl+0x10/0x10 [ 1110.539432][T18662] do_syscall_64+0x166/0x520 [ 1110.539463][T18662] ? trace_irq_disable+0x3b/0x140 [ 1110.539487][T18662] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1110.539508][T18662] ? clear_bhb_loop+0x70/0xc0 [ 1110.539531][T18662] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1110.539549][T18662] RIP: 0033:0x7fb741dae159 [ 1110.539568][T18662] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1110.539584][T18662] RSP: 002b:00007fb740006028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 1110.539606][T18662] RAX: ffffffffffffffda RBX: 00007fb742035fa0 RCX: 00007fb741dae159 [ 1110.539621][T18662] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 0000000000000007 [ 1110.539632][T18662] RBP: 00007fb741e4506b R08: 0000000000000000 R09: 0000000000000000 [ 1110.539644][T18662] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000000 [ 1110.539656][T18662] R13: 00007fb742036038 R14: 00007fb742035fa0 R15: 00007ffe14533c38 [ 1110.539687][T18662] [ 1110.602118][T18129] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1110.672081][T18129] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1111.139700][T18678] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4099'. [ 1111.315790][T18159] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1111.337337][T16009] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1111.337549][T16009] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1111.672786][ T6170] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1111.744326][ T6170] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1113.161679][T15838] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1113.161694][T15838] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1113.684725][ T5948] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1113.684747][ T5948] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1116.245086][ T1331] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.274684][T18159] veth0_vlan: entered promiscuous mode [ 1116.437405][T18159] veth1_vlan: entered promiscuous mode [ 1116.703875][T18159] veth0_macvtap: entered promiscuous mode [ 1116.709887][T18159] veth1_macvtap: entered promiscuous mode [ 1117.295343][ T5599] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1117.360126][ T5599] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1117.384821][ T5599] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1117.509764][ T5599] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1117.510483][ T5599] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1117.547305][T18725] fuse: Bad value for 'fd' [ 1119.751827][T18735] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1119.808475][T14556] Bluetooth: hci2: command tx timeout [ 1119.860170][ T5599] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1119.866960][ T5599] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1119.888766][ T5599] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1119.963276][ T5599] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1119.968514][T14556] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1120.613630][ T5948] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1121.502807][T18764] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4119'. [ 1121.585374][T18772] xt_socket: unknown flags 0x20 [ 1122.275644][T18193] Bluetooth: hci2: command tx timeout [ 1122.411470][T18193] Bluetooth: hci6: command tx timeout [ 1122.694395][T18774] syz_tun: entered allmulticast mode [ 1123.023220][T18790] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4124'. [ 1123.076987][T18792] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4125'. [ 1123.077008][T18792] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4125'. [ 1124.044280][ T5948] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1124.103965][T18792] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4125'. [ 1124.104036][T18792] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4125'. [ 1124.157370][T18790] vlan2: entered promiscuous mode [ 1124.445720][T18193] Bluetooth: hci6: command tx timeout [ 1124.445755][T18193] Bluetooth: hci2: command tx timeout [ 1125.961575][ T5948] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1126.094081][T16219] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1126.094130][T16219] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1126.094165][T16219] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1126.094198][T16219] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1126.406035][ T5948] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1126.555963][T18193] Bluetooth: hci2: command tx timeout [ 1126.659601][T18193] Bluetooth: hci6: command tx timeout [ 1127.723029][ T5828] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1127.861892][T18838] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4136'. [ 1127.896378][ T5828] usb 6-1: Using ep0 maxpacket: 8 [ 1128.360542][T18835] netlink: 'syz.5.4135': attribute type 2 has an invalid length. [ 1128.360566][T18835] netlink: 224 bytes leftover after parsing attributes in process `syz.5.4135'. [ 1128.466781][ T5828] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1128.466834][ T5828] usb 6-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 1128.466886][ T5828] usb 6-1: no configurations [ 1128.466899][ T5828] usb 6-1: can't read configurations, error -22 [ 1128.690040][T18193] Bluetooth: hci6: command tx timeout [ 1130.509633][T18865] FAULT_INJECTION: forcing a failure. [ 1130.509633][T18865] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1130.509691][T18865] CPU: 1 UID: 0 PID: 18865 Comm: syz.5.4141 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1130.509718][T18865] Tainted: [L]=SOFTLOCKUP [ 1130.509725][T18865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1130.509736][T18865] Call Trace: [ 1130.509745][T18865] [ 1130.509753][T18865] dump_stack_lvl+0xe8/0x150 [ 1130.509784][T18865] should_fail_ex+0x46b/0x600 [ 1130.509813][T18865] _copy_to_user+0x31/0xb0 [ 1130.509841][T18865] simple_read_from_buffer+0xe1/0x170 [ 1130.509866][T18865] proc_fail_nth_read+0x1be/0x230 [ 1130.509892][T18865] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1130.509918][T18865] ? rw_verify_area+0x250/0x4d0 [ 1130.509939][T18865] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1130.509960][T18865] vfs_read+0x219/0xa90 [ 1130.509989][T18865] ? __pfx_vfs_read+0x10/0x10 [ 1130.510013][T18865] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1130.510043][T18865] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1130.510062][T18865] ? mutex_lock_nested+0x152/0x1d0 [ 1130.510083][T18865] ? fdget_pos+0x252/0x320 [ 1130.510111][T18865] ksys_read+0x156/0x270 [ 1130.510134][T18865] ? __pfx_ksys_read+0x10/0x10 [ 1130.510167][T18865] do_syscall_64+0x166/0x520 [ 1130.510186][T18865] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1130.510205][T18865] ? clear_bhb_loop+0x70/0xc0 [ 1130.510227][T18865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1130.510245][T18865] RIP: 0033:0x7fb741d6e98e [ 1130.510263][T18865] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1130.510278][T18865] RSP: 002b:00007fb73ffc3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1130.510298][T18865] RAX: ffffffffffffffda RBX: 00007fb73ffc46c0 RCX: 00007fb741d6e98e [ 1130.510312][T18865] RDX: 000000000000000f RSI: 00007fb73ffc40a0 RDI: 0000000000000007 [ 1130.510323][T18865] RBP: 00007fb73ffc4090 R08: 0000000000000000 R09: 0000000000000000 [ 1130.510336][T18865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1130.510347][T18865] R13: 00007fb742036218 R14: 00007fb742036180 R15: 00007ffe14533c38 [ 1130.510379][T18865] [ 1131.465362][ T5948] bridge_slave_1: left allmulticast mode [ 1131.465400][ T5948] bridge_slave_1: left promiscuous mode [ 1131.466561][ T5948] bridge0: port 2(bridge_slave_1) entered disabled state [ 1131.667803][ T5948] bridge_slave_0: left allmulticast mode [ 1131.667865][ T5948] bridge_slave_0: left promiscuous mode [ 1131.668070][ T5948] bridge0: port 1(bridge_slave_0) entered disabled state [ 1133.766226][ T5948] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1133.854903][ T5948] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1133.876495][ T5948] bond0 (unregistering): Released all slaves [ 1134.942589][T18910] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1134.981265][T18736] bridge0: port 1(bridge_slave_0) entered blocking state [ 1134.981448][T18736] bridge0: port 1(bridge_slave_0) entered disabled state [ 1134.981656][T18736] bridge_slave_0: entered allmulticast mode [ 1134.988431][T18736] bridge_slave_0: entered promiscuous mode [ 1134.997618][T18736] bridge0: port 2(bridge_slave_1) entered blocking state [ 1134.999081][T18736] bridge0: port 2(bridge_slave_1) entered disabled state [ 1134.999292][T18736] bridge_slave_1: entered allmulticast mode [ 1135.011860][T18736] bridge_slave_1: entered promiscuous mode [ 1135.312899][T18736] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1136.346722][T18736] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1136.467223][ T5247] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1138.286680][T18932] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4151'. [ 1138.582734][T18943] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4153'. [ 1138.709897][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 1138.709916][ T36] audit: type=1326 audit(2000000126.059:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18939 comm="syz.5.4155" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb741dae159 code=0x7ffc0000 [ 1138.713706][ T36] audit: type=1326 audit(2000000126.059:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18939 comm="syz.5.4155" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fb741dae159 code=0x7ffc0000 [ 1138.713766][ T36] audit: type=1326 audit(2000000126.059:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18939 comm="syz.5.4155" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb741dae159 code=0x7ffc0000 [ 1138.713796][ T36] audit: type=1326 audit(2000000126.059:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18939 comm="syz.5.4155" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb741dae159 code=0x7ffc0000 [ 1138.719561][ T36] audit: type=1326 audit(2000000126.069:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18939 comm="syz.5.4155" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7fb741dae159 code=0x7ffc0000 [ 1138.719609][ T36] audit: type=1326 audit(2000000126.069:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18939 comm="syz.5.4155" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb741dae159 code=0x7ffc0000 [ 1138.719646][ T36] audit: type=1326 audit(2000000126.069:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18939 comm="syz.5.4155" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb741dae159 code=0x7ffc0000 [ 1138.723342][ T36] audit: type=1326 audit(2000000126.069:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18939 comm="syz.5.4155" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7fb741dae159 code=0x7ffc0000 [ 1138.723386][ T36] audit: type=1326 audit(2000000126.069:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18939 comm="syz.5.4155" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb741dae159 code=0x7ffc0000 [ 1138.723424][ T36] audit: type=1326 audit(2000000126.069:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18939 comm="syz.5.4155" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb741dae159 code=0x7ffc0000 [ 1139.009350][T18736] team0: Port device team_slave_0 added [ 1139.221863][T18736] team0: Port device team_slave_1 added [ 1139.225480][T18944] configfs-gadget.g1 gadget.0: HOST MAC 02:d4:d2:75:72:34 [ 1139.225503][T18944] configfs-gadget.g1 gadget.0: MAC e6:e8:56:c3:e7:d7 [ 1139.584648][T18417] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 1139.736353][T18417] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.03 [ 1139.737250][T18417] usb 1-1: Dual-Role OTG device on HNP port [ 1139.737542][T18417] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1140.255617][T18417] usb 1-1: No union descriptors [ 1140.336470][T18417] gspca_main: spca501-2.14.0 probing 0000:0000 [ 1140.503793][T18417] gspca_spca501: reg write: error -32 [ 1140.567695][T18963] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4161'. [ 1140.903076][T18417] spca501 1-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 1140.935537][T18417] spca501 1-1:1.0: probe with driver spca501 failed with error -22 [ 1141.111086][T18721] bridge0: port 1(bridge_slave_0) entered blocking state [ 1141.111214][T18721] bridge0: port 1(bridge_slave_0) entered disabled state [ 1141.111423][T18721] bridge_slave_0: entered allmulticast mode [ 1141.198194][T18721] bridge_slave_0: entered promiscuous mode [ 1141.233610][T18736] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1141.233628][T18736] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1141.233654][T18736] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1141.288202][T18721] bridge0: port 2(bridge_slave_1) entered blocking state [ 1141.288319][T18721] bridge0: port 2(bridge_slave_1) entered disabled state [ 1141.288523][T18721] bridge_slave_1: entered allmulticast mode [ 1141.303691][T18721] bridge_slave_1: entered promiscuous mode [ 1141.611995][T18969] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4163'. [ 1141.714232][ T5948] hsr_slave_0: left promiscuous mode [ 1141.739576][ T5948] hsr_slave_1: left promiscuous mode [ 1141.740806][ T5948] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1141.740831][ T5948] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1142.484589][ T5948] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1142.484614][ T5948] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1142.632332][ T5948] veth1_macvtap: left promiscuous mode [ 1142.632440][ T5948] veth0_macvtap: left promiscuous mode [ 1142.632678][ T5948] veth1_vlan: left promiscuous mode [ 1144.134840][ T5948] team0 (unregistering): Port device team_slave_1 removed [ 1144.186833][ T5948] team0 (unregistering): Port device team_slave_0 removed [ 1144.423758][ T5948] team0 (unregistering): Port device dummy0 removed [ 1144.552151][T18736] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1144.552170][T18736] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1144.552197][T18736] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1144.838458][T18998] macsec0: entered promiscuous mode [ 1144.839045][T18998] macsec0: entered allmulticast mode [ 1144.839947][T18998] veth1_macvtap: entered allmulticast mode [ 1144.840897][T18998] batman_adv: batadv0: Adding interface: macsec0 [ 1144.840911][T18998] batman_adv: batadv0: The MTU of interface macsec0 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1144.840937][T18998] batman_adv: batadv0: Interface activated: macsec0 [ 1144.955594][T18721] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1145.081922][T18721] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1145.148943][T18736] hsr_slave_0: entered promiscuous mode [ 1145.150359][T18736] hsr_slave_1: entered promiscuous mode [ 1145.151302][T18736] debugfs: 'hsr0' already exists in 'hsr' [ 1145.151326][T18736] Cannot create hsr debugfs directory [ 1145.200938][T18721] team0: Port device team_slave_0 added [ 1145.462801][T19007] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4172'. [ 1146.002967][T18721] team0: Port device team_slave_1 added [ 1147.767516][T18721] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1147.767533][T18721] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1147.767554][T18721] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1147.856651][T18721] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1147.856670][T18721] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1147.856712][T18721] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1148.275044][T18721] hsr_slave_0: entered promiscuous mode [ 1148.276372][T18721] hsr_slave_1: entered promiscuous mode [ 1148.277355][T18721] debugfs: 'hsr0' already exists in 'hsr' [ 1148.277379][T18721] Cannot create hsr debugfs directory [ 1152.110446][T19090] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4198'. [ 1152.301805][ T5247] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1153.661754][T19118] netlink: 128 bytes leftover after parsing attributes in process `syz.5.4201'. [ 1154.994786][T19138] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4207'. [ 1155.145281][T19142] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4208'. [ 1155.533346][ T5247] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1155.794812][ T49] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1155.947787][ T49] usb 6-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 1155.949288][ T49] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1155.949311][ T49] usb 6-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1155.949325][ T49] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1155.949343][ T49] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1156.012782][ T49] usb 6-1: config 0 descriptor?? [ 1156.461497][T19164] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4212'. [ 1157.426162][ T49] hid (null): unknown global tag 0xe [ 1157.519491][ T49] hid-multitouch 0003:0EEF:72C4.0002: collection stack underflow [ 1157.519528][ T49] hid-multitouch 0003:0EEF:72C4.0002: item 0 2 0 12 parsing failed [ 1157.554726][ T49] hid-multitouch 0003:0EEF:72C4.0002: probe with driver hid-multitouch failed with error -22 [ 1157.632371][ T49] usb 6-1: USB disconnect, device number 8 [ 1159.276409][T18721] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1159.428788][ T5247] 8021q: adding VLAN 0 to HW filter on device eth8 [ 1160.389455][T19209] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4221'. [ 1160.389612][T19209] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4221'. [ 1161.073226][T19211] netlink: 64 bytes leftover after parsing attributes in process `syz.5.4223'. [ 1161.584383][ T49] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1161.663121][T18721] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1161.757001][ T49] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1161.757057][ T49] usb 6-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1161.786796][ T49] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1161.786814][ T49] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1161.826013][ T49] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1161.826041][ T49] usb 6-1: Product: syz [ 1161.826055][ T49] usb 6-1: Manufacturer: syz [ 1161.826070][ T49] usb 6-1: SerialNumber: syz [ 1161.874511][ T49] usb 6-1: selecting invalid altsetting 1 [ 1161.878688][ T49] usb 6-1: unit 6 not found! [ 1162.776849][T19220] IPVS: length: 24 != 3277873464 [ 1162.979498][ T49] usb 6-1: 2:0: cannot get min/max values for control 1 (id 2) [ 1163.047871][T19242] overlayfs: failed to clone upperpath [ 1163.116361][T18721] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1163.330151][ T49] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1163.367072][ T49] usb 6-1: USB disconnect, device number 9 [ 1163.701685][T19003] udevd[19003]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1164.115352][T18721] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1164.529029][T19257] FAULT_INJECTION: forcing a failure. [ 1164.529029][T19257] name failslab, interval 1, probability 0, space 0, times 0 [ 1164.529067][T19257] CPU: 1 UID: 0 PID: 19257 Comm: syz.5.4231 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1164.529092][T19257] Tainted: [L]=SOFTLOCKUP [ 1164.529098][T19257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1164.529109][T19257] Call Trace: [ 1164.529116][T19257] [ 1164.529125][T19257] dump_stack_lvl+0xe8/0x150 [ 1164.529155][T19257] should_fail_ex+0x46b/0x600 [ 1164.529183][T19257] should_failslab+0xa8/0x100 [ 1164.529209][T19257] ? skb_clone+0x212/0x3a0 [ 1164.529228][T19257] kmem_cache_alloc_noprof+0x9e/0x690 [ 1164.529252][T19257] ? skb_clone+0x212/0x3a0 [ 1164.529277][T19257] skb_clone+0x212/0x3a0 [ 1164.529301][T19257] __netlink_deliver_tap+0x413/0x860 [ 1164.529335][T19257] ? netlink_deliver_tap+0x2e/0x1b0 [ 1164.529358][T19257] netlink_deliver_tap+0x19c/0x1b0 [ 1164.529381][T19257] netlink_dump+0x95b/0xee0 [ 1164.529414][T19257] ? __pfx_netlink_dump+0x10/0x10 [ 1164.529447][T19257] ? netlink_recvmsg+0x5bf/0xa50 [ 1164.529467][T19257] ? kmem_cache_free+0x187/0x6d0 [ 1164.529490][T19257] ? netlink_recvmsg+0x5bf/0xa50 [ 1164.529515][T19257] netlink_recvmsg+0x683/0xa50 [ 1164.529547][T19257] ? __pfx_netlink_recvmsg+0x10/0x10 [ 1164.529567][T19257] ? lock_acquire+0x115/0x350 [ 1164.529593][T19257] ? __lock_acquire+0x747/0x2de0 [ 1164.529618][T19257] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 1164.529635][T19257] ? security_socket_recvmsg+0x7e/0x2c0 [ 1164.529656][T19257] ? __pfx_netlink_recvmsg+0x10/0x10 [ 1164.529679][T19257] sock_recvmsg+0x196/0x1e0 [ 1164.529707][T19257] ____sys_recvmsg+0x1f2/0x4b0 [ 1164.529746][T19257] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1164.529782][T19257] ? import_iovec+0x73/0xa0 [ 1164.529810][T19257] ___sys_recvmsg+0x213/0x5a0 [ 1164.529837][T19257] ? __pfx____sys_recvmsg+0x10/0x10 [ 1164.529862][T19257] ? lock_acquire+0x115/0x350 [ 1164.529901][T19257] ? __fget_files+0x3a8/0x420 [ 1164.529938][T19257] do_recvmmsg+0x320/0x7f0 [ 1164.529968][T19257] ? __pfx_do_recvmmsg+0x10/0x10 [ 1164.529988][T19257] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1164.530018][T19257] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1164.530056][T19257] __x64_sys_recvmmsg+0x198/0x250 [ 1164.530080][T19257] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1164.530113][T19257] do_syscall_64+0x166/0x520 [ 1164.530131][T19257] ? trace_irq_disable+0x3b/0x140 [ 1164.530153][T19257] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1164.530171][T19257] ? clear_bhb_loop+0x70/0xc0 [ 1164.530194][T19257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1164.530212][T19257] RIP: 0033:0x7fb741dae159 [ 1164.530229][T19257] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1164.530244][T19257] RSP: 002b:00007fb740006028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1164.530265][T19257] RAX: ffffffffffffffda RBX: 00007fb742035fa0 RCX: 00007fb741dae159 [ 1164.530278][T19257] RDX: 0000000000000004 RSI: 0000200000004ac0 RDI: 0000000000000003 [ 1164.530290][T19257] RBP: 00007fb740006090 R08: 0000000000000000 R09: 0000000000000000 [ 1164.530302][T19257] R10: 0000000040010000 R11: 0000000000000246 R12: 0000000000000001 [ 1164.530314][T19257] R13: 00007fb742036038 R14: 00007fb742035fa0 R15: 00007ffe14533c38 [ 1164.530344][T19257] [ 1165.204192][T19274] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4235'. [ 1167.574165][T19277] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4233'. [ 1167.574194][T19277] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4233'. [ 1169.606945][ T5948] bridge_slave_1: left allmulticast mode [ 1169.606981][ T5948] bridge_slave_1: left promiscuous mode [ 1169.607252][ T5948] bridge0: port 2(bridge_slave_1) entered disabled state [ 1169.775800][ T5948] bridge_slave_0: left allmulticast mode [ 1169.775837][ T5948] bridge_slave_0: left promiscuous mode [ 1169.776081][ T5948] bridge0: port 1(bridge_slave_0) entered disabled state [ 1171.425808][ T5948] bridge_slave_1: left allmulticast mode [ 1171.425834][ T5948] bridge_slave_1: left promiscuous mode [ 1171.425983][ T5948] bridge0: port 2(bridge_slave_1) entered disabled state [ 1171.935769][ T5948] bridge_slave_0: left allmulticast mode [ 1171.935807][ T5948] bridge_slave_0: left promiscuous mode [ 1171.936037][ T5948] bridge0: port 1(bridge_slave_0) entered disabled state [ 1172.746108][ T5948] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1172.814847][ T5948] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1172.836779][ T5948] bond0 (unregistering): Released all slaves [ 1173.335556][ T5948] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1173.414569][ T5948] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1173.435888][ T5948] bond0 (unregistering): Released all slaves [ 1176.021830][T18736] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1176.190625][T18736] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1176.308073][T19360] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4254'. [ 1176.422926][T18736] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1176.572625][T18736] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1176.644711][T18736] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1176.927202][ T1331] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.048464][T18736] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1177.352411][T14556] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1177.371385][T14556] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1177.389558][T14556] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1177.409856][T14556] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1177.410518][T14556] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1177.799935][T18736] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1179.195180][T18736] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1179.564840][T18193] Bluetooth: hci3: command tx timeout [ 1180.049391][T19394] FAULT_INJECTION: forcing a failure. [ 1180.049391][T19394] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1180.049469][T19394] CPU: 0 UID: 0 PID: 19394 Comm: syz.5.4257 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1180.049496][T19394] Tainted: [L]=SOFTLOCKUP [ 1180.049504][T19394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1180.049515][T19394] Call Trace: [ 1180.049522][T19394] [ 1180.049531][T19394] dump_stack_lvl+0xe8/0x150 [ 1180.049562][T19394] should_fail_ex+0x46b/0x600 [ 1180.049592][T19394] _copy_to_user+0x31/0xb0 [ 1180.049619][T19394] simple_read_from_buffer+0xe1/0x170 [ 1180.049645][T19394] proc_fail_nth_read+0x1be/0x230 [ 1180.049672][T19394] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1180.049698][T19394] ? rw_verify_area+0x250/0x4d0 [ 1180.049718][T19394] ? lockdep_hardirqs_on+0x7b/0x110 [ 1180.049738][T19394] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1180.049760][T19394] vfs_read+0x219/0xa90 [ 1180.049784][T19394] ? preempt_schedule_thunk+0x16/0x40 [ 1180.049809][T19394] ? __pfx_vfs_read+0x10/0x10 [ 1180.049828][T19394] ? preempt_schedule_thunk+0x16/0x40 [ 1180.049855][T19394] ? _raw_spin_unlock_irqrestore+0x76/0x80 [ 1180.049875][T19394] ? mutex_lock_nested+0x152/0x1d0 [ 1180.049896][T19394] ? fdget_pos+0x252/0x320 [ 1180.049925][T19394] ksys_read+0x156/0x270 [ 1180.049948][T19394] ? __pfx_ksys_read+0x10/0x10 [ 1180.049981][T19394] do_syscall_64+0x166/0x520 [ 1180.050000][T19394] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1180.050018][T19394] ? clear_bhb_loop+0x70/0xc0 [ 1180.050041][T19394] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1180.050060][T19394] RIP: 0033:0x7fb741d6e98e [ 1180.050077][T19394] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1180.050092][T19394] RSP: 002b:00007fb73ffa2fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1180.050120][T19394] RAX: ffffffffffffffda RBX: 00007fb73ffa36c0 RCX: 00007fb741d6e98e [ 1180.050133][T19394] RDX: 000000000000000f RSI: 00007fb73ffa30a0 RDI: 0000000000000007 [ 1180.050145][T19394] RBP: 00007fb73ffa3090 R08: 0000000000000000 R09: 0000000000000000 [ 1180.050158][T19394] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1180.050169][T19394] R13: 00007fb742036308 R14: 00007fb742036270 R15: 00007ffe14533c38 [ 1180.050200][T19394] [ 1181.713022][T18193] Bluetooth: hci3: command tx timeout [ 1182.950114][T14556] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1183.019302][T14556] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1183.022505][T14556] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1183.688134][T14556] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1183.688882][T14556] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1183.728924][T18193] Bluetooth: hci3: command tx timeout [ 1184.102469][T19420] tmpfs: Bad value for 'size' [ 1185.866625][T18193] Bluetooth: hci5: command tx timeout [ 1185.867411][T14556] Bluetooth: hci3: command tx timeout [ 1185.948491][T19444] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4267'. [ 1187.933825][T14556] Bluetooth: hci5: command tx timeout [ 1187.941494][T19461] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4269'. [ 1188.729112][T19483] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4274'. [ 1188.729217][T19483] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1188.729228][T19483] IPv6: NLM_F_CREATE should be set when creating new route [ 1189.149828][ T5948] hsr_slave_0: left promiscuous mode [ 1189.210669][ T5948] hsr_slave_1: left promiscuous mode [ 1189.219470][ T5948] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1189.284637][ T5948] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1189.364801][T18417] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1190.001429][T14556] Bluetooth: hci5: command tx timeout [ 1190.323343][T18417] usb 6-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 1190.335224][T18417] usb 6-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 1190.335258][T18417] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1190.335281][T18417] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1190.341155][T18417] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1190.341182][T18417] usb 6-1: Product: syz [ 1190.341197][T18417] usb 6-1: Manufacturer: syz [ 1190.341211][T18417] usb 6-1: SerialNumber: syz [ 1190.543414][ T5948] hsr_slave_0: left promiscuous mode [ 1190.604282][ T5948] hsr_slave_1: left promiscuous mode [ 1190.605481][ T5948] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1190.605506][ T5948] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1190.637303][T18417] usb 6-1: Limiting number of CPorts to U8_MAX [ 1190.637923][T18417] usb 6-1: Unused bulk IN endpoint found: 0x89 [ 1190.637934][T18417] usb 6-1: Not enough endpoints found in device, aborting! [ 1190.748545][ T5948] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1190.750113][ T5948] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1190.978199][ T5699] usb 6-1: USB disconnect, device number 10 [ 1191.255380][ T5948] veth1_macvtap: left promiscuous mode [ 1191.255484][ T5948] veth0_macvtap: left promiscuous mode [ 1191.255753][ T5948] veth1_vlan: left promiscuous mode [ 1191.256086][ T5948] veth0_vlan: left promiscuous mode [ 1191.387589][ T5948] veth1_macvtap: left promiscuous mode [ 1191.387675][ T5948] veth0_macvtap: left promiscuous mode [ 1191.387819][ T5948] veth1_vlan: left promiscuous mode [ 1191.387932][ T5948] veth0_vlan: left promiscuous mode [ 1192.047102][T14556] Bluetooth: hci5: command tx timeout [ 1192.079986][T19510] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4279'. [ 1193.815219][T19518] FAULT_INJECTION: forcing a failure. [ 1193.815219][T19518] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1193.815247][T19518] CPU: 1 UID: 0 PID: 19518 Comm: syz.5.4281 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1193.815262][T19518] Tainted: [L]=SOFTLOCKUP [ 1193.815266][T19518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1193.815272][T19518] Call Trace: [ 1193.815277][T19518] [ 1193.815281][T19518] dump_stack_lvl+0xe8/0x150 [ 1193.815301][T19518] should_fail_ex+0x46b/0x600 [ 1193.815318][T19518] get_futex_key+0xf12/0x1580 [ 1193.815339][T19518] ? __pfx_get_futex_key+0x10/0x10 [ 1193.815359][T19518] futex_wake+0x119/0x600 [ 1193.815374][T19518] ? __pfx_futex_wake+0x10/0x10 [ 1193.815384][T19518] ? do_raw_spin_lock+0x12b/0x2f0 [ 1193.815403][T19518] do_futex+0x458/0x4e0 [ 1193.815415][T19518] ? __pfx_do_futex+0x10/0x10 [ 1193.815427][T19518] ? __might_fault+0xaf/0x130 [ 1193.815443][T19518] mm_exit_exec_release+0x10d/0x290 [ 1193.815458][T19518] exit_mm+0x50/0x240 [ 1193.815470][T19518] do_exit+0x6cd/0x2360 [ 1193.815483][T19518] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1193.815501][T19518] ? __pfx_do_exit+0x10/0x10 [ 1193.815518][T19518] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1193.815530][T19518] ? rcu_preempt_deferred_qs_irqrestore+0x7b7/0xb90 [ 1193.815549][T19518] do_group_exit+0x22d/0x2f0 [ 1193.815562][T19518] get_signal+0x121b/0x12c0 [ 1193.815585][T19518] arch_do_signal_or_restart+0xbb/0x860 [ 1193.815602][T19518] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1193.815623][T19518] ? __x64_sys_recvmmsg+0x198/0x250 [ 1193.815640][T19518] exit_to_user_mode_loop+0x10e/0x770 [ 1193.815653][T19518] ? rcu_is_watching+0x16/0xb0 [ 1193.815670][T19518] do_syscall_64+0x328/0x520 [ 1193.815681][T19518] ? trace_irq_disable+0x3b/0x140 [ 1193.815694][T19518] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1193.815710][T19518] ? clear_bhb_loop+0x70/0xc0 [ 1193.815723][T19518] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1193.815733][T19518] RIP: 0033:0x7fb741dae159 [ 1193.815744][T19518] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1193.815753][T19518] RSP: 002b:00007fb73ffe5028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1193.815765][T19518] RAX: fffffffffffffe00 RBX: 00007fb742036090 RCX: 00007fb741dae159 [ 1193.815773][T19518] RDX: 0000000000000003 RSI: 0000200000000180 RDI: 0000000000000003 [ 1193.815780][T19518] RBP: 00007fb73ffe5090 R08: 0000000000000000 R09: 0000000000000000 [ 1193.815786][T19518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1193.815792][T19518] R13: 00007fb742036128 R14: 00007fb742036090 R15: 00007ffe14533c38 [ 1193.815808][T19518] [ 1194.469634][T19523] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4283'. [ 1194.469707][T19523] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1194.469714][T19523] IPv6: NLM_F_CREATE should be set when creating new route [ 1194.719129][T19526] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4284'. [ 1194.719154][T19526] netlink: 'syz.1.4284': attribute type 1 has an invalid length. [ 1194.734884][ T5948] team0 (unregistering): Port device team_slave_1 removed [ 1194.797601][ T5948] team0 (unregistering): Port device team_slave_0 removed [ 1195.495499][ T5948] team0 (unregistering): Port device team_slave_1 removed [ 1195.536232][ T5948] team0 (unregistering): Port device team_slave_0 removed [ 1196.881722][T19549] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4290'. [ 1197.407091][T19559] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4292'. [ 1197.407195][T19559] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1198.087403][T19569] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4293'. [ 1198.169073][T19576] Unsupported ieee802154 address type: 0 [ 1198.420895][T19365] bridge0: port 1(bridge_slave_0) entered blocking state [ 1198.421658][T19365] bridge0: port 1(bridge_slave_0) entered disabled state [ 1198.421818][T19365] bridge_slave_0: entered allmulticast mode [ 1198.449907][T19365] bridge_slave_0: entered promiscuous mode [ 1198.498640][T19365] bridge0: port 2(bridge_slave_1) entered blocking state [ 1198.498860][T19365] bridge0: port 2(bridge_slave_1) entered disabled state [ 1198.499029][T19365] bridge_slave_1: entered allmulticast mode [ 1198.501629][T19365] bridge_slave_1: entered promiscuous mode [ 1198.581162][T19365] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1198.633832][T19365] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1198.719646][T19365] team0: Port device team_slave_0 added [ 1198.735155][T19365] team0: Port device team_slave_1 added [ 1198.838275][T19403] bridge0: port 1(bridge_slave_0) entered blocking state [ 1198.838499][T19403] bridge0: port 1(bridge_slave_0) entered disabled state [ 1198.838656][T19403] bridge_slave_0: entered allmulticast mode [ 1198.840254][T19403] bridge_slave_0: entered promiscuous mode [ 1198.842387][T19365] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1198.842401][T19365] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1198.842426][T19365] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1198.843007][T19403] bridge0: port 2(bridge_slave_1) entered blocking state [ 1198.843129][T19403] bridge0: port 2(bridge_slave_1) entered disabled state [ 1198.843649][T19403] bridge_slave_1: entered allmulticast mode [ 1198.872207][T19403] bridge_slave_1: entered promiscuous mode [ 1198.924647][T19365] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1198.924666][T19365] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1198.924691][T19365] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1199.106787][T19403] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1199.156286][T19403] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1199.183768][T19365] hsr_slave_0: entered promiscuous mode [ 1199.187561][T19365] hsr_slave_1: entered promiscuous mode [ 1199.190003][T19365] debugfs: 'hsr0' already exists in 'hsr' [ 1199.190027][T19365] Cannot create hsr debugfs directory [ 1199.329521][T19601] netlink: 'syz.1.4301': attribute type 4 has an invalid length. [ 1199.329681][T19602] netlink: 'syz.1.4301': attribute type 4 has an invalid length. [ 1200.049372][T19403] team0: Port device team_slave_0 added [ 1200.187538][T19606] netlink: 'syz.1.4301': attribute type 4 has an invalid length. [ 1200.187686][T19601] netlink: 'syz.1.4301': attribute type 4 has an invalid length. [ 1200.252077][T19608] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4303'. [ 1201.574709][T19615] fuse: fd is not a fuse device [ 1201.629938][T19618] netlink: 64 bytes leftover after parsing attributes in process `syz.5.4306'. [ 1202.841415][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1203.001471][T19403] team0: Port device team_slave_1 added [ 1203.357226][T19403] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1203.357243][T19403] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1203.357267][T19403] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1203.427637][T19403] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1203.427655][T19403] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1203.427680][T19403] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1203.844195][T19403] hsr_slave_0: entered promiscuous mode [ 1203.845417][T19403] hsr_slave_1: entered promiscuous mode [ 1203.847829][T19403] debugfs: 'hsr0' already exists in 'hsr' [ 1203.847852][T19403] Cannot create hsr debugfs directory [ 1204.224258][ T5698] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1204.388417][ T5698] usb 6-1: Using ep0 maxpacket: 16 [ 1204.389420][ T5698] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 1204.391347][ T5698] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1204.391371][ T5698] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1204.429211][ T5698] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1204.429238][ T5698] usb 6-1: SerialNumber: syz [ 1204.469015][ T5698] usb 6-1: 0:2 : does not exist [ 1206.590551][T19679] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4315'. [ 1207.013568][ T5698] usb 6-1: 5:0: cannot get min/max values for control 2 (id 5) [ 1207.025408][ T5698] usb 6-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 1207.025437][ T5698] usb 6-1: [5] FU [Feature 5 Playback Volume] ch = 1, val = 0/1/1 [ 1207.370599][ T5698] usb 6-1: USB disconnect, device number 11 [ 1207.696347][T19693] udevd[19693]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1209.006297][T19719] FAULT_INJECTION: forcing a failure. [ 1209.006297][T19719] name failslab, interval 1, probability 0, space 0, times 0 [ 1209.006335][T19719] CPU: 1 UID: 0 PID: 19719 Comm: syz.5.4319 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1209.006360][T19719] Tainted: [L]=SOFTLOCKUP [ 1209.006367][T19719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1209.006378][T19719] Call Trace: [ 1209.006386][T19719] [ 1209.006394][T19719] dump_stack_lvl+0xe8/0x150 [ 1209.006426][T19719] should_fail_ex+0x46b/0x600 [ 1209.006457][T19719] should_failslab+0xa8/0x100 [ 1209.006486][T19719] __kmalloc_node_track_caller_noprof+0xfb/0x7b0 [ 1209.006512][T19719] ? kobject_set_name_vargs+0x61/0x110 [ 1209.006534][T19719] ? kobject_set_name_vargs+0x61/0x110 [ 1209.006562][T19719] kvasprintf+0xeb/0x1a0 [ 1209.006591][T19719] ? __pfx_kvasprintf+0x10/0x10 [ 1209.006618][T19719] ? do_raw_spin_lock+0x12b/0x2f0 [ 1209.006645][T19719] ? kvasprintf_const+0xe8/0x240 [ 1209.006673][T19719] kobject_set_name_vargs+0x61/0x110 [ 1209.006698][T19719] dev_set_name+0xe2/0x140 [ 1209.006718][T19719] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1209.006746][T19719] ? rt_mutex_slowunlock+0x219/0x460 [ 1209.006772][T19719] ? __pfx_dev_set_name+0x10/0x10 [ 1209.006808][T19719] pci_setup_device+0x56c/0x2670 [ 1209.006833][T19719] ? do_syscall_64+0x166/0x520 [ 1209.006850][T19719] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1209.006882][T19719] ? __pfx_pci_setup_device+0x10/0x10 [ 1209.006938][T19719] ? __kasan_kmalloc+0x93/0xb0 [ 1209.006965][T19719] ? __kmalloc_cache_noprof+0x3d5/0x680 [ 1209.007004][T19719] pci_scan_single_device+0x139/0x230 [ 1209.007031][T19719] ? __pfx_pci_scan_single_device+0x10/0x10 [ 1209.007062][T19719] ? lock_acquire+0x115/0x350 [ 1209.007089][T19719] pci_scan_slot+0x1ba/0x5a0 [ 1209.007118][T19719] ? __pfx_pci_scan_slot+0x10/0x10 [ 1209.007156][T19719] pci_scan_child_bus_extend+0x68/0x7c0 [ 1209.007192][T19719] pci_rescan_bus+0x18/0x40 [ 1209.007210][T19719] rescan_store+0xcc/0x150 [ 1209.007235][T19719] ? __pfx_rescan_store+0x10/0x10 [ 1209.007261][T19719] ? sysfs_file_kobj+0x1e4/0x230 [ 1209.007282][T19719] ? sysfs_kf_write+0x166/0x260 [ 1209.007305][T19719] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1209.007322][T19719] kernfs_fop_write_iter+0x3a5/0x540 [ 1209.007354][T19719] vfs_write+0x61e/0xbb0 [ 1209.007386][T19719] ? __pfx_vfs_write+0x10/0x10 [ 1209.007410][T19719] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1209.007434][T19719] ? mutex_lock_nested+0x152/0x1d0 [ 1209.007455][T19719] ? fdget_pos+0x252/0x320 [ 1209.007484][T19719] ksys_write+0x156/0x270 [ 1209.007508][T19719] ? __pfx_ksys_write+0x10/0x10 [ 1209.007542][T19719] do_syscall_64+0x166/0x520 [ 1209.007560][T19719] ? trace_irq_disable+0x3b/0x140 [ 1209.007581][T19719] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1209.007600][T19719] ? clear_bhb_loop+0x70/0xc0 [ 1209.007623][T19719] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1209.007641][T19719] RIP: 0033:0x7fb741dae159 [ 1209.007660][T19719] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1209.007675][T19719] RSP: 002b:00007fb73ffe5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1209.007695][T19719] RAX: ffffffffffffffda RBX: 00007fb742036090 RCX: 00007fb741dae159 [ 1209.007709][T19719] RDX: 0000000000000001 RSI: 0000200000000300 RDI: 0000000000000006 [ 1209.007721][T19719] RBP: 00007fb73ffe5090 R08: 0000000000000000 R09: 0000000000000000 [ 1209.007739][T19719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1209.007750][T19719] R13: 00007fb742036128 R14: 00007fb742036090 R15: 00007ffe14533c38 [ 1209.007783][T19719] [ 1209.007886][T19719] pci (null): [8086:1237] type 00 class 0x060000 conventional PCI endpoint [ 1209.010673][T19719] ------------[ cut here ]------------ [ 1209.010685][T19719] ret < 0 [ 1209.010697][T19719] WARNING: drivers/pci/probe.c:2770 at pci_device_add+0x154a/0x1920, CPU#1: syz.5.4319/19719 [ 1209.393469][T19719] Modules linked in: [ 1209.397402][T19719] CPU: 1 UID: 0 PID: 19719 Comm: syz.5.4319 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1209.408891][T19719] Tainted: [L]=SOFTLOCKUP [ 1209.413209][T19719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1209.423313][T19719] RIP: 0010:pci_device_add+0x154a/0x1920 [ 1209.428991][T19719] Code: f8 ff ff e9 6f f8 ff ff e8 23 c4 b2 fc 90 0f 0b 90 e9 9a f8 ff ff e8 15 c4 b2 fc 90 0f 0b 90 e9 69 fc ff ff e8 07 c4 b2 fc 90 <0f> 0b 90 e9 2f fd ff ff 89 d1 80 e1 07 80 c1 03 38 c1 0f 8c 45 eb [ 1209.448636][T19719] RSP: 0018:ffffc900049c78a0 EFLAGS: 00010293 [ 1209.454737][T19719] RAX: ffffffff8513f0a9 RBX: 00000000ffffffea RCX: ffff88806542ddc0 [ 1209.462711][T19719] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1209.470733][T19719] RBP: ffffc900049c79b0 R08: 0000000000000000 R09: 0000000000000000 [ 1209.478743][T19719] R10: dffffc0000000000 R11: ffffed10041d1c22 R12: 1ffff110041d1ca8 [ 1209.486747][T19719] R13: ffff888021ab8030 R14: ffff88813fe5d000 R15: ffff888020e8e000 [ 1209.494745][T19719] FS: 00007fb73ffe56c0(0000) GS:ffff888125cc4000(0000) knlGS:0000000000000000 [ 1209.503672][T19719] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1209.510286][T19719] CR2: 00007fb73ffe4ff8 CR3: 0000000038ece000 CR4: 00000000003526f0 [ 1209.518289][T19719] Call Trace: [ 1209.521567][T19719] [ 1209.524527][T19719] ? __pfx_pci_device_add+0x10/0x10 [ 1209.529738][T19719] ? __kmalloc_cache_noprof+0x3d5/0x680 [ 1209.535337][T19719] pci_scan_single_device+0x1dd/0x230 [ 1209.540719][T19719] ? __pfx_pci_scan_single_device+0x10/0x10 [ 1209.546650][T19719] ? lock_acquire+0x115/0x350 [ 1209.551339][T19719] pci_scan_slot+0x1ba/0x5a0 [ 1209.555971][T19719] ? __pfx_pci_scan_slot+0x10/0x10 [ 1209.561101][T19719] pci_scan_child_bus_extend+0x68/0x7c0 [ 1209.566706][T19719] pci_rescan_bus+0x18/0x40 [ 1209.571214][T19719] rescan_store+0xcc/0x150 [ 1209.575669][T19719] ? __pfx_rescan_store+0x10/0x10 [ 1209.580708][T19719] ? sysfs_file_kobj+0x1e4/0x230 [ 1209.585677][T19719] ? sysfs_kf_write+0x166/0x260 [ 1209.590541][T19719] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1209.595763][T19719] kernfs_fop_write_iter+0x3a5/0x540 [ 1209.601069][T19719] vfs_write+0x61e/0xbb0 [ 1209.605370][T19719] ? __pfx_vfs_write+0x10/0x10 [ 1209.610149][T19719] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1209.616015][T19719] ? mutex_lock_nested+0x152/0x1d0 [ 1209.621161][T19719] ? fdget_pos+0x252/0x320 [ 1209.625651][T19719] ksys_write+0x156/0x270 [ 1209.630022][T19719] ? __pfx_ksys_write+0x10/0x10 [ 1209.634946][T19719] do_syscall_64+0x166/0x520 [ 1209.639555][T19719] ? trace_irq_disable+0x3b/0x140 [ 1209.644631][T19719] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1209.650701][T19719] ? clear_bhb_loop+0x70/0xc0 [ 1209.655429][T19719] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1209.661337][T19719] RIP: 0033:0x7fb741dae159 [ 1209.665810][T19719] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1209.685506][T19719] RSP: 002b:00007fb73ffe5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1209.693952][T19719] RAX: ffffffffffffffda RBX: 00007fb742036090 RCX: 00007fb741dae159 [ 1209.701990][T19719] RDX: 0000000000000001 RSI: 0000200000000300 RDI: 0000000000000006 [ 1209.710018][T19719] RBP: 00007fb73ffe5090 R08: 0000000000000000 R09: 0000000000000000 [ 1209.718060][T19719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1209.726085][T19719] R13: 00007fb742036128 R14: 00007fb742036090 R15: 00007ffe14533c38 [ 1209.734136][T19719] [ 1209.737184][T19719] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1209.744474][T19719] CPU: 1 UID: 0 PID: 19719 Comm: syz.5.4319 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1209.755943][T19719] Tainted: [L]=SOFTLOCKUP [ 1209.760276][T19719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1209.770337][T19719] Call Trace: [ 1209.773622][T19719] [ 1209.776561][T19719] vpanic+0x56d/0xa60 [ 1209.780551][T19719] ? __pfx__printk+0x10/0x10 [ 1209.785151][T19719] ? __pfx_vpanic+0x10/0x10 [ 1209.789652][T19719] ? is_bpf_text_address+0x292/0x2b0 [ 1209.794950][T19719] ? is_bpf_text_address+0x26/0x2b0 [ 1209.800177][T19719] panic+0xc5/0xd0 [ 1209.803903][T19719] ? __pfx_panic+0x10/0x10 [ 1209.808350][T19719] __warn+0x315/0x4c0 [ 1209.812338][T19719] ? pci_device_add+0x154a/0x1920 [ 1209.817384][T19719] ? pci_device_add+0x154a/0x1920 [ 1209.822424][T19719] __report_bug+0x276/0x570 [ 1209.826940][T19719] ? pci_device_add+0x154a/0x1920 [ 1209.831980][T19719] ? __pfx___report_bug+0x10/0x10 [ 1209.837021][T19719] ? pci_device_add+0x154a/0x1920 [ 1209.842064][T19719] report_bug+0x16b/0x220 [ 1209.846411][T19719] ? pci_device_add+0x154a/0x1920 [ 1209.851450][T19719] ? pci_device_add+0x154c/0x1920 [ 1209.856489][T19719] handle_bug+0x9c/0x200 [ 1209.860746][T19719] exc_invalid_op+0x1a/0x50 [ 1209.865260][T19719] asm_exc_invalid_op+0x1a/0x20