last executing test programs: 17m1.650894768s ago: executing program 4 (id=739): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @loopback}, 0xc) dup(r0) r1 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r5, 0x800452d2, &(0x7f0000000100)) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e23, 0xaf, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0xfffffffd}, 0x1c) r7 = syz_open_dev$vcsa(&(0x7f0000000040), 0x594, 0x8000) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000004e80)={'syztnl0\x00', &(0x7f0000004d80)={'syztnl1\x00', 0x0, 0x40, 0x7800, 0xfffffff7, 0x0, {{0x31, 0x4, 0x0, 0x5, 0xc4, 0x68, 0x0, 0x1, 0x2f, 0x0, @rand_addr=0x64010101, @rand_addr=0x64010100, {[@lsrr={0x83, 0x13, 0x31, [@private=0xa010102, @multicast1, @loopback, @loopback]}, @generic={0x94, 0x7, "cd409cdc16"}, @cipso={0x86, 0x29, 0x3, [{0x6, 0xa, "d8509cf6c3fd7d3d"}, {0x0, 0x7, "60781e373a"}, {0x0, 0x12, "68d0430ee92befd1b92ecfd2855b7b17"}]}, @lsrr={0x83, 0xb, 0xe1, [@remote, @dev={0xac, 0x14, 0x14, 0x38}]}, @generic={0x44, 0x4, "22a0"}, @timestamp_prespec={0x44, 0x24, 0x93, 0x3, 0x2, [{@loopback, 0x5}, {@remote}, {@local, 0xd}, {@multicast1, 0xe8bd}]}, @end, @timestamp_prespec={0x44, 0x14, 0x25, 0x3, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, {@dev={0xac, 0x14, 0x14, 0x29}, 0xfffffff8}]}, @ssrr={0x89, 0xb, 0x5b, [@remote, @empty]}, @cipso={0x86, 0x17, 0xfffffffffffffffc, [{0x0, 0x8, "5c11e7640d64"}, {0x1, 0x9, "e2ddfc79fe02da"}]}]}}}}}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmmsg$inet6(r7, &(0x7f0000005780)=[{{&(0x7f0000000200)={0xa, 0x4e23, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000240)="8a2079387deac4218254f2e0fbd80a6b2af86205392761a77c2108c843e2dbc95260b900e885e1cdbb454072de7c", 0x2e}, {&(0x7f0000000300)="5e908d09e81be261241fcd431d2e2213415117d40dfee33435ed4fc6d349f593e51369befd093de129a1db4e802ed421dfe7337addfb4d96286a1d4260a0b89d314f202a472688554584af4f6cc858606f7accd7213f", 0x56}, {&(0x7f0000000380)="80c6cc730675e157e99c66e86ab68607a717f6800d0994b89f2eec44825fd2b19586e812d52f75b21640973cabb8fb53ad9765452c32696ebad299533c2eb993eb7d3d0c9c4007c40409bcce29bbf7b0e3ccb4c076c52f2c020b2622b24656ad1a55a3ff66aa5f43cb4f5649cf80bd6a9700529df674193e72f0a5dbc88940dab5d598e95b279756a99cdc0cddaad87e28055afc7b5e94414f8b0bc48d42803750e6a3ead8d5c2483a205342a59d534522b9ec4ebfd367fbd8570d324105f0418c7a4065133e3fc3b8ca50478ed3f7e90d7926ea6c43a3ee675f38d2c57eba8199bcb491faa9a366f3", 0xe9}], 0x3, &(0x7f0000000540)=[@hoplimit={{0x14, 0x29, 0x34, 0x8}}, @hoplimit={{0x14, 0x29, 0x34, 0x1}}, @tclass={{0x14, 0x29, 0x43, 0x10}}, @dontfrag={{0x14, 0x29, 0x3e, 0x9}}, @flowinfo={{0x14, 0x29, 0xb, 0x8}}], 0x78}}, {{&(0x7f00000005c0)={0xa, 0x4e23, 0x10000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4}, 0x1c, &(0x7f0000000740)=[{&(0x7f0000000600)="92f60e52b1361d1ca6ce492e0e85752338839aad8f37e79d8715d7b24f58f47c0c903b08207f5f24c07a050679f5b06b2e61f896a1cb31a7d7570fe5a2468f3c0aee0881c924fecaddb2be1d8458630242efc1e7954244195d906ff69f1ab0981c884e", 0x63}, {&(0x7f0000000680)="82e29da247b3f6712e64e8c217e01da3f28b9a87ee47347da5cb567be0685ce799b7c263aa60b14aef11f71c68529cc8ff2801d33f4fe8fcb3f8a554d29f796ffe79e048ac22a83f4a5cebc0949e5fb8fc35b414681128eaca08523155973c06f3a186997942a0c34add9f8f5b4d095c67dbfaea77554cb4892a529702552733c7fda6168a10fdb2ed3bade3a282453390b8d849c7b2c89e24", 0x99}], 0x2, &(0x7f0000000780)=[@tclass={{0x14, 0x29, 0x43, 0x4}}, @tclass={{0x14, 0x29, 0x43, 0x8001}}], 0x30}}, {{&(0x7f00000007c0)={0xa, 0x4e23, 0x4, @empty, 0x8000}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000800)}, {&(0x7f0000000840)="9d2df7d40843e9d5e89c789b4c3646002d0eeff9bc7cde35d7d9ed8a689890420d96ed4a5e85bd17f79c3a6953ea0f5f1290ce19de4c14171e369aab83dc5609486b494cb116dd49bab81f2a6c1b36d9d00146e2ee6c7085021ea421adaf59c343e5f818495a8bcc4110945ef3c0da74aa010ecba093115dc7c89568175672d154fdb97ffc05969bc8ecddec5fa355a9d2edfc5e14e24646e72cf40954d94292bf408f50ef2505cd8fead98c91ff", 0xae}], 0x2, &(0x7f0000000940)=[@rthdrdstopts={{0x70, 0x29, 0x37, {0x2f, 0xb, '\x00', [@jumbo={0xc2, 0x4, 0x2656}, @calipso={0x7, 0x50, {0x2, 0x12, 0x3, 0x1ff, [0x1, 0x4, 0x5, 0x6, 0x81, 0xffffffffffffffff, 0x1, 0x4, 0x7d]}}]}}}, @dstopts_2292={{0x170, 0x29, 0x4, {0x5e, 0x2a, '\x00', [@calipso={0x7, 0x58, {0x3, 0x14, 0xd, 0xc986, [0x4, 0x34a, 0x5, 0x7fff, 0xffffffff, 0x7, 0xc, 0x982, 0x81, 0x8]}}, @enc_lim={0x4, 0x1, 0x4}, @jumbo={0xc2, 0x4, 0x400}, @calipso={0x7, 0x38, {0x3, 0xc, 0x46, 0xffff, [0x5, 0x6, 0x80, 0x2, 0x8000000000000000, 0x8000]}}, @calipso={0x7, 0x48, {0x2, 0x10, 0x9, 0x4, [0x40a, 0x5, 0x7, 0x49d1, 0x4, 0x8000, 0x8, 0x1]}}, @calipso={0x7, 0x10, {0x3, 0x2, 0x7, 0x9, [0x1]}}, @calipso={0x7, 0x18, {0x2, 0x4, 0x3, 0x3, [0x9739, 0x708]}}, @jumbo, @generic={0x5, 0x38, "d0436845a585e3392a12a066db1dffa6143ee0e2755c7d06ed267ff4099b0cf668ca44092f25619d8792b246fb9d413cef7e9bd438e49ab9"}]}}}, @dstopts_2292={{0x190, 0x29, 0x4, {0x4, 0x2e, '\x00', [@calipso={0x7, 0x20, {0x2, 0x6, 0x6, 0x9, [0xb, 0xc56, 0x40]}}, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x8, 0x38, "3084285f4838bee2f9a109e0088eb6d87e304c1140ca81f562489d6b62f27b05d6169da3aa4c973283a77ccb277c97eeb2a316d20b068fa7"}, @ra={0x5, 0x2, 0x1}, @calipso={0x7, 0x30, {0x3, 0xa, 0x3, 0x33d6, [0xa8, 0x4, 0x5, 0x2, 0x5]}}, @generic={0x3, 0xc1, "949ef1e220027e7b454f997fc2b847b820a7e3828462b1f544b315792ac89e0d002b84c0f70f1167cbd3c248221afd8813a5fda211329651b9934aced6281072d72eb61a71c699428d711cb491c34eae301244632f85e8cb084491eb56772a184fc440bfa7a2d088450a6b5bcc26dc1bd058c0a12cda6aac3256c80cf6d45aa420c8e6faacaade7c88ddd6e903e0f9813591bea53fa4854f8e91bf4f78625298a7053ac80f4f0988280fb423d5e9b11f1040b660949af86a659b9e4b66a1f0019d"}, @enc_lim={0x4, 0x1, 0x9}]}}}, @hopopts={{0xb8, 0x29, 0x36, {0x84, 0x14, '\x00', [@jumbo={0xc2, 0x4, 0xaed}, @calipso={0x7, 0x48, {0x3, 0x10, 0x7, 0x8, [0x7, 0xffff, 0x0, 0x0, 0x3ff, 0x0, 0xe3b, 0xdd4b]}}, @jumbo={0xc2, 0x4, 0x5}, @enc_lim={0x4, 0x1, 0x3}, @calipso={0x7, 0x18, {0x3, 0x4, 0x6, 0xa0dc, [0x5, 0x1]}}, @enc_lim={0x4, 0x1, 0x2a}, @calipso={0x7, 0x28, {0x3, 0x8, 0x3, 0x8, [0x1, 0x7, 0x8000, 0x99]}}]}}}, @hopopts_2292={{0x48, 0x29, 0x36, {0x3b, 0x6, '\x00', [@calipso={0x7, 0x28, {0x0, 0x8, 0x58, 0x1, [0x100000000, 0x1, 0x7e0f, 0x1]}}, @pad1, @padn={0x1, 0x1, [0x0]}]}}}, @hopopts_2292={{0x38, 0x29, 0x36, {0x3a, 0x3, '\x00', [@pad1, @ra={0x5, 0x2, 0x5}, @calipso={0x7, 0x10, {0x3, 0x2, 0x5, 0x1, [0x9]}}]}}}, @tclass={{0x14, 0x29, 0x43, 0x4}}, @rthdr_2292={{0x98, 0x29, 0x39, {0x0, 0x10, 0x1, 0x81, 0x0, [@empty, @private0, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, @private0, @private0={0xfc, 0x0, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}]}}}, @tclass={{0x14, 0x29, 0x43, 0x8}}], 0x570}}, {{0xfffffffffffffffc, 0x0, &(0x7f00000031c0)=[{&(0x7f0000000ec0)="6274c8174fcc085001acd20d9120bbf2b56bcc5a", 0x14}, {&(0x7f0000000f00)="3741a283f48e33b796da0b86191e586e7b06634305152ad93f430c26c77253c7f4cb8b6c101f18a53b6b491425892a6186ced181c1f5352324d8e404f539d9e774e42259eb3979a2f5ca6e798ac1116e6149c547e6fdee6a809b58a5963c8a9047229d9c4899055661d5b44899b6ebf408a358fb4ec0f954df50b585812476f5358c295f14529f4569d2f68cbee34b836a3779ee008b616df92828c4a98ad087cedb0656474592f5078f056316c6871491a476766e9f0d75b7600ef3417a86", 0xbf}, {&(0x7f0000000fc0)="d45e3013aeac039d984bf0509c016fcb5b320e3d85d01e5d0bf5439c7f706988892a99ca2bca1d7820c5bc0cf34c564fe0cf7be6c2b09dae5adf2db3ee186ef2f2ad7064edaafe4d15c6a39553fce894b43829aae870238c03d20501638771b6f2d616c72c014c534ae807aa6d1f85e36bc1a57c8fd0cd6c501639b1", 0x7c}, {&(0x7f0000001040)="c2edafff6615de88618ac330bfa6d1c5c4bbe87e8f4df9c87ecf8effffdbadd4b9708b8f659441b353651c6526a184e3c164a7c624ce4ed0f6cdde9e9ae82fd66df1077bcadd3ca05861b6535cbcc8a4cde3c4e7d427673467176703ad81dc02f9fdcff8e9879914a87ab239c0a82a865d2474d7ddaf5899e85de88cc1ac116e04df9272216d2a94eb28a02067d9e930c3b9", 0x92}, {&(0x7f0000001100)="0bba084dce0979bf290f2cae9bd44f1807281016fd5134de14e34ca7800b7ccf2a18fff948dce175d172e6b1ed271c4e704854e5bd7e9c3792959228023c7522bbe064ccb5888cbc013e5e9a6d60ff5389a1f6c8400e9225f388bf", 0x5b}, {&(0x7f00000021c0)="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", 0x1000}], 0x6, &(0x7f0000003240)=[@dontfrag={{0x14, 0x29, 0x3e, 0x7}}], 0x18}}, {{&(0x7f0000003280)={0xa, 0x4e24, 0x7f, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c, &(0x7f0000003500), 0x0, &(0x7f0000003540)}}, {{0x0, 0x0, &(0x7f0000003880)=[{&(0x7f0000003580)="c2955133e4d6e1215ed724907b7bb35947dce3a7544b7da29dee87ab16510dc59522ededc93bfd6f8a31590b87a8089b23007f834007f0871aa4d39cc7ad7520daaa2ff9b57717dc61290072b86bcc925d82c77953be4412427834f3ba9ce8de71adad78364e94c971d366bdab8598857ed8c13ad0dc9ddaaa358c415161d318c834e97596d3e760540359f2fdcb283bff", 0x91}, {&(0x7f0000003640)="c70d347eb8f19176ea94138f68a2b1d3a79e61796ca8bcdd4e63c0e656881f8bd48037464ae2fbed64d9cadab1878b513637cd3890740ec45f2b2cd6920b04a2a1601132552ab8084353eda0891b423229eb", 0x52}, {&(0x7f00000036c0)="204b8a4ff2c76177c5bc31823b3377d6bc6c0d4f0a7eabab46e62d5bef73ce6b5d58f4a98b2a76c5c44c66c62c57383c4119ec5fcea1af295c6ca7cb92319bab6f57e76bc437f15e0d90bac9c296ea0de0b3118ddff7fa1944ac74515b93774358dd226a515062e1a98140fcf993cafdd6f33be03c8aee04537768555ade25edaf8f6df3e2fbdf3df4412d802d58093463d49297fdadc0c52d6abc5daa5c0903b627e8718d018137bbca2005b6f830683928455cd1faf393917753fee5039fea105ba0e0beea54a926b5b9a194acca32a9a5b8fc71a70c1eefddc44e9aaded", 0xdf}, {&(0x7f00000037c0)="cbf1f4dac601b412039ec912a036d9ffae1d4ff83872dd2bde6b6ade038027d7a6be5cd8482e12bf19378ad9f23695d3e2963dd34e509ea61ef139befab34126a0f0cd4d4f980ceb0c6b53b3b00c9913cdce8da2efbedaf5e20336ba0062b41bb03d0fb413501ca410712b97e6b4f506b55b390f29653c591d8c99592ea5e3b2f8121dae7afd30a8f13e014793581e6ed0af0ee312f833dc6616de1af1a222676eb79496d1cae8", 0xa7}], 0x4, &(0x7f00000038c0)=[@rthdr_2292={{0x28, 0x29, 0x39, {0x2, 0x2, 0x0, 0x7, 0x0, [@local]}}}], 0x28}}, {{&(0x7f0000003900)={0xa, 0x4e23, 0x1ff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}, 0x1c, &(0x7f0000004d00)=[{&(0x7f0000003940)="93595a69ace0b1286457765b0bcb1143f745181e03163dc99c5b0256", 0x1c}, {&(0x7f0000003980)="365d1d9d996650", 0x7}, {&(0x7f00000039c0)="25e4e02aaea1eb755722ffc6f92dc40da2fbeb29a9d7852967a390cbfc79458af725932ff3eb9fe996f5119dc23ad2eb40eae0e567b79804459bf2722146572429d770297a9e287f09ddae2f8a79bba7fed6245e2244398c43251a5e73f9fa6435fac27d964215680f2a1bbc5f032baf3d2e924fcefbd8717707ff8056a8239b86ee226edb59bf1030ea12f0020290c85ac1e45e04e1b1cfb3f0b113185cd984a8d64599a3936e165733bb0ec73c5943bf2e368fc75de56fa8eb6b5dc76af6f1069e92e5abcd0069aac3ee9efd3b329bb1156eba020558c475ce8bf9bd40e6498f86ada7b0792ce790304da58c1d3b1769abedc36025ef", 0xf7}, {&(0x7f0000003ac0)="a78cf6f839a9d95044841f19603f9181712cfe4dec56bc534e9c8759fdf5780d4ae737862f46445dc50c2e5fcfb692a1cbd528ce73391d899ce62ed8ef3fd3a650b27e8024269466a09987fb646336ee40ab6f93ed634218b43577154b16f28e857a207f5482a9b2e927fceb56d9c31c24c87cc2f232d71226a0e8012118e93602c17abbdb74de4feeac8659d5cba70ddae216937b71ec259440601518bac47211b2e1cf50df6166acf0ca589462dc4d047fe1a6fec94383cc279dda4d6e790b4f6b4cd6f06c94dcd24701f2f5cc239df120b90079205743f7af7145272e0e8e75e7b11ae9ad98e2be5ff8044dec1d943d5ba9cb24", 0xf5}, {&(0x7f0000003bc0)="6314be8e931e89b297bc5d20b30ce151a6b97734226b7c5b514d4bf79fc9ab04324fed9db6437a1ff1ce679ee5bd170204f961d58b74a25060397d1e330c72ab1245a54bf22811fb4dac875133cbaf789468f772d03557f2aa66ef481c8029eb058ca1bd598200d05591e9048a1348224263d6638aa338f1557ea8e58cf67d95dc92fe8215be7d53e82142c24dea586a41198c88eab70dfad4c4fc4ca71b5fbe3555641f5d1a66997ffc296eb8a5495d4f0fdf8894219773a19c2c9c774fb585c4ce3504e4d887f6ab7779dc0a34c40501636ab2435d9995c8ae6e78862d9b262ba043da636dd3231d47c9dc9b000f7ab2d30931565819217e77ea41e3436e7c41c341aad300dccfa755b88350cdd0875b07a72da5eb5144c15ef8b664733a18e16e165da3ca56e7b818b741e9a6673deade1cee06610669beef09993997d285bc07feba9901432e4a1d7a6467c2922053c2bed13283585fa1dac9c2689c769d3cf58de7dab52afe7ea05f28f1f6d06d6f24a601fceb0472fc54dfd55b476797bfcabcd45903b183d98c05d72cd05443a10af2ce38a75f482811f0b5fb6b73f45170f17bc7bd5e5eac534420733c82ff58bc51c8829309a745ef8f17d1fabdfe92c6252b9e87b01ceec21b801e20029eadc1ba8bdda7f5acbf273a6b0fe146eaa6ea648bca2c939b5743694aed647d89d2b2fa18a50b7aae0634db454e8825a4bb12e821eb1acb2bd35f473a2044aa1b6d0c1cd50caf4de14f89fbb74d93519caef9e1f59c1ef7a0b00e34e823f84f0d60e2600c2ac76847087219316240e95fed5c23441c15ef7c506f09f346d17a91e5b40b4ba6b795808af3e99e5da985f535115152f0bc36f01bfefa7ccf4aee1c56b429b05257117c4cca97fff29dfb03bc5dc25c45770af64064f2c59272496c90219f4749fc5411bd57aa38e39e7c66884755e5f649a3adf5af622381abe3075d48e2c1b01eb008c59c9c61a09c27878bf979aa4b83645e382ef3192b1a1d0061692ab0ced778059b96a7a8779bb5de31ac43d04a5bfadece01e98756674c880333724f43d8266860538f10654c23b2df36d257320ca5faaa2fa293ea97e575b49a9a7d43828d6cc700fcbe89d6ca6feaa21000ae93a6f859c86506eb1199520019ab245235b3bf4f1e87ba16bf1e7baea3bcc479feea858fd24eb43271bb9b33f68d799d36366ef43ab0ec37b54ebb55265edf4c83863cd542773a6c2d30e1fcdd3ff73d4101f84e13b55ff00a62cf8b6d12cd7aa93fca94030b81a55adae6e1d94bc8be4ce0c8e54afe2c5c65f705738fdc39488c2a9e2f38bb12fb75bfcf29461888684fa84587be72cac0f74820fcea30bd77db1d2fa924c48d58710a96ac31fb76954ff560b217044f6092b1ddca1d3d83b4805b5291a06dd378cbde57e8237a7b78a9a423efbeb7e5f2c95c9df8f5af390da236d3bba573034de74b7b6f30ff55eb3cb3eae93a47748da895773cd9c63904f39f7b2ee3801adf8b757830a42eeea8a3406520933474e732fc403c65a57651e6d10a02b869741f9448f12da8bb62cff3acf0ba6a179c3d581576ad1b18789468610acd3c74d131e1d0bbc771fc6b8e9965d5c6d0fac4cdbdcadfdaddd2db1535e2b10783fcd8574017c3b2eb793d94e2f1473cad356ec28fb9c842051e68deadc83038ef3d45fdd6f7ddba7edb82f0dd0cb49219d619bc806af4e17b9808449f3fc443823b4114ae149fd5269b8214885869f94123b72b5475c7f36e8e41ed9f4635c5a5dc97c1aafe41fe6965867f089218a93cd95172f532669e3d0871c51b5799d351e13890d6d1b9e6dbb65f58bdabfb6f580714a0746fd775e8da4ad84f9beb19dd53728eaba8f6e0668a95117df83b12d68bf8b69569a62474747849a3810e66091a8adb34baff73aeb4e84e774e315e92c9cec042462828ffffee6e74ed56205dfd023322cdc91148995bfb21d4290acafafea8fb51ba5dd772aaff3591be9e2bd6e5d6670fcbf985022510c9f532d08e3e139776bbc5666fb0f23b7e6880198a6267df7d2bedbfd07ebb9e151bbd6be9dc75fa4b924c03195d2706761ae1f609534346ec6167d12072d64a45978ed8f8e12b4b777e9f0ce8f3152b5452ec6d05c2c911053b56a03e364c8dcd682b80c3d139fdb9af72d1daa2ad13a9a6c150654ed5c632c55cadb7c571c16e60de57451ba22fd9f7cda416982e3b75ec552033e55f86aa0b1b09715f6f9aceb04d031e2cb4043f8873141eea3e156dcf8adc7faa04c495ed51ca9ff0ec22edc770cc1eee0c5438d1b3f523e8c18b844b0ad6d29616b60cbeb5582855ea2a215fd69068d18baac99909a3d7829d4e9a9d030c8be4da891d73815e8bc61a4e3f9ab251d2a0be18d2a74b309efb540be2d4f7eb39035da7e068e96e22d180e6e76f23ea31279fbff4f3d808d7491323001fe9f9e0ba0e57ca0759be0084ecc06b4ce1b2f0ce210011cc3c44a4fc880b2df79e11d5d1396c633a318b852587f81d9c8f9aa2738458cbce7e5bbfa715fa56fea01bbe08cf10f5966af0ac5d938b1f5d39db277e0a563127a6d745c00a110132a460938730514479ccf43f98adb693dfe59644ea11b4fb72fe8998b34c0fe00475f3e0b5ed5e038187dd79a56a46a78579c7b5d11cf9f6fc8b8fd210b50879879ac2ae567fe225f1b78eab83407f3680ba62dde7368b25e3349e33722d39c50d78b4e4da5f3653c07a702d6c941a47d6afda97839b6ff3c498f5d3040fbecf4d01bb6b5d7cf2d2d21bfae48749cc5a13328ab408c4a0ee0890e96d1040f4d43e9080e8335ac28cbe0521a1324434f82a2ab3f4de630aa884643130ab83215229ea0d88d6a4880fdcc6c147c90d51005fc72d50e868af2729a1a03b786106619db619fd0a520284b88d4eda7a452a16136a89f733021ba2419a834ed4630aa60054432e6ac5f7b898f8c7491b0b4fa88f0a9d42bed3a7d0e385b5e855c40109804ceb590dfc16ef52123dc0e4401a770c8438c419b3a70e7553618027b814ed69d6de158b974ebe52a9435444d2246958dee0de518659d9f295cd26d9beb66b8ba0ee483d6de19641eda6fda30dfbe9131096e099df9fbec6d4985a6c8201ead1b22f849b47305c448e37e6c026fd85401a20aa78b1b4c486c73ee2a612ce1765ea0520cbbfd15fa461b83e583b6153abcff85273dd245c9661dca43f81dfd2fc36b698ce68807e2ae3f0f74bf9c3bc047bbdad47ee76305b0c64bd9bd4ef26f84b0131ad9048181097c372bc5f48768588e7409dca47f55cc06497ed9e4649ff0d4b44068bcc22fc009b083b95cf5688b24511506bd6c4f4dd9dc3d227394647a1df6e7b2a36e2016e0bdb704de19d981bef5ede66c7e56daed1e4d5df9619182742419329a83e7966ffbf13b3d7722745fe5c20e1c9766529ef035f55d3560eb971670ea2cad2a6e7d566d49052955122e4d959f2695395ca85594ab2ed005f06f14ccdf8e22145a34d3ec5b2298763996800a1943e2ce8d461489bc8a0841f03c876295ad6a67b1473c22325494ed1c7c7ec5756e5b59443952b6b92006fcc5fb3d2b2a931e4d6068f49385ac9b581d6cd3a333d5b441620b6f40709c910bec0e61b2a3ac1494c55f1ec07672f025983ff09f64e7e51a9f905d3b2b133870606701b9b5f5705fa7e6297db22967074b3012aa7103351862e30468c5de8f841953b1bb6d87bb38ab52566d12428990e75f1c8d62b526083a2aa843c76af7f54b218f9b0e0ea7f72bc894c2afff5aa83a11f7643aecbead9fdb5d4231d59d8c66a7369211899626e2c730b0faefe6261abfb303bb572ae575bcf2a2bd69ad3e23c7bf1d570e1bb66d28a6a9a642af98497cb0aff75065874a72375f6d9a0935d41aef398f05390d52b29a51bc032f86300e11afd8334c93b493b4d80da91d5efbf10055939ed26a23b413838677c1480623f4cb25268f8b86f60fbcb39449b67b15b6982639aa0d24e06771b058e092bde6a5eccdffe47108b3897ffd57e94ec5ea4cbc9c7ae23b362385e0e1404df56fe58e4f9c0bbed67d722a119bbf493a62a4bcf92288e5d3477267b3f4f1aec73ff43820a2d08d6c0ef73c03bc04a21e40fa79f581f4363f7461566e385ec34073bf3b6c3f8d54740d75377ea7149f5b7cee5250110d1c7ea7405f069f273e18a0c7cc4d4f8dd8e3f0cf0453248f546034119765b7297741d63373f780d7433eed19a5a589d554f6938b76049317e4221c7d85f33a7b380be74673728cd4bc7d85b9ecfd56166b8bac42f88fbee1740b2d568efbcc855dbb110b00fddd36fe2f8d3996af7c38d82f027958bea2667db1b71ae0d449473ae9c06ad25aef5c1a734cfb1fcfec09083753397a240bc8aae0df45594b9a3857a5b834d5cbc4924505cb44afc22ae7c4366488da4f00f83d13e0ad10a8e2aa492f3f6205bfce270766974647e0dee6ca47deb6c2d840860d8ad5a1a6dbdcb76542cb1dc7a286ac2a4a5e4199dedd771ed5dfd19c717170cf33a78568f151bfed0c6a36f2f9981e1bda8b8f88d35346157f61aba924e51ebb577c627329c4fab67436573c1695be104bcf509f0a2aed21a17c8e773b6278cc8e507ca4b3a421cc80bf384e2603fdb01e3413d1c0eff918c7d73488a5482a512324cc5bfe86fc3d5e52ed03e36f95178ecad06a3a52f76ad36803adbe578a6511f74c56edad97ef3557b912ff01520ec73e67bad824bece755c07ca3ff4e881ee9e3c349ec515166af9ed9b26272b5edaeee0e5217ee6dc0c496d0ce364e1e13106cbaa4350fd41e7ea780c60b6c2403337e56845df6225d0154f2ec95407dd827c4dee6e1a88f3ff38463883312128bb618b9e74cbb1286df6549db50a7ffaf0249afe2649cfa244f955b28dc1cf662f2935d4f4fd10865a8e94588ea8e1488e8f3888bb5c49296cf1c96fae1683e5fb4ba48315fa5266b57b726ae82b47dc5136394620fe611c9602c2fcbf8a35c9403d9bd8e44108a5da05f6a6f53a93493d0c9673e2cdfc77c008364b27dc864301fae1099b7c5fd03e1d67402862c4055ba052462153ca494116ec0b3e959ab9423bace1d0b3028e82c0cdcdb606e5741b34c45af5536cbab5cbdf7a4714b16607a87b298ab520a0c2bde26d4a079b367c316decb1b6dc91ed174a6aea1a63017e7a9d6b167c291c54513336bed73473f75e28b9b18d0a4be63ae7aa0e156e8b1a7d9c1dca7722b04738a26a344bdc1207f0bac738bd1366d0a2dc2062474f85b644d45d290e0df616ddd394b385fee356cc49eeb7af364fc5cc944416b5b057efd4c72957a216910823b491a034240ebbacf2805fdd5fa531d33314e19455822a92d00823a81d36ec77af447e30596970d5a68d3a942e150010f8e03f03467dc4cc8579d738e36bd96bb15b203687ddbf646e0ade9632d41685498dd5e6830fc4ac4f6c610e757bb5cf9e176da7522919bed06086028f934dbb1ef3c1a3c703b83f06853aee7c2491fa5474b26175e48ad3f469b086f27ef3afb1d5dcef2f29f15c9ba83fa921a009e0c508c2648f8508bac18b18be6b6e641d74323810d60ba26f18f0ee705b8fa7edf5279ef6a75d1946b23ad2ef8d8daa34c3c8816f9aa6f0e8e5ec461f892fa04dbfbf854438808c71ef17be165ff5d08eda345b75c6321b3c348fbe19c5065504fb5da81e8332d43db33543d09615c94e5c37d2d16cdf70373b774c10f5cdab8660f81f619f45b6b590f641e34a5220422a3d164d968882b6aaab7a4b1a7893946", 0x1000}, {&(0x7f0000004bc0)="05bd50d0d4540c61052506d92cb6f71a41c832963f7840520fce85f88f031a92db2d445fde2706ad21b1b8e88bc4da19370a266b597c4a18eb869993452042e64fcf4004ea2f95337663c3cc8357c5138b477df6bdd9fe60057308c6aefda48a0f47ada5392bcfc09f262c6e5fbf39e6d2dd1b0a59ca24e2b3cee3f31db3a391d84f13066ba0e544b3b114b77584c3c505ca", 0x92}, {&(0x7f0000004c80)="04ceff380403b9c921dd02c9616d86ec5979322b16646eab899c9f855a6fb29ed0583e732b45713b5990b9ff9cd9033f5f61cc865bb414cbef9730699adb0604b8dac6690ed4e6", 0x47}], 0x7, &(0x7f0000004ec0)=[@rthdrdstopts={{0x38, 0x29, 0x37, {0x84, 0x3, '\x00', [@padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim, @jumbo={0xc2, 0x4, 0x349}, @ra={0x5, 0x2, 0xca0f}, @ra={0x5, 0x2, 0x1}]}}}, @hopopts_2292={{0xb8, 0x29, 0x36, {0x2b, 0x13, '\x00', [@jumbo={0xc2, 0x4, 0x6}, @jumbo={0xc2, 0x4, 0x77}, @hao={0xc9, 0x10, @loopback}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x5, 0x5b, "2d8202be4576164d63ecb929dd1c5feafdd7726061618780907833ddd2a7e0b0cf1880d32c258cfa3c87a8224911774e2c1c095c87a2246a33fa7ee1355a2e91673ec4d76bc2628e46dc5d5e8c5c0cbb0b92719b003bb7185b8225"}, @generic={0xe, 0x11, "622b4ddbe8aa94e25acee00213d2046ebf"}]}}}, @dstopts={{0x28, 0x29, 0x37, {0xa4bbce06ce4adb4d, 0x2, '\x00', [@enc_lim={0x4, 0x1, 0x4}, @enc_lim={0x4, 0x1, 0x3}, @enc_lim={0x4, 0x1, 0x86}, @enc_lim={0x4, 0x1, 0x13}, @ra={0x5, 0x2, 0xb}]}}}, @dstopts_2292={{0x38, 0x29, 0x4, {0x87, 0x3, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}, @ra={0x5, 0x2, 0x5}, @jumbo={0xc2, 0x4, 0x5}, @pad1, @pad1, @padn={0x1, 0x1, [0x0]}, @ra={0x5, 0x2, 0x4}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@private1, r8}}}, @hopopts={{0x80, 0x29, 0x36, {0x21, 0xc, '\x00', [@ra={0x5, 0x2, 0xb}, @pad1, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x6, 0x50, "35da8539d7f4554371749aef3b3f5a2c96b3bdf2b1316eee11acca79c5bbc3b32e0a361ccc68497dd709351272cbd2fa282eeee10321e0910b9fa0d2afa2feaae875535b1e9e39c69c8e4acc4b7444d5"}]}}}], 0x1f8}}, {{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000050c0)="896bf3659d61651ca1cb00d1588d8d4c7958886c0ba913a9b09ec8484eb59eeaeacaa726e83bbcf1a1123c0ef7b76b30e49e38f2c6c0322fedba4698f5e8533910c4062e3244c4335a5736d947169fd5a233d03ad1d98a25a288e7f59f07ae20657d84ab1bb90a732ba4325fda9ea6813835d156de96380b4e3e5d163ff645ea0f22a12eaeb52af67d357dfa55998530a7b60ebfc24a30b657263752f1851c310b7f761fb8e6258848", 0xa9}, {&(0x7f0000005180)="d9ca4045552eea74fc52b61b8810123149848cdf4d5f2f793960850bd6020426d96781b6d1e3be18fefb707fedca38a132526f95131db32c4e9f43f490519055d0837cd9d0161353d79a55da2dd081", 0x4f}, {&(0x7f0000005200)="285e3a16dcd12d47bca8dc2c7d72cd06527d82da08ea299adfa2335e9e31e496f8eec5988fc36b761aac4b5efc311992c38815d99c6155b70e424c1c29108473a8205525bbe835df7d6633e07f7662be3c64fee5fb29cf777aced29d69e70936039b515332e7dbe089ec36d27b1a6e391cde188400475efbf8f2635eb33f37272876d929e8bf849ec4a385e03876af78455e1519076dc3422d75ee2e54559c5315c831ed1f7112a77c6592ff9a898f52b3e9d01ec5490e61c16e7bb3e95bd9a6a49a799253bee27454", 0xc9}, {&(0x7f0000005300)="ce2ee2cc4ed07fd6d2b55c062cd4b63313ec8be7cc98c3ac47", 0x19}], 0x4, &(0x7f0000005380)=[@flowinfo={{0x14, 0x29, 0xb, 0x2}}], 0x18}}, {{&(0x7f00000053c0)={0xa, 0x4e21, 0x6, @loopback, 0x6}, 0x1c, &(0x7f00000054c0)=[{&(0x7f0000005400)="b09fa3715e5e2e2b63aa0755d0be7ea2ab8a76c0688717d473df3a657e37c16b9486d264ee56a2556269d44eb1fe416b9da1c5d5de42eca6748cea121cb3a31a20783d33045a0dec35927d6ba211e1e6f2b406b58053c13c5c3d79a1ab67c5d0f24a998a34931c99d26fc17497827df3d9bf3d90ef8a3a8bff1bc9cf0d2406a9c0abe8821bec9a049f6dab", 0x8b}], 0x1, &(0x7f0000005500)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0xfffff800}}, @dontfrag={{0x14, 0x29, 0x3e, 0x7}}], 0x30}}, {{&(0x7f0000005540)={0xa, 0x4e22, 0x0, @remote, 0x200}, 0x1c, &(0x7f0000005700)=[{&(0x7f0000005580)="9dcd1eed7af53a913e73186655c9e00219d5ed12ad12c3fa7f28ddd04ae932551b80a3ed702f0e2527b65df22104816b86fca909342d68851118734fd16c0a0e9d0a3574b2b9bac09892", 0x4a}, {&(0x7f0000005600)="d4984400c5020841", 0x8}, {&(0x7f0000005640)="d4b8acb476249cf62879e73f3d95f38be2b00bddd225c4d746745d19d99ab9a2e63509a529ad84ced46d446c8e039b26bd46125e1fc9f06418d2d33e36c95d6d8ff683ba2d7450d888df88dd6e518b4694004bf8c3c3e14d712930eeb9cf0a7ff328eaa0d9dc743469d6c77b380354586c854815839d2bb4ab9bd5988730345c939539df462100", 0x87}], 0x3, &(0x7f0000005740)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0xfffffffc}}], 0x18}}], 0xa, 0x51) capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x40}) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xf, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r10}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 16m59.902770536s ago: executing program 4 (id=742): unshare(0x20000400) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x89f6, 0x0) 16m59.627057827s ago: executing program 4 (id=743): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = add_key(&(0x7f0000000000)='cifs.idmap\x00', &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$search(0xa, r1, &(0x7f0000000380)='logon\x00', &(0x7f00000003c0)={'syz', 0x1}, r2) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000240)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) syz_emit_ethernet(0x32, &(0x7f00000001c0)={@random="5bb65d3f2511", @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0xe, 0x24, 0x66, 0x0, 0x3, 0x11, 0x0, @empty=0x7f000000, @empty=0xe0000001}, {0x4e20, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0xba, 0x100}}}}}}}, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) setgroups(0x2d5b, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0]) keyctl$read(0x20, r0, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$UBLK_U_CMD_GET_FEATURES(r5, 0x80207513, &(0x7f0000000100)={0x0, 0xffff, 0x8, &(0x7f00000000c0)}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, 0x0, 0x0) r7 = socket(0x2, 0x3, 0x100000001) setsockopt(r7, 0xff, 0x1, 0x0, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x440000, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, 0x0, 0x8, 0x0) 16m58.735353642s ago: executing program 4 (id=744): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000001ac0), 0x2) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[], [], 0x2f}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x300000b) socket$inet_mptcp(0x2, 0x1, 0x106) socket(0x10, 0x3, 0x0) unshare(0x6020400) pselect6(0x40, &(0x7f0000000100)={0x5, 0x3, 0x87, 0x0, 0x800, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0xffffffffffffffff, 0x0, 0x10, 0x1000000000000000, 0x3}, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') 16m57.187287556s ago: executing program 4 (id=751): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000000)={@my=0x1}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000001500)={@my=0x1}) (fail_nth: 2) 16m56.425680286s ago: executing program 4 (id=754): pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, 0x0, 0x44014) recvmmsg(r1, &(0x7f0000000000)=[{{0x0, 0x140, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4091, 0x10e0}, {&(0x7f0000001580)=""/238, 0xf0}], 0x4, 0x0, 0x353}}], 0x40000000000002e, 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x121484b, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 16m40.87630482s ago: executing program 32 (id=754): pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, 0x0, 0x44014) recvmmsg(r1, &(0x7f0000000000)=[{{0x0, 0x140, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4091, 0x10e0}, {&(0x7f0000001580)=""/238, 0xf0}], 0x4, 0x0, 0x353}}], 0x40000000000002e, 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x121484b, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 16m32.448499111s ago: executing program 1 (id=836): r0 = openat$sysfs(0xffffff9c, 0x0, 0x9a203, 0xeae62862388e0cf) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) r2 = socket$netlink(0x10, 0x3, 0xa) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@gettclass={0x24, 0x2a, 0x200, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0xfff3}, {0xb, 0xffff}, {0xf, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4044044}, 0x4004010) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000000)=0x2000) readv(r1, &(0x7f0000001400)=[{&(0x7f0000001440)=""/4096, 0x1000}], 0x1) ioctl$SOUND_MIXER_READ_VOLUME(0xffffffffffffffff, 0x80044d06, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$AUDIT_DEL_RULE(r2, &(0x7f0000000840)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000800)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"/1068], 0x42c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000010) timer_settime(0x0, 0x1, 0x0, 0x0) capset(&(0x7f0000000040)={0x20071026}, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x680080, 0x0) capget(&(0x7f0000000000)={0x20080522}, &(0x7f0000000080)={0x3, 0xb279, 0x9, 0x7, 0x2938, 0x6a3}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100000003000000080000000800000008010200", @ANYRES32=r0, @ANYBLOB="fbdfeb7400000000000000000000000000000000ec515321ac6947f14e1c06658d7e513ef61e786068370ddaba", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x0, 0xfffb, 0x6, 0x6, 0x2}, 0x14) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={r3, &(0x7f0000000180), 0x0}, 0x20) read$char_usb(r0, 0x0, 0x0) 16m31.253147275s ago: executing program 1 (id=838): pipe(&(0x7f0000000000)) unshare(0x2a060400) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x458}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f00000000c0)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000826000/0x3000)=nil, 0x400000, 0x2, 0x2}) mmap(&(0x7f000095a000/0x3000)=nil, 0x3000, 0x2, 0x20010, 0xffffffffffffffff, 0xd3be3000) 16m29.89060256s ago: executing program 1 (id=846): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)) ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, 0x0) r1 = syz_clone(0x0, 0x0, 0xfffffffffffffead, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace(0x8, r1) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000440)={0x6, 0xffffffffffffffff, 0x80002}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xc, 0xe, &(0x7f0000000900)=ANY=[@ANYRES8=r0], &(0x7f0000000340)='syzkaller\x00'}, 0x94) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000000480)={0x9, 0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000640)={&(0x7f0000000500)=[0x0, 0x0], 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000b80)={&(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000940)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000b00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000b40)=[0x0], 0x6, 0x8, 0x4}) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000000c80)={0x200, 0x2, &(0x7f00000006c0)=[r6, r7], &(0x7f0000000700)=[0x1b4a8a6, 0xe7, 0x7, 0x41], &(0x7f0000000c00)=[0x0, r8], &(0x7f0000000c40), 0x0, 0xfe4a}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r9 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r9, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r10 = syz_open_dev$usbfs(0x0, 0x201, 0x440) r11 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r11, 0x5608) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x11, r10, 0x0) mq_open(0x0, 0x40, 0xa4, 0x0) setsockopt$inet_int(r5, 0x0, 0x32, 0x0, 0x0) sendmmsg$inet(r5, &(0x7f0000000000)=[{{&(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=[@ip_pktinfo={{0x1c, 0x0, 0x34, {0x0, @private=0xa010102, @loopback}}}], 0x20}}], 0x1, 0x4000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0xc7, &(0x7f0000000000), &(0x7f0000000540)="9c18a537674b5d9e9185cd0add6d6d4c9e63ece1b58d7b42c6c27a5f1671fdf94432fc1baaef86573fc9fbb426f9284a6bd47174eb6fb9f893c18421d26d649d633a0f459969df8d3284737c5586cd696884192ce10db91e21fd978337408b7bd1cbb6789b51d63c8e68dab5da01c8e19d572950cfe2142e244990624270eaa2a2ded01d820cec011a6b05192b91cd193b1995bc296c249e1ef1570000000000000f75eec7040de10b5d8c536e5b5ce39ab84e658eb8f02fe112a5136cd3ac5c06848a40ec335a", 0x0, 0x0, 0x800006}, 0x50) 16m28.155496323s ago: executing program 1 (id=850): pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000"], 0x14}}, 0x44014) recvmmsg(r1, &(0x7f0000000000)=[{{0x0, 0x140, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4091, 0x10e0}, {&(0x7f0000001580)=""/238, 0xf0}], 0x4, 0x0, 0x353}}], 0x40000000000002e, 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x121484b, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 16m27.4625999s ago: executing program 1 (id=852): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000001080)='attr/fscreate\x00') lseek(r1, 0x80000004, 0x1) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e21, 0x1, @mcast2, 0xfffffffb}, 0x1c) ioctl$NILFS_IOCTL_DELETE_CHECKPOINT(r0, 0x40086e81, &(0x7f0000000140)=0x5) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000080)={0x8}) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$sock_ifreq(r0, 0xd2, &(0x7f00000000c0)={'team_slave_0\x00', @ifru_settings={0xe7, 0x404, @raw_hdlc=&(0x7f0000000000)={0x5, 0x200}}}) 16m26.893619972s ago: executing program 1 (id=853): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0xfffffffd, @local, 0x2}, 0x1c) listen(r0, 0xfff) syz_emit_ethernet(0x4a, &(0x7f0000003540)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd60ff00f500140600fe80009000000000000000000900000000aa00024e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50c2ffff90780000"], 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x10000000000) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x4f, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000002580)={0x0, 0x0, 0x0, 0xa5, 0x0, &(0x7f0000001580)="ce6c286c2018840b1f6dc85445c6899e10f1c40536af7d99509e02dc55087fa1062209100f8e7b6082149e2153b76247ccda57e0de0b0ed16a37fc888d898ac6afcf02f8739c24316d136cbb44f9cecd1bec33a47aab5137891e17044802c15d7b4f2ee03d63e10aba5f8c5d7aad2e06e02b132fea96aa104b0b4cb24d1a634dfadcb7d8138136929166bc30ddecfda34c9d3f849c3ae87765e62ab65118874d4b926b4452"}) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000005180)={0x2020}, 0x2020) 16m11.76817219s ago: executing program 33 (id=853): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0xfffffffd, @local, 0x2}, 0x1c) listen(r0, 0xfff) syz_emit_ethernet(0x4a, &(0x7f0000003540)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd60ff00f500140600fe80009000000000000000000900000000aa00024e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50c2ffff90780000"], 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x10000000000) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x4f, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000002580)={0x0, 0x0, 0x0, 0xa5, 0x0, &(0x7f0000001580)="ce6c286c2018840b1f6dc85445c6899e10f1c40536af7d99509e02dc55087fa1062209100f8e7b6082149e2153b76247ccda57e0de0b0ed16a37fc888d898ac6afcf02f8739c24316d136cbb44f9cecd1bec33a47aab5137891e17044802c15d7b4f2ee03d63e10aba5f8c5d7aad2e06e02b132fea96aa104b0b4cb24d1a634dfadcb7d8138136929166bc30ddecfda34c9d3f849c3ae87765e62ab65118874d4b926b4452"}) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000005180)={0x2020}, 0x2020) 11m34.046686154s ago: executing program 2 (id=2176): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8010, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = socket(0x10, 0x1, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) r5 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r5, 0x0, 0xfe33) kexec_load(0x0, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0x40000000, 0x1980000}], 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r8, 0x84, 0x16, &(0x7f0000000040)={0x2, [0x6, 0x9]}, &(0x7f0000000100)=0x8) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) 11m32.853672344s ago: executing program 2 (id=2178): r0 = syz_usb_connect$hid(0x1, 0x36, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, 0x0, 0x24000080) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'geneve0\x00'}) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x9, 0x2, 0xffffffff, 0x0, 0xfea}, 0x43e, 0x0, 0x8, 0x7, 0x200, 0x4, 0x2, 0x0, 0x8, 0x51, {0x8, 0x6, 0x3, 0x6, 0x4, 0xe}}}}]}, 0x78}}, 0x20008001) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x48844) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 11m31.856893075s ago: executing program 2 (id=2183): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_SET_NOTIFY(r0, 0x7cb, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x9, 0x0) socket$kcm(0x29, 0x2, 0x0) r5 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r5, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x2}, 0x7, 0x0, &(0x7f0000000040)={{0x0, 0x0, 0x2}}, 0x0, 0x0}}) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000080)={0x6b1d, 0x1, 0xffff, 0x400e0a, 0x7f, "203c5e0000ff765e000080ffffffff87affff2", 0x8, 0x5}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x8) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_ifreq(r6, 0x8927, &(0x7f0000000040)={'veth1_to_bond\x00', @ifru_settings={0x9, 0x3, @sync=0x0}}) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x5, 0x0, 0x0, 0x0, 0x15b76fa0, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x0, 0x3, 0x0, 0x3}, 0x10}, 0x94) r7 = socket$kcm(0x1e, 0x2, 0x0) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f00000008c0), 0x43) recvmsg(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000040)=""/41, 0x29}], 0x1}, 0x400100a2) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0xff) 11m30.278170153s ago: executing program 2 (id=2187): socket$unix(0x1, 0x1, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ff4ae0086d04dd08f4ff080203010902120001000000000904"], 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r1, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000b, 0x204031, 0xffffffffffffffff, 0xfc778000) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0x81, 0x0, 0x100000}, 0x20) sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, 0x0, 0x20008000) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 11m27.199557777s ago: executing program 2 (id=2198): r0 = syz_usb_connect$uac1(0x3, 0x88, &(0x7f0000000300)=ANY=[@ANYRES64], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0xb8, &(0x7f00000000c0)=@string={0xb8, 0x3, "a2db1a183cf6bcde0dbea464c29e4a00a0ce29de3b9ae54b0bec7d9cadec29d8450351073f908585b98d45e7ce04c34a6e403a3769bdbc0bcfa2b9ec7f02872fa64a38c21d10393a6286a6de240a61da8d8729725c3e5e875215d6f0b554457722a93ddc73b79eaaff2c9699071381e66d01033b04f0b881ed105330ead3619a6f27c72dc93d99142938e238f55d78864282d33ab363316e98608d1d120fde47e5f4060bc0e9be2bb615bd15870309d0ca3d94b1b54b"}}]}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x6, @remote, 0xfffffffc}}, 0x0, 0x0, 0x6, 0x0, "3f114438efdaca16d374b49a365be44d5e860ea3ba676c0b5047b80e2c3535d5bd9db3c8572560f4d1be5cd41f7716082ee3589f099942e6f1c395ddb8160381baadf27900"}, 0xd8) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc}, 0x14}}, 0x4000080) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x8000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r2, 0xc0bc5310, &(0x7f0000000080)) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000480)={@in6={{0xa, 0x0, 0x20000000, @remote, 0x1}}, 0x0, 0x0, 0x0, 0x0, "ddfd3b7ed7c6a1c172a987ae5ce3cafd64c9a736831a5912d606798fb75c9981c4b3ac0e06891ff18bc5543ed57215a3c45f9154dfa319e52a15a2b9acf80c07fb1a854dad742eef6187f2304844c296"}, 0xd8) sendto$inet6(r1, 0x0, 0x0, 0x20004002, &(0x7f0000b63fe4)={0xa, 0x2, 0xa15f, @loopback}, 0x1c) syz_usb_control_io$uac1(r0, 0x0, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r3, 0xc0305615, &(0x7f0000000040)={0x0, {0x0, 0x8001}}) syz_usb_control_io$uac1(r0, &(0x7f0000000200)={0x14, &(0x7f0000000180)={0x0, 0x7, 0x2d, {0x2d, 0x22, "81a6efc49f89508ed38fa8035666c6e20073918f48a524c4fa593375d797a05b2829362c704b92d92ab352"}}, &(0x7f00000001c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3c0a}}}, &(0x7f0000000680)={0x44, &(0x7f0000000240)={0x20, 0x30, 0x3c, "98a2cc335bdadd4cb5de4d1961cbafcacfaa7030bbce1f81074e1bc421d8b948f91c1516e530c59a373b4d624ac8523b33c18285d45aad0cbab3ea8a"}, &(0x7f00000002c0)={0x0, 0xa, 0x1}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000440)={0x20, 0x81, 0x1, "eb"}, &(0x7f0000000400)={0x20, 0x82, 0x2, 'K:'}, &(0x7f0000000700)={0x20, 0x83, 0x1, 'v'}, &(0x7f0000000600)={0x20, 0x84, 0x2, "40c1"}, &(0x7f0000000640)={0x20, 0x85, 0x3, "821c00"}}) 11m23.590546188s ago: executing program 2 (id=2212): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_SET_NOTIFY(r0, 0x7cb, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, 0x0) r6 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r6, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x2}, 0x7, 0x0, &(0x7f0000000040)={{0x0, 0x0, 0x2}}, 0x0, 0x0}}) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000080)={0x6b1d, 0x1, 0xffff, 0x400e0a, 0x7f, "203c5e0000ff765e000080ffffffff87affff2", 0x8, 0x5}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x8) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_ifreq(r7, 0x8927, &(0x7f0000000040)={'veth1_to_bond\x00', @ifru_settings={0x9, 0x3, @sync=0x0}}) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x5, 0x0, 0x0, 0x0, 0x15b76fa0, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x0, 0x3, 0x0, 0x3}, 0x10}, 0x94) r8 = socket$kcm(0x1e, 0x2, 0x0) setsockopt$sock_attach_bpf(r8, 0x10f, 0x87, &(0x7f00000008c0), 0x43) recvmsg(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000040)=""/41, 0x29}], 0x1}, 0x400100a2) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0xff) 5m10.544497519s ago: executing program 0 (id=3135): syz_clone(0x49000100, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x54800500, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 2) 5m2.88297774s ago: executing program 0 (id=3161): r0 = syz_open_dev$swradio(&(0x7f0000000140), 0x0, 0x2) r1 = dup(r0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000012640)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(0xffffffffffffffff, 0x8004e500, &(0x7f0000000040)=r2) ioctl$VIDIOC_QUERYBUF_DMABUF(r1, 0xc0585609, &(0x7f0000000600)={0x80, 0xe, 0x4, 0x80, 0x73, {}, {0x2, 0x0, 0xff, 0x6, 0x8, 0x47, "7b011a00"}, 0xd8, 0x4, {}, 0x398d, 0x0, r2}) 5m2.390259714s ago: executing program 0 (id=3163): socketpair$nbd(0x1, 0x1, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe50}, 0x48) io_setup(0x5, &(0x7f0000000000)=0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000100)={0x80000000, "421ae3753785259286be000000000000080000006bb4478a3ab4c98200", 0xffffffffffffffff}) io_submit(r0, 0x1, &(0x7f00000003c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) 5m2.097381148s ago: executing program 0 (id=3165): r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x0, 0x800, 0xbbba, 0x0, 0x18, 0x0, {}, {0x0, 0xfffffffd, 0xfffffffe}, {0x0, 0xffff0000}, {0x1000003, 0xfffffffc}, 0x0, 0x0, 0x0, 0xd613, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4000000, 0xfff, 0x80000000, 0x28, 0x100, 0x0, 0x4}) 5m1.840836745s ago: executing program 0 (id=3168): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB], &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x4}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000540)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) syz_init_net_socket$llc(0x1a, 0x3, 0x0) add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x3}, &(0x7f0000000840)="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", 0x11b, 0xfffffffffffffffe) keyctl$read(0xb, 0x0, &(0x7f0000000600)=""/238, 0xee) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000240)={0x0, 0x90, 0xd}, &(0x7f0000000300)={'enc=', 'raw', ' hash=', {'blake2s-224\x00'}}, &(0x7f0000000440)="974db5a3c7120752d089fcce000558176d28bca7700955c555a3d76aa77df815595736f5b3d917495e6b8ba043a75cdfe63ff93d12d0281cc35f64dc299b95df4b20c68ead91da9b8bf282440a6b904a033d6b38b935f4263593f848dc0edf3acc869f3252428f421ad0d9e330c87b6ad6b32d74e0317fde63d2098ee5e1fce417f1b39da80b27e8994c70ff38537aa1", &(0x7f0000000500)=""/13) listen(0xffffffffffffffff, 0x6227) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000000980)={0x0, 0x0, 0x1, [0x781b, 0x4, 0x40, 0x100, 0x3], [0x8, 0x55c4, 0x3, 0x3ff, 0x5, 0x100, 0xbe9, 0x401, 0x80000001, 0x60000000000, 0x100000001, 0x0, 0x0, 0x1, 0xff, 0xffffffffffffffff, 0x1, 0x9, 0x8001, 0x10000, 0x6, 0xd, 0x3, 0x5, 0x7, 0x67e, 0x6c5, 0x10001, 0x3, 0xffffffffffff0000, 0x9, 0x65e, 0x7, 0x8000000000000001, 0x3, 0x1, 0x80000000, 0x7, 0xd, 0x35e5f8c4, 0x1, 0x4, 0x7f, 0x3, 0x7fffffff, 0x7, 0x5, 0x204, 0x1ff, 0x8, 0x7, 0x8, 0x2, 0xb4a, 0xaf51, 0x4, 0xfffffffffffffff0, 0x800, 0x0, 0xa61, 0x3, 0x1, 0x73ff, 0x3ff, 0x4, 0x2, 0xfffffffffffffff9, 0x5, 0xbafa, 0xf6c4, 0xffffffffffff11f3, 0x10001, 0x8, 0x1, 0x2, 0x4, 0x2, 0x8, 0x5, 0x4, 0x9, 0xe9eb, 0xfffffffffffffff9, 0x8000, 0x1, 0x4, 0x18f2213a, 0x100, 0x2, 0x1, 0x2, 0x101, 0x8, 0x1, 0x5, 0x1, 0x6, 0x6, 0x40a1, 0x7, 0x200, 0xf2, 0x9, 0xffffffffffffff00, 0x3, 0xffff, 0x1, 0xffffffffffffff64, 0xf590, 0x7, 0x80000001, 0x3, 0x0, 0x7, 0x7, 0x81, 0x0, 0xf7, 0x2, 0xf, 0x8]}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb010018000000000000002c0000002c000000060000000000000000000009020010"], 0x0, 0x4a, 0x0, 0x1, 0x1}, 0x28) ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f0000000dc0)={r3, "42f7b52b9c0f6a7a0577cb56a0f3afdd"}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) unshare(0x22020400) fchmod(0xffffffffffffffff, 0x8f) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000001c0)='yeah', 0x4) 5m0.409750079s ago: executing program 0 (id=3172): r0 = socket$pppoe(0x18, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(0xffffffffffffffff, 0x0, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0xc, @broadcast, 'veth1_to_team\x00'}}, 0x1e) ioctl$VIDIOC_G_JPEGCOMP(0xffffffffffffffff, 0x808c563d, &(0x7f0000000240)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x101a40, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) openat$cgroup_ro(r4, &(0x7f00000000c0)='cpuacct.usage_user\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20000023896) gettid() timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0xf, 0x40, 0x6, 0x3, 0x4, "a0e1c6beeb439eff56c42676bae174bc012837"}) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r5, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000040)=0x2) r6 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x100, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800"], 0x0, 0x1005, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r7 = epoll_create1(0x0) r8 = socket$unix(0x1, 0x1, 0x0) close(r8) socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_int(r8, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f0000000100)={0x8002a000}) ioctl$SNAPSHOT_S2RAM(r6, 0x330b) ioctl$PPPIOCBRIDGECHAN(r2, 0x40047435, &(0x7f0000000200)=0x1) 4m44.435490903s ago: executing program 34 (id=3172): r0 = socket$pppoe(0x18, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(0xffffffffffffffff, 0x0, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0xc, @broadcast, 'veth1_to_team\x00'}}, 0x1e) ioctl$VIDIOC_G_JPEGCOMP(0xffffffffffffffff, 0x808c563d, &(0x7f0000000240)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x101a40, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) openat$cgroup_ro(r4, &(0x7f00000000c0)='cpuacct.usage_user\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20000023896) gettid() timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0xf, 0x40, 0x6, 0x3, 0x4, "a0e1c6beeb439eff56c42676bae174bc012837"}) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r5, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000040)=0x2) r6 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x100, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800"], 0x0, 0x1005, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r7 = epoll_create1(0x0) r8 = socket$unix(0x1, 0x1, 0x0) close(r8) socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_int(r8, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f0000000100)={0x8002a000}) ioctl$SNAPSHOT_S2RAM(r6, 0x330b) ioctl$PPPIOCBRIDGECHAN(r2, 0x40047435, &(0x7f0000000200)=0x1) 4m25.64705219s ago: executing program 5 (id=3254): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000580)={0x3, &(0x7f0000000480)=[{0x6, 0x8, 0x7, 0x7fff0000}, {0x0, 0x2, 0xf, 0x1007ff}, {0x4, 0x3, 0x4, 0x8}]}) r0 = syz_open_dev$vim2m(0x0, 0x94, 0x2) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f00000005c0)=@IORING_OP_POLL_ADD={0x6, 0x61, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x4110}, 0x1}) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYRESHEX=r0], &(0x7f0000000500)='syzkaller\x00', 0x3, 0x0, 0x0, 0x100, 0x32, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) io_uring_enter(0xffffffffffffffff, 0x2000, 0x8bef, 0x9, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000300)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000340)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01864c2, &(0x7f0000000380)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r3, 0xc02864c3, &(0x7f0000000400)={&(0x7f00000003c0)=[r4, r5, r6], 0x5, 0x3, 0x2}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) munlockall() 4m24.556755354s ago: executing program 5 (id=3255): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl(r1, 0xfffffc26, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4008855}, 0x0) mmap(&(0x7f0000abb000/0x1000)=nil, 0x1000, 0x0, 0x102000200032, 0xffffffffffffffff, 0x87f64000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfc409000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x6c}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$nl_netfilter(0x10, 0x3, 0xc) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8}, 0x1c) sendmsg$NFT_BATCH(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="14000000100001f500000000000000000100000a14000000020a497f75241d4e1deb00000500000614000000110001"], 0x3c}, 0x1, 0x0, 0x0, 0x2004c040}, 0xc050) socket$nl_generic(0x10, 0x3, 0x10) 4m22.694922519s ago: executing program 5 (id=3257): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) socket$inet6_mptcp(0xa, 0x1, 0x106) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141182) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setresuid(0x0, 0x0, 0xee01) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e020000000000000000000000000000050400000000"], 0x0, 0x37}, 0x28) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000240), 0xfff, r3}, 0x38) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback=0x7e75df19598adc8d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000180)={r1, r4}) sendmmsg$inet(r5, &(0x7f0000001500)=[{{0x0, 0x100000019, &(0x7f0000000b00)=[{&(0x7f00000002c0)="89", 0x34000}, {0x0}], 0x2, &(0x7f0000000e40)=ANY=[], 0xd0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40) recvmmsg(r5, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}, 0x6}], 0x31680, 0x40000000, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r5, 0x0, 0x84) sendmsg$nl_route(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="300000001900010000000000000000008020000000110005000000000c00090008000000", @ANYBLOB="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", @ANYBLOB="0800020000000001"], 0x30}}, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x10003, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/ip_tables_names\x00') preadv(r6, &(0x7f0000000080)=[{&(0x7f0000000040)=""/5, 0x5}], 0x1, 0x9, 0x0) 4m21.017358489s ago: executing program 5 (id=3260): syz_open_dev$video4linux(0x0, 0x5, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000dc3f6e4013080100083a000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000280)={0x44, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, 0x0, 0x0}, &(0x7f0000000340)={0x34, &(0x7f0000000180)={0x0, 0x5, 0x18, "a1ce9ee052805b1b42d00e89b77facfcb9467d4588c9d80c"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0xc0}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0xf7}, &(0x7f0000000240)={0x20, 0x0, 0x11, {0xf, "7dafa8269e87c5ee3267d9a38a2290"}}, &(0x7f0000000280)={0x20, 0x1, 0x1, 0xa5}, &(0x7f0000000300)={0x20, 0x0, 0x1, 0x81}}) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="090026bd7000050000000f00000008000300", @ANYRES32, @ANYBLOB='\b\x004'], 0x24}, 0x1, 0x0, 0x0, 0x400c000}, 0x80) 4m18.3249082s ago: executing program 3 (id=3263): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl(r1, 0xfffffc26, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4008855}, 0x0) mmap(&(0x7f0000abb000/0x1000)=nil, 0x1000, 0x0, 0x102000200032, 0xffffffffffffffff, 0x87f64000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfc409000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x5c}, 0x1, 0x6c}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$nl_netfilter(0x10, 0x3, 0xc) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8}, 0x1c) sendmsg$NFT_BATCH(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="14000000100001f500000000000000000100000a14000000020a497f75241d4e1deb00000500000614000000110001"], 0x3c}, 0x1, 0x0, 0x0, 0x2004c040}, 0xc050) socket$nl_generic(0x10, 0x3, 0x10) 4m16.63033664s ago: executing program 5 (id=3265): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) ioctl$sock_bt_bnep_BNEPCONNADD(r0, 0x400442c8, &(0x7f0000000080)=ANY=[@ANYRES32=r1, @ANYBLOB]) 4m16.036826392s ago: executing program 5 (id=3266): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000380)=ANY=[@ANYRES64=r2], &(0x7f0000000240)='GPL\x00', 0x1, 0xc3, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) r3 = dup(r2) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000000c0)=0xffff) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4m7.999121805s ago: executing program 3 (id=3271): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000002000000000000000000000085000000180000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000009b00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4m7.274174473s ago: executing program 3 (id=3273): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000007d40)=ANY=[@ANYBLOB="020000000400000008"], 0x48) openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r0 = socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000005600db012abd70000000000007000200e3b8b295bdc5d3a54da517e5a74c0f0844fb333a598cb44d130f1cfa423957dd48f303fdee02c59c0a92a1cfa74043ba93794f5cdb5c078878266e259e94ae3c86833ff3d7db989e6d269e0d2d178a23849414a6cc15ec6e4509cbe80a986664b0b672ac6b1d6506fb99149e51ad1849da3dba7ec635dc3cdf55a96a5b32f4747c3a47fb0617d7399197844fff0acb1a9cc33f5d562c61d5e2ead68af3257eafe9958c223fae2c"], 0x14}, 0x1, 0x0, 0x0, 0xc0d1}, 0x40) 4m5.019324702s ago: executing program 3 (id=3274): syz_open_dev$video4linux(0x0, 0x5, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000dc3f6e4013080100083a000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000280)={0x44, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, 0x0, 0x0}, &(0x7f0000000340)={0x34, &(0x7f0000000180)={0x0, 0x5, 0xd, "a1ce9ee052805b1b42d00e89b7"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0xc0}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0xf7}, &(0x7f0000000240)={0x20, 0x0, 0x11, {0xf, "7dafa8269e87c5ee3267d9a38a2290"}}, &(0x7f0000000280)={0x20, 0x1, 0x1, 0xa5}, &(0x7f0000000300)={0x20, 0x0, 0x1, 0x81}}) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="090026bd7000050000000f00000008000300", @ANYRES32, @ANYBLOB='\b\x004'], 0x24}, 0x1, 0x0, 0x0, 0x400c000}, 0x80) 4m2.115110385s ago: executing program 3 (id=3279): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r1) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) r3 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_CROP(r3, 0x4014563c, &(0x7f0000000080)={0x5, {0x0, 0x1, 0x8, 0x80000001}}) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004091) write$cgroup_devices(r1, &(0x7f00000005c0)=ANY=[], 0xfffffeff) 4m0.279912432s ago: executing program 3 (id=3281): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) creat(&(0x7f0000000080)='./bus\x00', 0x28) syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) r0 = inotify_init1(0x800) inotify_add_watch(r0, &(0x7f00000006c0)='.\x00', 0xaa) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x8) fallocate(r1, 0x0, 0x1000000, 0x3) truncate(&(0x7f0000000000)='./bus\x00', 0x809) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x800) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r3, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) timer_create(0x3, &(0x7f0000533fa0)={0x0, 0x21}, &(0x7f00000001c0)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0), 0x48, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 3m59.738333585s ago: executing program 35 (id=3266): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000380)=ANY=[@ANYRES64=r2], &(0x7f0000000240)='GPL\x00', 0x1, 0xc3, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) r3 = dup(r2) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000000c0)=0xffff) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3m44.780075102s ago: executing program 36 (id=3281): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) creat(&(0x7f0000000080)='./bus\x00', 0x28) syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) r0 = inotify_init1(0x800) inotify_add_watch(r0, &(0x7f00000006c0)='.\x00', 0xaa) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x8) fallocate(r1, 0x0, 0x1000000, 0x3) truncate(&(0x7f0000000000)='./bus\x00', 0x809) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x800) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r3, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) timer_create(0x3, &(0x7f0000533fa0)={0x0, 0x21}, &(0x7f00000001c0)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0), 0x48, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 9.115438602s ago: executing program 6 (id=3396): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141182) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setresuid(0x0, 0x0, 0xee01) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e020000000000000000000000000000050400000000"], 0x0, 0x37}, 0x28) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000240), 0xfff, r3}, 0x38) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="0100000000009800000054000000080002"], 0x1c}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback=0x7e75df19598adc8d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r7 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, &(0x7f0000000180)={r1, r6}) sendmmsg$inet(r7, &(0x7f0000001500)=[{{0x0, 0x100000019, &(0x7f0000000b00)=[{&(0x7f00000002c0)="89", 0x34000}, {0x0}], 0x2, &(0x7f0000000e40)=ANY=[], 0xd0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40) recvmmsg(r7, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}, 0x6}], 0x31680, 0x40000000, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r7, 0x0, 0x84) sendmsg$nl_route(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="300000001900010000000000000000008020000000110005000000000c00090008000000", @ANYBLOB="abb97363f95ccf747f0f1bf44abc244a0bef017635b91a576975737b98c3feb997f547d69e968e3be259f36181e4e2657561da7e7c38736bc413e120f350420c79882f76f4293f922e2adc2a7ece8b30e5112a9dd0ef5dc6786e30a4661db45b03aeff1c835601a5e237bba00c9d5a6be861638a5e85ac456da8cd79e8d9e7d6f03cf12208feded1709ea5946bec8b9a2183b4fb28502b9aa80501ce56582da6a1195b1ee0388d7d11b4e8dddb084b05185f7dc00048d8bbce2703bf1660832e281913f521259c17385325d0a151113d98e942395ea0a0665ae09317c22865549741cbc87ed3e4903ec25f921251217df574abdb672d40515177b0582a", @ANYBLOB="0800020000000001"], 0x30}}, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x10003, 0x0) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/ip_tables_names\x00') preadv(r8, &(0x7f0000000080)=[{&(0x7f0000000040)=""/5, 0x5}], 0x1, 0x9, 0x0) 7.01177879s ago: executing program 6 (id=3397): syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) r3 = openat$smackfs_ipv6host(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$smackfs_ipv6host(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="3078303030303030303038303030303030313a3078303030303030303030303030303030303a3078303030303030303030303030303066663a3078303030303030303030303030303030363a30783030303030890f857cf73dc0699fc314929b9cf73030303005000000000000003078303030303030303030303030356463623a3078303030303066666666666666663a3078303030303030303030303030303030322f30393232333337323033000000"], 0xb1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r4 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000500)='.\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESOCT=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) 4.966319604s ago: executing program 6 (id=3398): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r0 = socket(0x28, 0x5, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r1, 0x10000008) r2 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x0) ioctl$F2FS_IOC_DECOMPRESS_FILE(r2, 0xf517, 0x0) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) umount2(&(0x7f00000001c0)='./file0/../file0\x00', 0x0) 3.021315486s ago: executing program 6 (id=3399): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000002380)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x87}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x25}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x2f, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r3 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r3, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r2, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={r2, @in={{0x2, 0x4e23, @broadcast}}, 0xdd8b, 0x1000, 0x1fffe, 0x0, 0xd4, 0x1000, 0x4}, 0x9c) 1.318816993s ago: executing program 6 (id=3400): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r2) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004091) write$cgroup_devices(r2, &(0x7f00000005c0)=ANY=[], 0xfffffeff) 0s ago: executing program 6 (id=3401): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0xa7ae6000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x2e}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 868.317440][ T819] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 868.497637][ T819] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 868.497667][ T819] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 868.497703][ T819] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 868.497723][ T819] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 868.536974][ T819] usb 6-1: config 0 descriptor?? [ 868.564403][T14972] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2754'. [ 868.765192][ T819] usbhid 6-1:0.0: can't add hid device: -71 [ 868.765312][ T819] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 868.779821][ T819] usb 6-1: USB disconnect, device number 37 [ 869.238361][ T43] team0 (unregistering): Port device team_slave_1 removed [ 869.320297][ T43] team0 (unregistering): Port device team_slave_0 removed [ 871.802466][T15011] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2761'. [ 872.032350][T15011] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2761'. [ 872.947205][ T5256] 8021q: adding VLAN 0 to HW filter on device eth6 [ 873.853194][T15023] 9p: Could not find request transport: fd0x0000000000000004 [ 876.002565][ T5256] 8021q: adding VLAN 0 to HW filter on device eth7 [ 877.505326][T15078] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2778'. [ 880.928460][T15107] binder: 15105:15107 ioctl 8008f513 0 returned -22 [ 880.929182][T15107] FAULT_INJECTION: forcing a failure. [ 880.929182][T15107] name failslab, interval 1, probability 0, space 0, times 0 [ 880.929204][T15107] CPU: 0 UID: 0 PID: 15107 Comm: syz.3.2785 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 880.929219][T15107] Tainted: [L]=SOFTLOCKUP [ 880.929223][T15107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 880.929230][T15107] Call Trace: [ 880.929234][T15107] [ 880.929239][T15107] dump_stack_lvl+0xe8/0x150 [ 880.929261][T15107] should_fail_ex+0x467/0x600 [ 880.929279][T15107] should_failslab+0xa8/0x100 [ 880.929297][T15107] __kmalloc_noprof+0xfe/0x780 [ 880.929310][T15107] ? tomoyo_encode+0x2ad/0x570 [ 880.929322][T15107] ? tomoyo_encode+0x2ad/0x570 [ 880.929335][T15107] tomoyo_encode+0x2ad/0x570 [ 880.929347][T15107] tomoyo_realpath_from_path+0x5fa/0x640 [ 880.929363][T15107] ? tomoyo_path_number_perm+0x219/0x5f0 [ 880.929377][T15107] tomoyo_path_number_perm+0x246/0x5f0 [ 880.929392][T15107] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 880.929404][T15107] ? __lock_acquire+0x683/0x2ce0 [ 880.929426][T15107] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 880.929450][T15107] ? hook_file_ioctl+0x1f3/0x600 [ 880.929465][T15107] ? lockdep_hardirqs_on+0x7a/0x110 [ 880.929488][T15107] ? __fget_files+0x2a/0x420 [ 880.929503][T15107] ? __fget_files+0x2a/0x420 [ 880.929514][T15107] ? __fget_files+0x3a8/0x420 [ 880.929525][T15107] ? __fget_files+0x2a/0x420 [ 880.929539][T15107] security_file_ioctl+0xc3/0x2a0 [ 880.929554][T15107] __se_sys_ioctl+0x47/0x170 [ 880.929570][T15107] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 880.929582][T15107] do_syscall_64+0x174/0x580 [ 880.929593][T15107] ? trace_irq_disable+0x3b/0x140 [ 880.929607][T15107] ? clear_bhb_loop+0x40/0x90 [ 880.929619][T15107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 880.929632][T15107] RIP: 0033:0x7fcaafd6ce59 [ 880.929647][T15107] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 880.929660][T15107] RSP: 002b:00007fcaadfa5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 880.929679][T15107] RAX: ffffffffffffffda RBX: 00007fcaaffe6090 RCX: 00007fcaafd6ce59 [ 880.929692][T15107] RDX: 0000200000000180 RSI: 00000000c0306201 RDI: 0000000000000003 [ 880.929701][T15107] RBP: 00007fcaadfa5090 R08: 0000000000000000 R09: 0000000000000000 [ 880.929707][T15107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 880.929713][T15107] R13: 00007fcaaffe6128 R14: 00007fcaaffe6090 R15: 00007fff56ff7758 [ 880.929729][T15107] [ 880.929749][T15107] ERROR: Out of memory at tomoyo_realpath_from_path. [ 886.779862][T15194] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2802'. [ 886.780962][T15196] 9p: Bad value for 'wfdno' [ 886.923261][T15201] cgroup: release_agent respecified [ 890.370475][T15257] 9pnet_fd: Insufficient options for proto=fd [ 893.499776][T15279] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2820'. [ 894.296744][T15290] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2831'. [ 896.263391][T14696] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 896.409540][T14696] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 896.471197][T14696] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 896.609014][ T5721] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 896.737399][ T5721] usb 6-1: device descriptor read/64, error -71 [ 896.832583][T14696] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 896.838023][T14696] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 896.903622][T14696] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 896.905457][T14696] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 896.986817][ T5721] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 897.070371][T14696] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 897.117673][ T5721] usb 6-1: device descriptor read/64, error -71 [ 897.227987][ T5721] usb usb6-port1: attempt power cycle [ 897.357435][ T5864] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 897.507573][ T5864] usb 4-1: device descriptor read/64, error -71 [ 897.578043][ T5721] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 897.600019][ T5721] usb 6-1: device descriptor read/8, error -71 [ 897.757415][ T5864] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 897.848515][ T5721] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 897.876454][ T5721] usb 6-1: device descriptor read/8, error -71 [ 897.897396][ T5864] usb 4-1: device descriptor read/64, error -71 [ 897.978407][ T5721] usb usb6-port1: unable to enumerate USB device [ 898.009728][ T5864] usb usb4-port1: attempt power cycle [ 898.183198][T14696] 8021q: adding VLAN 0 to HW filter on device bond0 [ 898.324277][T14696] 8021q: adding VLAN 0 to HW filter on device team0 [ 898.347456][ T5864] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 898.388090][ T5864] usb 4-1: device descriptor read/8, error -71 [ 898.451593][ T6598] bridge0: port 1(bridge_slave_0) entered blocking state [ 898.453216][ T6598] bridge0: port 1(bridge_slave_0) entered forwarding state [ 898.497123][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state [ 898.505010][ T5852] bridge0: port 2(bridge_slave_1) entered forwarding state [ 898.657419][ T5864] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 898.678129][ T5864] usb 4-1: device descriptor read/8, error -71 [ 898.787800][ T5864] usb usb4-port1: unable to enumerate USB device [ 898.914905][T15376] FAULT_INJECTION: forcing a failure. [ 898.914905][T15376] name failslab, interval 1, probability 0, space 0, times 0 [ 898.914939][T15376] CPU: 1 UID: 0 PID: 15376 Comm: syz.0.2830 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 898.914964][T15376] Tainted: [L]=SOFTLOCKUP [ 898.914970][T15376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 898.914981][T15376] Call Trace: [ 898.914988][T15376] [ 898.914996][T15376] dump_stack_lvl+0xe8/0x150 [ 898.915025][T15376] should_fail_ex+0x467/0x600 [ 898.915052][T15376] should_failslab+0xa8/0x100 [ 898.915079][T15376] __kmalloc_noprof+0xfe/0x780 [ 898.915101][T15376] ? tomoyo_encode+0x2ad/0x570 [ 898.915118][T15376] ? tomoyo_encode+0x2ad/0x570 [ 898.915142][T15376] tomoyo_encode+0x2ad/0x570 [ 898.915166][T15376] tomoyo_realpath_from_path+0x5fa/0x640 [ 898.915196][T15376] ? tomoyo_path_number_perm+0x219/0x5f0 [ 898.915221][T15376] tomoyo_path_number_perm+0x246/0x5f0 [ 898.915248][T15376] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 898.915270][T15376] ? __lock_acquire+0x683/0x2ce0 [ 898.915305][T15376] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 898.915325][T15376] ? hook_file_ioctl+0x1f3/0x600 [ 898.915346][T15376] ? lockdep_hardirqs_on+0x7a/0x110 [ 898.915383][T15376] ? __fget_files+0x2a/0x420 [ 898.915407][T15376] ? __fget_files+0x2a/0x420 [ 898.915427][T15376] ? __fget_files+0x3a8/0x420 [ 898.915446][T15376] ? __fget_files+0x2a/0x420 [ 898.915468][T15376] security_file_ioctl+0xc3/0x2a0 [ 898.915495][T15376] __se_sys_ioctl+0x47/0x170 [ 898.915520][T15376] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 898.915539][T15376] do_syscall_64+0x174/0x580 [ 898.915558][T15376] ? trace_irq_disable+0x3b/0x140 [ 898.915583][T15376] ? clear_bhb_loop+0x40/0x90 [ 898.915604][T15376] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 898.915622][T15376] RIP: 0033:0x7f60ea66ce59 [ 898.915639][T15376] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 898.915654][T15376] RSP: 002b:00007f60e889d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 898.915673][T15376] RAX: ffffffffffffffda RBX: 00007f60ea8e6090 RCX: 00007f60ea66ce59 [ 898.915687][T15376] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000a [ 898.915698][T15376] RBP: 00007f60e889d090 R08: 0000000000000000 R09: 0000000000000000 [ 898.915709][T15376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 898.915720][T15376] R13: 00007f60ea8e6128 R14: 00007f60ea8e6090 R15: 00007ffccf3a1b08 [ 898.915749][T15376] [ 898.917591][T15376] ERROR: Out of memory at tomoyo_realpath_from_path. [ 900.518768][T15391] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2835'. [ 903.779992][T15417] FAULT_INJECTION: forcing a failure. [ 903.779992][T15417] name failslab, interval 1, probability 0, space 0, times 0 [ 903.780028][T15417] CPU: 0 UID: 0 PID: 15417 Comm: syz.0.2841 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 903.780052][T15417] Tainted: [L]=SOFTLOCKUP [ 903.780059][T15417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 903.780069][T15417] Call Trace: [ 903.780077][T15417] [ 903.780086][T15417] dump_stack_lvl+0xe8/0x150 [ 903.780114][T15417] should_fail_ex+0x467/0x600 [ 903.780141][T15417] should_failslab+0xa8/0x100 [ 903.780168][T15417] __kmalloc_noprof+0xfe/0x780 [ 903.780191][T15417] ? tomoyo_encode+0x2ad/0x570 [ 903.780208][T15417] ? tomoyo_encode+0x2ad/0x570 [ 903.780237][T15417] tomoyo_encode+0x2ad/0x570 [ 903.780261][T15417] tomoyo_realpath_from_path+0x5fa/0x640 [ 903.780289][T15417] ? tomoyo_path_number_perm+0x219/0x5f0 [ 903.780315][T15417] tomoyo_path_number_perm+0x246/0x5f0 [ 903.780340][T15417] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 903.780364][T15417] ? __lock_acquire+0x683/0x2ce0 [ 903.780401][T15417] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 903.780422][T15417] ? hook_file_ioctl+0x1f3/0x600 [ 903.780443][T15417] ? lockdep_hardirqs_on+0x7a/0x110 [ 903.780482][T15417] ? __fget_files+0x2a/0x420 [ 903.780507][T15417] ? __fget_files+0x2a/0x420 [ 903.780527][T15417] ? __fget_files+0x3a8/0x420 [ 903.780547][T15417] ? __fget_files+0x2a/0x420 [ 903.780572][T15417] security_file_ioctl+0xc3/0x2a0 [ 903.780601][T15417] __se_sys_ioctl+0x47/0x170 [ 903.780634][T15417] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 903.780653][T15417] do_syscall_64+0x174/0x580 [ 903.780672][T15417] ? trace_irq_disable+0x3b/0x140 [ 903.780693][T15417] ? clear_bhb_loop+0x40/0x90 [ 903.780715][T15417] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 903.780735][T15417] RIP: 0033:0x7f60ea66ce59 [ 903.780752][T15417] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 903.780766][T15417] RSP: 002b:00007f60e889d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 903.780785][T15417] RAX: ffffffffffffffda RBX: 00007f60ea8e6090 RCX: 00007f60ea66ce59 [ 903.780798][T15417] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000a [ 903.780809][T15417] RBP: 00007f60e889d090 R08: 0000000000000000 R09: 0000000000000000 [ 903.780820][T15417] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 903.780831][T15417] R13: 00007f60ea8e6128 R14: 00007f60ea8e6090 R15: 00007ffccf3a1b08 [ 903.780860][T15417] [ 903.786353][T15417] ERROR: Out of memory at tomoyo_realpath_from_path. [ 904.124807][T15412] kAFS: unable to lookup cell 'syz0' [ 904.823722][ T5603] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 904.845485][ T5603] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 904.964407][ T5603] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 904.965631][ T5603] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 904.996921][ T5603] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 906.214350][T15433] overlayfs: overlapping lowerdir path [ 906.671313][ T819] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 907.147535][ T819] usb 4-1: Using ep0 maxpacket: 16 [ 907.224687][ T819] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 907.224706][ T819] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 907.224718][ T819] usb 4-1: config 0 interface 0 has no altsetting 0 [ 907.224738][ T819] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 907.224749][ T819] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 907.248977][ T819] usb 4-1: config 0 descriptor?? [ 907.429307][T15453] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2850'. [ 908.087542][ T5603] Bluetooth: hci3: command tx timeout [ 910.177418][ T5603] Bluetooth: hci3: command tx timeout [ 912.249010][ T5603] Bluetooth: hci3: command tx timeout [ 912.422413][ T819] usbhid 4-1:0.0: can't add hid device: -32 [ 912.422493][ T819] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 914.809032][ T5603] Bluetooth: hci3: command tx timeout [ 914.964358][T15490] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2861'. [ 915.173619][T15493] netlink: 830 bytes leftover after parsing attributes in process `syz.6.2862'. [ 915.174644][ T5839] usb 4-1: USB disconnect, device number 90 [ 917.002964][ T5721] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 917.078680][ T5839] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 917.169142][ T5721] usb 6-1: Using ep0 maxpacket: 32 [ 917.171434][ T5721] usb 6-1: unable to get BOS descriptor or descriptor too short [ 917.172596][ T5721] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 917.172623][ T5721] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 32 [ 917.175922][ T5721] usb 6-1: string descriptor 0 read error: -22 [ 917.176030][ T5721] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 917.176042][ T5721] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 917.218128][T15505] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 917.218321][T15505] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 917.238560][ T5839] usb 4-1: Using ep0 maxpacket: 8 [ 917.242795][ T5839] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 917.242846][ T5839] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 917.242917][ T5839] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 917.304655][ T5839] usb 4-1: config 0 descriptor?? [ 917.341898][ T5839] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 917.426716][ T5721] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -71 [ 917.494479][ T5721] usb 6-1: USB disconnect, device number 42 [ 919.180351][ T5839] gspca_vc032x: reg_w err -110 [ 919.180435][ T5839] vc032x 4-1:0.0: probe with driver vc032x failed with error -110 [ 919.301834][ T819] usb 6-1: new full-speed USB device number 43 using dummy_hcd [ 919.936761][ T819] usb 6-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 919.936794][ T819] usb 6-1: config 0 interface 0 has no altsetting 0 [ 919.936822][ T819] usb 6-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 919.936840][ T819] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 919.963925][ T819] usb 6-1: config 0 descriptor?? [ 920.573768][T15533] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2871'. [ 920.808127][T15515] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 920.907109][T15515] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 920.946516][ T819] hid_parser_main: 30 callbacks suppressed [ 920.946583][ T819] kye 0003:0458:4018.0012: unknown main item tag 0x0 [ 920.946693][ T819] kye 0003:0458:4018.0012: unknown main item tag 0x0 [ 920.946770][ T819] kye 0003:0458:4018.0012: unknown main item tag 0x0 [ 920.946882][ T819] kye 0003:0458:4018.0012: unknown main item tag 0x0 [ 920.946959][ T819] kye 0003:0458:4018.0012: unknown main item tag 0x0 [ 920.947077][ T819] kye 0003:0458:4018.0012: unknown main item tag 0x0 [ 920.947150][ T819] kye 0003:0458:4018.0012: unknown main item tag 0x0 [ 920.947176][ T819] kye 0003:0458:4018.0012: unknown main item tag 0x0 [ 920.947200][ T819] kye 0003:0458:4018.0012: unknown main item tag 0x0 [ 920.953781][ T819] kye 0003:0458:4018.0012: unknown main item tag 0x0 [ 921.403520][ T819] kye 0003:0458:4018.0012: hidraw0: USB HID vf.ff Device [HID 0458:4018] on usb-dummy_hcd.5-1/input0 [ 921.439337][ T819] usb 6-1: USB disconnect, device number 43 [ 921.455736][ T6367] usb 4-1: USB disconnect, device number 91 [ 921.555046][T15535] fido_id[15535]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 922.047613][T15542] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2872'. [ 922.535380][T15545] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2874'. [ 922.548660][ T6367] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 922.724558][ T6367] usb 4-1: device descriptor read/64, error -71 [ 922.958401][ T6367] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 924.081569][ T819] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 924.085294][ T6367] usb 4-1: device descriptor read/64, error -71 [ 924.187710][ T6367] usb usb4-port1: attempt power cycle [ 924.297335][ T819] usb 6-1: Using ep0 maxpacket: 8 [ 924.298349][ T819] usb 6-1: no configurations [ 924.298365][ T819] usb 6-1: can't read configurations, error -22 [ 924.424912][T15426] bridge0: port 1(bridge_slave_0) entered blocking state [ 924.425093][T15426] bridge0: port 1(bridge_slave_0) entered disabled state [ 924.425320][T15426] bridge_slave_0: entered allmulticast mode [ 924.429484][ T819] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 924.456870][T15426] bridge_slave_0: entered promiscuous mode [ 924.472895][T15426] bridge0: port 2(bridge_slave_1) entered blocking state [ 924.473078][T15426] bridge0: port 2(bridge_slave_1) entered disabled state [ 924.473299][T15426] bridge_slave_1: entered allmulticast mode [ 924.475969][T15426] bridge_slave_1: entered promiscuous mode [ 924.528992][ T6367] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 924.550289][ T6367] usb 4-1: device descriptor read/8, error -71 [ 924.607465][ T819] usb 6-1: Using ep0 maxpacket: 8 [ 924.608274][ T819] usb 6-1: no configurations [ 924.608289][ T819] usb 6-1: can't read configurations, error -22 [ 924.608830][ T819] usb usb6-port1: attempt power cycle [ 924.758460][T15426] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 924.788652][T15426] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 925.027416][ T819] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 926.016779][ T819] usb 6-1: device descriptor read/8, error -71 [ 926.060020][T15426] team0: Port device team_slave_0 added [ 926.060101][T15569] batadv_slave_0: entered promiscuous mode [ 926.086815][T15576] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2883'. [ 926.481488][T15569] batadv_slave_0: left promiscuous mode [ 926.495987][T15426] team0: Port device team_slave_1 added [ 926.627697][T15583] syz.0.2879 (15583): /proc/15582/oom_adj is deprecated, please use /proc/15582/oom_score_adj instead. [ 927.057860][T15590] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2888'. [ 927.388982][T15426] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 927.389000][T15426] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 927.389025][T15426] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 927.584002][T15593] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2885'. [ 927.870297][T15426] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 927.870308][T15426] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 927.870322][T15426] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 928.136755][T15595] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2886'. [ 928.588846][ T1033] bridge_slave_1: left allmulticast mode [ 928.588881][ T1033] bridge_slave_1: left promiscuous mode [ 928.589139][ T1033] bridge0: port 2(bridge_slave_1) entered disabled state [ 928.801255][ T1033] bridge_slave_0: left allmulticast mode [ 928.801291][ T1033] bridge_slave_0: left promiscuous mode [ 928.801523][ T1033] bridge0: port 1(bridge_slave_0) entered disabled state [ 928.820351][ T9] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 929.178198][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 929.182812][ T9] usb 6-1: no configurations [ 929.182830][ T9] usb 6-1: can't read configurations, error -22 [ 929.317405][ T9] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 929.479984][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 929.480956][ T9] usb 6-1: no configurations [ 929.480971][ T9] usb 6-1: can't read configurations, error -22 [ 929.481414][ T9] usb usb6-port1: attempt power cycle [ 929.827394][ T9] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 929.848435][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 929.849348][ T9] usb 6-1: no configurations [ 929.849363][ T9] usb 6-1: can't read configurations, error -22 [ 929.987436][ T9] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 930.022358][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 930.023151][ T9] usb 6-1: no configurations [ 930.023167][ T9] usb 6-1: can't read configurations, error -22 [ 930.023537][ T9] usb usb6-port1: unable to enumerate USB device [ 930.577521][ T5721] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 930.899507][ T5721] usb 1-1: Using ep0 maxpacket: 8 [ 930.901773][ T5721] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 930.905020][ T5721] usb 1-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice=d3.6c [ 930.905036][ T5721] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 930.905046][ T5721] usb 1-1: Product: syz [ 930.905053][ T5721] usb 1-1: Manufacturer: syz [ 930.905061][ T5721] usb 1-1: SerialNumber: syz [ 931.804184][ T5721] usb 1-1: config 0 descriptor?? [ 931.831070][ T5721] cdc_ether 1-1:0.0: bad CDC descriptors [ 931.839087][ T5721] usb 1-1: unsupported MDLM descriptors [ 932.009702][ T9] usb 1-1: USB disconnect, device number 78 [ 932.149203][ T1033] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 932.228394][ T1033] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 932.247523][ T5838] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 932.250738][ T1033] bond0 (unregistering): Released all slaves [ 932.294849][T15426] hsr_slave_0: entered promiscuous mode [ 932.295809][T15426] hsr_slave_1: entered promiscuous mode [ 932.296404][T15426] debugfs: 'hsr0' already exists in 'hsr' [ 932.296419][T15426] Cannot create hsr debugfs directory [ 932.338915][ T5256] 8021q: adding VLAN 0 to HW filter on device eth5 [ 932.425778][T15648] bridge_slave_0: invalid flags given to default FDB implementation [ 932.452300][ T5838] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 932.452327][ T5838] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 115, setting to 64 [ 932.452340][ T5838] usb 4-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 932.454515][ T5838] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 932.454541][ T5838] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 932.454558][ T5838] usb 4-1: Product: syz [ 932.454570][ T5838] usb 4-1: Manufacturer: syz [ 932.454577][ T5838] usb 4-1: SerialNumber: syz [ 933.194102][T15661] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2907'. [ 933.379649][ T1033] hsr_slave_0: left promiscuous mode [ 933.421665][ T1033] hsr_slave_1: left promiscuous mode [ 933.423467][ T1033] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 933.489232][ T1033] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 933.845632][T15667] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 933.846226][T15667] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 934.848373][ T1033] team0 (unregistering): Port device team_slave_1 removed [ 934.959442][ T1033] team0 (unregistering): Port device team_slave_0 removed [ 936.309192][ T5838] cdc_ncm 4-1:1.0: bind() failure [ 936.369019][ T5838] cdc_ncm 4-1:1.1: probe with driver cdc_ncm failed with error -71 [ 936.373817][ T5838] cdc_mbim 4-1:1.1: probe with driver cdc_mbim failed with error -71 [ 936.404628][ T5838] usbtest 4-1:1.1: probe with driver usbtest failed with error -71 [ 936.432222][ T5838] usb 4-1: USB disconnect, device number 96 [ 937.808166][ T819] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 937.986096][ T819] usb 4-1: Using ep0 maxpacket: 8 [ 938.000489][ T819] usb 4-1: no configurations [ 938.000507][ T819] usb 4-1: can't read configurations, error -22 [ 938.210274][ T819] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 938.383947][ T819] usb 4-1: Using ep0 maxpacket: 8 [ 938.395534][ T819] usb 4-1: no configurations [ 938.395553][ T819] usb 4-1: can't read configurations, error -22 [ 938.396220][ T819] usb usb4-port1: attempt power cycle [ 938.840666][ T819] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 938.872807][ T819] usb 4-1: Using ep0 maxpacket: 8 [ 938.873608][ T819] usb 4-1: no configurations [ 938.873625][ T819] usb 4-1: can't read configurations, error -22 [ 938.997429][ T819] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 939.018183][ T819] usb 4-1: Using ep0 maxpacket: 8 [ 939.018994][ T819] usb 4-1: no configurations [ 939.019010][ T819] usb 4-1: can't read configurations, error -22 [ 939.019775][ T819] usb usb4-port1: unable to enumerate USB device [ 939.501376][ T819] usb 6-1: new full-speed USB device number 52 using dummy_hcd [ 939.664755][ T819] usb 6-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config [ 939.664807][ T819] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 939.664829][ T819] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 14385, setting to 64 [ 939.664851][ T819] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 939.871763][T15713] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2919'. [ 939.901265][ T819] usb 6-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 939.901296][ T819] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 939.901314][ T819] usb 6-1: Product: syz [ 939.901327][ T819] usb 6-1: Manufacturer: syz [ 939.901341][ T819] usb 6-1: SerialNumber: syz [ 940.786303][ T819] usb 6-1: config 0 descriptor?? [ 940.899691][ T5256] 8021q: adding VLAN 0 to HW filter on device eth6 [ 942.547630][ T819] radio-si470x 6-1:0.0: si470x_get_report: usb_control_msg returned -110 [ 942.547962][ T819] radio-si470x 6-1:0.0: probe with driver radio-si470x failed with error -5 [ 942.707612][T15736] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2922'. [ 943.925805][ T5839] usb 6-1: USB disconnect, device number 52 [ 944.077344][ T819] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 944.232421][ T819] usb 4-1: device descriptor read/64, error -71 [ 945.057297][ T9] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 945.058032][ T819] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 945.187473][ T819] usb 4-1: device descriptor read/64, error -71 [ 945.207506][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 945.209799][ T9] usb 1-1: no configurations [ 945.209815][ T9] usb 1-1: can't read configurations, error -22 [ 945.297883][ T819] usb usb4-port1: attempt power cycle [ 945.347445][ T9] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 945.507459][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 945.508399][ T9] usb 1-1: no configurations [ 945.508413][ T9] usb 1-1: can't read configurations, error -22 [ 945.508924][ T9] usb usb1-port1: attempt power cycle [ 945.667575][ T819] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 945.701958][ T819] usb 4-1: device descriptor read/8, error -71 [ 946.018562][ T9] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 946.038552][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 946.039377][ T9] usb 1-1: no configurations [ 946.039393][ T9] usb 1-1: can't read configurations, error -22 [ 946.077327][ T819] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 946.155078][ T819] usb 4-1: device descriptor read/8, error -71 [ 946.207369][ T9] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 946.241282][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 946.242076][ T9] usb 1-1: no configurations [ 946.242091][ T9] usb 1-1: can't read configurations, error -22 [ 946.243817][ T9] usb usb1-port1: unable to enumerate USB device [ 946.272605][ T819] usb usb4-port1: unable to enumerate USB device [ 947.614018][T15783] fuse: Bad value for 'fd' [ 954.417646][ T5864] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 954.587435][ T5864] usb 1-1: Using ep0 maxpacket: 8 [ 954.603638][ T5864] usb 1-1: no configurations [ 954.603657][ T5864] usb 1-1: can't read configurations, error -22 [ 954.728913][ T5864] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 954.988897][ T5864] usb 1-1: Using ep0 maxpacket: 8 [ 955.068918][ T5864] usb 1-1: no configurations [ 955.068989][ T5864] usb 1-1: can't read configurations, error -22 [ 955.433719][ T5864] usb usb1-port1: attempt power cycle [ 956.189478][T15861] openvswitch: netlink: Key type 30 is not supported [ 956.446013][ T5864] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 956.472395][ T5864] usb 1-1: Using ep0 maxpacket: 8 [ 956.473987][ T5864] usb 1-1: no configurations [ 956.474002][ T5864] usb 1-1: can't read configurations, error -22 [ 956.627448][ T5864] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 956.649719][ T5864] usb 1-1: device descriptor read/8, error -71 [ 956.760941][ T5864] usb usb1-port1: unable to enumerate USB device [ 958.227498][ T5864] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 958.369176][ T5864] usb 4-1: device descriptor read/64, error -71 [ 958.548466][T15893] fuse: fd is not a fuse device [ 958.707713][ T5864] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 958.820433][T15899] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2963'. [ 958.877529][ T5864] usb 4-1: device descriptor read/64, error -71 [ 959.001196][ T5864] usb usb4-port1: attempt power cycle [ 959.404342][ T5864] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 959.426455][ T5864] usb 4-1: device descriptor read/8, error -71 [ 959.658784][T15902] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2964'. [ 959.683149][T15902] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2964'. [ 959.837452][ T5864] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 959.859882][ T5864] usb 4-1: device descriptor read/8, error -71 [ 959.932113][T15426] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 959.967758][ T5864] usb usb4-port1: unable to enumerate USB device [ 960.144769][T15426] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 960.159910][T15426] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 960.182014][T15426] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 960.183527][T15426] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 960.338273][ T5864] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 960.548100][ T5864] usb 6-1: Using ep0 maxpacket: 8 [ 960.641030][ T5864] usb 6-1: no configurations [ 960.641098][ T5864] usb 6-1: can't read configurations, error -22 [ 961.106838][ T5864] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 961.170153][T15426] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 961.171702][T15426] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 961.847484][ T5864] usb 6-1: Using ep0 maxpacket: 8 [ 961.848509][ T5864] usb 6-1: no configurations [ 961.848524][ T5864] usb 6-1: can't read configurations, error -22 [ 961.848862][ T5864] usb usb6-port1: attempt power cycle [ 961.975608][T15426] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 963.516802][ T5864] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 963.827394][ T5864] usb 6-1: device not accepting address 55, error -71 [ 964.574541][T15951] netlink: 5920 bytes leftover after parsing attributes in process `syz.5.2976'. [ 965.639857][T15955] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2975'. [ 965.827671][T15955] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2975'. [ 966.384892][ T4910] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 966.407010][ T4910] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 966.416208][ T4910] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 966.419241][ T4910] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 966.422143][ T4910] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 966.696851][ T5864] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 967.892871][ T5864] usb 6-1: device not accepting address 57, error -71 [ 968.160958][T15972] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2981'. [ 968.177499][ T5793] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 968.358130][ T5793] usb 1-1: device descriptor read/64, error -71 [ 968.803153][ T5603] Bluetooth: hci3: command tx timeout [ 968.941390][ T5793] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 969.241726][ T5793] usb 1-1: device descriptor read/64, error -71 [ 969.369254][ T5793] usb usb1-port1: attempt power cycle [ 969.759625][ T5793] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 969.787179][ T5793] usb 1-1: device descriptor read/8, error -71 [ 970.078695][ T5793] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 970.099392][ T5793] usb 1-1: device descriptor read/8, error -71 [ 970.207884][ T5793] usb usb1-port1: unable to enumerate USB device [ 970.780160][ T9] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 970.808817][ T5603] Bluetooth: hci3: command tx timeout [ 970.947503][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 970.948357][ T9] usb 6-1: no configurations [ 970.948372][ T9] usb 6-1: can't read configurations, error -22 [ 971.157453][ T9] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 971.269929][T16011] netlink: 56 bytes leftover after parsing attributes in process `syz.6.2992'. [ 971.277067][T16007] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 971.277088][T16007] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 971.309108][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 971.309953][ T9] usb 6-1: no configurations [ 971.309968][ T9] usb 6-1: can't read configurations, error -22 [ 971.310548][ T9] usb usb6-port1: attempt power cycle [ 971.370302][T16007] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 971.370322][T16007] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 971.625717][T16014] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(13) [ 971.657995][ T9] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 971.685785][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 971.695983][T16017] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2991'. [ 971.704220][ T9] usb 6-1: no configurations [ 971.704238][ T9] usb 6-1: can't read configurations, error -22 [ 971.717462][T16014] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 971.798688][T16014] vhci_hcd vhci_hcd.0: Device attached [ 972.439874][ T9] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 972.484414][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 972.512076][ T9] usb 6-1: no configurations [ 972.512117][ T9] usb 6-1: can't read configurations, error -22 [ 972.914006][ T9] usb usb6-port1: unable to enumerate USB device [ 972.967595][T16015] vhci_hcd: connection closed [ 972.969723][ T5603] Bluetooth: hci3: command tx timeout [ 973.597440][ T1025] vhci_hcd vhci_hcd.3: stop threads [ 973.597465][ T1025] vhci_hcd vhci_hcd.3: release socket [ 974.284153][ T1025] vhci_hcd vhci_hcd.3: disconnect device [ 975.077412][ T9] usb usb40-port1: attempt power cycle [ 975.155976][ T5603] Bluetooth: hci3: command tx timeout [ 975.583120][T16036] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2998'. [ 975.764495][ T9] usb usb40-port1: unable to enumerate USB device [ 977.457951][T16051] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3003'. [ 977.550615][T16052] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3003'. [ 978.027378][ T5839] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 978.087372][ T4910] Bluetooth: hci3: command tx timeout [ 978.178066][ T5839] usb 6-1: Using ep0 maxpacket: 8 [ 978.183393][ T5839] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 978.183447][ T5839] usb 6-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 978.183467][ T5839] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 978.270259][ T5839] usb 6-1: config 0 descriptor?? [ 978.304030][ T5839] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 980.027826][ T5839] gspca_vc032x: reg_w err -110 [ 980.027909][ T5839] vc032x 6-1:0.0: probe with driver vc032x failed with error -110 [ 980.500221][ T5601] usb 6-1: USB disconnect, device number 63 [ 980.896734][T16086] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 980.896769][T16086] overlayfs: fs on './cgroup' does not support file handles, falling back to index=off,nfs_export=off. [ 981.076653][ T5793] usb 4-1: new full-speed USB device number 109 using dummy_hcd [ 981.255429][ T5793] usb 4-1: config 0 interface 0 has no altsetting 0 [ 981.255467][ T5793] usb 4-1: New USB device found, idVendor=045e, idProduct=00f9, bcdDevice= 0.00 [ 981.255487][ T5793] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 981.298666][ T5793] usb 4-1: config 0 descriptor?? [ 981.346673][T16098] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3014'. [ 981.433427][T16101] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3014'. [ 981.720288][ T5839] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 981.854765][ T5793] hid_parser_main: 30 callbacks suppressed [ 981.854783][ T5793] microsoft 0003:045E:00F9.0013: unknown main item tag 0x0 [ 981.854801][ T5793] microsoft 0003:045E:00F9.0013: unknown main item tag 0x0 [ 981.854816][ T5793] microsoft 0003:045E:00F9.0013: unknown main item tag 0x0 [ 981.854831][ T5793] microsoft 0003:045E:00F9.0013: unknown main item tag 0x0 [ 981.854845][ T5793] microsoft 0003:045E:00F9.0013: unknown main item tag 0x0 [ 981.854860][ T5793] microsoft 0003:045E:00F9.0013: unknown main item tag 0x0 [ 981.854874][ T5793] microsoft 0003:045E:00F9.0013: unknown main item tag 0x0 [ 981.854889][ T5793] microsoft 0003:045E:00F9.0013: unknown main item tag 0x0 [ 981.854937][ T5793] microsoft 0003:045E:00F9.0013: item fetching failed at offset 38/39 [ 981.855428][ T5793] microsoft 0003:045E:00F9.0013: parse failed [ 981.855494][ T5793] microsoft 0003:045E:00F9.0013: probe with driver microsoft failed with error -22 [ 981.911391][ T5839] usb 1-1: device descriptor read/64, error -71 [ 982.143809][ T9] usb 4-1: USB disconnect, device number 109 [ 982.177608][ T5839] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 982.307567][ T5839] usb 1-1: device descriptor read/64, error -71 [ 982.545108][T16112] fuse: fd is not a fuse device [ 982.736670][T16119] netlink: 'syz.6.3021': attribute type 3 has an invalid length. [ 982.758625][ T5839] usb usb1-port1: attempt power cycle [ 982.886334][T15959] bridge0: port 1(bridge_slave_0) entered blocking state [ 982.886438][T15959] bridge0: port 1(bridge_slave_0) entered disabled state [ 982.886668][T15959] bridge_slave_0: entered allmulticast mode [ 982.892405][T15959] bridge_slave_0: entered promiscuous mode [ 982.912028][T15959] bridge0: port 2(bridge_slave_1) entered blocking state [ 982.912231][T15959] bridge0: port 2(bridge_slave_1) entered disabled state [ 982.912464][T15959] bridge_slave_1: entered allmulticast mode [ 982.918874][T15959] bridge_slave_1: entered promiscuous mode [ 983.097509][ T5839] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 983.118094][ T5839] usb 1-1: device descriptor read/8, error -71 [ 983.218756][T15959] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 983.271009][T16130] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3024'. [ 983.349528][ T9] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 983.441422][T15959] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 983.521689][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 983.521708][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 983.521719][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 983.524172][ T9] usb 6-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 983.524200][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 983.524213][ T9] usb 6-1: Product: syz [ 983.524221][ T9] usb 6-1: Manufacturer: syz [ 983.524227][ T9] usb 6-1: SerialNumber: syz [ 983.537494][ T5839] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 983.551040][ T9] usb 6-1: config 0 descriptor?? [ 983.558503][ T5839] usb 1-1: device descriptor read/8, error -71 [ 983.650058][ T124] bridge_slave_1: left allmulticast mode [ 983.650106][ T124] bridge_slave_1: left promiscuous mode [ 983.661469][ T124] bridge0: port 2(bridge_slave_1) entered disabled state [ 983.668056][ T5839] usb usb1-port1: unable to enumerate USB device [ 983.778679][ T124] bridge_slave_0: left allmulticast mode [ 983.778707][ T124] bridge_slave_0: left promiscuous mode [ 983.778983][ T124] bridge0: port 1(bridge_slave_0) entered disabled state [ 983.822812][ T9] adutux 6-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 984.176135][T16127] netlink: 1752 bytes leftover after parsing attributes in process `syz.5.3022'. [ 984.227914][ T5734] usb 6-1: USB disconnect, device number 64 [ 984.414679][T16141] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3027'. [ 984.480442][T16142] netlink: 56 bytes leftover after parsing attributes in process `syz.6.3027'. [ 984.813644][ T124] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 984.931953][ T124] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 984.993558][ T124] bond0 (unregistering): Released all slaves [ 985.041515][T15959] team0: Port device team_slave_0 added [ 985.132413][T15959] team0: Port device team_slave_1 added [ 985.268918][T15959] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 985.268936][T15959] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 985.268957][T15959] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 985.324960][T15959] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 985.324979][T15959] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 985.325002][T15959] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 985.499992][T15959] hsr_slave_0: entered promiscuous mode [ 985.521800][T15959] hsr_slave_1: entered promiscuous mode [ 985.522931][T15959] debugfs: 'hsr0' already exists in 'hsr' [ 985.522966][T15959] Cannot create hsr debugfs directory [ 986.154310][T16165] random: crng reseeded on system resumption [ 986.509319][ T124] hsr_slave_0: left promiscuous mode [ 986.547689][ T124] hsr_slave_1: left promiscuous mode [ 986.548852][ T124] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 986.610735][ T124] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 986.979234][ T5839] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 987.107474][ T5839] usb 4-1: device descriptor read/64, error -71 [ 987.158219][T16188] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3040'. [ 988.381860][ T5839] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 988.547785][ T6367] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 988.557710][ T5839] usb 4-1: device descriptor read/64, error -71 [ 988.868479][ T5839] usb usb4-port1: attempt power cycle [ 988.887452][ T6367] usb 1-1: Using ep0 maxpacket: 32 [ 988.889953][ T6367] usb 1-1: unable to get BOS descriptor or descriptor too short [ 988.891166][ T6367] usb 1-1: config 14 has an invalid interface number: 57 but max is 1 [ 988.891189][ T6367] usb 1-1: config 14 has an invalid interface number: 228 but max is 1 [ 988.891206][ T6367] usb 1-1: config 14 has no interface number 0 [ 988.891221][ T6367] usb 1-1: config 14 has no interface number 1 [ 988.891289][ T6367] usb 1-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 988.891318][ T6367] usb 1-1: config 14 interface 228 altsetting 5 has an invalid endpoint descriptor of length 5, skipping [ 988.891339][ T6367] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 988.891364][ T6367] usb 1-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 988.891386][ T6367] usb 1-1: config 14 interface 57 has no altsetting 0 [ 988.891402][ T6367] usb 1-1: config 14 interface 228 has no altsetting 0 [ 988.894566][ T6367] usb 1-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 988.894590][ T6367] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 988.894609][ T6367] usb 1-1: Product: syz [ 988.894622][ T6367] usb 1-1: Manufacturer: syz [ 988.894635][ T6367] usb 1-1: SerialNumber: syz [ 990.234259][T16215] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3047'. [ 991.304008][ T6367] legousbtower 1-1:14.57: interrupt endpoints not found [ 991.512181][ T124] team0 (unregistering): Port device team_slave_1 removed [ 991.669550][ T124] team0 (unregistering): Port device team_slave_0 removed [ 996.638035][ T6367] legousbtower 1-1:14.228: interrupt endpoints not found [ 996.709428][ T5256] 8021q: adding VLAN 0 to HW filter on device eth5 [ 997.071010][ T31] usb 1-1: USB disconnect, device number 95 [ 997.800701][T16272] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 997.800738][T16272] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 997.800773][T16272] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 997.807897][T16272] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 997.825775][T16272] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1000.087514][T16302] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3069'. [ 1001.872303][T16320] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1001.968088][T16327] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 1001.968116][T16327] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1001.968214][T16327] vhci_hcd vhci_hcd.0: Device attached [ 1002.147552][T16328] vhci_hcd: connection closed [ 1002.221694][ T6599] vhci_hcd vhci_hcd.0: stop threads [ 1002.221719][ T6599] vhci_hcd vhci_hcd.0: release socket [ 1002.221786][ T6599] vhci_hcd vhci_hcd.0: disconnect device [ 1002.252950][ T5734] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 1003.975553][T16349] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3078'. [ 1003.984674][T16349] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3078'. [ 1005.850648][ T5721] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 1006.004582][ T5721] usb 4-1: Using ep0 maxpacket: 8 [ 1006.006789][ T5721] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1006.006843][ T5721] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1006.006864][ T5721] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1006.077919][ T5721] usb 4-1: config 0 descriptor?? [ 1006.561817][ T5721] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1006.617365][ T5793] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 1006.875662][T16377] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3088'. [ 1007.402215][T16377] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3088'. [ 1008.561047][ T5793] usb 6-1: Using ep0 maxpacket: 8 [ 1008.622784][ T5793] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1008.622890][ T5793] usb 6-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1008.622913][ T5793] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1008.774634][ T5793] usb 6-1: config 0 descriptor?? [ 1008.802602][ T5793] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1008.832242][ T5721] gspca_vc032x: reg_w err -71 [ 1008.832378][ T5721] vc032x 4-1:0.0: probe with driver vc032x failed with error -71 [ 1008.837077][ T5721] usb 4-1: USB disconnect, device number 113 [ 1009.038788][ T5793] gspca_vc032x: reg_r err -71 [ 1009.038880][ T5793] vc032x 6-1:0.0: probe with driver vc032x failed with error -71 [ 1009.085400][ T5793] usb 6-1: USB disconnect, device number 65 [ 1009.162661][T16385] FAULT_INJECTION: forcing a failure. [ 1009.162661][T16385] name failslab, interval 1, probability 0, space 0, times 0 [ 1009.162690][T16385] CPU: 1 UID: 0 PID: 16385 Comm: syz.3.3090 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1009.162709][T16385] Tainted: [L]=SOFTLOCKUP [ 1009.162714][T16385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1009.162723][T16385] Call Trace: [ 1009.162729][T16385] [ 1009.162736][T16385] dump_stack_lvl+0xe8/0x150 [ 1009.162762][T16385] should_fail_ex+0x467/0x600 [ 1009.162785][T16385] should_failslab+0xa8/0x100 [ 1009.162807][T16385] kmem_cache_alloc_node_noprof+0xae/0x670 [ 1009.162824][T16385] ? __alloc_skb+0x1d7/0x7a0 [ 1009.162842][T16385] ? __alloc_skb+0x1d7/0x7a0 [ 1009.162861][T16385] __alloc_skb+0x1d7/0x7a0 [ 1009.162879][T16385] netlink_sendmsg+0x5d4/0xb40 [ 1009.162906][T16385] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1009.162924][T16385] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1009.162943][T16385] ? __kernel_text_address+0xd/0x30 [ 1009.162961][T16385] ? unwind_get_return_address+0x4d/0x90 [ 1009.162981][T16385] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1009.162997][T16385] sock_sendmsg_nosec+0x13a/0x180 [ 1009.163014][T16385] ____sys_sendmsg+0x565/0x870 [ 1009.163032][T16385] ? __might_fault+0xaf/0x130 [ 1009.163054][T16385] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1009.163077][T16385] ? import_iovec+0x73/0xa0 [ 1009.163100][T16385] ___sys_sendmsg+0x2a5/0x360 [ 1009.163117][T16385] ? __lock_acquire+0x683/0x2ce0 [ 1009.163138][T16385] ? __pfx____sys_sendmsg+0x10/0x10 [ 1009.163180][T16385] ? __fget_files+0x2a/0x420 [ 1009.163197][T16385] ? __fget_files+0x3a8/0x420 [ 1009.163220][T16385] __x64_sys_sendmsg+0x1b7/0x290 [ 1009.163249][T16385] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1009.163279][T16385] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1009.163294][T16385] do_syscall_64+0x174/0x580 [ 1009.163313][T16385] ? trace_irq_disable+0x3b/0x140 [ 1009.163330][T16385] ? clear_bhb_loop+0x40/0x90 [ 1009.163345][T16385] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1009.163357][T16385] RIP: 0033:0x7fcaafd6ce59 [ 1009.163371][T16385] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1009.163382][T16385] RSP: 002b:00007fcaadfc6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1009.163398][T16385] RAX: ffffffffffffffda RBX: 00007fcaaffe5fa0 RCX: 00007fcaafd6ce59 [ 1009.163407][T16385] RDX: 0000000020040854 RSI: 0000200000000180 RDI: 0000000000000003 [ 1009.163415][T16385] RBP: 00007fcaadfc6090 R08: 0000000000000000 R09: 0000000000000000 [ 1009.163423][T16385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1009.163430][T16385] R13: 00007fcaaffe6038 R14: 00007fcaaffe5fa0 R15: 00007fff56ff7758 [ 1009.163450][T16385] [ 1009.375107][T16380] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1012.972665][T16431] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3098'. [ 1013.317349][ T6367] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 1013.358749][ T4910] Bluetooth: hci6: unexpected cc 0x0c57 length: 133 > 33 [ 1013.358797][ T4910] Bluetooth: hci6: unexpected event for opcode 0x0c57 [ 1013.467351][ T6367] usb 4-1: Using ep0 maxpacket: 8 [ 1013.472219][ T6367] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1013.472271][ T6367] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1013.472291][ T6367] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1013.520503][ T6367] usb 4-1: config 0 descriptor?? [ 1013.696885][ T6367] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1013.715328][T16442] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3102'. [ 1013.990685][T15959] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1014.269811][T15959] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1014.332371][T15959] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1014.455032][T15959] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1014.466309][T15959] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1014.546319][T16467] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3104'. [ 1015.258914][ T6367] gspca_vc032x: reg_w err -110 [ 1015.259095][ T6367] vc032x 4-1:0.0: probe with driver vc032x failed with error -110 [ 1015.879632][ T6367] usb 4-1: USB disconnect, device number 114 [ 1016.084500][ T4910] Bluetooth: hci4: unexpected event for opcode 0x2040 [ 1018.462629][T15959] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1018.623008][T15959] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1018.953851][T15959] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1019.072790][T16474] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1019.247912][T16494] netlink: 56 bytes leftover after parsing attributes in process `syz.6.3108'. [ 1019.343906][T15959] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1019.437755][T16498] FAULT_INJECTION: forcing a failure. [ 1019.437755][T16498] name failslab, interval 1, probability 0, space 0, times 0 [ 1019.437789][T16498] CPU: 1 UID: 0 PID: 16498 Comm: syz.0.3109 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1019.437812][T16498] Tainted: [L]=SOFTLOCKUP [ 1019.437819][T16498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1019.437830][T16498] Call Trace: [ 1019.437837][T16498] [ 1019.437845][T16498] dump_stack_lvl+0xe8/0x150 [ 1019.437872][T16498] should_fail_ex+0x467/0x600 [ 1019.437898][T16498] should_failslab+0xa8/0x100 [ 1019.437924][T16498] __kmalloc_noprof+0xfe/0x780 [ 1019.437945][T16498] ? tomoyo_encode+0x2ad/0x570 [ 1019.437961][T16498] ? tomoyo_encode+0x2ad/0x570 [ 1019.437984][T16498] tomoyo_encode+0x2ad/0x570 [ 1019.438007][T16498] tomoyo_realpath_from_path+0x5fa/0x640 [ 1019.438035][T16498] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1019.438060][T16498] tomoyo_path_number_perm+0x246/0x5f0 [ 1019.438086][T16498] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1019.438109][T16498] ? __lock_acquire+0x683/0x2ce0 [ 1019.438146][T16498] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1019.438165][T16498] ? hook_file_ioctl+0x1f3/0x600 [ 1019.438186][T16498] ? lockdep_hardirqs_on+0x7a/0x110 [ 1019.438224][T16498] ? __fget_files+0x2a/0x420 [ 1019.438250][T16498] ? __fget_files+0x2a/0x420 [ 1019.438268][T16498] ? __fget_files+0x3a8/0x420 [ 1019.438285][T16498] ? __fget_files+0x2a/0x420 [ 1019.438316][T16498] security_file_ioctl+0xc3/0x2a0 [ 1019.438343][T16498] __se_sys_ioctl+0x47/0x170 [ 1019.438367][T16498] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1019.438386][T16498] do_syscall_64+0x174/0x580 [ 1019.438405][T16498] ? trace_irq_disable+0x3b/0x140 [ 1019.438425][T16498] ? clear_bhb_loop+0x40/0x90 [ 1019.438445][T16498] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1019.438461][T16498] RIP: 0033:0x7f60ea66ce59 [ 1019.438477][T16498] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1019.438490][T16498] RSP: 002b:00007f60e88be028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1019.438511][T16498] RAX: ffffffffffffffda RBX: 00007f60ea8e5fa0 RCX: 00007f60ea66ce59 [ 1019.438522][T16498] RDX: 0000000000000000 RSI: 00000000c0184800 RDI: 0000000000000003 [ 1019.438532][T16498] RBP: 00007f60e88be090 R08: 0000000000000000 R09: 0000000000000000 [ 1019.438543][T16498] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1019.438552][T16498] R13: 00007f60ea8e6038 R14: 00007f60ea8e5fa0 R15: 00007ffccf3a1b08 [ 1019.438580][T16498] [ 1019.443014][T15959] 8021q: adding VLAN 0 to HW filter on device team0 [ 1019.443699][T16498] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1019.484786][T15527] bridge0: port 1(bridge_slave_0) entered blocking state [ 1019.484938][T15527] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1019.563572][T15527] bridge0: port 2(bridge_slave_1) entered blocking state [ 1019.563917][T15527] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1021.141728][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806109fc00: rx timeout, send abort [ 1021.402034][T16520] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3115'. [ 1021.642534][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806109d000: rx timeout, send abort [ 1021.645510][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806109fc00: abort rx timeout. Force session deactivation [ 1022.142604][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806109d000: abort rx timeout. Force session deactivation [ 1022.461634][T15959] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1023.551453][ C1] vcan0: j1939_tp_rxtimer: 0xffff888062470800: rx timeout, send abort [ 1023.703899][T15959] veth0_vlan: entered promiscuous mode [ 1023.830021][T15959] veth1_vlan: entered promiscuous mode [ 1024.001308][T15959] veth0_macvtap: entered promiscuous mode [ 1024.051527][ C1] vcan0: j1939_tp_rxtimer: 0xffff888062470800: abort rx timeout. Force session deactivation [ 1024.051973][ C1] vcan0: j1939_tp_rxtimer: 0xffff888062472800: rx timeout, send abort [ 1024.064910][T15959] veth1_macvtap: entered promiscuous mode [ 1024.280009][T15959] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1024.320315][ T5603] Bluetooth: hci0: unexpected event for opcode 0x0c05 [ 1024.552931][ C1] vcan0: j1939_tp_rxtimer: 0xffff888062472800: abort rx timeout. Force session deactivation [ 1024.798405][T16544] smbdirect: ib_dev[syz1] removed [ 1025.167361][T16555] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 1025.167386][T16555] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1025.167473][T16555] vhci_hcd vhci_hcd.0: Device attached [ 1025.214310][T16556] vhci_hcd: cannot find a urb of seqnum 11605 max seqnum 0 [ 1025.226812][T15527] vhci_hcd vhci_hcd.5: stop threads [ 1025.226831][T15527] vhci_hcd vhci_hcd.5: release socket [ 1025.226871][T15527] vhci_hcd vhci_hcd.5: disconnect device [ 1026.530583][ T4910] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1026.601298][ T4910] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1026.619731][ T4910] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1026.661889][ T4910] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1026.871051][ T4910] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1027.296226][T16578] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3125'. [ 1028.655186][T16595] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3128'. [ 1029.852102][ T5603] Bluetooth: hci5: command tx timeout [ 1030.660461][T16621] FAULT_INJECTION: forcing a failure. [ 1030.660461][T16621] name failslab, interval 1, probability 0, space 0, times 0 [ 1030.660494][T16621] CPU: 0 UID: 0 PID: 16621 Comm: syz.0.3135 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1030.660517][T16621] Tainted: [L]=SOFTLOCKUP [ 1030.660524][T16621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1030.660535][T16621] Call Trace: [ 1030.660542][T16621] [ 1030.660550][T16621] dump_stack_lvl+0xe8/0x150 [ 1030.660577][T16621] should_fail_ex+0x467/0x600 [ 1030.660604][T16621] should_failslab+0xa8/0x100 [ 1030.660629][T16621] kmem_cache_alloc_noprof+0xa4/0x650 [ 1030.660651][T16621] ? alloc_task_exec_state+0x27/0x2e0 [ 1030.660670][T16621] ? alloc_task_exec_state+0x27/0x2e0 [ 1030.660694][T16621] alloc_task_exec_state+0x27/0x2e0 [ 1030.660716][T16621] task_exec_state_copy+0x6d/0x120 [ 1030.660738][T16621] copy_process+0x838/0x43f0 [ 1030.660771][T16621] ? kstrtouint+0x6e/0xe0 [ 1030.660804][T16621] ? __pfx_copy_process+0x10/0x10 [ 1030.660838][T16621] kernel_clone+0x2d2/0x8d0 [ 1030.660858][T16621] ? __pfx_kernel_clone+0x10/0x10 [ 1030.660884][T16621] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1030.660913][T16621] __x64_sys_clone+0x1b6/0x230 [ 1030.660933][T16621] ? __pfx___x64_sys_clone+0x10/0x10 [ 1030.660966][T16621] ? __pfx_ksys_write+0x10/0x10 [ 1030.660997][T16621] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1030.661016][T16621] do_syscall_64+0x174/0x580 [ 1030.661038][T16621] ? clear_bhb_loop+0x40/0x90 [ 1030.661060][T16621] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1030.661078][T16621] RIP: 0033:0x7f60ea66ce59 [ 1030.661095][T16621] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1030.661109][T16621] RSP: 002b:00007f60e889cfd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1030.661129][T16621] RAX: ffffffffffffffda RBX: 00007f60ea8e6090 RCX: 00007f60ea66ce59 [ 1030.661142][T16621] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000054800400 [ 1030.661154][T16621] RBP: 00007f60e889d090 R08: 0000000000000000 R09: 0000000000000000 [ 1030.661165][T16621] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 1030.661177][T16621] R13: 00007f60ea8e6128 R14: 00007f60ea8e6090 R15: 00007ffccf3a1b08 [ 1030.661206][T16621] [ 1031.000276][ T5734] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 1031.073149][T16622] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3137'. [ 1031.128710][ T5734] usb 4-1: device descriptor read/64, error -71 [ 1031.356450][T16635] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3141'. [ 1031.390649][ T5734] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 1031.527942][ T5734] usb 4-1: device descriptor read/64, error -71 [ 1031.647696][ T5734] usb usb4-port1: attempt power cycle [ 1031.940883][ T5603] Bluetooth: hci5: command tx timeout [ 1031.998103][ T5734] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 1032.018961][ T5734] usb 4-1: device descriptor read/8, error -71 [ 1032.259405][ T5734] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 1032.278846][ T5734] usb 4-1: device descriptor read/8, error -71 [ 1032.387675][ T5734] usb usb4-port1: unable to enumerate USB device [ 1033.676842][T16656] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3147'. [ 1034.255007][ T5603] Bluetooth: hci5: command tx timeout [ 1035.916884][T16677] netlink: 56 bytes leftover after parsing attributes in process `syz.6.3150'. [ 1035.947597][T16679] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3152'. [ 1036.255692][T16684] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3153'. [ 1036.327304][ T5603] Bluetooth: hci5: command tx timeout [ 1037.815166][T16702] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3159'. [ 1038.031187][ T5734] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 1038.157357][ T5734] usb 4-1: device descriptor read/64, error -71 [ 1038.681440][ T5734] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 1038.837498][ T5734] usb 4-1: device descriptor read/64, error -71 [ 1038.843313][T16719] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3164'. [ 1038.949911][ T5734] usb usb4-port1: attempt power cycle [ 1039.297572][ T5734] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 1039.320326][ T5734] usb 4-1: device descriptor read/8, error -71 [ 1039.331580][ T37] audit: type=1326 audit(2000000667.250:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16725 comm="syz.5.3167" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7637a8ce59 code=0x7ffc0000 [ 1039.331630][ T37] audit: type=1326 audit(2000000667.250:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16725 comm="syz.5.3167" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7637a8ce59 code=0x7ffc0000 [ 1039.339999][ T37] audit: type=1326 audit(2000000667.270:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16725 comm="syz.5.3167" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=327 compat=0 ip=0x7f7637a8ce59 code=0x7ffc0000 [ 1039.340047][ T37] audit: type=1326 audit(2000000667.270:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16725 comm="syz.5.3167" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7637a8ce59 code=0x7ffc0000 [ 1039.340085][ T37] audit: type=1326 audit(2000000667.270:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16725 comm="syz.5.3167" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f7637a8ce59 code=0x7ffc0000 [ 1039.340122][ T37] audit: type=1326 audit(2000000667.270:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16725 comm="syz.5.3167" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7637a8ce59 code=0x7ffc0000 [ 1039.340157][ T37] audit: type=1326 audit(2000000667.270:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16725 comm="syz.5.3167" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7637a8ce59 code=0x7ffc0000 [ 1039.568974][ T5734] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 1039.594208][ T5734] usb 4-1: device descriptor read/8, error -71 [ 1039.677385][T16735] netlink: 52 bytes leftover after parsing attributes in process `syz.6.3170'. [ 1039.699996][ T5734] usb usb4-port1: unable to enumerate USB device [ 1041.185382][T16561] bridge0: port 1(bridge_slave_0) entered blocking state [ 1041.185495][T16561] bridge0: port 1(bridge_slave_0) entered disabled state [ 1041.185677][T16561] bridge_slave_0: entered allmulticast mode [ 1041.214929][T16561] bridge_slave_0: entered promiscuous mode [ 1041.238189][T16561] bridge0: port 2(bridge_slave_1) entered blocking state [ 1041.238306][T16561] bridge0: port 2(bridge_slave_1) entered disabled state [ 1041.238565][T16561] bridge_slave_1: entered allmulticast mode [ 1041.245704][T16561] bridge_slave_1: entered promiscuous mode [ 1041.717643][T16561] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1042.089022][ T1025] bridge_slave_1: left allmulticast mode [ 1042.089055][ T1025] bridge_slave_1: left promiscuous mode [ 1042.089316][ T1025] bridge0: port 2(bridge_slave_1) entered disabled state [ 1042.130805][T16772] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3179'. [ 1042.272667][ T1025] bridge_slave_0: left allmulticast mode [ 1042.272700][ T1025] bridge_slave_0: left promiscuous mode [ 1042.272953][ T1025] bridge0: port 1(bridge_slave_0) entered disabled state [ 1042.867657][T16772] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1044.547401][ T9] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 1044.678919][ T9] usb 6-1: device descriptor read/64, error -71 [ 1044.947435][ T9] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 1045.038292][ T1025] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1045.077395][ T9] usb 6-1: device descriptor read/64, error -71 [ 1045.098279][ T1025] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1045.140687][ T1025] bond0 (unregistering): Released all slaves [ 1045.187677][ T9] usb usb6-port1: attempt power cycle [ 1045.270067][T16561] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1045.557345][ T9] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 1045.579322][ T9] usb 6-1: device descriptor read/8, error -71 [ 1045.647034][ T5256] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1045.837823][ T9] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 1045.858245][ T9] usb 6-1: device descriptor read/8, error -71 [ 1045.968439][ T9] usb usb6-port1: unable to enumerate USB device [ 1046.151122][T16561] team0: Port device team_slave_0 added [ 1046.176839][T16750] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1046.176863][T16750] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 1046.397810][ T1025] hsr_slave_0: left promiscuous mode [ 1046.444138][ T1025] hsr_slave_1: left promiscuous mode [ 1046.450661][ T1025] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1046.450687][ T1025] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1046.460063][T16817] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3194'. [ 1046.537884][ T1025] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1047.549620][T16824] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3197'. [ 1047.645838][T16750] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1047.645861][T16750] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1047.743560][ T1025] veth1_macvtap: left promiscuous mode [ 1047.743705][ T1025] veth0_macvtap: left promiscuous mode [ 1047.743963][ T1025] veth1_vlan: left promiscuous mode [ 1047.744148][ T1025] veth0_vlan: left promiscuous mode [ 1049.589622][ T1025] team0 (unregistering): Port device team_slave_1 removed [ 1049.648661][ T1025] team0 (unregistering): Port device team_slave_0 removed [ 1050.005999][T16561] team0: Port device team_slave_1 added [ 1051.471405][T16861] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3210'. [ 1052.757727][T16872] FAULT_INJECTION: forcing a failure. [ 1052.757727][T16872] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1052.757762][T16872] CPU: 1 UID: 0 PID: 16872 Comm: syz.5.3213 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1052.757786][T16872] Tainted: [L]=SOFTLOCKUP [ 1052.757793][T16872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1052.757803][T16872] Call Trace: [ 1052.757810][T16872] [ 1052.757819][T16872] dump_stack_lvl+0xe8/0x150 [ 1052.757846][T16872] should_fail_ex+0x467/0x600 [ 1052.757875][T16872] _copy_to_user+0x31/0xb0 [ 1052.757903][T16872] simple_read_from_buffer+0xe1/0x170 [ 1052.757932][T16872] proc_fail_nth_read+0x1be/0x230 [ 1052.757959][T16872] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1052.757984][T16872] ? rw_verify_area+0x250/0x4d0 [ 1052.758011][T16872] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1052.758032][T16872] vfs_read+0x219/0xa90 [ 1052.758065][T16872] ? __pfx_vfs_read+0x10/0x10 [ 1052.758091][T16872] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1052.758113][T16872] ? lockdep_hardirqs_on+0x7a/0x110 [ 1052.758135][T16872] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1052.758155][T16872] ? mutex_lock_nested+0x152/0x1d0 [ 1052.758177][T16872] ? fdget_pos+0x252/0x320 [ 1052.758208][T16872] ksys_read+0x156/0x270 [ 1052.758241][T16872] ? __pfx_ksys_read+0x10/0x10 [ 1052.758274][T16872] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1052.758293][T16872] do_syscall_64+0x174/0x580 [ 1052.758312][T16872] ? trace_irq_disable+0x3b/0x140 [ 1052.758333][T16872] ? clear_bhb_loop+0x40/0x90 [ 1052.758352][T16872] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1052.758368][T16872] RIP: 0033:0x7f7637a4d68e [ 1052.758382][T16872] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1052.758396][T16872] RSP: 002b:00007f7635cddfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1052.758415][T16872] RAX: ffffffffffffffda RBX: 00007f7635cde6c0 RCX: 00007f7637a4d68e [ 1052.758427][T16872] RDX: 000000000000000f RSI: 00007f7635cde0a0 RDI: 0000000000000003 [ 1052.758437][T16872] RBP: 00007f7635cde090 R08: 0000000000000000 R09: 0000000000000000 [ 1052.758447][T16872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1052.758456][T16872] R13: 00007f7637d06038 R14: 00007f7637d05fa0 R15: 00007ffceba8c6a8 [ 1052.758483][T16872] [ 1053.233805][ T5734] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 1053.406996][ T5734] usb 6-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1053.407027][ T5734] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1053.474635][ T5734] usb 6-1: config 0 descriptor?? [ 1053.523482][ T5839] hid-generic 0000:0000:0004.0014: unknown main item tag 0x0 [ 1053.534804][ T5839] hid-generic 0000:0000:0004.0014: unknown main item tag 0x0 [ 1053.534834][ T5839] hid-generic 0000:0000:0004.0014: unknown main item tag 0x0 [ 1053.534856][ T5839] hid-generic 0000:0000:0004.0014: unknown main item tag 0x0 [ 1053.534879][ T5839] hid-generic 0000:0000:0004.0014: unknown main item tag 0x0 [ 1053.534903][ T5839] hid-generic 0000:0000:0004.0014: unknown main item tag 0x0 [ 1053.534927][ T5839] hid-generic 0000:0000:0004.0014: unknown main item tag 0x0 [ 1053.534949][ T5839] hid-generic 0000:0000:0004.0014: unknown main item tag 0x0 [ 1053.534971][ T5839] hid-generic 0000:0000:0004.0014: unknown main item tag 0x0 [ 1053.534994][ T5839] hid-generic 0000:0000:0004.0014: unknown main item tag 0x0 [ 1053.552524][ T5734] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1053.753587][ T5839] hid-generic 0000:0000:0004.0014: hidraw0: HID v0.03 Device [syz1] on syz0 [ 1053.880987][ T5734] cpia1 6-1:0.0: unexpected state after lo power cmd: 00 [ 1054.023659][T16561] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1054.023675][T16561] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1054.023696][T16561] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1054.297367][ T5734] gspca_cpia1: usb_control_msg 02, error -32 [ 1054.306406][ T5734] gspca_cpia1: usb_control_msg 02, error -32 [ 1054.306811][ T5734] gspca_cpia1: usb_control_msg 02, error -71 [ 1054.306828][ T5734] cpia1 6-1:0.0: only firmware version 1 is supported (got: 0) [ 1054.533868][ T5734] usb 6-1: USB disconnect, device number 70 [ 1054.862099][T16561] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1054.862114][T16561] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1054.862136][T16561] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1055.361219][T16884] bridge_slave_0: invalid flags given to default FDB implementation [ 1055.727512][ T5721] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 1055.912681][ T5721] usb 4-1: device descriptor read/64, error -71 [ 1056.268869][ T5721] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 1056.593506][ T5721] usb 4-1: device descriptor read/64, error -71 [ 1056.704601][ T5721] usb usb4-port1: attempt power cycle [ 1056.738279][T16904] netlink: 'syz.5.3225': attribute type 1 has an invalid length. [ 1057.077422][ T5721] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 1057.136532][ T5721] usb 4-1: device descriptor read/8, error -71 [ 1057.933532][ T5721] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 1057.949080][ T5721] usb 4-1: device descriptor read/8, error -71 [ 1058.057867][ T5721] usb usb4-port1: unable to enumerate USB device [ 1058.233391][T16561] hsr_slave_0: entered promiscuous mode [ 1058.235084][T16561] hsr_slave_1: entered promiscuous mode [ 1058.236064][T16561] debugfs: 'hsr0' already exists in 'hsr' [ 1058.236089][T16561] Cannot create hsr debugfs directory [ 1058.236718][T16750] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1058.236736][T16750] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 1058.440542][T16925] FAULT_INJECTION: forcing a failure. [ 1058.440542][T16925] name failslab, interval 1, probability 0, space 0, times 0 [ 1058.440575][T16925] CPU: 1 UID: 0 PID: 16925 Comm: syz.3.3228 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1058.440599][T16925] Tainted: [L]=SOFTLOCKUP [ 1058.440605][T16925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1058.440615][T16925] Call Trace: [ 1058.440623][T16925] [ 1058.440632][T16925] dump_stack_lvl+0xe8/0x150 [ 1058.440657][T16925] should_fail_ex+0x467/0x600 [ 1058.440685][T16925] should_failslab+0xa8/0x100 [ 1058.440711][T16925] kmem_cache_alloc_node_noprof+0xae/0x670 [ 1058.440735][T16925] ? __alloc_skb+0x1d7/0x7a0 [ 1058.440756][T16925] ? __alloc_skb+0x1d7/0x7a0 [ 1058.440786][T16925] __alloc_skb+0x1d7/0x7a0 [ 1058.440811][T16925] netlink_sendmsg+0x5d4/0xb40 [ 1058.440847][T16925] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1058.440873][T16925] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1058.440897][T16925] ? __kernel_text_address+0xd/0x30 [ 1058.440919][T16925] ? unwind_get_return_address+0x4d/0x90 [ 1058.440945][T16925] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1058.440968][T16925] sock_sendmsg_nosec+0x13a/0x180 [ 1058.440991][T16925] ____sys_sendmsg+0x565/0x870 [ 1058.441016][T16925] ? __might_fault+0xaf/0x130 [ 1058.441044][T16925] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1058.441077][T16925] ? import_iovec+0x73/0xa0 [ 1058.441116][T16925] ___sys_sendmsg+0x2a5/0x360 [ 1058.441139][T16925] ? __lock_acquire+0x683/0x2ce0 [ 1058.441165][T16925] ? __pfx____sys_sendmsg+0x10/0x10 [ 1058.441218][T16925] ? __fget_files+0x2a/0x420 [ 1058.441239][T16925] ? __fget_files+0x3a8/0x420 [ 1058.441270][T16925] __x64_sys_sendmsg+0x1b7/0x290 [ 1058.441297][T16925] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1058.441337][T16925] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1058.441357][T16925] do_syscall_64+0x174/0x580 [ 1058.441379][T16925] ? trace_irq_disable+0x3b/0x140 [ 1058.441401][T16925] ? clear_bhb_loop+0x40/0x90 [ 1058.441423][T16925] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1058.441441][T16925] RIP: 0033:0x7fcaafd6ce59 [ 1058.441459][T16925] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1058.441473][T16925] RSP: 002b:00007fcaadfc6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1058.441492][T16925] RAX: ffffffffffffffda RBX: 00007fcaaffe5fa0 RCX: 00007fcaafd6ce59 [ 1058.441506][T16925] RDX: 000000000000c010 RSI: 0000200000000040 RDI: 0000000000000003 [ 1058.441517][T16925] RBP: 00007fcaadfc6090 R08: 0000000000000000 R09: 0000000000000000 [ 1058.441528][T16925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1058.441540][T16925] R13: 00007fcaaffe6038 R14: 00007fcaaffe5fa0 R15: 00007fff56ff7758 [ 1058.441568][T16925] [ 1058.950171][T16933] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3231'. [ 1060.180436][T16944] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3233'. [ 1060.328400][ T5256] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1060.861952][T16954] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3235'. [ 1060.862500][T16954] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3235'. [ 1061.468613][T16750] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1061.468636][T16750] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 1061.495520][T16943] bridge_slave_0: invalid flags given to default FDB implementation [ 1066.117294][ T5721] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 1066.237927][ T5256] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1066.672600][ T5721] usb 4-1: Using ep0 maxpacket: 8 [ 1066.674883][ T5721] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1066.674935][ T5721] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1066.674957][ T5721] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1066.685025][ T5721] usb 4-1: config 0 descriptor?? [ 1066.762362][ T5721] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1069.485434][ T5721] gspca_vc032x: reg_w err -110 [ 1069.486155][ T5721] vc032x 4-1:0.0: probe with driver vc032x failed with error -110 [ 1070.537397][ T5838] usb 4-1: USB disconnect, device number 127 [ 1070.684213][T17014] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3249'. [ 1070.868985][T17015] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1072.089304][T16997] bridge_slave_0: invalid flags given to default FDB implementation [ 1078.614285][T17043] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3257'. [ 1080.217506][ T819] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 1080.405095][ T819] usb 6-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1080.405124][ T819] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1080.440247][ T819] usb 6-1: config 0 descriptor?? [ 1080.478618][ T819] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1081.426852][ T819] cpia1 6-1:0.0: unexpected state after lo power cmd: 00 [ 1082.368267][ T819] gspca_cpia1: usb_control_msg 02, error -32 [ 1082.374809][ T819] cpia1 6-1:0.0: only firmware version 1 is supported (got: 0) [ 1082.731254][ T819] usb 6-1: USB disconnect, device number 71 [ 1084.218359][T16750] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1084.218383][T16750] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 1086.247517][ T5603] Bluetooth: hci5: command 0x0c1a tx timeout [ 1086.514828][ T4910] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1086.555091][ T4910] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1086.611874][ T4910] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1086.619823][ T4910] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1086.657716][ T4910] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1088.666204][ T5603] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1088.678388][ T5603] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1088.678801][ T5603] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1088.679909][ T5603] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1088.681558][ T5603] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1090.464909][ T4910] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1090.541862][ T4910] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1090.546571][ T4910] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1090.588039][ T4910] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1090.599090][ T4910] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1090.738258][ T5603] Bluetooth: hci3: command tx timeout [ 1090.886807][T17092] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3268'. [ 1092.810144][ T5603] Bluetooth: hci3: command tx timeout [ 1093.471594][ T5603] Bluetooth: hci7: command tx timeout [ 1093.760399][T17115] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3272'. [ 1094.967773][ T5603] Bluetooth: hci3: command tx timeout [ 1095.528521][ T5603] Bluetooth: hci7: command tx timeout [ 1096.577684][ T31] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 1096.834095][ T31] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1096.834134][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1096.870734][ T31] usb 4-1: config 0 descriptor?? [ 1096.891782][ T31] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1097.149406][ T5603] Bluetooth: hci3: command tx timeout [ 1097.619790][ T5603] Bluetooth: hci7: command tx timeout [ 1097.637266][ T31] cpia1 4-1:0.0: unexpected state after lo power cmd: 00 [ 1098.029075][ T31] gspca_cpia1: usb_control_msg 02, error -32 [ 1098.029925][ T31] cpia1 4-1:0.0: only firmware version 1 is supported (got: 0) [ 1098.267056][ T5601] usb 4-1: USB disconnect, device number 2 [ 1100.535104][ T5603] Bluetooth: hci7: command tx timeout [ 1101.615647][T17161] overlay: ./bus is not a directory [ 1103.113868][ T4910] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1103.191265][ T4910] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1103.200118][ T4910] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1103.296639][ T4910] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1103.312921][ T4910] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1103.409380][T17179] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3285'. [ 1105.536704][ T4910] Bluetooth: hci1: command tx timeout [ 1107.813919][ T4910] Bluetooth: hci1: command tx timeout [ 1109.948969][ T4910] Bluetooth: hci1: command tx timeout [ 1112.009057][ T4910] Bluetooth: hci1: command tx timeout [ 1112.544111][T16912] bridge0: port 1(bridge_slave_0) entered blocking state [ 1112.544233][T16912] bridge0: port 1(bridge_slave_0) entered disabled state [ 1112.544478][T16912] bridge_slave_0: entered allmulticast mode [ 1112.571969][T16912] bridge_slave_0: entered promiscuous mode [ 1112.802522][T16912] bridge0: port 2(bridge_slave_1) entered blocking state [ 1112.802644][T16912] bridge0: port 2(bridge_slave_1) entered disabled state [ 1112.802952][T16912] bridge_slave_1: entered allmulticast mode [ 1112.897724][T16912] bridge_slave_1: entered promiscuous mode [ 1113.875941][T17237] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3289'. [ 1113.879617][T17237] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3289'. [ 1115.522176][T17088] bridge0: port 1(bridge_slave_0) entered blocking state [ 1115.522310][T17088] bridge0: port 1(bridge_slave_0) entered disabled state [ 1115.522532][T17088] bridge_slave_0: entered allmulticast mode [ 1115.533561][T17088] bridge_slave_0: entered promiscuous mode [ 1115.682114][T16912] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1115.684019][T17088] bridge0: port 2(bridge_slave_1) entered blocking state [ 1115.684151][T17088] bridge0: port 2(bridge_slave_1) entered disabled state [ 1115.684387][T17088] bridge_slave_1: entered allmulticast mode [ 1115.785574][T17088] bridge_slave_1: entered promiscuous mode [ 1116.074113][T16912] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1118.435762][ T5603] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1118.515470][ T5603] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1118.536774][ T5603] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1118.548677][ T5603] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1118.576542][ T5603] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1118.852796][ T5603] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1118.907696][ T5603] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1118.935617][ T5603] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1118.946645][ T5603] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1118.967431][ T5603] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1120.958665][ T4910] Bluetooth: hci8: command tx timeout [ 1121.150399][ T4910] Bluetooth: hci9: command tx timeout [ 1122.982124][ T4910] Bluetooth: hci8: command tx timeout [ 1123.217359][ T4910] Bluetooth: hci9: command tx timeout [ 1125.047239][ T4910] Bluetooth: hci8: command tx timeout [ 1125.367409][ T4910] Bluetooth: hci9: command tx timeout [ 1127.135101][ T4910] Bluetooth: hci8: command tx timeout [ 1127.404590][ T6604] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1127.404624][ T6604] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1127.447458][ T4910] Bluetooth: hci9: command tx timeout [ 1128.293380][T17088] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1131.113914][T17088] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1131.907974][T17088] team0: Port device team_slave_0 added [ 1131.989758][T17088] team0: Port device team_slave_1 added [ 1134.293033][T17088] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1134.293051][T17088] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1134.293075][T17088] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1134.422462][T17088] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1134.422474][T17088] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1134.422489][T17088] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1138.073083][T17088] hsr_slave_0: entered promiscuous mode [ 1138.107326][T17088] hsr_slave_1: entered promiscuous mode [ 1138.108001][T17088] debugfs: 'hsr0' already exists in 'hsr' [ 1138.108018][T17088] Cannot create hsr debugfs directory [ 1142.499062][T17173] bridge0: port 1(bridge_slave_0) entered blocking state [ 1142.499182][T17173] bridge0: port 1(bridge_slave_0) entered disabled state [ 1142.499441][T17173] bridge_slave_0: entered allmulticast mode [ 1142.505886][T17173] bridge_slave_0: entered promiscuous mode [ 1148.674550][T17173] bridge0: port 2(bridge_slave_1) entered blocking state [ 1148.674666][T17173] bridge0: port 2(bridge_slave_1) entered disabled state [ 1148.674934][T17173] bridge_slave_1: entered allmulticast mode [ 1148.726231][T17173] bridge_slave_1: entered promiscuous mode [ 1149.181815][T17363] 9p: Bad value for 'rfdno' [ 1150.307443][T17173] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1150.422193][ T5603] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1150.497827][ T5603] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1150.502732][ T5603] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1150.505428][ T5603] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1150.506357][ T5603] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1150.883275][T17173] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1152.434315][T17173] team0: Port device team_slave_0 added [ 1152.522983][T17173] team0: Port device team_slave_1 added [ 1152.738691][ T4910] Bluetooth: hci4: command tx timeout [ 1154.918175][ T4910] Bluetooth: hci4: command tx timeout [ 1156.987553][ T4910] Bluetooth: hci4: command tx timeout [ 1157.823461][T17405] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3305'. [ 1157.880794][T17406] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3305'. [ 1157.909406][T17173] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1157.909422][T17173] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1157.909447][T17173] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1158.121579][T17406] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3305'. [ 1159.049109][ T4910] Bluetooth: hci4: command tx timeout [ 1159.216957][T17173] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1159.216976][T17173] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1159.217002][T17173] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1161.019531][T17173] hsr_slave_0: entered promiscuous mode [ 1161.020974][T17173] hsr_slave_1: entered promiscuous mode [ 1161.021873][T17173] debugfs: 'hsr0' already exists in 'hsr' [ 1161.021895][T17173] Cannot create hsr debugfs directory [ 1161.066777][T17253] bridge0: port 1(bridge_slave_0) entered blocking state [ 1161.066916][T17253] bridge0: port 1(bridge_slave_0) entered disabled state [ 1161.083648][T17253] bridge_slave_0: entered allmulticast mode [ 1161.112670][T17253] bridge_slave_0: entered promiscuous mode [ 1161.860572][T17253] bridge0: port 2(bridge_slave_1) entered blocking state [ 1161.860691][T17253] bridge0: port 2(bridge_slave_1) entered disabled state [ 1161.861092][T17253] bridge_slave_1: entered allmulticast mode [ 1161.894169][T17253] bridge_slave_1: entered promiscuous mode [ 1164.793900][ T5603] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1164.848530][T17253] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1165.020361][ T5603] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1165.175385][ T5603] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1165.250938][T17253] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1165.661997][ T5603] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1165.663003][ T5603] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1166.217554][T17448] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3310'. [ 1166.884829][T17253] team0: Port device team_slave_0 added [ 1168.007283][ T5603] Bluetooth: hci0: command tx timeout [ 1168.441531][T17253] team0: Port device team_slave_1 added [ 1169.068757][T17259] bridge0: port 1(bridge_slave_0) entered blocking state [ 1169.068901][T17259] bridge0: port 1(bridge_slave_0) entered disabled state [ 1169.069195][T17259] bridge_slave_0: entered allmulticast mode [ 1169.279914][T17259] bridge_slave_0: entered promiscuous mode [ 1170.109147][ T4910] Bluetooth: hci0: command tx timeout [ 1171.183268][T17259] bridge0: port 2(bridge_slave_1) entered blocking state [ 1171.229495][T17259] bridge0: port 2(bridge_slave_1) entered disabled state [ 1171.229909][T17259] bridge_slave_1: entered allmulticast mode [ 1171.240530][T17259] bridge_slave_1: entered promiscuous mode [ 1171.370391][T17458] bridge_slave_0: invalid flags given to default FDB implementation [ 1171.623789][T17253] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1171.623805][T17253] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1171.623829][T17253] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1172.237634][ T4910] Bluetooth: hci0: command tx timeout [ 1172.572136][T17253] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1172.572152][T17253] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1172.572174][T17253] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1172.795013][T17259] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1172.876707][T17259] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1174.259339][ T5603] Bluetooth: hci0: command tx timeout [ 1174.530701][T17473] netlink: 9 bytes leftover after parsing attributes in process `syz.6.3315'. [ 1174.645712][T17259] team0: Port device team_slave_0 added [ 1174.936390][T17473] netlink: 9 bytes leftover after parsing attributes in process `syz.6.3315'. [ 1175.021297][T17259] team0: Port device team_slave_1 added [ 1175.051324][T17253] hsr_slave_0: entered promiscuous mode [ 1175.052751][T17253] hsr_slave_1: entered promiscuous mode [ 1175.053740][T17253] debugfs: 'hsr0' already exists in 'hsr' [ 1175.053764][T17253] Cannot create hsr debugfs directory [ 1177.546152][T17259] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1177.546169][T17259] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1177.546192][T17259] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1177.735180][T17259] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1177.735196][T17259] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1177.735219][T17259] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1178.602884][ T4910] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1179.246632][ T4910] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1179.460034][ T4910] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1179.476215][ T4910] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1179.493135][ T4910] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1181.617410][ T5603] Bluetooth: hci1: command tx timeout [ 1182.496029][ T4910] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1182.701680][ T4910] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1182.716771][ T4910] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1183.046167][ T4910] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1183.101750][ T4910] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1183.690163][ T5603] Bluetooth: hci1: command tx timeout [ 1183.861634][T17362] bridge0: port 1(bridge_slave_0) entered blocking state [ 1183.861779][T17362] bridge0: port 1(bridge_slave_0) entered disabled state [ 1183.862069][T17362] bridge_slave_0: entered allmulticast mode [ 1183.881861][T17362] bridge_slave_0: entered promiscuous mode [ 1183.962322][T17362] bridge0: port 2(bridge_slave_1) entered blocking state [ 1183.962444][T17362] bridge0: port 2(bridge_slave_1) entered disabled state [ 1183.962757][T17362] bridge_slave_1: entered allmulticast mode [ 1184.303148][T17362] bridge_slave_1: entered promiscuous mode [ 1185.423743][ T5603] Bluetooth: hci7: command tx timeout [ 1186.002389][ T5603] Bluetooth: hci1: command tx timeout [ 1187.966712][ T5603] Bluetooth: hci7: command tx timeout [ 1188.007488][ T4910] Bluetooth: hci1: command tx timeout [ 1190.007278][ T4910] Bluetooth: hci7: command tx timeout [ 1190.455081][T17546] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3325'. [ 1191.016954][ T6604] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1191.016988][ T6604] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1192.087707][ T4910] Bluetooth: hci7: command tx timeout [ 1193.667830][T17362] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1200.105587][T17548] bridge_slave_0: invalid flags given to default FDB implementation [ 1200.206820][T17362] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1202.073344][T17362] team0: Port device team_slave_0 added [ 1202.845006][T17362] team0: Port device team_slave_1 added [ 1204.498788][T17362] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1204.498804][T17362] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1204.498828][T17362] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1205.496288][T17362] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1205.496305][T17362] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1205.496330][T17362] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1207.225307][T17435] bridge0: port 1(bridge_slave_0) entered blocking state [ 1207.225423][T17435] bridge0: port 1(bridge_slave_0) entered disabled state [ 1207.225734][T17435] bridge_slave_0: entered allmulticast mode [ 1207.620331][T17435] bridge_slave_0: entered promiscuous mode [ 1208.137387][T17435] bridge0: port 2(bridge_slave_1) entered blocking state [ 1208.137521][T17435] bridge0: port 2(bridge_slave_1) entered disabled state [ 1208.137792][T17435] bridge_slave_1: entered allmulticast mode [ 1208.140599][T17435] bridge_slave_1: entered promiscuous mode [ 1209.478205][T17362] hsr_slave_0: entered promiscuous mode [ 1209.493893][T17362] hsr_slave_1: entered promiscuous mode [ 1209.498357][T17362] debugfs: 'hsr0' already exists in 'hsr' [ 1209.498384][T17362] Cannot create hsr debugfs directory [ 1210.002030][T17435] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1210.085155][T17435] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1210.937374][T17435] team0: Port device team_slave_0 added [ 1210.995003][T17435] team0: Port device team_slave_1 added [ 1211.523213][ T5603] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1211.536299][ T5603] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1211.741468][ T5603] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1211.750378][ T5603] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1211.773324][ T5603] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1212.743412][T17435] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1212.743429][T17435] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1212.743453][T17435] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1212.869174][T17435] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1212.869190][T17435] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1212.869214][T17435] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1214.591368][T17597] netlink: 84 bytes leftover after parsing attributes in process `syz.6.3333'. [ 1214.986611][ T4910] Bluetooth: hci3: command tx timeout [ 1216.382517][T17604] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3334'. [ 1217.047256][ T4910] Bluetooth: hci3: command tx timeout [ 1219.637248][ T4910] Bluetooth: hci3: command tx timeout [ 1219.666832][T17435] hsr_slave_0: entered promiscuous mode [ 1219.685789][T17435] hsr_slave_1: entered promiscuous mode [ 1219.691534][T17435] debugfs: 'hsr0' already exists in 'hsr' [ 1219.691561][T17435] Cannot create hsr debugfs directory [ 1220.643201][T17627] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3338'. [ 1221.688815][ T4910] Bluetooth: hci3: command tx timeout [ 1222.282597][T17489] bridge0: port 1(bridge_slave_0) entered blocking state [ 1222.282875][T17489] bridge0: port 1(bridge_slave_0) entered disabled state [ 1222.283221][T17489] bridge_slave_0: entered allmulticast mode [ 1222.379768][T17489] bridge_slave_0: entered promiscuous mode [ 1222.710558][T17489] bridge0: port 2(bridge_slave_1) entered blocking state [ 1222.710678][T17489] bridge0: port 2(bridge_slave_1) entered disabled state [ 1222.710949][T17489] bridge_slave_1: entered allmulticast mode [ 1222.716275][T17489] bridge_slave_1: entered promiscuous mode [ 1225.195968][T17489] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1225.251118][ T5603] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1225.309624][ T5603] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1225.315443][ T5603] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1225.369048][ T5603] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1225.387720][ T5603] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1226.134641][T17489] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1226.917296][T17642] bridge_slave_0: invalid flags given to default FDB implementation [ 1227.019938][T17507] bridge0: port 1(bridge_slave_0) entered blocking state [ 1227.020061][T17507] bridge0: port 1(bridge_slave_0) entered disabled state [ 1227.020392][T17507] bridge_slave_0: entered allmulticast mode [ 1227.045765][T17507] bridge_slave_0: entered promiscuous mode [ 1227.299509][T17507] bridge0: port 2(bridge_slave_1) entered blocking state [ 1227.299698][T17507] bridge0: port 2(bridge_slave_1) entered disabled state [ 1227.300013][T17507] bridge_slave_1: entered allmulticast mode [ 1227.346643][T17507] bridge_slave_1: entered promiscuous mode [ 1227.817608][ T5603] Bluetooth: hci4: command tx timeout [ 1227.840644][T17489] team0: Port device team_slave_0 added [ 1227.910924][T17655] 9p: Bad value for 'rfdno' [ 1227.943117][T17489] team0: Port device team_slave_1 added [ 1229.416818][T17507] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1229.847386][ T5603] Bluetooth: hci4: command tx timeout [ 1230.236713][T17507] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1230.246180][T17489] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1230.246198][T17489] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1230.246222][T17489] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1231.448383][T17489] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1231.448400][T17489] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1231.448424][T17489] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1231.735108][T17507] team0: Port device team_slave_0 added [ 1231.794017][T17507] team0: Port device team_slave_1 added [ 1231.927739][ T5603] Bluetooth: hci4: command tx timeout [ 1234.020555][ T5603] Bluetooth: hci4: command tx timeout [ 1234.142071][T17670] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3344'. [ 1235.226427][T17507] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1235.226442][T17507] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1235.226466][T17507] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1235.935577][T17489] hsr_slave_0: entered promiscuous mode [ 1235.943660][T17489] hsr_slave_1: entered promiscuous mode [ 1235.953628][T17489] debugfs: 'hsr0' already exists in 'hsr' [ 1235.953655][T17489] Cannot create hsr debugfs directory [ 1235.959788][T17507] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1235.959805][T17507] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1235.959828][T17507] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1239.916695][T17507] hsr_slave_0: entered promiscuous mode [ 1240.011887][T17507] hsr_slave_1: entered promiscuous mode [ 1240.050548][T17507] debugfs: 'hsr0' already exists in 'hsr' [ 1240.050574][T17507] Cannot create hsr debugfs directory [ 1240.728123][ T4910] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1240.951771][ T4910] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1240.968902][ T4910] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1241.004943][ T4910] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1241.020689][ T4910] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1243.721500][ T5603] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1243.853792][ T5603] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1243.928466][ T5603] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1243.931485][ T5603] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1243.933175][ T5603] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1244.100610][ T5603] Bluetooth: hci0: command tx timeout [ 1244.281123][T17584] bridge0: port 1(bridge_slave_0) entered blocking state [ 1244.281249][T17584] bridge0: port 1(bridge_slave_0) entered disabled state [ 1244.281580][T17584] bridge_slave_0: entered allmulticast mode [ 1244.306379][T17584] bridge_slave_0: entered promiscuous mode [ 1244.742190][T17584] bridge0: port 2(bridge_slave_1) entered blocking state [ 1244.742355][T17584] bridge0: port 2(bridge_slave_1) entered disabled state [ 1244.742992][T17584] bridge_slave_1: entered allmulticast mode [ 1244.763488][T17584] bridge_slave_1: entered promiscuous mode [ 1246.184672][ T4910] Bluetooth: hci0: command tx timeout [ 1246.371927][ T4910] Bluetooth: hci8: command tx timeout [ 1248.276473][ T4910] Bluetooth: hci0: command tx timeout [ 1248.418734][ T4910] Bluetooth: hci8: command tx timeout [ 1250.373224][ T4910] Bluetooth: hci0: command tx timeout [ 1250.487301][ T4910] Bluetooth: hci8: command tx timeout [ 1251.963955][T17584] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1252.000015][T17584] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1252.537600][T17584] team0: Port device team_slave_0 added [ 1252.582999][T17584] team0: Port device team_slave_1 added [ 1252.587503][ T4910] Bluetooth: hci8: command tx timeout [ 1254.516651][T17584] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1254.516668][T17584] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1254.516692][T17584] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1255.019745][T17584] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1255.019761][T17584] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1255.019786][T17584] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1256.400539][T17747] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3355'. [ 1257.501199][T17173] syz-executor (17173) used greatest stack depth: 16456 bytes left [ 1260.881704][T17584] hsr_slave_0: entered promiscuous mode [ 1260.883221][T17584] hsr_slave_1: entered promiscuous mode [ 1260.884211][T17584] debugfs: 'hsr0' already exists in 'hsr' [ 1260.884234][T17584] Cannot create hsr debugfs directory [ 1262.126192][T17638] bridge0: port 1(bridge_slave_0) entered blocking state [ 1262.126311][T17638] bridge0: port 1(bridge_slave_0) entered disabled state [ 1262.126611][T17638] bridge_slave_0: entered allmulticast mode [ 1262.161261][T17638] bridge_slave_0: entered promiscuous mode [ 1262.373426][T17638] bridge0: port 2(bridge_slave_1) entered blocking state [ 1262.373645][T17638] bridge0: port 2(bridge_slave_1) entered disabled state [ 1262.373983][T17638] bridge_slave_1: entered allmulticast mode [ 1262.411439][T17638] bridge_slave_1: entered promiscuous mode [ 1265.248525][T17638] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1265.465180][T17638] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1270.686796][T17638] team0: Port device team_slave_0 added [ 1271.040518][T17638] team0: Port device team_slave_1 added [ 1271.895081][T17638] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1271.895097][T17638] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1271.895120][T17638] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1273.045236][T17638] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1273.045254][T17638] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1273.045279][T17638] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1274.303377][T17638] hsr_slave_0: entered promiscuous mode [ 1274.308685][T17638] hsr_slave_1: entered promiscuous mode [ 1274.313707][T17638] debugfs: 'hsr0' already exists in 'hsr' [ 1274.313744][T17638] Cannot create hsr debugfs directory [ 1275.824072][ T5603] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1275.950367][ T5603] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1276.104776][ T5603] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1276.213993][ T5603] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1276.427664][ T5603] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1278.678313][ T4910] Bluetooth: hci1: command tx timeout [ 1280.050445][T17820] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3369'. [ 1280.737256][ T4910] Bluetooth: hci1: command tx timeout [ 1282.817349][ T4910] Bluetooth: hci1: command tx timeout [ 1284.902015][ T4910] Bluetooth: hci1: command tx timeout [ 1286.835255][ T5603] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1286.917427][ T5603] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1286.979950][ T5603] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1286.983331][ T5603] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1287.080525][ T5603] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1287.893898][T17688] bridge0: port 1(bridge_slave_0) entered blocking state [ 1287.894009][T17688] bridge0: port 1(bridge_slave_0) entered disabled state [ 1287.894357][T17688] bridge_slave_0: entered allmulticast mode [ 1288.034769][T17688] bridge_slave_0: entered promiscuous mode [ 1288.631726][T17688] bridge0: port 2(bridge_slave_1) entered blocking state [ 1288.631949][T17688] bridge0: port 2(bridge_slave_1) entered disabled state [ 1288.632292][T17688] bridge_slave_1: entered allmulticast mode [ 1288.693143][T17688] bridge_slave_1: entered promiscuous mode [ 1289.304824][T17699] bridge0: port 1(bridge_slave_0) entered blocking state [ 1289.304955][T17699] bridge0: port 1(bridge_slave_0) entered disabled state [ 1289.305256][T17699] bridge_slave_0: entered allmulticast mode [ 1289.316069][T17699] bridge_slave_0: entered promiscuous mode [ 1290.427779][T17699] bridge0: port 2(bridge_slave_1) entered blocking state [ 1290.427914][T17699] bridge0: port 2(bridge_slave_1) entered disabled state [ 1290.428262][T17699] bridge_slave_1: entered allmulticast mode [ 1290.445439][T17699] bridge_slave_1: entered promiscuous mode [ 1290.487792][ T4910] Bluetooth: hci3: command tx timeout [ 1290.515206][T17688] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1290.876981][T17688] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1292.567487][ T4910] Bluetooth: hci3: command tx timeout [ 1294.519234][T17853] 9p: Bad value for 'rfdno' [ 1294.647592][ T4910] Bluetooth: hci3: command tx timeout [ 1296.880542][ T4910] Bluetooth: hci3: command tx timeout [ 1298.524186][T17699] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1299.609651][T17699] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1299.958008][T17688] team0: Port device team_slave_0 added [ 1301.690860][ T5603] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1301.728900][ T5603] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1301.732658][ T5603] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1301.767291][ T5603] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1301.805058][ T5603] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1302.125691][ T5603] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1302.205084][ T5603] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1302.243260][ T5603] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1302.285552][ T5603] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1302.316823][ T5603] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1304.047331][ T5603] Bluetooth: hci4: command tx timeout [ 1304.305344][T17889] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3378'. [ 1305.287579][ T4910] Bluetooth: hci5: command tx timeout [ 1306.220328][ T4910] Bluetooth: hci4: command tx timeout [ 1307.416766][ T4910] Bluetooth: hci5: command tx timeout [ 1308.251729][ T4910] Bluetooth: hci4: command tx timeout [ 1309.448434][ T4910] Bluetooth: hci5: command tx timeout [ 1310.428227][ T4910] Bluetooth: hci4: command tx timeout [ 1311.528593][ T4910] Bluetooth: hci5: command tx timeout [ 1313.083167][T17920] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3383'. [ 1322.790753][T17947] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3388'. [ 1322.824239][T17797] bridge0: port 1(bridge_slave_0) entered blocking state [ 1322.824360][T17797] bridge0: port 1(bridge_slave_0) entered disabled state [ 1322.824785][T17797] bridge_slave_0: entered allmulticast mode [ 1322.830790][T17797] bridge_slave_0: entered promiscuous mode [ 1324.997610][T17797] bridge0: port 2(bridge_slave_1) entered blocking state [ 1324.997731][T17797] bridge0: port 2(bridge_slave_1) entered disabled state [ 1324.998102][T17797] bridge_slave_1: entered allmulticast mode [ 1325.035095][T17797] bridge_slave_1: entered promiscuous mode [ 1326.741070][T17959] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3390'. [ 1327.237331][T17797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1327.448821][T17797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1327.482914][T17838] bridge0: port 1(bridge_slave_0) entered blocking state [ 1327.485577][T17838] bridge0: port 1(bridge_slave_0) entered disabled state [ 1327.486877][T17838] bridge_slave_0: entered allmulticast mode [ 1327.530530][T17838] bridge_slave_0: entered promiscuous mode [ 1327.930446][T17838] bridge0: port 2(bridge_slave_1) entered blocking state [ 1327.930568][T17838] bridge0: port 2(bridge_slave_1) entered disabled state [ 1327.930956][T17838] bridge_slave_1: entered allmulticast mode [ 1327.952513][T17838] bridge_slave_1: entered promiscuous mode [ 1329.288198][T17797] team0: Port device team_slave_0 added [ 1330.151318][T17797] team0: Port device team_slave_1 added [ 1330.411370][T17838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1331.372428][T17838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1333.530262][T17979] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3396'. [ 1333.571111][T17797] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1333.571127][T17797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1333.571152][T17797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1334.665086][T17838] team0: Port device team_slave_0 added [ 1334.898777][T17984] 9p: Bad value for 'rfdno' [ 1335.303297][ T5603] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1335.316058][T17838] team0: Port device team_slave_1 added [ 1335.467542][ T5603] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1335.480008][ T5603] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1335.484618][ T5603] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1335.506380][ T5603] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1338.167489][ T5603] Bluetooth: hci0: command tx timeout [ 1338.911175][T17838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1338.911192][T17838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1338.911213][T17838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1339.085054][T17838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1339.085070][T17838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1339.085094][T17838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1340.247353][ T5603] Bluetooth: hci0: command tx timeout [ 1342.381977][ T5603] Bluetooth: hci0: command tx timeout [ 1343.735617][ T38] INFO: task syz-executor:17253 blocked for more than 143 seconds. [ 1343.735644][ T38] Tainted: G L syzkaller #0 [ 1343.735655][ T38] Blocked by coredump. [ 1343.735661][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1343.735670][ T38] task:syz-executor state:D stack:19416 pid:17253 tgid:17253 ppid:1 task_flags:0x40054c flags:0x00080003 [ 1343.735725][ T38] Call Trace: [ 1343.735732][ T38] [ 1343.735746][ T38] __schedule+0x16dc/0x5500 [ 1343.735871][ T38] ? __pfx___schedule+0x10/0x10 [ 1343.735906][ T38] rt_mutex_schedule+0x76/0xf0 [ 1343.736040][ T38] rt_mutex_slowlock_block+0x55c/0x680 [ 1343.736082][ T38] rt_mutex_slowlock+0x2d4/0x780 [ 1343.736109][ T38] ? rt_mutex_slowlock+0x1f2/0x780 [ 1343.736135][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1343.736172][ T38] ? rcu_barrier+0x4c/0x530 [ 1343.736196][ T38] ? rcu_barrier+0x4c/0x530 [ 1343.736218][ T38] ? rcu_barrier+0x4c/0x530 [ 1343.736233][ T38] mutex_lock_nested+0x168/0x1d0 [ 1343.736255][ T38] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1343.736285][ T38] rcu_barrier+0x4c/0x530 [ 1343.736313][ T38] netdev_run_todo+0x2ff/0x10d0 [ 1343.736375][ T38] ? __pfx_netif_state_change+0x10/0x10 [ 1343.736397][ T38] ? __pfx_netdev_run_todo+0x10/0x10 [ 1343.736421][ T38] ? kasan_quarantine_put+0xbb/0x1f0 [ 1343.736444][ T38] ? lockdep_hardirqs_on+0x7a/0x110 [ 1343.736475][ T38] ? netdev_state_change+0x1bc/0x210 [ 1343.736501][ T38] tun_chr_close+0x13f/0x1c0 [ 1343.736575][ T38] ? __pfx_tun_chr_close+0x10/0x10 [ 1343.736595][ T38] __fput+0x42a/0xa80 [ 1343.736626][ T38] task_work_run+0x1d9/0x270 [ 1343.736653][ T38] ? __pfx_task_work_run+0x10/0x10 [ 1343.736675][ T38] ? do_exit+0x735/0x2360 [ 1343.736694][ T38] ? kmem_cache_free+0x187/0x6c0 [ 1343.736724][ T38] ? put_net+0x191/0x260 [ 1343.736773][ T38] ? do_exit+0x735/0x2360 [ 1343.736797][ T38] do_exit+0x73a/0x2360 [ 1343.736816][ T38] ? lockdep_hardirqs_on+0x7a/0x110 [ 1343.736837][ T38] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1343.736863][ T38] ? __pfx_do_exit+0x10/0x10 [ 1343.736884][ T38] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1343.736908][ T38] ? rt_spin_lock+0x1e0/0x400 [ 1343.736940][ T38] ? rt_spin_unlock+0x157/0x200 [ 1343.736967][ T38] do_group_exit+0x22d/0x2f0 [ 1343.736988][ T38] ? rt_spin_unlock+0x163/0x200 [ 1343.737014][ T38] get_signal+0x121b/0x12c0 [ 1343.768493][ T38] arch_do_signal_or_restart+0xbb/0x860 [ 1343.768621][ T38] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1343.768639][ T38] ? kmem_cache_free+0x526/0x6c0 [ 1343.768682][ T38] exit_to_user_mode_loop+0x104/0x730 [ 1343.768759][ T38] ? rcu_is_watching+0x15/0xb0 [ 1343.768786][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1343.768807][ T38] do_syscall_64+0x353/0x580 [ 1343.768832][ T38] ? clear_bhb_loop+0x40/0x90 [ 1343.768855][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1343.768874][ T38] RIP: 0033:0x7f1bf10ad68e [ 1343.768891][ T38] RSP: 002b:00007ffdab1aa8d8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1343.768912][ T38] RAX: 000000000000008c RBX: 000055555b487500 RCX: 00007f1bf10ad68e [ 1343.768926][ T38] RDX: 000000000000008c RSI: 00007f1bf1e94670 RDI: 0000000000000003 [ 1343.768938][ T38] RBP: 0000000000000001 R08: 00007ffdab1aa954 R09: 000000000000000c [ 1343.768950][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1343.768962][ T38] R13: 0000000000000000 R14: 00007f1bf1e94670 R15: 0000000000000000 [ 1343.768992][ T38] [ 1343.769002][ T38] INFO: task syz-executor:17259 blocked for more than 143 seconds. [ 1343.769019][ T38] Tainted: G L syzkaller #0 [ 1343.769030][ T38] Blocked by coredump. [ 1343.769035][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1343.769044][ T38] task:syz-executor state:D stack:19032 pid:17259 tgid:17259 ppid:1 task_flags:0x40054c flags:0x00080003 [ 1343.769084][ T38] Call Trace: [ 1343.769091][ T38] [ 1343.769102][ T38] __schedule+0x16dc/0x5500 [ 1343.769149][ T38] ? __pfx___schedule+0x10/0x10 [ 1343.769183][ T38] rt_mutex_schedule+0x76/0xf0 [ 1343.769214][ T38] rt_mutex_slowlock_block+0x55c/0x680 [ 1343.769255][ T38] rt_mutex_slowlock+0x2d4/0x780 [ 1343.769283][ T38] ? rt_mutex_slowlock+0x1f2/0x780 [ 1343.769309][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1343.769345][ T38] ? rcu_barrier+0x4c/0x530 [ 1343.769367][ T38] ? rcu_barrier+0x4c/0x530 [ 1343.769389][ T38] ? rcu_barrier+0x4c/0x530 [ 1343.769405][ T38] mutex_lock_nested+0x168/0x1d0 [ 1343.769428][ T38] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1343.769458][ T38] rcu_barrier+0x4c/0x530 [ 1343.769486][ T38] netdev_run_todo+0x2ff/0x10d0 [ 1343.769515][ T38] ? __pfx_netif_state_change+0x10/0x10 [ 1343.769536][ T38] ? __pfx_netdev_run_todo+0x10/0x10 [ 1343.769560][ T38] ? kasan_quarantine_put+0xbb/0x1f0 [ 1343.769582][ T38] ? lockdep_hardirqs_on+0x7a/0x110 [ 1343.769611][ T38] ? netdev_state_change+0x1bc/0x210 [ 1343.769636][ T38] tun_chr_close+0x13f/0x1c0 [ 1343.769658][ T38] ? __pfx_tun_chr_close+0x10/0x10 [ 1343.769678][ T38] __fput+0x42a/0xa80 [ 1343.769708][ T38] task_work_run+0x1d9/0x270 [ 1343.769735][ T38] ? __pfx_task_work_run+0x10/0x10 [ 1343.769756][ T38] ? do_exit+0x735/0x2360 [ 1343.769775][ T38] ? kmem_cache_free+0x187/0x6c0 [ 1343.769797][ T38] ? put_net+0x191/0x260 [ 1343.769819][ T38] ? do_exit+0x735/0x2360 [ 1343.769843][ T38] do_exit+0x73a/0x2360 [ 1343.769862][ T38] ? lockdep_hardirqs_on+0x7a/0x110 [ 1343.769882][ T38] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1343.769908][ T38] ? __pfx_do_exit+0x10/0x10 [ 1343.769927][ T38] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1343.769951][ T38] ? rt_spin_lock+0x1e0/0x400 [ 1343.769983][ T38] ? rt_spin_unlock+0x157/0x200 [ 1343.770010][ T38] do_group_exit+0x22d/0x2f0 [ 1343.770030][ T38] ? rt_spin_unlock+0x163/0x200 [ 1343.770058][ T38] get_signal+0x121b/0x12c0 [ 1343.770104][ T38] arch_do_signal_or_restart+0xbb/0x860 [ 1343.770127][ T38] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1343.770145][ T38] ? kmem_cache_free+0x526/0x6c0 [ 1343.770186][ T38] exit_to_user_mode_loop+0x104/0x730 [ 1343.770213][ T38] ? rcu_is_watching+0x15/0xb0 [ 1343.770240][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1343.770260][ T38] do_syscall_64+0x353/0x580 [ 1343.770282][ T38] ? clear_bhb_loop+0x40/0x90 [ 1343.770304][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1343.770323][ T38] RIP: 0033:0x7ff13e6dd68e [ 1343.770339][ T38] RSP: 002b:00007fffeaacd8c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1343.770358][ T38] RAX: 0000000000000054 RBX: 00005555815b1500 RCX: 00007ff13e6dd68e [ 1343.770371][ T38] RDX: 0000000000000054 RSI: 00007ff13f4c4670 RDI: 0000000000000003 [ 1343.770383][ T38] RBP: 0000000000000001 R08: 00007fffeaacd944 R09: 000000000000000c [ 1343.770395][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1343.770406][ T38] R13: 0000000000000000 R14: 00007ff13f4c4670 R15: 0000000000000000 [ 1343.770435][ T38] [ 1343.770511][ T38] [ 1343.770511][ T38] Showing all locks held in the system: [ 1343.770525][ T38] 6 locks held by ktimers/0/16: [ 1343.770538][ T38] 3 locks held by rcuc/0/20: [ 1343.770549][ T38] 4 locks held by rcuc/1/28: [ 1343.770560][ T38] 1 lock held by khungtaskd/38: [ 1343.770569][ T38] #0: ffffffff8dfc2fc0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1343.770660][ T38] 2 locks held by getty/5353: [ 1343.770671][ T38] #0: ffff8880361eb0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1343.770721][ T38] #1: ffffc90003cc62e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x460/0x1360 [ 1343.770775][ T38] 3 locks held by kworker/u8:16/6598: [ 1343.770786][ T38] #0: ffff88801a084138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1343.770879][ T38] #1: ffffc9000d8f7c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1343.770927][ T38] #2: ffffffff8f3716b8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 1343.771044][ T38] 5 locks held by kworker/u8:17/6599: [ 1343.771056][ T38] 6 locks held by kworker/u8:22/6604: [ 1343.771066][ T38] #0: ffff88801b2a8938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1343.771113][ T38] #1: ffffc9000ddf7c40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1343.771160][ T38] #2: ffffffff8f362b20 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810 [ 1343.771205][ T38] #3: ffff88805f762160 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x129/0x420 [ 1343.771312][ T38] #4: ffff88805f7ce310 (&devlink->lock_key){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x142/0x420 [ 1343.771360][ T38] #5: ffffffff8dfc9170 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 1343.771411][ T38] 1 lock held by syz-executor/16561: [ 1343.771422][ T38] #0: ffffffff8dfc9170 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 1343.771463][ T38] 1 lock held by syz-executor/16912: [ 1343.771473][ T38] #0: ffffffff8dfc9170 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 1343.771515][ T38] 1 lock held by syz-executor/17253: [ 1343.771525][ T38] #0: ffffffff8dfc9170 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 1343.771565][ T38] 1 lock held by syz-executor/17259: [ 1343.771575][ T38] #0: ffffffff8dfc9170 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 1343.771617][ T38] 1 lock held by syz-executor/17362: [ 1343.771627][ T38] #0: ffffffff8dfc9170 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 1343.771668][ T38] 1 lock held by syz-executor/17435: [ 1343.771679][ T38] #0: ffffffff8dfc9170 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 1343.771719][ T38] 1 lock held by syz-executor/17489: [ 1343.771730][ T38] #0: ffffffff8dfc9170 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 1343.771770][ T38] 1 lock held by syz-executor/17507: [ 1343.771780][ T38] #0: ffffffff8dfc9170 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 1343.771822][ T38] 1 lock held by syz-executor/17584: [ 1343.771832][ T38] #0: ffffffff8dfc9170 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 1343.771873][ T38] 1 lock held by syz-executor/17638: [ 1343.771884][ T38] #0: ffffffff8dfc9170 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 1343.771924][ T38] 1 lock held by syz-executor/17688: [ 1343.771935][ T38] #0: ffffffff8dfc9170 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 1343.771976][ T38] 1 lock held by syz-executor/17699: [ 1343.771986][ T38] #0: ffffffff8dfc9170 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 1343.772028][ T38] 2 locks held by syz-executor/17797: [ 1343.772039][ T38] 2 locks held by syz-executor/17838: [ 1343.772049][ T38] #0: ffffffff8ead6d28 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 1343.772099][ T38] #1: ffffffff8f3716b8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a3/0x1bd0 [ 1343.772143][ T38] 2 locks held by syz-executor/17868: [ 1343.772153][ T38] #0: ffffffff8ead6d28 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 1343.772202][ T38] #1: ffffffff8f3716b8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a3/0x1bd0 [ 1343.772252][ T38] 2 locks held by syz-executor/17876: [ 1343.772263][ T38] #0: ffffffff8f8b1c68 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 1343.772311][ T38] #1: ffffffff8f3716b8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a3/0x1bd0 [ 1343.772356][ T38] 1 lock held by syz-executor/17986: [ 1343.772367][ T38] #0: ffffffff8f3716b8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0 [ 1343.772417][ T38] 6 locks held by syz.6.3401/18014: [ 1343.772428][ T38] 8 locks held by syz.6.3401/18017: [ 1343.772438][ T38] [ 1343.772443][ T38] ============================================= [ 1343.772443][ T38] [ 1343.772453][ T38] NMI backtrace for cpu 1 [ 1343.772470][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1343.772493][ T38] Tainted: [L]=SOFTLOCKUP [ 1343.772500][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1343.772510][ T38] Call Trace: [ 1343.772518][ T38] [ 1343.772526][ T38] dump_stack_lvl+0xe8/0x150 [ 1343.772549][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 1343.772576][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1343.772632][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 1343.772661][ T38] sys_info+0x135/0x170 [ 1343.772684][ T38] watchdog+0xfd7/0x1030 [ 1343.772712][ T38] ? watchdog+0x1c7/0x1030 [ 1343.772738][ T38] kthread+0x388/0x470 [ 1343.772758][ T38] ? __pfx_watchdog+0x10/0x10 [ 1343.772775][ T38] ? __pfx_kthread+0x10/0x10 [ 1343.772796][ T38] ret_from_fork+0x514/0xb70 [ 1343.772847][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1343.772868][ T38] ? __switch_to+0xc89/0x1420 [ 1343.772888][ T38] ? __pfx_kthread+0x10/0x10 [ 1343.772908][ T38] ret_from_fork_asm+0x1a/0x30 [ 1343.772945][ T38] [ 1343.772958][ T38] Sending NMI from CPU 1 to CPUs 0: [ 1343.772988][ C0] NMI backtrace for cpu 0 [ 1343.773009][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1343.773031][ C0] Tainted: [L]=SOFTLOCKUP [ 1343.773037][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1343.773046][ C0] RIP: 0010:__lock_acquire+0x6d5/0x2ce0 [ 1343.773070][ C0] Code: 9e f8 0b 00 00 48 83 3c 24 00 75 1e 48 83 fb ff 0f 94 c0 83 3d db 74 db 17 00 b1 01 0f 84 41 20 00 00 84 c9 0f 84 43 20 00 00 <49> 89 5d 00 45 8b be 00 0c 00 00 4d 85 ff 0f 84 88 00 00 00 41 83 [ 1343.773084][ C0] RSP: 0018:ffffc90000156ad8 EFLAGS: 00000002 [ 1343.773098][ C0] RAX: 000000000000000b RBX: 10e4fa15de999867 RCX: ffffffff9319ad68 [ 1343.773110][ C0] RDX: 0000000000000008 RSI: ffff88801ceb8ca8 RDI: ffff88801ceb8000 [ 1343.773121][ C0] RBP: 0000000000000000 R08: ffffffff8176d1ff R09: 0000000000000000 [ 1343.773132][ C0] R10: 0000000000000000 R11: ffffffff8dfc2fc0 R12: 0000000000000003 [ 1343.773143][ C0] R13: ffff88801ceb8ca8 R14: ffff88801ceb8000 R15: 0000000000000004 [ 1343.773155][ C0] FS: 0000000000000000(0000) GS:ffff888126111000(0000) knlGS:0000000000000000 [ 1343.773168][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1343.773180][ C0] CR2: 00007fcddd8e61bb CR3: 000000000ddb0000 CR4: 00000000003526f0 [ 1343.773195][ C0] Call Trace: [ 1343.773201][ C0] [ 1343.773210][ C0] ? netif_rx_internal+0x120/0x550 [ 1343.773231][ C0] ? __pfx_netif_rx_internal+0x10/0x10 [ 1343.773251][ C0] ? unwind_next_frame+0x8f/0x2550 [ 1343.773274][ C0] ? unwind_next_frame+0x8f/0x2550 [ 1343.773293][ C0] lock_acquire+0x106/0x350 [ 1343.773311][ C0] ? unwind_next_frame+0x8f/0x2550 [ 1343.773334][ C0] ? unwind_next_frame+0x8f/0x2550 [ 1343.773352][ C0] ? ret_from_fork+0x514/0xb70 [ 1343.773368][ C0] ? unwind_next_frame+0x8f/0x2550 [ 1343.773388][ C0] unwind_next_frame+0xac/0x2550 [ 1343.773407][ C0] ? unwind_next_frame+0x8f/0x2550 [ 1343.773428][ C0] ? kthread+0x388/0x470 [ 1343.773444][ C0] ? unwind_next_frame+0x8f/0x2550 [ 1343.773464][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1343.773483][ C0] arch_stack_walk+0x11b/0x150 [ 1343.773543][ C0] ? ret_from_fork+0x514/0xb70 [ 1343.773561][ C0] stack_trace_save+0xa9/0x100 [ 1343.773578][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1343.773599][ C0] kasan_save_stack+0x3e/0x60 [ 1343.773644][ C0] ? kasan_save_stack+0x3e/0x60 [ 1343.773661][ C0] ? kasan_record_aux_stack+0xbd/0xd0 [ 1343.773675][ C0] ? call_rcu+0xee/0x8b0 [ 1343.773696][ C0] ? skb_release_head_state+0x71/0x360 [ 1343.773722][ C0] ? __kfree_skb+0x24/0x210 [ 1343.773740][ C0] ? nft_synproxy_eval_v4+0x36a/0x4e0 [ 1343.773796][ C0] ? nft_synproxy_do_eval+0x335/0x550 [ 1343.773812][ C0] ? nft_do_chain+0x48d/0x1b10 [ 1343.773875][ C0] ? nft_do_chain_inet+0x360/0x4b0 [ 1343.773915][ C0] ? nf_hook_slow+0xc5/0x220 [ 1343.773952][ C0] ? NF_HOOK+0x21f/0x3c0 [ 1343.773971][ C0] ? NF_HOOK+0x336/0x3c0 [ 1343.773989][ C0] ? process_backlog+0x564/0xc50 [ 1343.774005][ C0] ? __napi_poll+0xae/0x550 [ 1343.774019][ C0] ? net_rx_action+0x621/0xd70 [ 1343.774035][ C0] ? handle_softirqs+0x1d9/0x6c0 [ 1343.774056][ C0] ? run_ktimerd+0x69/0x100 [ 1343.774070][ C0] ? smpboot_thread_fn+0x57c/0xa80 [ 1343.774110][ C0] ? kthread+0x388/0x470 [ 1343.774125][ C0] ? ret_from_fork+0x514/0xb70 [ 1343.774157][ C0] kasan_record_aux_stack+0xbd/0xd0 [ 1343.774172][ C0] ? __pfx_dst_destroy_rcu+0x10/0x10 [ 1343.774194][ C0] call_rcu+0xee/0x8b0 [ 1343.774216][ C0] ? dst_release+0x126/0x1b0 [ 1343.774238][ C0] skb_release_head_state+0x71/0x360 [ 1343.774260][ C0] __kfree_skb+0x24/0x210 [ 1343.774279][ C0] nft_synproxy_eval_v4+0x36a/0x4e0 [ 1343.774298][ C0] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 1343.774317][ C0] ? nf_ip_checksum+0x13c/0x510 [ 1343.774336][ C0] nft_synproxy_do_eval+0x335/0x550 [ 1343.774354][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 1343.774378][ C0] nft_do_chain+0x48d/0x1b10 [ 1343.774402][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 1343.774430][ C0] ? __lock_acquire+0x683/0x2ce0 [ 1343.774451][ C0] nft_do_chain_inet+0x360/0x4b0 [ 1343.774470][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 1343.774490][ C0] ? NF_HOOK+0x9e/0x3c0 [ 1343.774509][ C0] ? NF_HOOK+0x9e/0x3c0 [ 1343.774528][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 1343.774546][ C0] nf_hook_slow+0xc5/0x220 [ 1343.774562][ C0] NF_HOOK+0x21f/0x3c0 [ 1343.774581][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1343.774601][ C0] ? NF_HOOK+0x9e/0x3c0 [ 1343.774619][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 1343.774638][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1343.774661][ C0] ? ip_local_deliver+0x113/0x190 [ 1343.774681][ C0] NF_HOOK+0x336/0x3c0 [ 1343.774700][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1343.774725][ C0] ? NF_HOOK+0x9e/0x3c0 [ 1343.774743][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 1343.774762][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1343.774783][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 1343.774802][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 1343.774821][ C0] ? process_backlog+0x261/0xc50 [ 1343.774837][ C0] process_backlog+0x564/0xc50 [ 1343.774861][ C0] __napi_poll+0xae/0x550 [ 1343.774877][ C0] net_rx_action+0x621/0xd70 [ 1343.774899][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 1343.774923][ C0] ? __local_bh_disable_ip+0x3c/0x420 [ 1343.774948][ C0] handle_softirqs+0x1d9/0x6c0 [ 1343.774972][ C0] run_ktimerd+0x69/0x100 [ 1343.774987][ C0] smpboot_thread_fn+0x57c/0xa80 [ 1343.775003][ C0] ? smpboot_thread_fn+0x4e/0xa80 [ 1343.775021][ C0] kthread+0x388/0x470 [ 1343.775037][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1343.775051][ C0] ? __pfx_kthread+0x10/0x10 [ 1343.775068][ C0] ret_from_fork+0x514/0xb70 [ 1343.775086][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1343.775103][ C0] ? __switch_to+0xc89/0x1420 [ 1343.775118][ C0] ? __pfx_kthread+0x10/0x10 [ 1343.775135][ C0] ret_from_fork_asm+0x1a/0x30 [ 1343.775161][ C0] [ 1343.775993][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 1343.776010][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1343.776034][ T38] Tainted: [L]=SOFTLOCKUP [ 1343.776041][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1343.776051][ T38] Call Trace: [ 1343.776059][ T38] [ 1343.776067][ T38] vpanic+0x56c/0xa60 [ 1343.776093][ T38] ? __pfx_vpanic+0x10/0x10 [ 1343.776123][ T38] panic+0xc5/0xd0 [ 1343.776144][ T38] ? __pfx_panic+0x10/0x10 [ 1343.776168][ T38] ? wq_watchdog_touch+0xf9/0x160 [ 1343.776193][ T38] ? nmi_trigger_cpumask_backtrace+0x247/0x380 [ 1343.776230][ T38] watchdog+0x1030/0x1030 [ 1343.776258][ T38] ? watchdog+0x1c7/0x1030 [ 1343.776283][ T38] kthread+0x388/0x470 [ 1343.776303][ T38] ? __pfx_watchdog+0x10/0x10 [ 1343.776320][ T38] ? __pfx_kthread+0x10/0x10 [ 1343.776341][ T38] ret_from_fork+0x514/0xb70 [ 1343.776364][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1343.776383][ T38] ? __switch_to+0xc89/0x1420 [ 1343.776403][ T38] ? __pfx_kthread+0x10/0x10 [ 1343.776424][ T38] ret_from_fork_asm+0x1a/0x30 [ 1343.776459][ T38] [ 1343.776727][ T38] Kernel Offset: disabled