last executing test programs: 2m17.153810329s ago: executing program 3 (id=788): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', 0x0, 0x180) chdir(&(0x7f0000000000)='./bus\x00') 2m17.062831862s ago: executing program 3 (id=789): socket$packet(0x11, 0x3, 0x300) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) socket(0x2, 0xa, 0x300) write$tun(r0, &(0x7f00000004c0)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x4, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x1, 0x2, 0x1, 0x0, 0x3, 0x5}, 0x1, {0x88a8}}}, {0x8, 0x22eb, 0x20000, {{0x0, 0x2, 0xc, 0x0, 0x0, 0x2, 0x7, 0x4}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1, 0x0, 0x1}}}, {0x8, 0x6558, 0xffffffff}}}}}}, 0x7a) 2m16.942451267s ago: executing program 3 (id=790): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/usb/drivers/usbip-host/match_busid\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='add 1', 0x5) write(r0, &(0x7f0000000180)='add 2', 0x5) write(r0, 0x0, 0x0) write(r0, 0x0, 0x0) write(r0, &(0x7f0000000240)='add 5', 0x5) write(r0, &(0x7f0000000280), 0x0) write(r0, &(0x7f0000000300)='add 8', 0x5) write(r0, &(0x7f0000000400)='add 4', 0x5) (fail_nth: 1) write(r0, &(0x7f00000004c0), 0x0) 2m16.800401832s ago: executing program 3 (id=791): syz_usb_connect(0x3, 0x40, &(0x7f00000006c0)=ANY=[], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 2m13.642295339s ago: executing program 3 (id=818): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1f6) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000}) chown(&(0x7f0000000200)='./cgroup.cpu/cgroup.procs\x00', 0xee01, 0xee00) shmdt(0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38f", 0x5}], 0x1}], 0x1, 0x40800) r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x2}, 0x7, 0x0, &(0x7f0000000040)={{0x0, 0x0, 0x2}}, 0x0, 0x0}}) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, &(0x7f00000002c0)=0x5, 0x4) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, 0x0, &(0x7f0000000000)) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80001, 0x0) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./sys/kernel/tracing\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) 2m13.239392247s ago: executing program 3 (id=821): socket$packet(0x11, 0x3, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) socket(0x2, 0xa, 0x300) write$tun(r0, &(0x7f00000004c0)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x4, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x1, 0x2, 0x1, 0x0, 0x3, 0x5}, 0x1, {0x88a8}}}, {0x8, 0x22eb, 0x20000, {{0x0, 0x2, 0xc, 0x0, 0x0, 0x2, 0x7, 0x4}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1, 0x0, 0x1}}}, {0x8, 0x6558, 0xffffffff}}}}}}, 0x7a) 1m57.658153098s ago: executing program 32 (id=821): socket$packet(0x11, 0x3, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) socket(0x2, 0xa, 0x300) write$tun(r0, &(0x7f00000004c0)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x4, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x1, 0x2, 0x1, 0x0, 0x3, 0x5}, 0x1, {0x88a8}}}, {0x8, 0x22eb, 0x20000, {{0x0, 0x2, 0xc, 0x0, 0x0, 0x2, 0x7, 0x4}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1, 0x0, 0x1}}}, {0x8, 0x6558, 0xffffffff}}}}}}, 0x7a) 1m38.008466046s ago: executing program 2 (id=987): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)={0x38, 0xb, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0xa}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_ADT={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x88804) 1m37.804876972s ago: executing program 2 (id=990): sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000010240)={0x0, 0x0, &(0x7f0000010200)={&(0x7f00000001c0)={0x10020, 0x3f7, 0x0, 0x0, 0x0, {0xffff, 0x7, './file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', './file0'}}, 0x10020}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], 0x46c}}, 0x0) 1m37.58895208s ago: executing program 2 (id=994): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x850}, 0x40404) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}}, 0x0) 1m37.273131143s ago: executing program 2 (id=997): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000020, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x6000, 0x0) 1m37.037571719s ago: executing program 2 (id=1002): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x44, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x40}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xe0004000}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast=0xffff0011}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 1m36.731860425s ago: executing program 2 (id=1006): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x1c, 0x1, 0x4, 0x301, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0xf}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) 1m36.123450481s ago: executing program 33 (id=1006): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x1c, 0x1, 0x4, 0x301, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0xf}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) 35.783128308s ago: executing program 1 (id=1717): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x303}, "0e57b3d487e2db32", "a9df7ccffde8899f914d4f2c3e263509", "3c36a51c", "6775c975b6b15e11"}, 0x28) socket$nl_route(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r0, &(0x7f00000001c0)={0x1f, @any, 0x6}, 0xa) 35.561455154s ago: executing program 0 (id=1720): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000002280)={0x1, &(0x7f0000000280)=[{0x1d, 0x2, 0x9, 0x7ff}]}, 0x10) 34.828820284s ago: executing program 1 (id=1721): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0xffff}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r2, &(0x7f0000000040)="a6", 0xffffff4c, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000080)=@ccm_128={{0x304}, "3533670244f9c17b", "fd73b0610edb2d71e52c522eddc7014d", "421c1beb", "2302ad114616d7c6"}, 0x28) 34.828495462s ago: executing program 4 (id=1722): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) write$tun(r0, &(0x7f0000000900)={@val, @void, @eth={@multicast, @multicast, @val={@val={0x88a8, 0x5, 0x1, 0x4}, {0x8100, 0x6, 0x0, 0x6}}, {@mpls_mc={0x8848, {[], @ipv6=@gre_packet={0x8, 0x6, "33c3f0", 0x44, 0x2f, 0x1, @remote, @loopback, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x2}, {0x1, 0x0, 0x1, 0x1}, {0x0, 0x0, 0x1, 0x1}, {0x8, 0x88be, 0x0, {{0x3, 0x1, 0xa0, 0x3, 0x0, 0x1, 0x3, 0x7}, 0x1, {0x1}}}, {0x8, 0x22eb, 0x3, {{0x1, 0x2, 0xff, 0x2, 0x1, 0x0, 0x0, 0x3}, 0x2, {0x6448, 0x4b0f, 0x0, 0x9, 0x0, 0x1}}}, {0x8, 0x6558, 0x4}}}}}}}}}, 0x86) 34.826966604s ago: executing program 0 (id=1729): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48800) recvmsg(r0, &(0x7f000000c1c0)={0x0, 0x0, 0x0}, 0x20) 34.495402489s ago: executing program 4 (id=1725): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r1, 0x29, 0xc8, 0x0, 0xc000000) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="034886dd120005000000140000006000000008002b"], 0xfdef) 34.340731484s ago: executing program 4 (id=1728): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000080)=ANY=[@ANYBLOB], 0xfdef) 34.307545361s ago: executing program 5 (id=1730): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4001}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000180)={'syzkaller1\x00', {0x2, 0x0, @rand_addr=0x64010101}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', 0x1}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x2007fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0xffc, 0x9, 0x702, 0x3, 0x1, 0xfffffffa, 0xe, 0xa, 0x9, 0x4, 0x7, 0x10001, 0x100000, 0x762, 0x1, 0xd, 0x3, 0x2b12, 0x80120, 0x6, 0x1c00, 0xb, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x10fdf, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0xb, 0x7, 0xf, 0x101, 0xd3, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180000, 0xd, 0x8b, 0x5, 0x2b3, 0xf7, 0x5, 0x8002, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x9, 0x27f, 0x0, 0x3, 0x6, 0x10001, 0x2, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x2, 0x800084, 0x100, 0x5, 0x2, 0x6, 0xb, 0x5, 0x20006, 0x5, 0x15, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8000, 0x1, 0x9fc, 0xc5c, 0xffffffff]}}) r2 = socket$inet_sctp(0x2, 0x5, 0x84) bind(r2, &(0x7f00000000c0)=@in={0x2, 0x270f, @rand_addr=0x64010101}, 0x10) write$tun(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000080001031400e803140008004500005c000000004084b019640101026401010104d2270f00000000000000000100003c"], 0x6a) 34.185170987s ago: executing program 4 (id=1731): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x248}}, 0x0) 34.093973824s ago: executing program 4 (id=1732): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000880)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d0019feffe69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb46c4c0a285057e3061b9", 0x5a}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)=""/144, 0x90}, {&(0x7f0000000cc0)=""/4145, 0x1031}, {&(0x7f0000001d00)=""/229, 0xe5}, {&(0x7f0000000140)=""/159, 0x9f}, {&(0x7f0000000380)=""/184, 0xb8}, {&(0x7f0000000700)=""/179, 0xb3}, {&(0x7f0000000040)=""/30, 0x1e}], 0x7}, 0x10102) 34.092824893s ago: executing program 5 (id=1733): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r0, 0xf5f9) setsockopt$inet_opts(r0, 0x0, 0xf, &(0x7f0000000000)='\x00', 0x1) 33.965081667s ago: executing program 5 (id=1734): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) write$tun(r0, &(0x7f0000000900)={@val, @void, @eth={@multicast, @multicast, @val={@val={0x88a8, 0x5, 0x1, 0x4}, {0x8100, 0x6, 0x0, 0x6}}, {@mpls_mc={0x8848, {[], @ipv6=@gre_packet={0x8, 0x6, "33c3f0", 0x44, 0x2f, 0x1, @remote, @loopback, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x2}, {0x1, 0x0, 0x1, 0x1}, {0x0, 0x0, 0x1, 0x1}, {0x8, 0x88be, 0x0, {{0x3, 0x1, 0xa0, 0x3, 0x0, 0x1, 0x3, 0x7}, 0x1, {0x1}}}, {0x8, 0x22eb, 0x3, {{0x1, 0x2, 0xff, 0x2, 0x1, 0x0, 0x0, 0x3}, 0x2, {0x6448, 0x4b0f, 0x0, 0x9, 0x0, 0x1}}}, {0x8, 0x6558, 0x4}}}}}}}}}, 0x86) 33.905229662s ago: executing program 0 (id=1735): r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e23, 0x8020000c, @private0={0xfc, 0x0, '\x00', 0x1}, 0xffffffff}, 0x1c) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f00000004c0)) 33.80498018s ago: executing program 1 (id=1736): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a6c000000060a0104000000000000000002000000400004803c0001800a0001006d617463680000002c000280140003002000280000000000030007116b61979e0c000100636c75737465720008000240000000000900010073"], 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 33.697179224s ago: executing program 5 (id=1737): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x24, r1, 0x852dd6c070cd7e4d, 0x4, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}]}, 0x24}, 0x4, 0x700000000000000}, 0x4040000) 33.696948587s ago: executing program 0 (id=1738): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r1, 0x29, 0xc8, 0x0, 0xc000000) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="034886dd120005000000140000006000000008002b"], 0xfdef) 33.614648033s ago: executing program 1 (id=1739): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000080)=ANY=[@ANYBLOB], 0xfdef) 33.467708021s ago: executing program 0 (id=1740): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x248}}, 0x0) 33.371215924s ago: executing program 5 (id=1741): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x1, 0x0) write$cgroup_int(r3, &(0x7f0000000000)=0x7, 0x12) vmsplice(r2, &(0x7f0000000400)=[{&(0x7f0000000180)="04", 0x1}], 0x1, 0x0) write(r0, &(0x7f00000002c0)="8e", 0x1) 33.370183333s ago: executing program 1 (id=1742): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4001}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000180)={'syzkaller1\x00', {0x2, 0x0, @rand_addr=0x64010101}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', 0x1}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x2007fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0xffc, 0x9, 0x702, 0x3, 0x1, 0xfffffffa, 0xe, 0xa, 0x9, 0x4, 0x7, 0x10001, 0x100000, 0x762, 0x1, 0xd, 0x3, 0x2b12, 0x80120, 0x6, 0x1c00, 0xb, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x10fdf, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0xb, 0x7, 0xf, 0x101, 0xd3, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180000, 0xd, 0x8b, 0x5, 0x2b3, 0xf7, 0x5, 0x8002, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x9, 0x27f, 0x0, 0x3, 0x6, 0x10001, 0x2, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x2, 0x800084, 0x100, 0x5, 0x2, 0x6, 0xb, 0x5, 0x20006, 0x5, 0x15, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8000, 0x1, 0x9fc, 0xc5c, 0xffffffff]}}) r2 = socket$inet_sctp(0x2, 0x5, 0x84) listen(r2, 0x5) write$tun(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000080001031400e803140008004500005c000000004084b019640101026401010104d2270f00000000000000000100003c"], 0x6a) 33.279503161s ago: executing program 0 (id=1743): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48800) recvmsg(r0, &(0x7f000000c1c0)={0x0, 0x0, 0x0}, 0x20) 33.165059448s ago: executing program 4 (id=1744): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r0, 0x215eb000) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0x20, 0x0, 0x0) socket(0x2a, 0x2, 0x0) 33.163989708s ago: executing program 1 (id=1745): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) write$tun(r0, &(0x7f0000000900)={@val, @void, @eth={@multicast, @multicast, @val={@val={0x88a8, 0x5, 0x1, 0x4}, {0x8100, 0x6, 0x0, 0x6}}, {@mpls_mc={0x8848, {[], @ipv6=@gre_packet={0x8, 0x6, "33c3f0", 0x44, 0x2f, 0x1, @remote, @loopback, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x2}, {0x1, 0x0, 0x1, 0x1}, {0x0, 0x0, 0x1, 0x1}, {0x8, 0x88be, 0x0, {{0x3, 0x1, 0xa0, 0x3, 0x0, 0x1, 0x3, 0x7}, 0x1, {0x1}}}, {0x8, 0x22eb, 0x3, {{0x1, 0x2, 0xff, 0x2, 0x1, 0x0, 0x0, 0x3}, 0x2, {0x6448, 0x4b0f, 0x0, 0x9, 0x0, 0x1}}}, {0x8, 0x6558, 0x4}}}}}}}}}, 0x86) 33.009192012s ago: executing program 5 (id=1746): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0xffff}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r2, &(0x7f0000000040)="a6", 0xffffff4c, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000080)=@ccm_128={{0x304}, "3533670244f9c17b", "fd73b0610edb2d71e52c522eddc7014d", "421c1beb", "2302ad114616d7c6"}, 0x28) 0s ago: executing program 34 (id=1743): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48800) recvmsg(r0, &(0x7f000000c1c0)={0x0, 0x0, 0x0}, 0x20) kernel console output (not intermixed with test programs): after parsing attributes in process `syz.2.660'. [ 184.997398][ T7882] netlink: 8 bytes leftover after parsing attributes in process `syz.2.660'. [ 185.206836][ T7892] FAULT_INJECTION: forcing a failure. [ 185.206836][ T7892] name failslab, interval 1, probability 0, space 0, times 0 [ 185.206869][ T7892] CPU: 0 UID: 0 PID: 7892 Comm: syz.1.661 Tainted: G L syzkaller #0 PREEMPT(full) [ 185.206895][ T7892] Tainted: [L]=SOFTLOCKUP [ 185.206901][ T7892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 185.206913][ T7892] Call Trace: [ 185.206921][ T7892] [ 185.206929][ T7892] dump_stack_lvl+0xe8/0x150 [ 185.206960][ T7892] should_fail_ex+0x3eb/0x540 [ 185.206991][ T7892] should_failslab+0xa8/0x100 [ 185.207011][ T7892] ? do_getname+0x2e/0x250 [ 185.207032][ T7892] kmem_cache_alloc_noprof+0x9c/0x600 [ 185.207061][ T7892] ? do_getname+0x2e/0x250 [ 185.207085][ T7892] do_getname+0x2e/0x250 [ 185.207102][ T7892] ? getname_flags+0x11/0x20 [ 185.207124][ T7892] path_removexattrat+0x1ad/0x760 [ 185.207146][ T7892] ? __pfx_path_removexattrat+0x10/0x10 [ 185.207166][ T7892] ? __mutex_unlock_slowpath+0x731/0x900 [ 185.207212][ T7892] ? __pfx_ksys_write+0x10/0x10 [ 185.207246][ T7892] __x64_sys_removexattr+0x62/0x70 [ 185.207276][ T7892] do_syscall_64+0x166/0x520 [ 185.207294][ T7892] ? trace_irq_disable+0x3b/0x140 [ 185.207321][ T7892] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.207343][ T7892] ? clear_bhb_loop+0x70/0xc0 [ 185.207367][ T7892] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.207390][ T7892] RIP: 0033:0x7faa4ff9e159 [ 185.207409][ T7892] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 185.207427][ T7892] RSP: 002b:00007faa50ead028 EFLAGS: 00000246 ORIG_RAX: 00000000000000c5 [ 185.207449][ T7892] RAX: ffffffffffffffda RBX: 00007faa50226090 RCX: 00007faa4ff9e159 [ 185.207462][ T7892] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 00002000000001c0 [ 185.207474][ T7892] RBP: 00007faa50ead090 R08: 0000000000000000 R09: 0000000000000000 [ 185.207486][ T7892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 185.207497][ T7892] R13: 00007faa50226128 R14: 00007faa50226090 R15: 00007ffc7696d828 [ 185.207528][ T7892] [ 185.232088][ T7891] netlink: 'syz.0.662': attribute type 2 has an invalid length. [ 185.232993][ T7891] netlink: NAT attribute has 4 unknown bytes [ 185.233024][ T7891] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 185.479666][ T7899] input: syz0 as /devices/virtual/input/input22 [ 185.482732][ T7898] netlink: 'syz.3.664': attribute type 3 has an invalid length. [ 185.721003][ T25] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 185.870234][ T25] usb 4-1: Using ep0 maxpacket: 8 [ 185.870977][ T25] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 185.874472][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.874497][ T25] usb 4-1: Product: syz [ 185.874512][ T25] usb 4-1: Manufacturer: syz [ 185.874527][ T25] usb 4-1: SerialNumber: syz [ 185.878671][ T25] usb 4-1: config 0 descriptor?? [ 185.969556][ T7911] overlayfs: overlapping lowerdir path [ 186.083371][ T25] usb 4-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 186.117759][ T7915] overlayfs: overlapping lowerdir path [ 186.192986][ T7918] jffs2: notice: (7918) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 186.311085][ T10] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 186.440359][ T5751] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 186.464648][ T10] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 186.469267][ T10] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 186.469297][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 186.469316][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 186.469362][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 186.469390][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 186.536497][ T10] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 186.536527][ T10] usb 3-1: Product: syz [ 186.536541][ T10] usb 3-1: Manufacturer: syz [ 186.567521][ T10] cdc_wdm 3-1:1.0: skipping garbage [ 186.567541][ T10] cdc_wdm 3-1:1.0: skipping garbage [ 186.569602][ T10] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 186.569621][ T10] cdc_wdm 3-1:1.0: Unknown control protocol [ 186.620272][ T5751] usb 2-1: Using ep0 maxpacket: 8 [ 186.621173][ T5751] usb 2-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 186.622294][ T5751] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 186.624336][ T5751] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.624354][ T5751] usb 2-1: Product: syz [ 186.624363][ T5751] usb 2-1: Manufacturer: syz [ 186.624375][ T5751] usb 2-1: SerialNumber: syz [ 186.626663][ T5751] usb 2-1: config 0 descriptor?? [ 186.654577][ T5751] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 186.727434][ T7898] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.729581][ T7898] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.734571][ T25] usb write operation failed. (-71) [ 186.749845][ T25] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 186.750693][ T25] dvbdev: DVB: registering new adapter (Terratec H7) [ 186.750743][ T25] usb 4-1: media controller created [ 186.751131][ T25] usb read operation failed. (-71) [ 186.751526][ T25] usb write operation failed. (-71) [ 186.757602][ T25] dvb_usb_az6007 4-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 186.763013][ T25] usb 4-1: USB disconnect, device number 35 [ 186.791673][ T30] usb 3-1: USB disconnect, device number 35 [ 186.821754][ T5716] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 186.950629][ T5716] usb 1-1: device descriptor read/64, error -71 [ 187.200206][ T5716] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 187.331369][ T5716] usb 1-1: device descriptor read/64, error -71 [ 187.436430][ T7918] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.439543][ T7918] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.450679][ T5716] usb usb1-port1: attempt power cycle [ 187.475355][ T7931] FAULT_INJECTION: forcing a failure. [ 187.475355][ T7931] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 187.475387][ T7931] CPU: 0 UID: 0 PID: 7931 Comm: syz.3.675 Tainted: G L syzkaller #0 PREEMPT(full) [ 187.475415][ T7931] Tainted: [L]=SOFTLOCKUP [ 187.475422][ T7931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 187.475434][ T7931] Call Trace: [ 187.475442][ T7931] [ 187.475450][ T7931] dump_stack_lvl+0xe8/0x150 [ 187.475486][ T7931] should_fail_ex+0x3eb/0x540 [ 187.475512][ T7931] _copy_from_iter+0x1d3/0x1660 [ 187.475544][ T7931] ? __alloc_skb+0x27a/0x7a0 [ 187.475564][ T7931] ? __alloc_skb+0x27a/0x7a0 [ 187.475584][ T7931] ? __alloc_skb+0x27a/0x7a0 [ 187.475602][ T7931] ? __pfx__copy_from_iter+0x10/0x10 [ 187.475623][ T7931] ? kmem_cache_alloc_node_noprof+0x1f4/0x600 [ 187.475649][ T7931] ? __alloc_skb+0x27a/0x7a0 [ 187.475665][ T7931] ? __alloc_skb+0x27a/0x7a0 [ 187.475689][ T7931] ? netlink_sendmsg+0x5fa/0xae0 [ 187.475713][ T7931] ? skb_put+0x112/0x210 [ 187.475736][ T7931] netlink_sendmsg+0x667/0xae0 [ 187.475767][ T7931] ? __pfx_netlink_sendmsg+0x10/0x10 [ 187.475800][ T7931] ? apparmor_socket_sendmsg+0x98/0x360 [ 187.475824][ T7931] ? __pfx_netlink_sendmsg+0x10/0x10 [ 187.475847][ T7931] sock_sendmsg_nosec+0x13a/0x180 [ 187.475877][ T7931] ____sys_sendmsg+0x54e/0x850 [ 187.475905][ T7931] ? __pfx_____sys_sendmsg+0x10/0x10 [ 187.475936][ T7931] ? import_iovec+0x73/0xa0 [ 187.475964][ T7931] ___sys_sendmsg+0x2a5/0x360 [ 187.475984][ T7931] ? __lock_acquire+0x747/0x2de0 [ 187.476017][ T7931] ? __pfx____sys_sendmsg+0x10/0x10 [ 187.476074][ T7931] ? __fget_files+0x2a/0x420 [ 187.476100][ T7931] ? __fget_files+0x3a2/0x420 [ 187.476135][ T7931] __x64_sys_sendmsg+0x1b1/0x290 [ 187.476161][ T7931] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 187.476205][ T7931] do_syscall_64+0x166/0x520 [ 187.476223][ T7931] ? trace_irq_disable+0x3b/0x140 [ 187.476250][ T7931] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.476269][ T7931] ? clear_bhb_loop+0x70/0xc0 [ 187.476294][ T7931] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.476313][ T7931] RIP: 0033:0x7f34e5b9e159 [ 187.476332][ T7931] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 187.476349][ T7931] RSP: 002b:00007f34e6b14028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 187.476372][ T7931] RAX: ffffffffffffffda RBX: 00007f34e5e25fa0 RCX: 00007f34e5b9e159 [ 187.476387][ T7931] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000003 [ 187.476400][ T7931] RBP: 00007f34e6b14090 R08: 0000000000000000 R09: 0000000000000000 [ 187.476413][ T7931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 187.476425][ T7931] R13: 00007f34e5e26038 R14: 00007f34e5e25fa0 R15: 00007ffd12637f78 [ 187.476457][ T7931] [ 187.664288][ T5751] gspca_zc3xx: reg_w_i err -71 [ 187.748530][ T7936] overlayfs: overlapping lowerdir path [ 187.800248][ T5716] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 187.827690][ T5716] usb 1-1: device descriptor read/8, error -71 [ 187.892015][ T7938] comedi: No check for data length of config insn id -3 is implemented [ 187.892046][ T7938] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 187.892061][ T7938] comedi: Assuming n=15 is correct [ 187.928945][ T7938] netlink: 36 bytes leftover after parsing attributes in process `syz.3.678'. [ 188.010627][ T7945] overlayfs: overlapping lowerdir path [ 188.073071][ T5716] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 188.095877][ T5716] usb 1-1: device descriptor read/8, error -71 [ 188.200665][ T5716] usb usb1-port1: unable to enumerate USB device [ 188.270180][ T5751] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 188.270283][ T5751] gspca_zc3xx 2-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 188.274153][ T5751] usb 2-1: USB disconnect, device number 30 [ 188.639892][ T7950] overlayfs: overlapping lowerdir path [ 189.431079][ T7964] FAULT_INJECTION: forcing a failure. [ 189.431079][ T7964] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 189.431116][ T7964] CPU: 0 UID: 0 PID: 7964 Comm: syz.1.683 Tainted: G L syzkaller #0 PREEMPT(full) [ 189.431144][ T7964] Tainted: [L]=SOFTLOCKUP [ 189.431151][ T7964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 189.431165][ T7964] Call Trace: [ 189.431173][ T7964] [ 189.431186][ T7964] dump_stack_lvl+0xe8/0x150 [ 189.431219][ T7964] should_fail_ex+0x3eb/0x540 [ 189.431248][ T7964] prepare_alloc_pages+0x21e/0x5f0 [ 189.431287][ T7964] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 189.431317][ T7964] ? ktime_get+0x1f5/0x220 [ 189.431348][ T7964] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 189.431378][ T7964] ? clockevents_program_event+0x491/0x630 [ 189.431405][ T7964] ? __pfx_clockevents_program_event+0x10/0x10 [ 189.431432][ T7964] ? policy_nodemask+0x2cc/0x8e0 [ 189.431455][ T7964] ? __lock_acquire+0x747/0x2de0 [ 189.431488][ T7964] alloc_pages_mpol+0x21e/0x390 [ 189.431518][ T7964] folio_alloc_mpol_noprof+0x39/0x160 [ 189.431545][ T7964] vma_alloc_folio_noprof+0xe1/0x1e0 [ 189.431573][ T7964] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 189.431598][ T7964] ? lock_acquire+0x115/0x350 [ 189.431635][ T7964] do_pte_missing+0x173a/0x34b0 [ 189.431685][ T7964] handle_mm_fault+0x1a53/0x3750 [ 189.431723][ T7964] ? handle_mm_fault+0xf1/0x3750 [ 189.431760][ T7964] ? __pfx_handle_mm_fault+0x10/0x10 [ 189.431800][ T7964] ? __lock_acquire+0x747/0x2de0 [ 189.431833][ T7964] ? lock_mm_and_find_vma+0xa7/0x340 [ 189.431864][ T7964] do_user_addr_fault+0x7f6/0x1480 [ 189.431913][ T7964] exc_page_fault+0x6a/0xc0 [ 189.431944][ T7964] asm_exc_page_fault+0x26/0x30 [ 189.431964][ T7964] RIP: 0010:rep_movs_alternative+0x33/0xa0 [ 189.431991][ T7964] Code: 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 8d 71 04 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb [ 189.432019][ T7964] RSP: 0018:ffffc900068ef8b8 EFLAGS: 00050212 [ 189.432040][ T7964] RAX: 322e30322e30322e RBX: ffff8880781de012 RCX: 0000000000000027 [ 189.432056][ T7964] RDX: 0000000000000000 RSI: ffff8880781de012 RDI: 0000200000000080 [ 189.432071][ T7964] RBP: ffffc900068efa38 R08: ffff8880781de038 R09: 1ffff1100f03bc07 [ 189.432086][ T7964] R10: dffffc0000000000 R11: ffffed100f03bc08 R12: dffffc0000000000 [ 189.432101][ T7964] R13: 0000000000000000 R14: ffffc900068efba0 R15: 0000000000000027 [ 189.432135][ T7964] _copy_to_iter+0x49d/0x1810 [ 189.432159][ T7964] ? rcu_preempt_deferred_qs_irqrestore+0x7b7/0xb90 [ 189.432204][ T7964] ? __pfx__copy_to_iter+0x10/0x10 [ 189.432225][ T7964] ? __rcu_read_unlock+0x83/0xe0 [ 189.432253][ T7964] ? traverse+0x5f1/0x620 [ 189.432288][ T7964] seq_read_iter+0x2b0/0xca0 [ 189.432327][ T7964] seq_read+0x367/0x480 [ 189.432347][ T7964] ? lock_acquire+0x115/0x350 [ 189.432384][ T7964] ? __pfx_seq_read+0x10/0x10 [ 189.432414][ T7964] ? apparmor_file_permission+0x1fb/0x2b0 [ 189.432454][ T7964] ? __pfx_seq_read+0x10/0x10 [ 189.432472][ T7964] proc_reg_read+0x1e9/0x2e0 [ 189.432496][ T7964] ? __pfx_proc_reg_read+0x10/0x10 [ 189.432516][ T7964] vfs_read+0x213/0xa80 [ 189.432554][ T7964] ? __pfx_vfs_read+0x10/0x10 [ 189.432584][ T7964] ? __fget_files+0x2a/0x420 [ 189.432614][ T7964] ? __fget_files+0x2a/0x420 [ 189.432637][ T7964] ? __fget_files+0x3a2/0x420 [ 189.432661][ T7964] ? __fget_files+0x2a/0x420 [ 189.432697][ T7964] __x64_sys_pread64+0x196/0x220 [ 189.432729][ T7964] ? __pfx___x64_sys_pread64+0x10/0x10 [ 189.432772][ T7964] do_syscall_64+0x166/0x520 [ 189.432790][ T7964] ? trace_irq_disable+0x3b/0x140 [ 189.432818][ T7964] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.432840][ T7964] ? clear_bhb_loop+0x70/0xc0 [ 189.432867][ T7964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.432887][ T7964] RIP: 0033:0x7faa4ff9e159 [ 189.432906][ T7964] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 189.432923][ T7964] RSP: 002b:00007faa50ece028 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 189.432944][ T7964] RAX: ffffffffffffffda RBX: 00007faa50225fa0 RCX: 00007faa4ff9e159 [ 189.432959][ T7964] RDX: 0000000000018fd4 RSI: 0000200000000080 RDI: 0000000000000003 [ 189.432973][ T7964] RBP: 00007faa50ece090 R08: 0000000000000000 R09: 0000000000000000 [ 189.432987][ T7964] R10: 0000000000000c2a R11: 0000000000000246 R12: 0000000000000001 [ 189.433008][ T7964] R13: 00007faa50226038 R14: 00007faa50225fa0 R15: 00007ffc7696d828 [ 189.433043][ T7964] [ 190.098584][ T7976] overlayfs: overlapping lowerdir path [ 190.151500][ T5716] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 190.303937][ T5716] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 190.305840][ T5716] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 190.305867][ T5716] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 190.305886][ T5716] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 190.305935][ T5716] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 190.305961][ T5716] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 190.312064][ T5716] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 190.312088][ T5716] usb 4-1: Product: syz [ 190.312102][ T5716] usb 4-1: Manufacturer: syz [ 190.328009][ T5716] cdc_wdm 4-1:1.0: skipping garbage [ 190.328026][ T5716] cdc_wdm 4-1:1.0: skipping garbage [ 190.332199][ T5716] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 190.332216][ T5716] cdc_wdm 4-1:1.0: Unknown control protocol [ 190.538653][ T5716] usb 4-1: USB disconnect, device number 36 [ 191.328848][ T7998] tipc: Withdrawal distribution failure [ 191.740429][ T10] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 191.890978][ T10] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 191.892619][ T10] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 191.892638][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 191.892649][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 191.892676][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 191.892691][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 191.894184][ T10] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 191.894210][ T10] usb 4-1: Product: syz [ 191.894224][ T10] usb 4-1: Manufacturer: syz [ 191.899287][ T10] cdc_wdm 4-1:1.0: skipping garbage [ 191.899307][ T10] cdc_wdm 4-1:1.0: skipping garbage [ 191.930745][ T10] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 191.930766][ T10] cdc_wdm 4-1:1.0: Unknown control protocol [ 192.101970][ T5784] usb 4-1: USB disconnect, device number 37 [ 192.881040][ T8012] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 192.926150][ T8013] overlayfs: overlapping lowerdir path [ 193.354231][ T8037] netlink: 'syz.3.710': attribute type 12 has an invalid length. [ 193.810699][ T25] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 193.867114][ T8048] overlayfs: overlapping lowerdir path [ 193.960900][ T25] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 193.961955][ T25] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 193.961981][ T25] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 193.961999][ T25] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 193.962045][ T25] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 193.962072][ T25] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 193.965245][ T25] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 193.965271][ T25] usb 3-1: Product: syz [ 193.965285][ T25] usb 3-1: Manufacturer: syz [ 194.054536][ T25] cdc_wdm 3-1:1.0: skipping garbage [ 194.054556][ T25] cdc_wdm 3-1:1.0: skipping garbage [ 194.057131][ T25] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 194.057152][ T25] cdc_wdm 3-1:1.0: Unknown control protocol [ 194.237556][ T8059] netlink: 'syz.1.718': attribute type 11 has an invalid length. [ 194.260398][ T8043] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.261171][ T8043] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.263337][ T8043] cdc_wdm 3-1:1.0: Error submitting int urb - -90 [ 194.266030][ T10] usb 3-1: USB disconnect, device number 36 [ 194.338745][ T8062] FAULT_INJECTION: forcing a failure. [ 194.338745][ T8062] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 194.338780][ T8062] CPU: 0 UID: 0 PID: 8062 Comm: syz.0.720 Tainted: G L syzkaller #0 PREEMPT(full) [ 194.338813][ T8062] Tainted: [L]=SOFTLOCKUP [ 194.338822][ T8062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 194.338835][ T8062] Call Trace: [ 194.338843][ T8062] [ 194.338852][ T8062] dump_stack_lvl+0xe8/0x150 [ 194.338886][ T8062] should_fail_ex+0x3eb/0x540 [ 194.338915][ T8062] _copy_from_user+0x2d/0xb0 [ 194.338943][ T8062] video_usercopy+0x359/0x1430 [ 194.338974][ T8062] ? hook_file_ioctl+0x1f2/0x600 [ 194.338999][ T8062] ? __pfx___video_do_ioctl+0x10/0x10 [ 194.339028][ T8062] ? __pfx_video_usercopy+0x10/0x10 [ 194.339067][ T8062] ? __fget_files+0x2a/0x420 [ 194.339096][ T8062] ? __fget_files+0x2a/0x420 [ 194.339120][ T8062] ? __fget_files+0x3a2/0x420 [ 194.339150][ T8062] v4l2_ioctl+0x18d/0x1e0 [ 194.339177][ T8062] ? __pfx_v4l2_ioctl+0x10/0x10 [ 194.339202][ T8062] __se_sys_ioctl+0xfc/0x170 [ 194.339237][ T8062] do_syscall_64+0x166/0x520 [ 194.339256][ T8062] ? trace_irq_disable+0x3b/0x140 [ 194.339284][ T8062] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.339305][ T8062] ? clear_bhb_loop+0x70/0xc0 [ 194.339332][ T8062] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.339353][ T8062] RIP: 0033:0x7f12c259e159 [ 194.339374][ T8062] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 194.339392][ T8062] RSP: 002b:00007f12c350a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 194.339415][ T8062] RAX: ffffffffffffffda RBX: 00007f12c2826090 RCX: 00007f12c259e159 [ 194.339438][ T8062] RDX: 00002000000001c0 RSI: 0000000040045612 RDI: 0000000000000003 [ 194.339453][ T8062] RBP: 00007f12c350a090 R08: 0000000000000000 R09: 0000000000000000 [ 194.339466][ T8062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 194.339479][ T8062] R13: 00007f12c2826128 R14: 00007f12c2826090 R15: 00007ffcaa0bd878 [ 194.339512][ T8062] [ 194.396337][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.396394][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.480235][ T5784] usb 2-1: new full-speed USB device number 31 using dummy_hcd [ 194.631751][ T5784] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 194.635189][ T5784] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.635217][ T5784] usb 2-1: Product: syz [ 194.635232][ T5784] usb 2-1: Manufacturer: syz [ 194.635247][ T5784] usb 2-1: SerialNumber: syz [ 194.640963][ T5784] usb 2-1: config 0 descriptor?? [ 194.830277][ T5716] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 194.846367][ T5784] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 194.980186][ T5716] usb 4-1: Using ep0 maxpacket: 8 [ 194.982790][ T5716] usb 4-1: unable to get BOS descriptor or descriptor too short [ 194.982842][ T5716] usb 4-1: New USB device found, idVendor=1199, idProduct=6893, bcdDevice=16.b7 [ 194.984588][ T5716] usb 4-1: config 3 has an invalid interface number: 92 but max is 1 [ 194.984615][ T5716] usb 4-1: config 3 has an invalid interface number: 120 but max is 1 [ 194.984634][ T5716] usb 4-1: config 3 has an invalid interface number: 92 but max is 1 [ 194.984653][ T5716] usb 4-1: config 3 has no interface number 0 [ 194.984669][ T5716] usb 4-1: config 3 has no interface number 1 [ 194.984722][ T5716] usb 4-1: config 3 interface 120 altsetting 8 endpoint 0xE has invalid wMaxPacketSize 0 [ 194.984755][ T5716] usb 4-1: config 3 interface 92 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 194.984781][ T5716] usb 4-1: config 3 interface 92 has no altsetting 0 [ 194.984798][ T5716] usb 4-1: config 3 interface 92 has no altsetting 1 [ 194.984816][ T5716] usb 4-1: config 3 interface 120 has no altsetting 0 [ 194.989821][ T5716] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.989849][ T5716] usb 4-1: Product: syz [ 194.989865][ T5716] usb 4-1: Manufacturer: syz [ 194.989888][ T5716] usb 4-1: SerialNumber: syz [ 195.181794][ T8084] FAULT_INJECTION: forcing a failure. [ 195.181794][ T8084] name failslab, interval 1, probability 0, space 0, times 0 [ 195.181828][ T8084] CPU: 1 UID: 0 PID: 8084 Comm: syz.0.729 Tainted: G L syzkaller #0 PREEMPT(full) [ 195.181861][ T8084] Tainted: [L]=SOFTLOCKUP [ 195.181869][ T8084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 195.181888][ T8084] Call Trace: [ 195.181896][ T8084] [ 195.181906][ T8084] dump_stack_lvl+0xe8/0x150 [ 195.181927][ T8084] should_fail_ex+0x3eb/0x540 [ 195.181944][ T8084] should_failslab+0xa8/0x100 [ 195.181961][ T8084] __kmalloc_cache_noprof+0x9e/0x600 [ 195.181992][ T8084] ? tcp_sendmsg_fastopen+0x1e7/0x5f0 [ 195.182021][ T8084] ? tcp_sendmsg_fastopen+0x1e7/0x5f0 [ 195.182056][ T8084] tcp_sendmsg_fastopen+0x1e7/0x5f0 [ 195.182082][ T8084] tcp_sendmsg_locked+0x4d3d/0x5640 [ 195.182111][ T8084] ? __lock_acquire+0x747/0x2de0 [ 195.182167][ T8084] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 195.182205][ T8084] ? tcp_sendmsg+0x21/0x50 [ 195.182230][ T8084] ? __local_bh_enable_ip+0xd6/0x140 [ 195.182249][ T8084] tcp_sendmsg+0x2f/0x50 [ 195.182266][ T8084] ? __pfx_inet_sendmsg+0x10/0x10 [ 195.182285][ T8084] sock_sendmsg_nosec+0x10e/0x180 [ 195.182317][ T8084] ____sys_sendmsg+0x54e/0x850 [ 195.182346][ T8084] ? __pfx_____sys_sendmsg+0x10/0x10 [ 195.182378][ T8084] ? import_iovec+0x73/0xa0 [ 195.182398][ T8084] ___sys_sendmsg+0x2a5/0x360 [ 195.182411][ T8084] ? __lock_acquire+0x747/0x2de0 [ 195.182431][ T8084] ? __pfx____sys_sendmsg+0x10/0x10 [ 195.182490][ T8084] ? __fget_files+0x2a/0x420 [ 195.182514][ T8084] ? __fget_files+0x3a2/0x420 [ 195.182544][ T8084] __x64_sys_sendmsg+0x1b1/0x290 [ 195.182559][ T8084] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 195.182586][ T8084] do_syscall_64+0x166/0x520 [ 195.182605][ T8084] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.182626][ T8084] ? clear_bhb_loop+0x70/0xc0 [ 195.182651][ T8084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.182671][ T8084] RIP: 0033:0x7f12c259e159 [ 195.182690][ T8084] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 195.182702][ T8084] RSP: 002b:00007f12c352b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 195.182718][ T8084] RAX: ffffffffffffffda RBX: 00007f12c2825fa0 RCX: 00007f12c259e159 [ 195.182727][ T8084] RDX: 000000003000c0c0 RSI: 0000200000000080 RDI: 0000000000000003 [ 195.182736][ T8084] RBP: 00007f12c352b090 R08: 0000000000000000 R09: 0000000000000000 [ 195.182744][ T8084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 195.182755][ T8084] R13: 00007f12c2826038 R14: 00007f12c2825fa0 R15: 00007ffcaa0bd878 [ 195.182788][ T8084] [ 195.301877][ T8086] FAULT_INJECTION: forcing a failure. [ 195.301877][ T8086] name failslab, interval 1, probability 0, space 0, times 0 [ 195.301941][ T8086] CPU: 0 UID: 0 PID: 8086 Comm: syz.0.730 Tainted: G L syzkaller #0 PREEMPT(full) [ 195.301973][ T8086] Tainted: [L]=SOFTLOCKUP [ 195.301981][ T8086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 195.301994][ T8086] Call Trace: [ 195.302003][ T8086] [ 195.302012][ T8086] dump_stack_lvl+0xe8/0x150 [ 195.302048][ T8086] should_fail_ex+0x3eb/0x540 [ 195.302077][ T8086] should_failslab+0xa8/0x100 [ 195.302100][ T8086] ? key_alloc+0x318/0x1020 [ 195.302123][ T8086] kmem_cache_alloc_noprof+0x9c/0x600 [ 195.302153][ T8086] ? key_alloc+0x318/0x1020 [ 195.302182][ T8086] key_alloc+0x318/0x1020 [ 195.302217][ T8086] keyring_alloc+0x45/0xb0 [ 195.302248][ T8086] call_sbin_request_key+0x32f/0xbf0 [ 195.302273][ T8086] ? request_key_auth_free_preparse+0x9/0x10 [ 195.302304][ T8086] ? __pfx_call_sbin_request_key+0x10/0x10 [ 195.302326][ T8086] ? do_raw_spin_unlock+0xf5/0x200 [ 195.302395][ T8086] ? __pfx_request_key_auth_new+0x10/0x10 [ 195.302434][ T8086] request_key_and_link+0xefa/0x1580 [ 195.302467][ T8086] ? __pfx_request_key_and_link+0x10/0x10 [ 195.302499][ T8086] ? __pfx_key_default_cmp+0x10/0x10 [ 195.302527][ T8086] ? __pfx_keyring_search_iterator+0x10/0x10 [ 195.302560][ T8086] ? down_read+0x2b9/0x320 [ 195.302582][ T8086] ? _copy_from_user+0x94/0xb0 [ 195.302613][ T8086] __se_sys_request_key+0x29a/0x350 [ 195.302647][ T8086] ? __pfx___se_sys_request_key+0x10/0x10 [ 195.302698][ T8086] do_syscall_64+0x166/0x520 [ 195.302718][ T8086] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.302741][ T8086] ? clear_bhb_loop+0x70/0xc0 [ 195.302768][ T8086] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.302790][ T8086] RIP: 0033:0x7f12c259e159 [ 195.302810][ T8086] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 195.302829][ T8086] RSP: 002b:00007f12c352b028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 195.302861][ T8086] RAX: ffffffffffffffda RBX: 00007f12c2825fa0 RCX: 00007f12c259e159 [ 195.302877][ T8086] RDX: 00002000000001c0 RSI: 00002000000000c0 RDI: 0000200000000040 [ 195.302892][ T8086] RBP: 00007f12c2635024 R08: 0000000000000000 R09: 0000000000000000 [ 195.302905][ T8086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 195.302918][ T8086] R13: 00007f12c2826038 R14: 00007f12c2825fa0 R15: 00007ffcaa0bd878 [ 195.302951][ T8086] [ 195.341467][ T10] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 195.461513][ T8088] vcan0: tx drop: invalid da for name 0xfffffffffffffffc [ 195.490970][ T10] usb 3-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 1.00 [ 195.493923][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 195.494000][ T10] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 195.501022][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.501045][ T10] usb 3-1: Product: syz [ 195.501059][ T10] usb 3-1: Manufacturer: syz [ 195.501072][ T10] usb 3-1: SerialNumber: syz [ 195.525278][ T10] usb 3-1: NFC: intf ffff88802ca28000 id ffffffff8fa729e0 [ 195.760799][ T5716] usb 4-1: selecting invalid altsetting 1 [ 195.760848][ T5716] sierra 4-1:3.92: Sierra USB modem converter detected [ 195.765174][ T5716] usb 4-1: Sierra USB modem converter now attached to ttyUSB0 [ 195.768791][ T5716] sierra 4-1:3.120: Sierra USB modem converter detected [ 195.772483][ T5716] usb 4-1: Sierra USB modem converter now attached to ttyUSB1 [ 195.777182][ T5716] usb 4-1: USB disconnect, device number 38 [ 195.782629][ T5716] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 195.783241][ T5716] sierra 4-1:3.92: device disconnected [ 195.787935][ T5716] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 195.789045][ T5716] sierra 4-1:3.120: device disconnected [ 196.093169][ T5784] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 196.114430][ T5784] usb 2-1: USB disconnect, device number 31 [ 196.150568][ T10] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 196.280218][ T10] usb 1-1: device descriptor read/64, error -71 [ 196.520200][ T10] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 196.654666][ T10] usb 1-1: device descriptor read/64, error -71 [ 196.678528][ T8116] FAULT_INJECTION: forcing a failure. [ 196.678528][ T8116] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 196.678640][ T8116] CPU: 1 UID: 0 PID: 8116 Comm: syz.1.740 Tainted: G L syzkaller #0 PREEMPT(full) [ 196.678670][ T8116] Tainted: [L]=SOFTLOCKUP [ 196.678678][ T8116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 196.678691][ T8116] Call Trace: [ 196.678700][ T8116] [ 196.678709][ T8116] dump_stack_lvl+0xe8/0x150 [ 196.678743][ T8116] should_fail_ex+0x3eb/0x540 [ 196.678772][ T8116] _copy_from_user+0x2d/0xb0 [ 196.678800][ T8116] ___sys_recvmsg+0x173/0x5a0 [ 196.678831][ T8116] ? __pfx____sys_recvmsg+0x10/0x10 [ 196.678861][ T8116] ? lock_acquire+0x115/0x350 [ 196.678908][ T8116] ? __fget_files+0x3a2/0x420 [ 196.678946][ T8116] __x64_sys_recvmsg+0x1ae/0x290 [ 196.678974][ T8116] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 196.679030][ T8116] do_syscall_64+0x166/0x520 [ 196.679052][ T8116] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.679074][ T8116] ? clear_bhb_loop+0x70/0xc0 [ 196.679101][ T8116] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.679122][ T8116] RIP: 0033:0x7faa4ff9e159 [ 196.679143][ T8116] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 196.679161][ T8116] RSP: 002b:00007faa50ece028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 196.679185][ T8116] RAX: ffffffffffffffda RBX: 00007faa50225fa0 RCX: 00007faa4ff9e159 [ 196.679200][ T8116] RDX: 0000000000000000 RSI: 00002000000004c0 RDI: 0000000000000004 [ 196.679214][ T8116] RBP: 00007faa50ece090 R08: 0000000000000000 R09: 0000000000000000 [ 196.679228][ T8116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 196.679242][ T8116] R13: 00007faa50226038 R14: 00007faa50225fa0 R15: 00007ffc7696d828 [ 196.679275][ T8116] [ 196.771484][ T10] usb usb1-port1: attempt power cycle [ 197.140201][ T10] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 197.164071][ T10] usb 1-1: device descriptor read/8, error -71 [ 197.260015][ T8124] svc: failed to register lockdv1 RPC service (errno 111). [ 197.262244][ T8124] lockd_up: makesock failed, error=-111 [ 197.400210][ T10] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 197.425101][ T10] usb 1-1: device descriptor read/8, error -71 [ 197.496767][ T8124] svc: failed to register nfsdv3 RPC service (errno 111). [ 197.497902][ T8124] svc: failed to register nfsaclv3 RPC service (errno 111). [ 197.497925][ T8124] failed to unregister tcp with rpcbind [ 197.498999][ T8124] svc: failed to register nfsdv3 RPC service (errno 97). [ 197.499039][ T8124] svc: failed to register nfsaclv3 RPC service (errno 97). [ 197.499054][ T8124] failed to unregister tcp with rpcbind [ 197.541941][ T10] usb usb1-port1: unable to enumerate USB device [ 198.158854][ T30] usb 3-1: USB disconnect, device number 37 [ 198.782256][ T8164] FAULT_INJECTION: forcing a failure. [ 198.782256][ T8164] name failslab, interval 1, probability 0, space 0, times 0 [ 198.782293][ T8164] CPU: 1 UID: 0 PID: 8164 Comm: syz.2.753 Tainted: G L syzkaller #0 PREEMPT(full) [ 198.782323][ T8164] Tainted: [L]=SOFTLOCKUP [ 198.782331][ T8164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 198.782343][ T8164] Call Trace: [ 198.782352][ T8164] [ 198.782362][ T8164] dump_stack_lvl+0xe8/0x150 [ 198.782395][ T8164] should_fail_ex+0x3eb/0x540 [ 198.782425][ T8164] should_failslab+0xa8/0x100 [ 198.782452][ T8164] __kmalloc_noprof+0xf9/0x710 [ 198.782483][ T8164] ? tomoyo_encode+0x2ad/0x570 [ 198.782508][ T8164] ? tomoyo_encode+0x2ad/0x570 [ 198.782540][ T8164] tomoyo_encode+0x2ad/0x570 [ 198.782573][ T8164] tomoyo_realpath_from_path+0x5fa/0x640 [ 198.782611][ T8164] ? tomoyo_path_number_perm+0x219/0x5f0 [ 198.782635][ T8164] tomoyo_path_number_perm+0x246/0x5f0 [ 198.782660][ T8164] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 198.782682][ T8164] ? __lock_acquire+0x747/0x2de0 [ 198.782729][ T8164] ? hook_file_ioctl+0x1f2/0x600 [ 198.782775][ T8164] ? __fget_files+0x2a/0x420 [ 198.782805][ T8164] ? __fget_files+0x2a/0x420 [ 198.782831][ T8164] ? __fget_files+0x3a2/0x420 [ 198.782855][ T8164] ? __fget_files+0x2a/0x420 [ 198.782934][ T8164] security_file_ioctl+0xc3/0x2a0 [ 198.782970][ T8164] __se_sys_ioctl+0x47/0x170 [ 198.783005][ T8164] do_syscall_64+0x166/0x520 [ 198.783026][ T8164] ? trace_irq_disable+0x3b/0x140 [ 198.783054][ T8164] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.783077][ T8164] ? clear_bhb_loop+0x70/0xc0 [ 198.783103][ T8164] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.783125][ T8164] RIP: 0033:0x7fe9c839ddeb [ 198.783146][ T8164] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 198.783165][ T8164] RSP: 002b:00007fe9c920e450 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 198.783189][ T8164] RAX: ffffffffffffffda RBX: 0000200000000000 RCX: 00007fe9c839ddeb [ 198.783206][ T8164] RDX: 00007fe9c920ebd0 RSI: 000000004020ae46 RDI: 0000000000000004 [ 198.783220][ T8164] RBP: 0000000000000004 R08: 0000000000000001 R09: 000000000000007a [ 198.783233][ T8164] R10: 0000000000000004 R11: 0000000000000246 R12: 00000000fec00000 [ 198.783247][ T8164] R13: 00007fe9c920ebd0 R14: 0000200000001000 R15: 0000000000000001 [ 198.783282][ T8164] [ 198.783304][ T8164] ERROR: Out of memory at tomoyo_realpath_from_path. [ 199.153063][ T8170] overlayfs: missing 'lowerdir' [ 199.437779][ T8168] svc: failed to register lockdv1 RPC service (errno 101). [ 199.678667][ T8168] svc: failed to register nfsdv3 RPC service (errno 101). [ 199.686199][ T8168] svc: failed to register nfsaclv3 RPC service (errno 101). [ 199.686220][ T8168] failed to unregister tcp with rpcbind [ 199.686396][ T8168] svc: failed to register nfsdv3 RPC service (errno 97). [ 199.686412][ T8168] svc: failed to register nfsaclv3 RPC service (errno 97). [ 199.686424][ T8168] failed to unregister tcp with rpcbind [ 199.922509][ T8193] FAULT_INJECTION: forcing a failure. [ 199.922509][ T8193] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 199.922545][ T8193] CPU: 0 UID: 0 PID: 8193 Comm: syz.3.763 Tainted: G L syzkaller #0 PREEMPT(full) [ 199.922577][ T8193] Tainted: [L]=SOFTLOCKUP [ 199.922586][ T8193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 199.922598][ T8193] Call Trace: [ 199.922607][ T8193] [ 199.922615][ T8193] dump_stack_lvl+0xe8/0x150 [ 199.922648][ T8193] should_fail_ex+0x3eb/0x540 [ 199.922676][ T8193] strncpy_from_user+0x36/0x2c0 [ 199.922703][ T8193] do_getname+0x77/0x250 [ 199.922730][ T8193] __se_sys_symlinkat+0x2e/0x2b0 [ 199.922758][ T8193] do_syscall_64+0x166/0x520 [ 199.922777][ T8193] ? trace_irq_disable+0x3b/0x140 [ 199.922806][ T8193] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.922829][ T8193] ? clear_bhb_loop+0x70/0xc0 [ 199.922855][ T8193] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.922876][ T8193] RIP: 0033:0x7f34e5b9e159 [ 199.922897][ T8193] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 199.922914][ T8193] RSP: 002b:00007f34e6b14028 EFLAGS: 00000246 ORIG_RAX: 000000000000010a [ 199.922939][ T8193] RAX: ffffffffffffffda RBX: 00007f34e5e25fa0 RCX: 00007f34e5b9e159 [ 199.922955][ T8193] RDX: 0000200000001800 RSI: ffffffffffffff9c RDI: 0000200000001700 [ 199.922970][ T8193] RBP: 00007f34e6b14090 R08: 0000000000000000 R09: 0000000000000000 [ 199.922984][ T8193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 199.922996][ T8193] R13: 00007f34e5e26038 R14: 00007f34e5e25fa0 R15: 00007ffd12637f78 [ 199.923030][ T8193] [ 200.331026][ T30] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 200.455254][ T8203] overlayfs: missing 'lowerdir' [ 200.460678][ T30] usb 1-1: device descriptor read/64, error -71 [ 200.701379][ T30] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 200.841453][ T30] usb 1-1: device descriptor read/64, error -71 [ 200.952208][ T30] usb usb1-port1: attempt power cycle [ 201.266474][ T8219] netlink: 32 bytes leftover after parsing attributes in process `syz.1.770'. [ 201.292440][ T30] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 201.311190][ T30] usb 1-1: device descriptor read/8, error -71 [ 201.500239][ T10] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 201.550212][ T30] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 201.571312][ T30] usb 1-1: device descriptor read/8, error -71 [ 201.597100][ T5615] Bluetooth: hci0: command 0x0406 tx timeout [ 201.597731][ T5615] Bluetooth: hci2: command 0x0406 tx timeout [ 201.661321][ T10] usb 2-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.00 [ 201.662585][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 201.662685][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.690445][ T30] usb usb1-port1: unable to enumerate USB device [ 201.722844][ T10] usb 2-1: playback/capture rates do not match: 8530500/44100 [ 201.748334][ T8237] overlayfs: missing 'lowerdir' [ 201.772769][ T8229] svc: failed to register lockdv1 RPC service (errno 101). [ 201.954077][ T8229] svc: failed to register nfsdv3 RPC service (errno 101). [ 201.954738][ T8229] svc: failed to register nfsaclv3 RPC service (errno 101). [ 201.954760][ T8229] failed to unregister tcp with rpcbind [ 201.954963][ T8229] svc: failed to register nfsdv3 RPC service (errno 97). [ 201.954981][ T8229] svc: failed to register nfsaclv3 RPC service (errno 97). [ 201.954996][ T8229] failed to unregister tcp with rpcbind [ 202.053856][ T30] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 202.115099][ T8246] overlayfs: missing 'lowerdir' [ 202.182827][ T30] usb 3-1: device descriptor read/64, error -71 [ 202.257763][ T8253] FAULT_INJECTION: forcing a failure. [ 202.257763][ T8253] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 202.257789][ T8253] CPU: 0 UID: 0 PID: 8253 Comm: syz.3.780 Tainted: G L syzkaller #0 PREEMPT(full) [ 202.257808][ T8253] Tainted: [L]=SOFTLOCKUP [ 202.257813][ T8253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 202.257821][ T8253] Call Trace: [ 202.257826][ T8253] [ 202.257832][ T8253] dump_stack_lvl+0xe8/0x150 [ 202.257853][ T8253] should_fail_ex+0x3eb/0x540 [ 202.257870][ T8253] _copy_from_iter+0x1d3/0x1660 [ 202.257885][ T8253] ? __alloc_skb+0x27a/0x7a0 [ 202.257898][ T8253] ? __alloc_skb+0x27a/0x7a0 [ 202.257914][ T8253] ? __alloc_skb+0x27a/0x7a0 [ 202.257925][ T8253] ? __pfx__copy_from_iter+0x10/0x10 [ 202.257938][ T8253] ? kmem_cache_alloc_node_noprof+0x1f4/0x600 [ 202.257955][ T8253] ? __alloc_skb+0x27a/0x7a0 [ 202.257965][ T8253] ? __alloc_skb+0x27a/0x7a0 [ 202.257979][ T8253] ? netlink_sendmsg+0x5fa/0xae0 [ 202.257995][ T8253] ? skb_put+0x112/0x210 [ 202.258008][ T8253] netlink_sendmsg+0x667/0xae0 [ 202.258027][ T8253] ? __pfx_netlink_sendmsg+0x10/0x10 [ 202.258048][ T8253] ? apparmor_socket_sendmsg+0x98/0x360 [ 202.258062][ T8253] ? __pfx_netlink_sendmsg+0x10/0x10 [ 202.258077][ T8253] sock_sendmsg_nosec+0x13a/0x180 [ 202.258095][ T8253] ____sys_sendmsg+0x54e/0x850 [ 202.258112][ T8253] ? __pfx_____sys_sendmsg+0x10/0x10 [ 202.258135][ T8253] ? import_iovec+0x73/0xa0 [ 202.258152][ T8253] ___sys_sendmsg+0x2a5/0x360 [ 202.258166][ T8253] ? __lock_acquire+0x747/0x2de0 [ 202.258186][ T8253] ? __pfx____sys_sendmsg+0x10/0x10 [ 202.258220][ T8253] ? __fget_files+0x2a/0x420 [ 202.258234][ T8253] ? __fget_files+0x3a2/0x420 [ 202.258255][ T8253] __x64_sys_sendmsg+0x1b1/0x290 [ 202.258271][ T8253] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 202.258297][ T8253] do_syscall_64+0x166/0x520 [ 202.258309][ T8253] ? trace_irq_disable+0x3b/0x140 [ 202.258326][ T8253] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.258339][ T8253] ? clear_bhb_loop+0x70/0xc0 [ 202.258354][ T8253] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.258366][ T8253] RIP: 0033:0x7f34e5b9e159 [ 202.258378][ T8253] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 202.258390][ T8253] RSP: 002b:00007f34e6b14028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 202.258412][ T8253] RAX: ffffffffffffffda RBX: 00007f34e5e25fa0 RCX: 00007f34e5b9e159 [ 202.258422][ T8253] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 202.258430][ T8253] RBP: 00007f34e6b14090 R08: 0000000000000000 R09: 0000000000000000 [ 202.258438][ T8253] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 202.258446][ T8253] R13: 00007f34e5e26038 R14: 00007f34e5e25fa0 R15: 00007ffd12637f78 [ 202.258465][ T8253] [ 202.430244][ T30] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 202.560511][ T30] usb 3-1: device descriptor read/64, error -71 [ 202.672049][ T30] usb usb3-port1: attempt power cycle [ 203.010520][ T30] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 203.031420][ T30] usb 3-1: device descriptor read/8, error -71 [ 203.117074][ T8263] overlay: Unknown parameter '/' [ 203.274828][ T30] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 203.291577][ T30] usb 3-1: device descriptor read/8, error -71 [ 203.336816][ T8267] svc: failed to register lockdv1 RPC service (errno 101). [ 203.400710][ T30] usb usb3-port1: unable to enumerate USB device [ 203.420225][ T10] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 203.484732][ T8267] svc: failed to register nfsdv3 RPC service (errno 101). [ 203.485573][ T8267] svc: failed to register nfsaclv3 RPC service (errno 101). [ 203.485588][ T8267] failed to unregister tcp with rpcbind [ 203.485697][ T8267] svc: failed to register nfsdv3 RPC service (errno 97). [ 203.485708][ T8267] svc: failed to register nfsaclv3 RPC service (errno 97). [ 203.485716][ T8267] failed to unregister tcp with rpcbind [ 203.561689][ T8273] overlayfs: missing 'lowerdir' [ 203.574180][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 203.574967][ T10] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 203.576324][ T10] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 203.576352][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 203.576384][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.579302][ T10] usb 1-1: config 0 descriptor?? [ 203.777520][ T8277] FAULT_INJECTION: forcing a failure. [ 203.777520][ T8277] name failslab, interval 1, probability 0, space 0, times 0 [ 203.777546][ T8277] CPU: 1 UID: 0 PID: 8277 Comm: syz.3.790 Tainted: G L syzkaller #0 PREEMPT(full) [ 203.777566][ T8277] Tainted: [L]=SOFTLOCKUP [ 203.777574][ T8277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 203.777586][ T8277] Call Trace: [ 203.777595][ T8277] [ 203.777604][ T8277] dump_stack_lvl+0xe8/0x150 [ 203.777637][ T8277] should_fail_ex+0x3eb/0x540 [ 203.777664][ T8277] should_failslab+0xa8/0x100 [ 203.777682][ T8277] __kmalloc_noprof+0xf9/0x710 [ 203.777700][ T8277] ? kernfs_fop_write_iter+0x157/0x540 [ 203.777714][ T8277] ? kernfs_fop_write_iter+0x157/0x540 [ 203.777739][ T8277] kernfs_fop_write_iter+0x157/0x540 [ 203.777769][ T8277] vfs_write+0x612/0xba0 [ 203.777806][ T8277] ? __pfx_vfs_write+0x10/0x10 [ 203.777836][ T8277] ? __fget_files+0x2a/0x420 [ 203.777857][ T8277] ksys_write+0x150/0x270 [ 203.777874][ T8277] ? __pfx_ksys_write+0x10/0x10 [ 203.777912][ T8277] do_syscall_64+0x166/0x520 [ 203.777933][ T8277] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.777953][ T8277] ? clear_bhb_loop+0x70/0xc0 [ 203.777979][ T8277] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.777993][ T8277] RIP: 0033:0x7f34e5b9e159 [ 203.778005][ T8277] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 203.778024][ T8277] RSP: 002b:00007f34e6b14028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 203.778041][ T8277] RAX: ffffffffffffffda RBX: 00007f34e5e25fa0 RCX: 00007f34e5b9e159 [ 203.778057][ T8277] RDX: 0000000000000005 RSI: 0000200000000400 RDI: 0000000000000003 [ 203.778070][ T8277] RBP: 00007f34e6b14090 R08: 0000000000000000 R09: 0000000000000000 [ 203.778083][ T8277] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 203.778095][ T8277] R13: 00007f34e5e26038 R14: 00007f34e5e25fa0 R15: 00007ffd12637f78 [ 203.778128][ T8277] [ 204.054011][ T10] corsair-psu 0003:1B1C:1C09.000C: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.0-1/input0 [ 204.140181][ T5751] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 204.263117][ T5784] usb 2-1: USB disconnect, device number 32 [ 204.272751][ T5751] usb 4-1: device descriptor read/64, error -71 [ 204.373574][ T8283] FAULT_INJECTION: forcing a failure. [ 204.373574][ T8283] name failslab, interval 1, probability 0, space 0, times 0 [ 204.373614][ T8283] CPU: 1 UID: 0 PID: 8283 Comm: syz.1.792 Tainted: G L syzkaller #0 PREEMPT(full) [ 204.373646][ T8283] Tainted: [L]=SOFTLOCKUP [ 204.373652][ T8283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 204.373661][ T8283] Call Trace: [ 204.373666][ T8283] [ 204.373673][ T8283] dump_stack_lvl+0xe8/0x150 [ 204.373696][ T8283] should_fail_ex+0x3eb/0x540 [ 204.373731][ T8283] should_failslab+0xa8/0x100 [ 204.373755][ T8283] ? __pfx_snd_info_seq_show+0x10/0x10 [ 204.373786][ T8283] __kmalloc_cache_noprof+0x9e/0x600 [ 204.373812][ T8283] ? __kasan_kmalloc+0x93/0xb0 [ 204.373824][ T8283] ? single_open+0x5a/0x240 [ 204.373847][ T8283] ? single_open+0x5a/0x240 [ 204.373869][ T8283] ? __pfx_snd_info_seq_show+0x10/0x10 [ 204.373902][ T8283] single_open+0x5a/0x240 [ 204.373925][ T8283] ? snd_info_text_entry_open+0x219/0x2b0 [ 204.373959][ T8283] snd_info_text_entry_open+0x22d/0x2b0 [ 204.373981][ T8283] proc_reg_open+0x244/0x530 [ 204.373995][ T8283] ? __pfx_proc_reg_open+0x10/0x10 [ 204.374009][ T8283] do_dentry_open+0x80e/0x1360 [ 204.374043][ T8283] vfs_open_consume+0x4a/0x350 [ 204.374067][ T8283] ? path_openat+0x14bb/0x1e40 [ 204.374105][ T8283] path_openat+0x14d7/0x1e40 [ 204.374141][ T8283] do_file_open+0x23e/0x4a0 [ 204.374164][ T8283] ? __pfx_do_file_open+0x10/0x10 [ 204.374215][ T8283] ? _raw_spin_unlock+0x28/0x50 [ 204.374245][ T8283] ? alloc_fd+0x651/0x6c0 [ 204.374280][ T8283] do_sys_openat2+0x115/0x200 [ 204.374296][ T8283] ? __se_sys_futex+0x3a8/0x450 [ 204.374312][ T8283] ? __pfx_do_sys_openat2+0x10/0x10 [ 204.374330][ T8283] ? __pfx___se_sys_futex+0x10/0x10 [ 204.374361][ T8283] __x64_sys_openat+0x138/0x170 [ 204.374395][ T8283] do_syscall_64+0x166/0x520 [ 204.374417][ T8283] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.374439][ T8283] ? clear_bhb_loop+0x70/0xc0 [ 204.374456][ T8283] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.374470][ T8283] RIP: 0033:0x7faa4ff9e159 [ 204.374484][ T8283] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 204.374498][ T8283] RSP: 002b:00007faa50ece028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 204.374525][ T8283] RAX: ffffffffffffffda RBX: 00007faa50225fa0 RCX: 00007faa4ff9e159 [ 204.374542][ T8283] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 204.374557][ T8283] RBP: 00007faa50035024 R08: 0000000000000000 R09: 0000000000000000 [ 204.374572][ T8283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 204.374587][ T8283] R13: 00007faa50226038 R14: 00007faa50225fa0 R15: 00007ffc7696d828 [ 204.374613][ T8283] [ 204.469941][ T10] corsair-psu 0003:1B1C:1C09.000C: unable to initialize device (-95) [ 204.489386][ T10] corsair-psu 0003:1B1C:1C09.000C: probe with driver corsair-psu failed with error -95 [ 204.510181][ T5751] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 204.619291][ T8287] overlay: Unknown parameter '/' [ 204.640231][ T5751] usb 4-1: device descriptor read/64, error -71 [ 204.751041][ T5751] usb usb4-port1: attempt power cycle [ 204.911331][ T8292] netlink: 'syz.2.796': attribute type 10 has an invalid length. [ 204.931999][ T8292] vlan0: entered promiscuous mode [ 204.932910][ T8292] bond0: (slave vlan0): Enslaving as an active interface with an up link [ 205.056899][ T8295] overlayfs: workdir and upperdir must reside under the same mount [ 205.100549][ T5751] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 205.120837][ T5751] usb 4-1: device descriptor read/8, error -71 [ 205.370283][ T5751] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 205.392813][ T5751] usb 4-1: device descriptor read/8, error -71 [ 205.513005][ T5751] usb usb4-port1: unable to enumerate USB device [ 205.537487][ T8298] overlayfs: missing 'lowerdir' [ 205.896368][ T8312] overlay: Unknown parameter '/' [ 206.087881][ T8316] netlink: 'syz.1.805': attribute type 10 has an invalid length. [ 206.109680][ T8316] bond0: (slave vlan0): Enslaving as an active interface with an up link [ 206.129391][ T8318] overlay: Unknown parameter '/' [ 206.200684][ T30] usb 1-1: USB disconnect, device number 47 [ 206.265869][ T8322] kernel profiling enabled (shift: 4) [ 206.301062][ T8324] FAULT_INJECTION: forcing a failure. [ 206.301062][ T8324] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 206.301097][ T8324] CPU: 0 UID: 0 PID: 8324 Comm: syz.0.809 Tainted: G L syzkaller #0 PREEMPT(full) [ 206.301124][ T8324] Tainted: [L]=SOFTLOCKUP [ 206.301131][ T8324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 206.301142][ T8324] Call Trace: [ 206.301150][ T8324] [ 206.301159][ T8324] dump_stack_lvl+0xe8/0x150 [ 206.301192][ T8324] should_fail_ex+0x3eb/0x540 [ 206.301221][ T8324] _copy_from_iter+0x1d3/0x1660 [ 206.301257][ T8324] ? __pfx__copy_from_iter+0x10/0x10 [ 206.301278][ T8324] ? trace_kmalloc+0x2a/0xf0 [ 206.301310][ T8324] ? __kmalloc_noprof+0x387/0x710 [ 206.301338][ T8324] ? __kmalloc_noprof+0x1a6/0x710 [ 206.301363][ T8324] ? kernfs_fop_write_iter+0x157/0x540 [ 206.301394][ T8324] kernfs_fop_write_iter+0x19a/0x540 [ 206.301422][ T8324] vfs_write+0x612/0xba0 [ 206.301457][ T8324] ? __pfx_vfs_write+0x10/0x10 [ 206.301496][ T8324] ? __fget_files+0x2a/0x420 [ 206.301530][ T8324] ksys_write+0x150/0x270 [ 206.301559][ T8324] ? __pfx_ksys_write+0x10/0x10 [ 206.301598][ T8324] do_syscall_64+0x166/0x520 [ 206.301616][ T8324] ? trace_irq_disable+0x3b/0x140 [ 206.301644][ T8324] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.301665][ T8324] ? clear_bhb_loop+0x70/0xc0 [ 206.301691][ T8324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.301712][ T8324] RIP: 0033:0x7f12c259e159 [ 206.301733][ T8324] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 206.301750][ T8324] RSP: 002b:00007f12c352b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 206.301776][ T8324] RAX: ffffffffffffffda RBX: 00007f12c2825fa0 RCX: 00007f12c259e159 [ 206.301792][ T8324] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000003 [ 206.301806][ T8324] RBP: 00007f12c352b090 R08: 0000000000000000 R09: 0000000000000000 [ 206.301819][ T8324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 206.301832][ T8324] R13: 00007f12c2826038 R14: 00007f12c2825fa0 R15: 00007ffcaa0bd878 [ 206.301881][ T8324] [ 206.320273][ T8325] fuse: Bad value for 'fd' [ 206.822450][ T8337] overlay: Unknown parameter '/' [ 206.905184][ T8339] FAULT_INJECTION: forcing a failure. [ 206.905184][ T8339] name failslab, interval 1, probability 0, space 0, times 0 [ 206.905219][ T8339] CPU: 1 UID: 0 PID: 8339 Comm: syz.0.816 Tainted: G L syzkaller #0 PREEMPT(full) [ 206.905248][ T8339] Tainted: [L]=SOFTLOCKUP [ 206.905256][ T8339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 206.905269][ T8339] Call Trace: [ 206.905278][ T8339] [ 206.905296][ T8339] dump_stack_lvl+0xe8/0x150 [ 206.905330][ T8339] should_fail_ex+0x3eb/0x540 [ 206.905359][ T8339] should_failslab+0xa8/0x100 [ 206.905383][ T8339] ? alloc_empty_file+0x5b/0x1d0 [ 206.905407][ T8339] kmem_cache_alloc_noprof+0x9c/0x600 [ 206.905435][ T8339] ? stack_depot_save_flags+0x33/0x7f0 [ 206.905459][ T8339] ? alloc_empty_file+0x5b/0x1d0 [ 206.905482][ T8339] ? kmem_cache_alloc_noprof+0x151/0x600 [ 206.905515][ T8339] alloc_empty_file+0x5b/0x1d0 [ 206.905545][ T8339] path_openat+0x9d/0x1e40 [ 206.905583][ T8339] ? __lock_acquire+0x747/0x2de0 [ 206.905624][ T8339] do_file_open+0x23e/0x4a0 [ 206.905661][ T8339] ? __pfx_do_file_open+0x10/0x10 [ 206.905715][ T8339] ? _raw_spin_unlock+0x28/0x50 [ 206.905743][ T8339] ? alloc_fd+0x651/0x6c0 [ 206.905779][ T8339] do_sys_openat2+0x115/0x200 [ 206.905807][ T8339] ? __pfx_do_sys_openat2+0x10/0x10 [ 206.905832][ T8339] ? ksys_write+0x242/0x270 [ 206.905863][ T8339] ? __pfx_ksys_write+0x10/0x10 [ 206.905895][ T8339] __x64_sys_openat+0x138/0x170 [ 206.905926][ T8339] do_syscall_64+0x166/0x520 [ 206.905945][ T8339] ? trace_irq_disable+0x3b/0x140 [ 206.905974][ T8339] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.905997][ T8339] ? clear_bhb_loop+0x70/0xc0 [ 206.906023][ T8339] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.906045][ T8339] RIP: 0033:0x7f12c259e159 [ 206.906065][ T8339] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 206.906083][ T8339] RSP: 002b:00007f12c352b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 206.906109][ T8339] RAX: ffffffffffffffda RBX: 00007f12c2825fa0 RCX: 00007f12c259e159 [ 206.906125][ T8339] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 206.906140][ T8339] RBP: 00007f12c352b090 R08: 0000000000000000 R09: 0000000000000000 [ 206.906153][ T8339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 206.906166][ T8339] R13: 00007f12c2826038 R14: 00007f12c2825fa0 R15: 00007ffcaa0bd878 [ 206.906200][ T8339] [ 207.137499][ T8341] FAULT_INJECTION: forcing a failure. [ 207.137499][ T8341] name failslab, interval 1, probability 0, space 0, times 0 [ 207.137532][ T8341] CPU: 1 UID: 0 PID: 8341 Comm: syz.1.817 Tainted: G L syzkaller #0 PREEMPT(full) [ 207.137559][ T8341] Tainted: [L]=SOFTLOCKUP [ 207.137566][ T8341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 207.137578][ T8341] Call Trace: [ 207.137586][ T8341] [ 207.137594][ T8341] dump_stack_lvl+0xe8/0x150 [ 207.137625][ T8341] should_fail_ex+0x3eb/0x540 [ 207.137651][ T8341] should_failslab+0xa8/0x100 [ 207.137683][ T8341] __kmalloc_noprof+0xf9/0x710 [ 207.137711][ T8341] ? __memcg_list_lru_alloc+0x1d9/0x760 [ 207.137739][ T8341] ? __memcg_list_lru_alloc+0x1d9/0x760 [ 207.137775][ T8341] __memcg_list_lru_alloc+0x1d9/0x760 [ 207.137822][ T8341] ? xa_load+0x60/0x210 [ 207.137843][ T8341] ? __pfx___memcg_list_lru_alloc+0x10/0x10 [ 207.137888][ T8341] __memcg_slab_post_alloc_hook+0x3c3/0xd90 [ 207.137918][ T8341] ? __memcg_slab_post_alloc_hook+0x202/0xd90 [ 207.137962][ T8341] kmem_cache_alloc_lru_noprof+0x34c/0x5f0 [ 207.137990][ T8341] ? kmem_cache_alloc_lru_noprof+0x14e/0x5f0 [ 207.138015][ T8341] ? __d_alloc+0x37/0x6f0 [ 207.138039][ T8341] ? __d_alloc+0x37/0x6f0 [ 207.138069][ T8341] __d_alloc+0x37/0x6f0 [ 207.138093][ T8341] ? inode_init_owner+0x1f3/0x3b0 [ 207.138125][ T8341] d_make_root+0x41/0x80 [ 207.138150][ T8341] bpf_fill_super+0x2fd/0xce0 [ 207.138184][ T8341] ? __pfx_set_anon_super_fc+0x10/0x10 [ 207.138212][ T8341] ? __pfx_bpf_fill_super+0x10/0x10 [ 207.138237][ T8341] ? lock_acquire+0x115/0x350 [ 207.138273][ T8341] ? __pfx_bpf_fill_super+0x10/0x10 [ 207.138300][ T8341] get_tree_nodev+0xbb/0x150 [ 207.138329][ T8341] vfs_get_tree+0x92/0x2a0 [ 207.138359][ T8341] vfs_cmd_create+0xa2/0x200 [ 207.138383][ T8341] __se_sys_fsconfig+0x6b9/0x810 [ 207.138409][ T8341] ? __pfx___se_sys_fsconfig+0x10/0x10 [ 207.138432][ T8341] ? rcu_is_watching+0x16/0xb0 [ 207.138460][ T8341] ? __x64_sys_fsconfig+0x20/0xc0 [ 207.138483][ T8341] do_syscall_64+0x166/0x520 [ 207.138500][ T8341] ? trace_irq_disable+0x3b/0x140 [ 207.138525][ T8341] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.138544][ T8341] ? clear_bhb_loop+0x70/0xc0 [ 207.138568][ T8341] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.138587][ T8341] RIP: 0033:0x7faa4ff9e159 [ 207.138605][ T8341] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 207.138621][ T8341] RSP: 002b:00007faa50ece028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 207.138643][ T8341] RAX: ffffffffffffffda RBX: 00007faa50225fa0 RCX: 00007faa4ff9e159 [ 207.138658][ T8341] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 207.138673][ T8341] RBP: 00007faa50035024 R08: 0000000000000000 R09: 0000000000000000 [ 207.138686][ T8341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 207.138704][ T8341] R13: 00007faa50226038 R14: 00007faa50225fa0 R15: 00007ffc7696d828 [ 207.138736][ T8341] [ 207.291941][ T8348] capability: warning: `syz.3.818' uses deprecated v2 capabilities in a way that may be insecure [ 207.708610][ T8355] netlink: 'syz.1.823': attribute type 4 has an invalid length. [ 207.732307][ T8354] ALSA: mixer_oss: invalid OSS volume '' [ 207.779057][ T8357] netlink: 'syz.0.824': attribute type 10 has an invalid length. [ 207.796855][ T8357] bond0: (slave vlan0): Enslaving as an active interface with an up link [ 207.872144][ T8359] overlay: Unknown parameter '/' [ 208.120225][ T5751] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 208.260226][ T5751] usb 2-1: device descriptor read/64, error -71 [ 208.501216][ T5751] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 208.637179][ T5751] usb 2-1: device descriptor read/64, error -71 [ 208.740538][ T5751] usb usb2-port1: attempt power cycle [ 209.101646][ T5751] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 209.123927][ T5751] usb 2-1: device descriptor read/8, error -71 [ 209.371148][ T5751] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 209.400844][ T5751] usb 2-1: device descriptor read/8, error -71 [ 209.510825][ T5751] usb usb2-port1: unable to enumerate USB device [ 211.220372][ T5716] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 211.351998][ T5716] usb 1-1: device descriptor read/64, error -71 [ 211.590679][ T5716] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 211.720231][ T5716] usb 1-1: device descriptor read/64, error -71 [ 211.789298][ T989] hid (null): unknown global tag 0x71 [ 211.807059][ T989] hid-generic 0007:0000:FFFFFFFB.000D: unknown main item tag 0x3 [ 211.807125][ T989] hid-generic 0007:0000:FFFFFFFB.000D: unknown main item tag 0x5 [ 211.807152][ T989] hid-generic 0007:0000:FFFFFFFB.000D: unexpected long global item [ 211.815920][ T989] hid-generic 0007:0000:FFFFFFFB.000D: probe with driver hid-generic failed with error -22 [ 211.833860][ T5716] usb usb1-port1: attempt power cycle [ 212.171552][ T5716] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 212.195031][ T5716] usb 1-1: device descriptor read/8, error -71 [ 212.390278][ T5784] usb 3-1: new full-speed USB device number 42 using dummy_hcd [ 212.430231][ T5716] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 212.450967][ T5716] usb 1-1: device descriptor read/8, error -71 [ 212.543968][ T5784] usb 3-1: unable to get BOS descriptor or descriptor too short [ 212.544695][ T5784] usb 3-1: not running at top speed; connect to a high speed hub [ 212.544729][ T5784] usb 3-1: New USB device found, idVendor=0763, idProduct=2003, bcdDevice= 0.40 [ 212.547012][ T5784] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 212.547037][ T5784] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 212.547098][ T5784] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 4 [ 212.560586][ T5716] usb usb1-port1: unable to enumerate USB device [ 212.588472][ T5784] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.588502][ T5784] usb 3-1: Product: syz [ 212.588515][ T5784] usb 3-1: Manufacturer: syz [ 212.588531][ T5784] usb 3-1: SerialNumber: syz [ 212.862197][ T5784] usb 3-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 212.862228][ T5784] usb 3-1: found format II with max.bitrate = 512, frame size=4097 [ 212.862773][ T5784] usb 3-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 212.862807][ T5784] usb 3-1: found format II with max.bitrate = 512, frame size=4097 [ 212.869620][ T5784] usb 3-1: failed to enable PITCH for EP 0x1 [ 212.870015][ T5784] usb 3-1: 1:1: cannot set freq 11669316 to ep 0x1 [ 212.919566][ T5784] usb 3-1: 0:2 : does not exist [ 212.982403][ T5784] usb 3-1: USB disconnect, device number 42 [ 213.063166][ T5622] udevd[5622]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 223.196344][ T4932] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 223.207431][ T4932] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 223.209260][ T4932] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 223.230010][ T4932] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 223.237963][ T4932] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 223.406254][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.475695][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.568306][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.635765][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.851037][ T13] bridge_slave_1: left allmulticast mode [ 223.851068][ T13] bridge_slave_1: left promiscuous mode [ 223.853778][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.858427][ T13] bridge_slave_0: left allmulticast mode [ 223.858446][ T13] bridge_slave_0: left promiscuous mode [ 223.858582][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.026596][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 224.069901][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 224.074235][ T13] bond0 (unregistering): Released all slaves [ 224.186909][ T8414] FAULT_INJECTION: forcing a failure. [ 224.186909][ T8414] name failslab, interval 1, probability 0, space 0, times 0 [ 224.186945][ T8414] CPU: 0 UID: 0 PID: 8414 Comm: syz.0.838 Tainted: G L syzkaller #0 PREEMPT(full) [ 224.186974][ T8414] Tainted: [L]=SOFTLOCKUP [ 224.186982][ T8414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 224.186994][ T8414] Call Trace: [ 224.187003][ T8414] [ 224.187011][ T8414] dump_stack_lvl+0xe8/0x150 [ 224.187043][ T8414] should_fail_ex+0x3eb/0x540 [ 224.187073][ T8414] should_failslab+0xa8/0x100 [ 224.187098][ T8414] __kvmalloc_node_noprof+0x171/0x820 [ 224.187130][ T8414] ? __kmalloc_cache_noprof+0x31c/0x600 [ 224.187159][ T8414] ? io_ring_ctx_alloc+0x1ad/0xb80 [ 224.187178][ T8414] ? io_ring_ctx_alloc+0x1ad/0xb80 [ 224.187204][ T8414] io_ring_ctx_alloc+0x1ad/0xb80 [ 224.187225][ T8414] ? io_prepare_config+0x8c8/0xc70 [ 224.187252][ T8414] io_uring_create+0x50/0x980 [ 224.187276][ T8414] __se_sys_io_uring_setup+0x2a8/0x2c0 [ 224.187298][ T8414] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 224.187321][ T8414] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 224.187358][ T8414] ? __pfx_ksys_write+0x10/0x10 [ 224.187399][ T8414] do_syscall_64+0x166/0x520 [ 224.187418][ T8414] ? trace_irq_disable+0x3b/0x140 [ 224.187446][ T8414] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.187467][ T8414] ? clear_bhb_loop+0x70/0xc0 [ 224.187493][ T8414] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.187513][ T8414] RIP: 0033:0x7f12c259e159 [ 224.187533][ T8414] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 224.187551][ T8414] RSP: 002b:00007f12c352aee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 224.187575][ T8414] RAX: ffffffffffffffda RBX: 0000200000001088 RCX: 00007f12c259e159 [ 224.187590][ T8414] RDX: 0000200000001108 RSI: 0000200000001088 RDI: 00000000000003c9 [ 224.187605][ T8414] RBP: 0000200000001080 R08: 0000000000000000 R09: 0000000000000000 [ 224.187619][ T8414] R10: 0000200000001110 R11: 0000000000000206 R12: 0000200000001108 [ 224.187633][ T8414] R13: 0000200000001110 R14: 00007f12c352afd8 R15: 0000000000000000 [ 224.187667][ T8414] [ 224.219948][ T13] tipc: Disabling bearer [ 224.232388][ T13] tipc: Left network mode [ 224.340275][ T10] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 224.471499][ T10] usb 2-1: device descriptor read/64, error -71 [ 224.710255][ T10] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 224.860212][ T10] usb 2-1: device descriptor read/64, error -71 [ 224.971066][ T10] usb usb2-port1: attempt power cycle [ 225.000927][ T13] hsr_slave_0: left promiscuous mode [ 225.005629][ T13] hsr_slave_1: left promiscuous mode [ 225.006331][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 225.006356][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 225.008249][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 225.008290][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 225.055957][ T13] veth1_macvtap: left promiscuous mode [ 225.056003][ T13] veth0_macvtap: left promiscuous mode [ 225.056135][ T13] veth1_vlan: left promiscuous mode [ 225.057211][ T13] veth0_vlan: left promiscuous mode [ 225.271609][ T5620] Bluetooth: hci4: command tx timeout [ 225.310204][ T10] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 225.334844][ T10] usb 2-1: device descriptor read/8, error -71 [ 225.363588][ T13] team0 (unregistering): Port device team_slave_1 removed [ 225.377777][ T13] team0 (unregistering): Port device team_slave_0 removed [ 225.485595][ T8394] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.485707][ T8394] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.485805][ T8394] bridge_slave_0: entered allmulticast mode [ 225.486912][ T8394] bridge_slave_0: entered promiscuous mode [ 225.490951][ T5277] 8021q: adding VLAN 0 to HW filter on device eth1 [ 225.492718][ T8394] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.492829][ T8394] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.492949][ T8394] bridge_slave_1: entered allmulticast mode [ 225.495790][ T8394] bridge_slave_1: entered promiscuous mode [ 225.547851][ T8394] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 225.556815][ T8394] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 225.571394][ T10] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 225.595032][ T10] usb 2-1: device descriptor read/8, error -71 [ 225.629164][ T8394] team0: Port device team_slave_0 added [ 225.652464][ T8394] team0: Port device team_slave_1 added [ 225.717275][ T10] usb usb2-port1: unable to enumerate USB device [ 225.738015][ T8394] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 225.738036][ T8394] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 225.738063][ T8394] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 225.789857][ T8394] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 225.789876][ T8394] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 225.789900][ T8394] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 225.898020][ T8394] hsr_slave_0: entered promiscuous mode [ 225.899235][ T8394] hsr_slave_1: entered promiscuous mode [ 225.912027][ T8394] debugfs: 'hsr0' already exists in 'hsr' [ 225.912051][ T8394] Cannot create hsr debugfs directory [ 226.168336][ T8394] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 226.182389][ T8394] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 226.183635][ T8394] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 226.188186][ T8394] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 226.192425][ T8394] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 226.204799][ T8394] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 226.206100][ T8394] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 226.224058][ T8394] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 226.340556][ T8394] 8021q: adding VLAN 0 to HW filter on device bond0 [ 226.373935][ T8394] 8021q: adding VLAN 0 to HW filter on device team0 [ 226.383069][ T6109] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.383176][ T6109] bridge0: port 1(bridge_slave_0) entered forwarding state [ 226.430703][ T6109] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.430833][ T6109] bridge0: port 2(bridge_slave_1) entered forwarding state [ 226.519837][ T5277] 8021q: adding VLAN 0 to HW filter on device eth2 [ 227.027894][ T8394] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 227.199113][ T5277] 8021q: adding VLAN 0 to HW filter on device eth3 [ 227.351038][ T5620] Bluetooth: hci4: command tx timeout [ 227.444078][ T8394] veth0_vlan: entered promiscuous mode [ 227.455858][ T8394] veth1_vlan: entered promiscuous mode [ 227.499938][ T8394] veth0_macvtap: entered promiscuous mode [ 227.507716][ T8394] veth1_macvtap: entered promiscuous mode [ 227.541489][ T8394] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 227.552811][ T8394] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 227.611570][ T6114] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.613126][ T6114] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.622457][ T6114] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.622501][ T6114] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.736787][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.736811][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.804478][ T6114] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.804503][ T6114] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.053110][ T5277] 8021q: adding VLAN 0 to HW filter on device eth4 [ 228.060745][ T8511] netlink: 'syz.4.837': attribute type 10 has an invalid length. [ 228.079607][ T8511] bond0: (slave vlan0): Enslaving as an active interface with an up link [ 228.250342][ T5716] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 228.380442][ T5716] usb 1-1: device descriptor read/64, error -71 [ 228.620326][ T5716] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 228.770626][ T5716] usb 1-1: device descriptor read/64, error -71 [ 228.880596][ T5716] usb usb1-port1: attempt power cycle [ 228.980902][ T10] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 229.115029][ T8539] netlink: 68 bytes leftover after parsing attributes in process `syz.4.847'. [ 229.132696][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 229.141074][ T10] usb 3-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 229.142115][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 229.142148][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 229.142186][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.145421][ T10] usb 3-1: config 0 descriptor?? [ 229.241241][ T5716] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 229.261810][ T5716] usb 1-1: device descriptor read/8, error -71 [ 229.288136][ T8535] smpboot: CPU 1 is now offline [ 229.328396][ T8543] FAULT_INJECTION: forcing a failure. [ 229.328396][ T8543] name failslab, interval 1, probability 0, space 0, times 0 [ 229.328422][ T8543] CPU: 0 UID: 0 PID: 8543 Comm: syz.1.851 Tainted: G L syzkaller #0 PREEMPT(full) [ 229.328440][ T8543] Tainted: [L]=SOFTLOCKUP [ 229.328445][ T8543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 229.328457][ T8543] Call Trace: [ 229.328462][ T8543] [ 229.328468][ T8543] dump_stack_lvl+0xe8/0x150 [ 229.328489][ T8543] should_fail_ex+0x3eb/0x540 [ 229.328508][ T8543] should_failslab+0xa8/0x100 [ 229.328524][ T8543] __kmalloc_cache_noprof+0x9e/0x600 [ 229.328543][ T8543] ? create_filter_start+0xad/0x1e0 [ 229.328558][ T8543] ? create_filter_start+0xad/0x1e0 [ 229.328578][ T8543] create_filter_start+0xad/0x1e0 [ 229.328596][ T8543] create_filter+0x7c/0x180 [ 229.328616][ T8543] apply_event_filter+0x154/0x510 [ 229.328636][ T8543] event_filter_write+0x16f/0x220 [ 229.328656][ T8543] ? __pfx_event_filter_write+0x10/0x10 [ 229.328674][ T8543] vfs_write+0x296/0xba0 [ 229.328697][ T8543] ? __pfx_vfs_write+0x10/0x10 [ 229.328716][ T8543] ? __fget_files+0x2a/0x420 [ 229.328743][ T8543] ? __fget_files+0x3a2/0x420 [ 229.328758][ T8543] ? __fget_files+0x2a/0x420 [ 229.328779][ T8543] ksys_write+0x150/0x270 [ 229.328798][ T8543] ? __pfx_ksys_write+0x10/0x10 [ 229.328823][ T8543] do_syscall_64+0x166/0x520 [ 229.328835][ T8543] ? trace_irq_disable+0x3b/0x140 [ 229.328852][ T8543] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.328865][ T8543] ? clear_bhb_loop+0x70/0xc0 [ 229.328881][ T8543] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.328894][ T8543] RIP: 0033:0x7faa4ff9e159 [ 229.328906][ T8543] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 229.328917][ T8543] RSP: 002b:00007faa50ece028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 229.328932][ T8543] RAX: ffffffffffffffda RBX: 00007faa50225fa0 RCX: 00007faa4ff9e159 [ 229.328942][ T8543] RDX: 000000000000001e RSI: 0000200000000300 RDI: 0000000000000003 [ 229.328950][ T8543] RBP: 00007faa50ece090 R08: 0000000000000000 R09: 0000000000000000 [ 229.328958][ T8543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 229.328966][ T8543] R13: 00007faa50226038 R14: 00007faa50225fa0 R15: 00007ffc7696d828 [ 229.328986][ T8543] [ 229.434044][ T5620] Bluetooth: hci4: command tx timeout [ 229.750273][ T5716] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 229.771470][ T5716] usb 1-1: device descriptor read/8, error -71 [ 229.807208][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 229.807280][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 229.832894][ T10] usb 3-1: USB disconnect, device number 43 [ 229.881246][ T5716] usb usb1-port1: unable to enumerate USB device [ 229.960323][ T2255] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 230.111167][ T2255] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 230.112040][ T2255] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 230.112071][ T2255] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.117110][ T2255] usb 2-1: config 0 descriptor?? [ 230.158351][ T2255] pwc: Askey VC010 type 2 USB webcam detected. [ 230.216139][ T8555] FAULT_INJECTION: forcing a failure. [ 230.216139][ T8555] name failslab, interval 1, probability 0, space 0, times 0 [ 230.216164][ T8555] CPU: 0 UID: 0 PID: 8555 Comm: syz.4.857 Tainted: G L syzkaller #0 PREEMPT(full) [ 230.216183][ T8555] Tainted: [L]=SOFTLOCKUP [ 230.216188][ T8555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 230.216196][ T8555] Call Trace: [ 230.216205][ T8555] [ 230.216211][ T8555] dump_stack_lvl+0xe8/0x150 [ 230.216232][ T8555] should_fail_ex+0x3eb/0x540 [ 230.216249][ T8555] should_failslab+0xa8/0x100 [ 230.216264][ T8555] __kvmalloc_node_noprof+0x171/0x820 [ 230.216283][ T8555] ? __kmalloc_cache_noprof+0x31c/0x600 [ 230.216301][ T8555] ? io_ring_ctx_alloc+0x1ad/0xb80 [ 230.216313][ T8555] ? io_ring_ctx_alloc+0x1ad/0xb80 [ 230.216328][ T8555] io_ring_ctx_alloc+0x1ad/0xb80 [ 230.216340][ T8555] ? io_prepare_config+0x8c8/0xc70 [ 230.216356][ T8555] io_uring_create+0x50/0x980 [ 230.216370][ T8555] __se_sys_io_uring_setup+0x2a8/0x2c0 [ 230.216383][ T8555] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 230.216397][ T8555] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 230.216418][ T8555] ? __pfx_ksys_write+0x10/0x10 [ 230.216442][ T8555] do_syscall_64+0x166/0x520 [ 230.216453][ T8555] ? trace_irq_disable+0x3b/0x140 [ 230.216471][ T8555] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.216484][ T8555] ? clear_bhb_loop+0x70/0xc0 [ 230.216499][ T8555] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.216512][ T8555] RIP: 0033:0x7f4e27b9e159 [ 230.216524][ T8555] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 230.216535][ T8555] RSP: 002b:00007f4e28b40ee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 230.216551][ T8555] RAX: ffffffffffffffda RBX: 0000200000000a88 RCX: 00007f4e27b9e159 [ 230.216561][ T8555] RDX: 0000200000000b08 RSI: 0000200000000a88 RDI: 00000000000003c9 [ 230.216569][ T8555] RBP: 0000200000000a80 R08: 0000000000000000 R09: 0000000000000000 [ 230.216577][ T8555] R10: 0000200000000b10 R11: 0000000000000206 R12: 0000200000000b08 [ 230.216586][ T8555] R13: 0000200000000b10 R14: 00007f4e28b40fd8 R15: 0000000000000000 [ 230.216604][ T8555] [ 230.683060][ T2255] pwc: recv_control_msg error -32 req 02 val 2b00 [ 230.765467][ T8563] FAULT_INJECTION: forcing a failure. [ 230.765467][ T8563] name failslab, interval 1, probability 0, space 0, times 0 [ 230.765493][ T8563] CPU: 0 UID: 0 PID: 8563 Comm: syz.4.860 Tainted: G L syzkaller #0 PREEMPT(full) [ 230.765514][ T8563] Tainted: [L]=SOFTLOCKUP [ 230.765519][ T8563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 230.765526][ T8563] Call Trace: [ 230.765531][ T8563] [ 230.765538][ T8563] dump_stack_lvl+0xe8/0x150 [ 230.765559][ T8563] should_fail_ex+0x3eb/0x540 [ 230.765577][ T8563] should_failslab+0xa8/0x100 [ 230.765592][ T8563] __kvmalloc_node_noprof+0x171/0x820 [ 230.765612][ T8563] ? __kmalloc_cache_noprof+0x31c/0x600 [ 230.765630][ T8563] ? io_ring_ctx_alloc+0x1ad/0xb80 [ 230.765641][ T8563] ? io_ring_ctx_alloc+0x1ad/0xb80 [ 230.765657][ T8563] io_ring_ctx_alloc+0x1ad/0xb80 [ 230.765668][ T8563] ? io_prepare_config+0x8c8/0xc70 [ 230.765684][ T8563] io_uring_create+0x50/0x980 [ 230.765698][ T8563] __se_sys_io_uring_setup+0x2a8/0x2c0 [ 230.765711][ T8563] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 230.765725][ T8563] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 230.765747][ T8563] ? __pfx_ksys_write+0x10/0x10 [ 230.765770][ T8563] do_syscall_64+0x166/0x520 [ 230.765782][ T8563] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.765795][ T8563] ? clear_bhb_loop+0x70/0xc0 [ 230.765810][ T8563] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.765822][ T8563] RIP: 0033:0x7f4e27b9e159 [ 230.765834][ T8563] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 230.765846][ T8563] RSP: 002b:00007f4e28b40ee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 230.765861][ T8563] RAX: ffffffffffffffda RBX: 0000200000000a88 RCX: 00007f4e27b9e159 [ 230.765871][ T8563] RDX: 0000200000000b08 RSI: 0000200000000a88 RDI: 00000000000003c9 [ 230.765879][ T8563] RBP: 0000200000000a80 R08: 0000000000000000 R09: 0000000000000000 [ 230.765887][ T8563] R10: 0000200000000b10 R11: 0000000000000206 R12: 0000200000000b08 [ 230.765896][ T8563] R13: 0000200000000b10 R14: 00007f4e28b40fd8 R15: 0000000000000000 [ 230.765914][ T8563] [ 231.010952][ T2255] pwc: recv_control_msg error -32 req 02 val 2c00 [ 231.214572][ T2255] pwc: recv_control_msg error -71 req 04 val 1300 [ 231.216021][ T2255] pwc: recv_control_msg error -71 req 04 val 1400 [ 231.217221][ T2255] pwc: recv_control_msg error -71 req 02 val 2000 [ 231.218360][ T2255] pwc: recv_control_msg error -71 req 02 val 2100 [ 231.234255][ T2255] pwc: recv_control_msg error -71 req 04 val 1500 [ 231.248402][ T2255] pwc: recv_control_msg error -71 req 02 val 2500 [ 231.262963][ T2255] pwc: recv_control_msg error -71 req 02 val 2400 [ 231.265980][ T2255] pwc: recv_control_msg error -71 req 02 val 2600 [ 231.267090][ T2255] pwc: recv_control_msg error -71 req 02 val 2900 [ 231.268582][ T2255] pwc: recv_control_msg error -71 req 02 val 2800 [ 231.286119][ T2255] pwc: recv_control_msg error -71 req 04 val 1100 [ 231.306762][ T2255] pwc: recv_control_msg error -71 req 04 val 1200 [ 231.317088][ T2255] pwc: Registered as video103. [ 231.333493][ T2255] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input25 [ 231.375808][ T2255] usb 2-1: USB disconnect, device number 41 [ 231.512814][ T5620] Bluetooth: hci4: command tx timeout [ 232.143583][ T8588] ALSA: seq fatal error: cannot create timer (-19) [ 232.420874][ T10] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 232.550785][ T10] usb 1-1: device descriptor read/64, error -71 [ 232.792326][ T10] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 232.910538][ T5751] usb 3-1: new full-speed USB device number 44 using dummy_hcd [ 232.920509][ T10] usb 1-1: device descriptor read/64, error -71 [ 232.983678][ T8617] FAULT_INJECTION: forcing a failure. [ 232.983678][ T8617] name failslab, interval 1, probability 0, space 0, times 0 [ 232.983704][ T8617] CPU: 0 UID: 0 PID: 8617 Comm: syz.1.880 Tainted: G L syzkaller #0 PREEMPT(full) [ 232.983722][ T8617] Tainted: [L]=SOFTLOCKUP [ 232.983727][ T8617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 232.983735][ T8617] Call Trace: [ 232.983740][ T8617] [ 232.983745][ T8617] dump_stack_lvl+0xe8/0x150 [ 232.983775][ T8617] should_fail_ex+0x3eb/0x540 [ 232.983793][ T8617] should_failslab+0xa8/0x100 [ 232.983806][ T8617] ? security_inode_alloc+0x39/0x310 [ 232.983823][ T8617] kmem_cache_alloc_noprof+0x9c/0x600 [ 232.983838][ T8617] ? make_kgid+0x1d1/0x6a0 [ 232.983854][ T8617] ? rcu_is_watching+0x16/0xb0 [ 232.983866][ T8617] ? security_inode_alloc+0x39/0x310 [ 232.983885][ T8617] security_inode_alloc+0x39/0x310 [ 232.983900][ T8617] inode_init_always_gfp+0x97e/0xd30 [ 232.983919][ T8617] ? __pfx_sock_alloc_inode+0x10/0x10 [ 232.983936][ T8617] alloc_inode+0x82/0x1b0 [ 232.983951][ T8617] __sock_create+0x127/0xac0 [ 232.983967][ T8617] ? exc_page_fault+0x6a/0xc0 [ 232.983994][ T8617] __sys_socket+0xd6/0x1b0 [ 232.984014][ T8617] __x64_sys_socket+0x7a/0x90 [ 232.984031][ T8617] do_syscall_64+0x166/0x520 [ 232.984042][ T8617] ? trace_irq_disable+0x3b/0x140 [ 232.984060][ T8617] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.984073][ T8617] ? clear_bhb_loop+0x70/0xc0 [ 232.984088][ T8617] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.984101][ T8617] RIP: 0033:0x7faa4ff9f9c7 [ 232.984113][ T8617] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 232.984124][ T8617] RSP: 002b:00007faa50eabf98 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 232.984139][ T8617] RAX: ffffffffffffffda RBX: 00007faa50226090 RCX: 00007faa4ff9f9c7 [ 232.984149][ T8617] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 232.984157][ T8617] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 232.984165][ T8617] R10: 00002000000000c0 R11: 0000000000000286 R12: 0000000000000001 [ 232.984173][ T8617] R13: 00007faa50226128 R14: 00007faa50226090 R15: 00007ffc7696d828 [ 232.984192][ T8617] [ 232.988990][ T8617] socket: no more sockets [ 233.035925][ T10] usb usb1-port1: attempt power cycle [ 233.085645][ T5751] usb 3-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 233.105544][ T5751] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 233.105562][ T5751] usb 3-1: config 0 has no interface number 0 [ 233.105587][ T5751] usb 3-1: config 0 interface 1 altsetting 216 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 233.105604][ T5751] usb 3-1: config 0 interface 1 altsetting 216 endpoint 0x81 has invalid wMaxPacketSize 0 [ 233.105616][ T5751] usb 3-1: config 0 interface 1 altsetting 216 has 1 endpoint descriptor, different from the interface descriptor's value: 10 [ 233.105633][ T5751] usb 3-1: config 0 interface 1 has no altsetting 0 [ 233.105653][ T5751] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.258591][ T5751] usb 3-1: config 0 descriptor?? [ 233.460530][ T10] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 233.481704][ T10] usb 1-1: device descriptor read/8, error -71 [ 233.720859][ T10] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 233.741677][ T10] usb 1-1: device descriptor read/8, error -71 [ 233.773097][ T5751] input: HID 258a:6a88 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.1/0003:258A:6A88.000E/input/input26 [ 233.852395][ T10] usb usb1-port1: unable to enumerate USB device [ 233.920050][ T5751] itetech 0003:258A:6A88.000E: input,hidraw0: USB HID v80.00 Joystick [HID 258a:6a88] on usb-dummy_hcd.2-1/input1 [ 233.955829][ T8606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.956125][ T8606] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.957008][ T5751] usb 3-1: USB disconnect, device number 44 [ 234.177520][ T8634] fido_id[8634]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 234.590279][ T5784] usb 2-1: new full-speed USB device number 42 using dummy_hcd [ 234.745292][ T5784] usb 2-1: New USB device found, idVendor=0458, idProduct=5005, bcdDevice= 0.00 [ 234.746211][ T5784] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 234.746247][ T5784] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.788624][ T5784] usb 2-1: config 0 descriptor?? [ 234.809601][ T8650] netlink: 24 bytes leftover after parsing attributes in process `syz.4.891'. [ 234.923632][ T10] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 235.055460][ T10] usb 3-1: device descriptor read/64, error -71 [ 235.071144][ T5784] usbhid 2-1:0.0: can't add hid device: -71 [ 235.071213][ T5784] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 235.074340][ T5784] usb 2-1: USB disconnect, device number 42 [ 235.284391][ T5751] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 235.295112][ T10] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 235.346620][ T8658] FAULT_INJECTION: forcing a failure. [ 235.346620][ T8658] name failslab, interval 1, probability 0, space 0, times 0 [ 235.346645][ T8658] CPU: 0 UID: 0 PID: 8658 Comm: syz.0.894 Tainted: G L syzkaller #0 PREEMPT(full) [ 235.346663][ T8658] Tainted: [L]=SOFTLOCKUP [ 235.346669][ T8658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 235.346676][ T8658] Call Trace: [ 235.346681][ T8658] [ 235.346687][ T8658] dump_stack_lvl+0xe8/0x150 [ 235.346717][ T8658] should_fail_ex+0x3eb/0x540 [ 235.346734][ T8658] ? __alloc_skb+0x1db/0x7a0 [ 235.346746][ T8658] should_failslab+0xa8/0x100 [ 235.346760][ T8658] ? __alloc_skb+0x1db/0x7a0 [ 235.346771][ T8658] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 235.346787][ T8658] ? __alloc_skb+0x18d/0x7a0 [ 235.346799][ T8658] ? __alloc_skb+0x1db/0x7a0 [ 235.346814][ T8658] __alloc_skb+0x1db/0x7a0 [ 235.346828][ T8658] netlink_sendmsg+0x577/0xae0 [ 235.346847][ T8658] ? __pfx_netlink_sendmsg+0x10/0x10 [ 235.346868][ T8658] ? apparmor_socket_sendmsg+0x98/0x360 [ 235.346882][ T8658] ? __pfx_netlink_sendmsg+0x10/0x10 [ 235.346897][ T8658] sock_sendmsg_nosec+0x13a/0x180 [ 235.346916][ T8658] ____sys_sendmsg+0x54e/0x850 [ 235.346932][ T8658] ? __pfx_____sys_sendmsg+0x10/0x10 [ 235.346951][ T8658] ? import_iovec+0x73/0xa0 [ 235.346968][ T8658] ___sys_sendmsg+0x2a5/0x360 [ 235.346982][ T8658] ? __lock_acquire+0x747/0x2de0 [ 235.347005][ T8658] ? __pfx____sys_sendmsg+0x10/0x10 [ 235.347039][ T8658] ? __fget_files+0x2a/0x420 [ 235.347054][ T8658] ? __fget_files+0x3a2/0x420 [ 235.347075][ T8658] __x64_sys_sendmsg+0x1b1/0x290 [ 235.347091][ T8658] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 235.347116][ T8658] do_syscall_64+0x166/0x520 [ 235.347128][ T8658] ? trace_irq_disable+0x3b/0x140 [ 235.347146][ T8658] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.347159][ T8658] ? clear_bhb_loop+0x70/0xc0 [ 235.347174][ T8658] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.347186][ T8658] RIP: 0033:0x7f12c259e159 [ 235.347198][ T8658] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 235.347209][ T8658] RSP: 002b:00007f12c352b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 235.347224][ T8658] RAX: ffffffffffffffda RBX: 00007f12c2825fa0 RCX: 00007f12c259e159 [ 235.347234][ T8658] RDX: 0000000000028880 RSI: 0000200000000180 RDI: 0000000000000003 [ 235.347242][ T8658] RBP: 00007f12c352b090 R08: 0000000000000000 R09: 0000000000000000 [ 235.347250][ T8658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 235.347258][ T8658] R13: 00007f12c2826038 R14: 00007f12c2825fa0 R15: 00007ffcaa0bd878 [ 235.347277][ T8658] [ 235.434094][ T5751] usb 5-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 235.439877][ T5751] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 235.446487][ T10] usb 3-1: device descriptor read/64, error -71 [ 235.466486][ T5751] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.466504][ T5751] usb 5-1: Product: syz [ 235.466513][ T5751] usb 5-1: Manufacturer: syz [ 235.466522][ T5751] usb 5-1: SerialNumber: syz [ 235.485672][ T5751] usb 5-1: config 0 descriptor?? [ 235.557012][ T10] usb usb3-port1: attempt power cycle [ 235.658686][ T5751] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 235.893800][ T8662] netlink: 56 bytes leftover after parsing attributes in process `syz.1.895'. [ 236.021065][ T10] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 236.041465][ T10] usb 3-1: device descriptor read/8, error -71 [ 236.146149][ T5751] gspca_pac7302: reg_w() failed i: ff v: 01 error -71 [ 236.146207][ T5751] gspca_pac7302 5-1:0.0: probe with driver gspca_pac7302 failed with error -71 [ 236.149579][ T5751] usb 5-1: USB disconnect, device number 2 [ 236.251924][ T8673] FAULT_INJECTION: forcing a failure. [ 236.251924][ T8673] name failslab, interval 1, probability 0, space 0, times 0 [ 236.251949][ T8673] CPU: 0 UID: 0 PID: 8673 Comm: syz.1.899 Tainted: G L syzkaller #0 PREEMPT(full) [ 236.251968][ T8673] Tainted: [L]=SOFTLOCKUP [ 236.251973][ T8673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 236.251981][ T8673] Call Trace: [ 236.251986][ T8673] [ 236.251992][ T8673] dump_stack_lvl+0xe8/0x150 [ 236.252013][ T8673] should_fail_ex+0x3eb/0x540 [ 236.252031][ T8673] should_failslab+0xa8/0x100 [ 236.252046][ T8673] __kvmalloc_node_noprof+0x171/0x820 [ 236.252064][ T8673] ? __kmalloc_cache_noprof+0x31c/0x600 [ 236.252082][ T8673] ? io_ring_ctx_alloc+0x1ad/0xb80 [ 236.252093][ T8673] ? io_ring_ctx_alloc+0x1ad/0xb80 [ 236.252109][ T8673] io_ring_ctx_alloc+0x1ad/0xb80 [ 236.252121][ T8673] ? io_prepare_config+0x8c8/0xc70 [ 236.252137][ T8673] io_uring_create+0x50/0x980 [ 236.252151][ T8673] __se_sys_io_uring_setup+0x2a8/0x2c0 [ 236.252164][ T8673] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 236.252178][ T8673] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 236.252199][ T8673] ? __pfx_ksys_write+0x10/0x10 [ 236.252222][ T8673] do_syscall_64+0x166/0x520 [ 236.252234][ T8673] ? trace_irq_disable+0x3b/0x140 [ 236.252251][ T8673] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.252264][ T8673] ? clear_bhb_loop+0x70/0xc0 [ 236.252279][ T8673] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.252291][ T8673] RIP: 0033:0x7faa4ff9e159 [ 236.252303][ T8673] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 236.252314][ T8673] RSP: 002b:00007faa50ecdee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 236.252329][ T8673] RAX: ffffffffffffffda RBX: 0000200000000508 RCX: 00007faa4ff9e159 [ 236.252339][ T8673] RDX: 0000200000000588 RSI: 0000200000000508 RDI: 00000000000003c9 [ 236.252348][ T8673] RBP: 0000200000000500 R08: 0000000000000000 R09: 0000000000000000 [ 236.252356][ T8673] R10: 0000200000000590 R11: 0000000000000206 R12: 0000200000000588 [ 236.252364][ T8673] R13: 0000200000000590 R14: 00007faa50ecdfd8 R15: 0000000000000000 [ 236.252382][ T8673] [ 236.285834][ T10] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 236.303310][ T10] usb 3-1: device descriptor read/8, error -71 [ 236.414849][ T10] usb usb3-port1: unable to enumerate USB device [ 236.877735][ T8680] netlink: 16 bytes leftover after parsing attributes in process `syz.0.902'. [ 236.956614][ T8685] fuse: Bad value for 'fd' [ 237.004140][ T8686] FAULT_INJECTION: forcing a failure. [ 237.004140][ T8686] name failslab, interval 1, probability 0, space 0, times 0 [ 237.004165][ T8686] CPU: 0 UID: 0 PID: 8686 Comm: syz.4.903 Tainted: G L syzkaller #0 PREEMPT(full) [ 237.004184][ T8686] Tainted: [L]=SOFTLOCKUP [ 237.004189][ T8686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 237.004197][ T8686] Call Trace: [ 237.004203][ T8686] [ 237.004209][ T8686] dump_stack_lvl+0xe8/0x150 [ 237.004232][ T8686] should_fail_ex+0x3eb/0x540 [ 237.004249][ T8686] should_failslab+0xa8/0x100 [ 237.004265][ T8686] __kvmalloc_node_noprof+0x171/0x820 [ 237.004285][ T8686] ? __kmalloc_cache_noprof+0x31c/0x600 [ 237.004304][ T8686] ? io_ring_ctx_alloc+0x1ad/0xb80 [ 237.004316][ T8686] ? io_ring_ctx_alloc+0x1ad/0xb80 [ 237.004331][ T8686] io_ring_ctx_alloc+0x1ad/0xb80 [ 237.004344][ T8686] ? io_prepare_config+0x8c8/0xc70 [ 237.004359][ T8686] io_uring_create+0x50/0x980 [ 237.004374][ T8686] __se_sys_io_uring_setup+0x2a8/0x2c0 [ 237.004387][ T8686] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 237.004401][ T8686] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 237.004423][ T8686] ? __pfx_ksys_write+0x10/0x10 [ 237.004446][ T8686] do_syscall_64+0x166/0x520 [ 237.004459][ T8686] ? trace_irq_disable+0x3b/0x140 [ 237.004476][ T8686] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.004489][ T8686] ? clear_bhb_loop+0x70/0xc0 [ 237.004504][ T8686] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.004517][ T8686] RIP: 0033:0x7f4e27b9e159 [ 237.004530][ T8686] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 237.004541][ T8686] RSP: 002b:00007f4e289feee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 237.004557][ T8686] RAX: ffffffffffffffda RBX: 0000200000000a88 RCX: 00007f4e27b9e159 [ 237.004567][ T8686] RDX: 0000200000000b08 RSI: 0000200000000a88 RDI: 00000000000003c9 [ 237.004576][ T8686] RBP: 0000200000000a80 R08: 0000000000000000 R09: 0000000000000000 [ 237.004584][ T8686] R10: 0000200000000b10 R11: 0000000000000206 R12: 0000200000000b08 [ 237.004593][ T8686] R13: 0000200000000b10 R14: 00007f4e289fefd8 R15: 0000000000000000 [ 237.004612][ T8686] [ 237.063501][ T5751] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 237.258112][ T5751] usb 2-1: device descriptor read/64, error -71 [ 237.391127][ T8692] FAULT_INJECTION: forcing a failure. [ 237.391127][ T8692] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 237.391152][ T8692] CPU: 0 UID: 0 PID: 8692 Comm: syz.0.906 Tainted: G L syzkaller #0 PREEMPT(full) [ 237.391170][ T8692] Tainted: [L]=SOFTLOCKUP [ 237.391176][ T8692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 237.391184][ T8692] Call Trace: [ 237.391190][ T8692] [ 237.391196][ T8692] dump_stack_lvl+0xe8/0x150 [ 237.391217][ T8692] should_fail_ex+0x3eb/0x540 [ 237.391235][ T8692] _copy_to_user+0x31/0xb0 [ 237.391252][ T8692] simple_read_from_buffer+0xe1/0x170 [ 237.391272][ T8692] proc_fail_nth_read+0x1bb/0x230 [ 237.391293][ T8692] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 237.391313][ T8692] ? rw_verify_area+0x24a/0x4c0 [ 237.391332][ T8692] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 237.391350][ T8692] vfs_read+0x213/0xa80 [ 237.391370][ T8692] ? __pfx___mutex_lock+0x10/0x10 [ 237.391384][ T8692] ? __pfx_vfs_read+0x10/0x10 [ 237.391401][ T8692] ? __fget_files+0x2a/0x420 [ 237.391420][ T8692] ? __fget_files+0x3a2/0x420 [ 237.391435][ T8692] ? __fget_files+0x2a/0x420 [ 237.391455][ T8692] ksys_read+0x150/0x270 [ 237.391474][ T8692] ? __pfx_ksys_read+0x10/0x10 [ 237.391497][ T8692] do_syscall_64+0x166/0x520 [ 237.391509][ T8692] ? trace_irq_disable+0x3b/0x140 [ 237.391527][ T8692] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.391540][ T8692] ? clear_bhb_loop+0x70/0xc0 [ 237.391555][ T8692] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.391568][ T8692] RIP: 0033:0x7f12c255e98e [ 237.391585][ T8692] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 237.391596][ T8692] RSP: 002b:00007f12c352afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 237.391612][ T8692] RAX: ffffffffffffffda RBX: 00007f12c352b6c0 RCX: 00007f12c255e98e [ 237.391622][ T8692] RDX: 000000000000000f RSI: 00007f12c352b0a0 RDI: 0000000000000004 [ 237.391631][ T8692] RBP: 00007f12c352b090 R08: 0000000000000000 R09: 0000000000000000 [ 237.391639][ T8692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 237.391647][ T8692] R13: 00007f12c2826038 R14: 00007f12c2825fa0 R15: 00007ffcaa0bd878 [ 237.391667][ T8692] [ 237.512271][ T5751] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 237.713405][ T5751] usb 2-1: device descriptor read/64, error -71 [ 237.827133][ T5751] usb usb2-port1: attempt power cycle [ 237.987135][ T8702] netlink: 28 bytes leftover after parsing attributes in process `syz.2.911'. [ 238.171249][ T5751] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 238.192469][ T5751] usb 2-1: device descriptor read/8, error -71 [ 238.230871][ T8710] netlink: 'syz.4.915': attribute type 29 has an invalid length. [ 238.232287][ T8710] netlink: 'syz.4.915': attribute type 29 has an invalid length. [ 238.238137][ T8710] netlink: 'syz.4.915': attribute type 29 has an invalid length. [ 238.341436][ T8714] netlink: 60 bytes leftover after parsing attributes in process `syz.2.917'. [ 238.349287][ T8714] netlink: 60 bytes leftover after parsing attributes in process `syz.2.917'. [ 238.431154][ T5751] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 238.450542][ T5751] usb 2-1: device descriptor read/8, error -71 [ 238.562060][ T5751] usb usb2-port1: unable to enumerate USB device [ 238.609355][ T8724] netlink: 24 bytes leftover after parsing attributes in process `syz.4.921'. [ 238.785168][ T8731] netlink: 8 bytes leftover after parsing attributes in process `syz.4.925'. [ 239.114683][ T8745] netlink: 4 bytes leftover after parsing attributes in process `syz.4.929'. [ 239.114856][ T8747] netlink: 'syz.2.931': attribute type 33 has an invalid length. [ 239.118553][ T8746] netlink: 8 bytes leftover after parsing attributes in process `syz.0.930'. [ 239.483438][ T8759] netlink: 'syz.2.934': attribute type 16 has an invalid length. [ 239.483457][ T8759] netlink: 'syz.2.934': attribute type 1 has an invalid length. [ 239.639097][ T8765] netlink: 'syz.0.937': attribute type 10 has an invalid length. [ 239.664077][ T8765] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 239.668556][ T8765] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 239.882328][ T8775] __nla_validate_parse: 6 callbacks suppressed [ 239.882345][ T8775] netlink: 44 bytes leftover after parsing attributes in process `syz.0.940'. [ 239.882548][ T8773] netlink: 'syz.2.942': attribute type 29 has an invalid length. [ 239.891318][ T8773] netlink: 'syz.2.942': attribute type 29 has an invalid length. [ 239.994551][ T8777] netlink: 24 bytes leftover after parsing attributes in process `syz.4.943'. [ 239.994569][ T8777] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 240.626777][ T8801] netlink: 380 bytes leftover after parsing attributes in process `syz.0.952'. [ 240.639161][ T8803] netlink: 32 bytes leftover after parsing attributes in process `syz.1.953'. [ 240.889399][ T8812] netlink: 12 bytes leftover after parsing attributes in process `syz.0.957'. [ 240.889421][ T8812] netlink: 232 bytes leftover after parsing attributes in process `syz.0.957'. [ 241.540620][ T8837] netlink: 380 bytes leftover after parsing attributes in process `syz.2.966'. [ 242.236648][ T8866] netlink: 4 bytes leftover after parsing attributes in process `syz.4.977'. [ 242.998208][ T8897] netlink: 24 bytes leftover after parsing attributes in process `syz.4.989'. [ 243.257370][ T8908] xt_cluster: you have exceeded the maximum number of cluster nodes (2621472 > 32) [ 243.291045][ T8912] netlink: 'syz.0.995': attribute type 29 has an invalid length. [ 243.291063][ T8912] netlink: 21 bytes leftover after parsing attributes in process `syz.0.995'. [ 243.316476][ T8912] netlink: 'syz.0.995': attribute type 29 has an invalid length. [ 243.332817][ T8912] netlink: 'syz.0.995': attribute type 29 has an invalid length. [ 244.259693][ T6111] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.492552][ T6111] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.678260][ T6111] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.943872][ T6111] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.101222][ T4932] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 245.103537][ T4932] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 245.105638][ T4932] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 245.118587][ T4932] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 245.119796][ T4932] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 245.277339][ T8963] __nla_validate_parse: 2 callbacks suppressed [ 245.277356][ T8963] netlink: 4136 bytes leftover after parsing attributes in process `syz.0.1012'. [ 245.329907][ T8964] netlink: 352 bytes leftover after parsing attributes in process `syz.1.1013'. [ 245.909935][ T6111] bridge_slave_1: left allmulticast mode [ 245.909958][ T6111] bridge_slave_1: left promiscuous mode [ 245.910146][ T6111] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.965494][ T6111] bridge_slave_0: left allmulticast mode [ 245.965516][ T6111] bridge_slave_0: left promiscuous mode [ 245.965671][ T6111] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.753531][ T6111] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 246.773272][ T6111] bond_slave_0: left promiscuous mode [ 246.778897][ T6111] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 246.796288][ T6111] bond_slave_1: left promiscuous mode [ 246.809602][ T6111] bond0 (unregistering): (slave vlan0): Releasing backup interface [ 246.819649][ T6111] vlan0: left promiscuous mode [ 246.830253][ T6111] bond0 (unregistering): Released all slaves [ 246.935272][ T6111] tipc: Left network mode [ 247.033979][ T9012] netlink: 'syz.4.1029': attribute type 29 has an invalid length. [ 247.073148][ T9012] netlink: 'syz.4.1029': attribute type 29 has an invalid length. [ 247.190569][ T4932] Bluetooth: hci2: command tx timeout [ 247.867903][ T6111] hsr_slave_0: left promiscuous mode [ 247.878457][ T6111] hsr_slave_1: left promiscuous mode [ 247.897217][ T6111] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 247.897236][ T6111] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 247.919123][ T6111] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 247.942811][ T6111] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 247.960940][ T9039] netlink: 'syz.4.1038': attribute type 29 has an invalid length. [ 247.960956][ T9039] netlink: 21 bytes leftover after parsing attributes in process `syz.4.1038'. [ 248.008576][ T6111] veth1_macvtap: left promiscuous mode [ 248.008615][ T6111] veth0_macvtap: left promiscuous mode [ 248.008678][ T6111] veth1_vlan: left promiscuous mode [ 248.008695][ T6111] veth0_vlan: left promiscuous mode [ 248.072128][ T9042] netlink: 'syz.0.1039': attribute type 16 has an invalid length. [ 248.072146][ T9042] netlink: 'syz.0.1039': attribute type 1 has an invalid length. [ 248.072156][ T9042] netlink: 120 bytes leftover after parsing attributes in process `syz.0.1039'. [ 248.253532][ T9048] netlink: 'syz.1.1040': attribute type 29 has an invalid length. [ 248.614310][ T6111] team0 (unregistering): Port device team_slave_1 removed [ 248.639200][ T6111] team0 (unregistering): Port device team_slave_0 removed [ 248.756307][ T9049] netlink: 'syz.1.1040': attribute type 29 has an invalid length. [ 248.774901][ T5277] 8021q: adding VLAN 0 to HW filter on device eth5 [ 249.273069][ T4932] Bluetooth: hci2: command tx timeout [ 249.847852][ T9086] netlink: 'syz.0.1050': attribute type 29 has an invalid length. [ 249.860866][ T9086] netlink: 'syz.0.1050': attribute type 29 has an invalid length. [ 250.205989][ T8958] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.206090][ T8958] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.206183][ T8958] bridge_slave_0: entered allmulticast mode [ 250.207256][ T8958] bridge_slave_0: entered promiscuous mode [ 250.246086][ T8958] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.246153][ T8958] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.246236][ T8958] bridge_slave_1: entered allmulticast mode [ 250.247361][ T8958] bridge_slave_1: entered promiscuous mode [ 250.349018][ T8958] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 250.369283][ T8958] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 250.462498][ T8958] team0: Port device team_slave_0 added [ 250.476821][ T8958] team0: Port device team_slave_1 added [ 250.543008][ T8958] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 250.543023][ T8958] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 250.543040][ T8958] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 250.600187][ T8958] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 250.600201][ T8958] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 250.600219][ T8958] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 250.733068][ T5277] 8021q: adding VLAN 0 to HW filter on device eth6 [ 250.738977][ T8958] hsr_slave_0: entered promiscuous mode [ 250.739694][ T8958] hsr_slave_1: entered promiscuous mode [ 250.760928][ T8958] debugfs: 'hsr0' already exists in 'hsr' [ 250.760945][ T8958] Cannot create hsr debugfs directory [ 251.175789][ T8958] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 251.179638][ T8958] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 251.196986][ T8958] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 251.212232][ T8958] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 251.212985][ T8958] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 251.216937][ T8958] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 251.217932][ T8958] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 251.222106][ T8958] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 251.350916][ T4932] Bluetooth: hci2: command tx timeout [ 251.396279][ T8958] 8021q: adding VLAN 0 to HW filter on device bond0 [ 251.425785][ T8958] 8021q: adding VLAN 0 to HW filter on device team0 [ 251.441525][ T6109] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.441589][ T6109] bridge0: port 1(bridge_slave_0) entered forwarding state [ 251.466086][ T6111] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.466153][ T6111] bridge0: port 2(bridge_slave_1) entered forwarding state [ 251.634023][ T5277] 8021q: adding VLAN 0 to HW filter on device eth7 [ 252.152339][ T8958] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 252.397369][ T5277] 8021q: adding VLAN 0 to HW filter on device eth8 [ 252.540912][ T8958] veth0_vlan: entered promiscuous mode [ 252.559803][ T8958] veth1_vlan: entered promiscuous mode [ 252.614874][ T8958] veth0_macvtap: entered promiscuous mode [ 252.628321][ T8958] veth1_macvtap: entered promiscuous mode [ 252.665544][ T8958] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 252.683879][ T8958] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 252.721601][ T6114] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.721956][ T6114] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.721981][ T6114] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.722002][ T6114] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.897114][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.897131][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 252.958120][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.958137][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 253.103825][ T9161] xt_cluster: you have exceeded the maximum number of cluster nodes (2621472 > 32) [ 253.430621][ T4932] Bluetooth: hci2: command tx timeout [ 254.441600][ T9187] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1063'. [ 254.605724][ T9192] xt_cluster: you have exceeded the maximum number of cluster nodes (2621472 > 32) [ 254.967812][ T9206] netlink: 'syz.5.1074': attribute type 4 has an invalid length. [ 254.967832][ T9206] netlink: 17 bytes leftover after parsing attributes in process `syz.5.1074'. [ 255.720437][ T9233] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1088'. [ 255.761279][ T9234] netlink: 'syz.0.1089': attribute type 38 has an invalid length. [ 255.834764][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.912252][ T9238] netlink: 'syz.5.1091': attribute type 29 has an invalid length. [ 255.912270][ T9238] netlink: 21 bytes leftover after parsing attributes in process `syz.5.1091'. [ 255.938910][ T9238] netlink: 'syz.5.1091': attribute type 29 has an invalid length. [ 255.938926][ T9238] netlink: 21 bytes leftover after parsing attributes in process `syz.5.1091'. [ 255.948935][ T9238] netlink: 'syz.5.1091': attribute type 29 has an invalid length. [ 255.948950][ T9238] netlink: 21 bytes leftover after parsing attributes in process `syz.5.1091'. [ 256.186636][ T9248] netlink: 165 bytes leftover after parsing attributes in process `syz.0.1096'. [ 257.078926][ T9280] netlink: 'syz.1.1112': attribute type 29 has an invalid length. [ 257.078944][ T9280] netlink: 21 bytes leftover after parsing attributes in process `syz.1.1112'. [ 257.119626][ T9280] netlink: 'syz.1.1112': attribute type 29 has an invalid length. [ 257.119674][ T9280] netlink: 21 bytes leftover after parsing attributes in process `syz.1.1112'. [ 257.120182][ T9280] netlink: 'syz.1.1112': attribute type 29 has an invalid length. [ 257.120195][ T9280] netlink: 21 bytes leftover after parsing attributes in process `syz.1.1112'. [ 257.168452][ T9253] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 257.636960][ T9300] netlink: 'syz.4.1122': attribute type 29 has an invalid length. [ 257.658661][ T9300] netlink: 'syz.4.1122': attribute type 29 has an invalid length. [ 258.952404][ T6114] IPVS: starting estimator thread 0... [ 259.040962][ T9354] IPVS: using max 49 ests per chain, 117600 per kthread [ 259.650809][ T13] IPVS: starting estimator thread 0... [ 259.741569][ T9382] IPVS: using max 49 ests per chain, 117600 per kthread [ 260.557428][ T9410] __nla_validate_parse: 4 callbacks suppressed [ 260.557446][ T9410] netlink: 496 bytes leftover after parsing attributes in process `syz.0.1173'. [ 260.910542][ T9419] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1178'. [ 261.323495][ T9437] netlink: 496 bytes leftover after parsing attributes in process `syz.1.1185'. [ 261.469181][ T9439] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1187'. [ 261.533325][ T9443] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1189'. [ 261.905102][ T9457] netlink: 496 bytes leftover after parsing attributes in process `syz.0.1195'. [ 262.129100][ T9463] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1198'. [ 262.335825][ T9468] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1200'. [ 262.653532][ T9481] netlink: 496 bytes leftover after parsing attributes in process `syz.1.1207'. [ 262.811326][ T9485] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1209'. [ 264.218717][ T9531] ieee802154 phy1 wpan1: encryption failed: -22 [ 264.920413][ T10] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 265.071375][ T10] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 265.072227][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.074875][ T10] usb 5-1: config 0 descriptor?? [ 265.151096][ T10] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 266.540579][ T9583] __nla_validate_parse: 3 callbacks suppressed [ 266.540596][ T9583] netlink: 420 bytes leftover after parsing attributes in process `syz.0.1239'. [ 267.794131][ T9619] netlink: 420 bytes leftover after parsing attributes in process `syz.5.1250'. [ 268.390779][ T10] usb 5-1: USB disconnect, device number 3 [ 268.827784][ T9647] netlink: 420 bytes leftover after parsing attributes in process `syz.4.1260'. [ 270.055876][ T9684] netlink: 408 bytes leftover after parsing attributes in process `syz.0.1273'. [ 270.671640][ T9710] netlink: 408 bytes leftover after parsing attributes in process `syz.4.1285'. [ 271.227791][ T9730] ieee802154 phy1 wpan1: encryption failed: -22 [ 271.246010][ T9731] netlink: 408 bytes leftover after parsing attributes in process `syz.4.1294'. [ 272.056352][ T9753] netlink: 388 bytes leftover after parsing attributes in process `syz.4.1306'. [ 272.799352][ T9780] netlink: 388 bytes leftover after parsing attributes in process `syz.4.1316'. [ 272.946720][ T9783] validate_nla: 2 callbacks suppressed [ 272.946736][ T9783] netlink: 'syz.1.1317': attribute type 1 has an invalid length. [ 272.946745][ T9783] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1317'. [ 272.946755][ T9783] netlink: 'syz.1.1317': attribute type 2 has an invalid length. [ 272.946764][ T9783] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1317'. [ 273.216238][ T9793] netlink: 388 bytes leftover after parsing attributes in process `syz.4.1328'. [ 273.947864][ T9821] netlink: 388 bytes leftover after parsing attributes in process `syz.0.1333'. [ 274.231974][ T13] IPVS: starting estimator thread 0... [ 274.320366][ T9831] IPVS: using max 49 ests per chain, 117600 per kthread [ 274.699334][ T9846] netlink: 388 bytes leftover after parsing attributes in process `syz.4.1345'. [ 275.217948][ T9867] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1354'. [ 275.385809][ T9874] netlink: 388 bytes leftover after parsing attributes in process `syz.5.1357'. [ 275.913587][ T9894] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1365'. [ 276.193491][ T9902] syzkaller1: entered promiscuous mode [ 276.193509][ T9902] syzkaller1: entered allmulticast mode [ 277.542718][ T9951] __nla_validate_parse: 5 callbacks suppressed [ 277.542737][ T9951] netlink: 388 bytes leftover after parsing attributes in process `syz.0.1391'. [ 277.621638][ T9952] openvswitch: netlink: Duplicate or invalid key (type 0). [ 278.290724][ T9972] netlink: 388 bytes leftover after parsing attributes in process `syz.1.1400'. [ 278.312682][ T9968] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1398'. [ 278.983424][ T9997] netlink: 388 bytes leftover after parsing attributes in process `syz.5.1412'. [ 279.386789][T10011] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1418'. [ 280.785857][T10062] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1441'. [ 282.186665][T10109] syzkaller0: entered promiscuous mode [ 282.186685][T10109] syzkaller0: entered allmulticast mode [ 287.522843][T10245] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1511'. [ 289.146281][T10275] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1523'. [ 289.987169][T10226] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 290.252584][T10300] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1533'. [ 292.529432][T10380] netlink: 'syz.0.1562': attribute type 3 has an invalid length. [ 293.503609][T10419] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1577'. [ 293.711662][T10423] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1578'. [ 294.379837][T10452] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1589'. [ 294.559833][T10456] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1591'. [ 295.051389][T10473] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1598'. [ 295.263674][T10480] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1600'. [ 295.410888][T10483] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1602'. [ 295.835276][T10501] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1610'. [ 296.501780][T10523] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1620'. [ 297.274855][T10547] syzkaller1: entered promiscuous mode [ 297.274875][T10547] syzkaller1: entered allmulticast mode [ 297.697266][T10553] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1632'. [ 298.222939][T10568] syz.5.1638 (10568) used obsolete PPPIOCDETACH ioctl [ 298.834803][T10582] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1644'. [ 299.790425][T10606] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1654'. [ 300.876275][T10638] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1666'. [ 301.551861][T10658] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1676'. [ 301.688713][T10666] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1678'. [ 302.066225][T10684] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1681'. [ 302.546921][T10697] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1687'. [ 302.852292][T10705] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1688'. [ 303.398605][T10722] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1697'. [ 303.733927][T10732] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1701'. [ 304.117851][T10745] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1706'. [ 304.508592][T10758] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1711'. [ 304.774259][T10766] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1715'. [ 304.895770][T10768] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1716'. [ 306.008395][T10786] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1722'. [ 306.145427][T10791] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1724'. [ 306.555851][T10803] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1731'. [ 306.813908][T10812] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1734'. [ 307.005723][T10817] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1736'. [ 307.353201][T10828] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1740'. [ 312.754589][ C0] sched: DL replenish lagged too much [ 317.384241][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 359.203471][ T5620] Bluetooth: hci4: command 0x0406 tx timeout [ 381.376220][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 401.298478][ T5620] Bluetooth: hci2: command 0x0406 tx timeout [ 477.643970][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 485.929979][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 485.936940][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P2255/1:b..l P4971/1:b..l P10844/1:b..l [ 485.947203][ C0] rcu: (detected by 0, t=10502 jiffies, g=87257, q=1079142 ncpus=1) [ 485.955567][ C0] task:syz.4.1744 state:R running task stack:25720 pid:10844 tgid:10837 ppid:8394 task_flags:0x40044c flags:0x00080002 [ 485.969130][ C0] Call Trace: [ 485.972441][ C0] [ 485.975375][ C0] __schedule+0x17dd/0x5940 [ 485.979880][ C0] ? __update_page_owner_handle+0x512/0x580 [ 485.985781][ C0] ? __pfx___schedule+0x10/0x10 [ 485.990634][ C0] ? __lock_acquire+0x747/0x2de0 [ 485.995578][ C0] preempt_schedule_irq+0x4b/0x90 [ 486.000617][ C0] irqentry_exit+0x14f/0x910 [ 486.005206][ C0] ? trace_irq_disable+0x3b/0x140 [ 486.010228][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 486.016200][ C0] RIP: 0010:lock_release+0x44/0x3c0 [ 486.021394][ C0] Code: 8b 05 08 c5 18 12 48 89 44 24 28 0f 1f 44 00 00 65 8b 05 07 c5 18 12 83 f8 08 0f 83 60 02 00 00 89 c0 48 0f a3 05 34 28 f8 0e <73> 0d e8 75 03 09 00 84 c0 0f 84 9e 02 00 00 83 3d 36 57 f8 0e 00 [ 486.040992][ C0] RSP: 0018:ffffc9000516f280 EFLAGS: 00000293 [ 486.047057][ C0] RAX: 0000000000000000 RBX: ffffc9000516f3f8 RCX: 8000000000000001 [ 486.055025][ C0] RDX: ffffc9000516f401 RSI: ffffffff817821df RDI: ffffffff8ef5c7a0 [ 486.063009][ C0] RBP: 1ffffffff2268c01 R08: ffffc9000516f3d8 R09: 0000000000000000 [ 486.070984][ C0] R10: ffffc9000516f438 R11: fffff52000a2de89 R12: ffffc90005168000 [ 486.078958][ C0] R13: ffffffff817821df R14: ffffffff8ef5c7a0 R15: ffffc9000516f3e8 [ 486.086927][ C0] ? unwind_next_frame+0x8f/0x2550 [ 486.092039][ C0] ? unwind_next_frame+0x8f/0x2550 [ 486.097149][ C0] ? deref_stack_reg+0x18e/0x220 [ 486.102073][ C0] ? unwind_next_frame+0x8f/0x2550 [ 486.107174][ C0] unwind_next_frame+0x1baa/0x2550 [ 486.112282][ C0] ? __unwind_start+0xed/0x660 [ 486.117041][ C0] ? unwind_next_frame+0x8f/0x2550 [ 486.122166][ C0] __unwind_start+0x514/0x660 [ 486.126849][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 486.133002][ C0] arch_stack_walk+0xe3/0x150 [ 486.137677][ C0] ? arch_stack_walk+0xe3/0x150 [ 486.142524][ C0] stack_trace_save+0xa9/0x100 [ 486.147284][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 486.152650][ C0] ? __kasan_kmalloc+0x93/0xb0 [ 486.157424][ C0] ? exit_mmap+0x4ca/0x9f0 [ 486.161877][ C0] ? __mmput+0x118/0x420 [ 486.166107][ C0] ? exit_mm+0x221/0x2d0 [ 486.170358][ C0] ? do_exit+0x6cd/0x2360 [ 486.174679][ C0] ? do_group_exit+0x22d/0x2f0 [ 486.179433][ C0] ? get_signal+0x1216/0x12c0 [ 486.184112][ C0] ? arch_do_signal_or_restart+0xbb/0x860 [ 486.189819][ C0] ? exit_to_user_mode_loop+0x10e/0x770 [ 486.195358][ C0] kasan_save_stack+0x3e/0x60 [ 486.200059][ C0] ? tear_down_vmas+0x31f/0x530 [ 486.204900][ C0] kasan_record_aux_stack+0xbd/0xd0 [ 486.210090][ C0] kmem_cache_free+0x45e/0x650 [ 486.214849][ C0] tear_down_vmas+0x31f/0x530 [ 486.219521][ C0] exit_mmap+0x4ca/0x9f0 [ 486.223756][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 486.228527][ C0] ? __pfx_exit_aio+0x10/0x10 [ 486.233208][ C0] ? uprobe_clear_state+0x2a4/0x3d0 [ 486.238441][ C0] __mmput+0x118/0x420 [ 486.242528][ C0] exit_mm+0x221/0x2d0 [ 486.246605][ C0] do_exit+0x6cd/0x2360 [ 486.250768][ C0] ? mlock_drain_local+0x79/0x490 [ 486.255791][ C0] ? __pfx_do_exit+0x10/0x10 [ 486.260379][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 486.265411][ C0] do_group_exit+0x22d/0x2f0 [ 486.269993][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 486.275196][ C0] get_signal+0x1216/0x12c0 [ 486.279700][ C0] arch_do_signal_or_restart+0xbb/0x860 [ 486.285242][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 486.291384][ C0] ? vm_mmap_pgoff+0x353/0x4e0 [ 486.296152][ C0] exit_to_user_mode_loop+0x10e/0x770 [ 486.301518][ C0] ? rcu_is_watching+0x16/0xb0 [ 486.306271][ C0] do_syscall_64+0x328/0x520 [ 486.310861][ C0] ? trace_irq_disable+0x3b/0x140 [ 486.315883][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.321939][ C0] ? clear_bhb_loop+0x70/0xc0 [ 486.326606][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.332483][ C0] RIP: 0033:0x7f4e27b9e159 [ 486.336974][ C0] RSP: 002b:00007f4e28b20028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 486.345399][ C0] RAX: 0000200000000000 RBX: 00007f4e27e26090 RCX: 00007f4e27b9e159 [ 486.353371][ C0] RDX: b635773f07ebbeef RSI: 0000000000b36000 RDI: 0000200000000000 [ 486.361341][ C0] RBP: 00007f4e27c35024 R08: ffffffffffffffff R09: 00000000215eb000 [ 486.369297][ C0] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 486.377255][ C0] R13: 00007f4e27e26128 R14: 00007f4e27e26090 R15: 00007fffc6074008 [ 486.385223][ C0] [ 486.388230][ C0] task:klogd state:R running task stack:22408 pid:4971 tgid:4971 ppid:1 task_flags:0x400100 flags:0x00080000 [ 486.401692][ C0] Call Trace: [ 486.404973][ C0] [ 486.407899][ C0] __schedule+0x17dd/0x5940 [ 486.412427][ C0] ? wakeup_preempt_fair+0x476/0x770 [ 486.417710][ C0] ? __pfx___schedule+0x10/0x10 [ 486.422560][ C0] ? preempt_schedule_thunk+0x16/0x40 [ 486.427930][ C0] preempt_schedule_common+0x7f/0xd0 [ 486.433340][ C0] preempt_schedule_thunk+0x16/0x40 [ 486.438555][ C0] _raw_spin_unlock_irqrestore+0x76/0x80 [ 486.444186][ C0] __wake_up_common_lock+0x195/0x1f0 [ 486.449482][ C0] sock_def_readable+0x1eb/0x550 [ 486.454420][ C0] ? sock_def_readable+0xae/0x550 [ 486.459447][ C0] unix_dgram_sendmsg+0x1056/0x1bc0 [ 486.464671][ C0] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 486.470218][ C0] ? aa_sock_msg_perm+0x129/0x210 [ 486.475243][ C0] ? apparmor_socket_sendmsg+0x98/0x360 [ 486.480781][ C0] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 486.486317][ C0] sock_sendmsg_nosec+0x13a/0x180 [ 486.491422][ C0] __sys_sendto+0x408/0x5a0 [ 486.495928][ C0] ? bpf_lsm_capable+0x9/0x20 [ 486.500603][ C0] ? __pfx___sys_sendto+0x10/0x10 [ 486.505627][ C0] ? rcu_is_watching+0x16/0xb0 [ 486.510381][ C0] __x64_sys_sendto+0xde/0x100 [ 486.515133][ C0] do_syscall_64+0x166/0x520 [ 486.519712][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.525767][ C0] ? clear_bhb_loop+0x70/0xc0 [ 486.530436][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.536343][ C0] RIP: 0033:0x7f27a3106407 [ 486.540749][ C0] RSP: 002b:00007ffff8436fd0 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 486.549153][ C0] RAX: ffffffffffffffda RBX: 00007f27a2fb6c80 RCX: 00007f27a3106407 [ 486.557124][ C0] RDX: 000000000000005c RSI: 00007ffff8437110 RDI: 0000000000000003 [ 486.565101][ C0] RBP: 00007ffff8437540 R08: 0000000000000000 R09: 0000000000000000 [ 486.573070][ C0] R10: 0000000000004000 R11: 0000000000000202 R12: 00007ffff8437558 [ 486.581053][ C0] R13: 00007ffff8437110 R14: 0000000000000041 R15: 00007ffff8437110 [ 486.589028][ C0] [ 486.592042][ C0] task:kworker/0:3 state:R running task stack:20640 pid:2255 tgid:2255 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 486.605596][ C0] Workqueue: events_power_efficient gc_worker [ 486.611665][ C0] Call Trace: [ 486.614941][ C0] [ 486.617880][ C0] __schedule+0x17dd/0x5940 [ 486.622407][ C0] ? __pfx_wg_packet_encrypt_worker+0x10/0x10 [ 486.628487][ C0] ? __lock_acquire+0x747/0x2de0 [ 486.633430][ C0] ? __pfx___schedule+0x10/0x10 [ 486.638295][ C0] preempt_schedule_irq+0x4b/0x90 [ 486.643323][ C0] irqentry_exit+0x14f/0x910 [ 486.647908][ C0] ? trace_irq_disable+0x3b/0x140 [ 486.652932][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 486.658900][ C0] RIP: 0010:seqcount_lockdep_reader_access+0xed/0x100 [ 486.665655][ C0] Code: 00 75 11 e8 35 c0 b6 f7 4d 85 f6 75 16 e8 2b c0 b6 f7 eb 15 e8 24 c0 b6 f7 e8 ef 0f e5 01 4d 85 f6 74 ea e8 15 c0 b6 f7 fb 5b <41> 5e e9 7c 1c e8 01 cc 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 [ 486.685249][ C0] RSP: 0018:ffffc9000687f970 EFLAGS: 00000293 [ 486.691304][ C0] RAX: ffffffff8a1144db RBX: 0000000000000001 RCX: ffff88802c59be80 [ 486.699262][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 486.707219][ C0] RBP: ffffc9000687fad0 R08: ffffffff909bb37f R09: 1ffffffff213766f [ 486.715196][ C0] R10: dffffc0000000000 R11: fffffbfff2137670 R12: dffffc0000000000 [ 486.723154][ C0] R13: ffffffff818fc76a R14: 0000000000000200 R15: 00000000000035c7 [ 486.731114][ C0] ? process_scheduled_works+0x97a/0x1630 [ 486.736841][ C0] ? seqcount_lockdep_reader_access+0xeb/0x100 [ 486.742996][ C0] gc_worker+0x31b/0x1890 [ 486.747335][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 486.752365][ C0] ? gc_worker+0x274/0x1890 [ 486.756874][ C0] ? __pfx_gc_worker+0x10/0x10 [ 486.761629][ C0] ? rcu_is_watching+0x16/0xb0 [ 486.766386][ C0] ? process_scheduled_works+0x97a/0x1630 [ 486.772112][ C0] process_scheduled_works+0xc3d/0x1630 [ 486.777666][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 486.783640][ C0] ? assign_work+0x3cf/0x5d0 [ 486.788233][ C0] worker_thread+0xa47/0xfb0 [ 486.792823][ C0] ? __kthread_parkme+0x71/0x1f0 [ 486.797757][ C0] kthread+0x38b/0x480 [ 486.801821][ C0] ? __pfx_worker_thread+0x10/0x10 [ 486.806919][ C0] ? __pfx_kthread+0x10/0x10 [ 486.811499][ C0] ret_from_fork+0x514/0xb70 [ 486.816082][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 486.821185][ C0] ? __switch_to+0xc89/0x1420 [ 486.825854][ C0] ? __pfx_kthread+0x10/0x10 [ 486.830460][ C0] ret_from_fork_asm+0x1a/0x30 [ 486.835238][ C0] [ 486.838250][ C0] rcu: rcu_preempt kthread starved for 841 jiffies! g87257 f0x2 RCU_GP_WAIT_FQS(5) ->state=R ->cpu=0 [ 486.849094][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 486.859048][ C0] rcu: RCU grace-period kthread stack dump: [ 486.864916][ C0] task:rcu_preempt state:R running task stack:27496 pid:17 tgid:17 ppid:2 task_flags:0x208040 flags:0x00080000 [ 486.878397][ C0] Call Trace: [ 486.881664][ C0] [ 486.884600][ C0] __schedule+0x17dd/0x5940 [ 486.889106][ C0] ? __lock_acquire+0x747/0x2de0 [ 486.894042][ C0] ? do_raw_spin_unlock+0xf5/0x200 [ 486.899147][ C0] ? __pfx___schedule+0x10/0x10 [ 486.903988][ C0] ? lock_acquire+0x115/0x350 [ 486.908661][ C0] ? schedule+0x90/0x2b0 [ 486.912897][ C0] schedule+0x164/0x2b0 [ 486.917217][ C0] schedule_timeout+0x152/0x2c0 [ 486.922057][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 486.927417][ C0] ? __pfx_process_timeout+0x10/0x10 [ 486.932709][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 486.938513][ C0] ? prepare_to_swait_event+0x220/0x3e0 [ 486.944050][ C0] ? prepare_to_swait_event+0x35e/0x3e0 [ 486.949590][ C0] rcu_gp_fqs_loop+0x30c/0x1230 [ 486.954439][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 486.960597][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 486.965891][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 486.971085][ C0] rcu_gp_kthread+0x9c/0x340 [ 486.975672][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 486.980861][ C0] ? __kthread_parkme+0x71/0x1f0 [ 486.985789][ C0] ? __kthread_parkme+0x199/0x1f0 [ 486.990805][ C0] kthread+0x38b/0x480 [ 486.994863][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 487.000049][ C0] ? __pfx_kthread+0x10/0x10 [ 487.004631][ C0] ret_from_fork+0x514/0xb70 [ 487.009214][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 487.014317][ C0] ? __switch_to+0xc89/0x1420 [ 487.018984][ C0] ? __pfx_kthread+0x10/0x10 [ 487.023565][ C0] ret_from_fork_asm+0x1a/0x30 [ 487.028329][ C0] [ 487.031343][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 487.037723][ C0] CPU: 0 UID: 0 PID: 3227 Comm: kworker/R-bat_e Tainted: G L syzkaller #0 PREEMPT(full) [ 487.048994][ C0] Tainted: [L]=SOFTLOCKUP [ 487.053304][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 487.063352][ C0] Workqueue: bat_events batadv_tt_purge [ 487.068896][ C0] RIP: 0010:kasan_check_range+0x0/0x2c0 [ 487.074448][ C0] Code: fe 90 0f 0b 48 89 df 48 c7 c6 c1 ca 82 8e e8 07 0f f0 fe 90 0f 0b cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <0f> 1f 40 d6 55 41 57 41 56 41 55 41 54 53 b0 01 48 85 f6 0f 84 ae [ 487.094048][ C0] RSP: 0018:ffffc90000006e10 EFLAGS: 00000246 [ 487.100105][ C0] RAX: ffffffff89c308b6 RBX: 0000000000000000 RCX: ffffffff89c308ce [ 487.108068][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff909bb378 [ 487.116024][ C0] RBP: 0000000000000001 R08: 0000000000000100 R09: 1ffffffff213766f [ 487.123988][ C0] R10: dffffc0000000000 R11: fffffbfff2137670 R12: dffffc0000000000 [ 487.131945][ C0] R13: ffff88817a80c000 R14: 0000000000000000 R15: 0000000000000028 [ 487.139903][ C0] FS: 0000000000000000(0000) GS:ffff88812485b000(0000) knlGS:0000000000000000 [ 487.148823][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 487.155394][ C0] CR2: 0000555567a754e8 CR3: 0000000076b38000 CR4: 00000000003526f0 [ 487.163354][ C0] Call Trace: [ 487.166626][ C0] [ 487.169471][ C0] trace_netif_rx_exit+0x4e/0x1f0 [ 487.174492][ C0] __netif_rx+0x87/0xd0 [ 487.178655][ C0] loopback_xmit+0x43b/0x660 [ 487.183248][ C0] dev_hard_start_xmit+0x2cd/0x830 [ 487.188357][ C0] __dev_queue_xmit+0x14c0/0x3820 [ 487.193376][ C0] ? synproxy_pernet+0x23/0x240 [ 487.198222][ C0] ? __dev_queue_xmit+0x29b/0x3820 [ 487.203319][ C0] ? ipv4_synproxy_hook+0x246/0xd10 [ 487.208527][ C0] ? __lock_acquire+0x747/0x2de0 [ 487.213459][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 487.218852][ C0] ? __pfx_nf_confirm+0x10/0x10 [ 487.223702][ C0] ? lock_acquire+0x115/0x350 [ 487.228369][ C0] ? ip_output+0x29f/0x450 [ 487.232776][ C0] ? ip_finish_output2+0x972/0x10b0 [ 487.237967][ C0] ip_finish_output2+0xbda/0x10b0 [ 487.242987][ C0] ? ip_finish_output2+0x3de/0x10b0 [ 487.248179][ C0] ip_output+0x29f/0x450 [ 487.252414][ C0] ? ip_output+0x5a/0x450 [ 487.256732][ C0] synproxy_send_client_synack+0x89b/0xde0 [ 487.262536][ C0] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 487.268851][ C0] ? nft_tproxy_eval+0x3b8/0x1c80 [ 487.273865][ C0] ? synproxy_pernet+0x45/0x270 [ 487.278707][ C0] nft_synproxy_eval_v4+0x362/0x4e0 [ 487.283894][ C0] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 487.289600][ C0] ? nf_ip_checksum+0x13c/0x510 [ 487.294439][ C0] nft_synproxy_do_eval+0x335/0x550 [ 487.299628][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 487.305345][ C0] ? __ip_vs_conn_in_get+0xa6/0x10f0 [ 487.310623][ C0] ? __pfx___ip_vs_conn_in_get+0x10/0x10 [ 487.316251][ C0] nft_do_chain+0x48d/0x1b10 [ 487.320838][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 487.325853][ C0] ? __pfx_ip_vs_fill_iph_skb_off+0x10/0x10 [ 487.331745][ C0] nft_do_chain_inet+0x360/0x4b0 [ 487.336684][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 487.342133][ C0] ? nf_nat_ipv4_local_in+0x21f/0x720 [ 487.347501][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 487.352949][ C0] nf_hook_slow+0xc5/0x220 [ 487.357362][ C0] NF_HOOK+0x21f/0x3c0 [ 487.361427][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 487.367470][ C0] ? NF_HOOK+0x9e/0x3c0 [ 487.371614][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 487.376192][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 487.382159][ C0] ? ip_local_deliver+0x113/0x190 [ 487.387170][ C0] NF_HOOK+0x336/0x3c0 [ 487.391225][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 487.396560][ C0] ? NF_HOOK+0x9e/0x3c0 [ 487.400724][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 487.405308][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 487.410413][ C0] ? ip_rcv_core+0x88d/0xd50 [ 487.414999][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 487.419496][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 487.423991][ C0] process_backlog+0xa6b/0x18b0 [ 487.428853][ C0] ? process_backlog+0x3de/0x18b0 [ 487.433876][ C0] __napi_poll+0xaa/0x330 [ 487.438198][ C0] net_rx_action+0x61d/0xf50 [ 487.442787][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 487.447909][ C0] handle_softirqs+0x226/0x860 [ 487.452667][ C0] ? do_softirq+0x77/0xd0 [ 487.456988][ C0] ? batadv_tt_purge+0x4ae/0xa10 [ 487.461914][ C0] do_softirq+0x77/0xd0 [ 487.466059][ C0] [ 487.468979][ C0] [ 487.471901][ C0] __local_bh_enable_ip+0x100/0x140 [ 487.477086][ C0] batadv_tt_purge+0x4ae/0xa10 [ 487.481846][ C0] ? process_scheduled_works+0x97a/0x1630 [ 487.487557][ C0] process_scheduled_works+0xc3d/0x1630 [ 487.493108][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 487.499093][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 487.504113][ C0] ? assign_work+0x3af/0x5d0 [ 487.508693][ C0] rescuer_thread+0x7c5/0x10e0 [ 487.513461][ C0] ? rescuer_thread+0xb8/0x10e0 [ 487.518335][ C0] kthread+0x38b/0x480 [ 487.522411][ C0] ? __pfx_rescuer_thread+0x10/0x10 [ 487.527605][ C0] ? __pfx_kthread+0x10/0x10 [ 487.532193][ C0] ret_from_fork+0x514/0xb70 [ 487.536778][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 487.541886][ C0] ? __switch_to+0xc89/0x1420 [ 487.546563][ C0] ? __pfx_kthread+0x10/0x10 [ 487.551144][ C0] ret_from_fork_asm+0x1a/0x30 [ 487.555916][ C0]