last executing test programs: 8m56.714859044s ago: executing program 0 (id=720): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0xffff, 0x1}, {0xf, 0xffff}, {0xffe0, 0x9}}}, 0x24}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_open_procfs(0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) rseq(&(0x7f0000001280)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r0) 8m56.565322038s ago: executing program 0 (id=722): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) socket$nl_netfilter(0x10, 0x3, 0xc) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x8814) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x1, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f00000003c0)={'pcl818\x00', [0x140, 0x2, 0x3, 0xff, 0x2, 0x2, 0x7ffd, 0x6, 0x8, 0xf, 0x4, 0x10, 0xf8, 0x8, 0x4ce, 0x9e9b, 0x101, 0x401, 0x9, 0x8, 0x4, 0x8, 0xa, 0x9, 0xffd, 0x200000, 0xaf, 0x0, 0x10001fc, 0x0, 0x4]}) 8m55.209484649s ago: executing program 0 (id=724): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000002000)='./mysys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/module/ueagle_atm/parameters/altsetting\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)='0,', 0x2) 8m54.969334955s ago: executing program 0 (id=725): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x121c060, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x3f00, 0x40, 0x800, 0x8, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x7, 0x2f, 0x0, @empty, @multicast2}}}}) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000005380)={&(0x7f0000000340)=@in={0x2, 0x0, @private}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000004380)=""/4096, 0x1000}, 0x40000000) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000001580)={0x0, @in6={{0xa, 0x4e22, 0x3, @mcast2, 0x80000000}}, 0x4, 0x4, 0xf, 0xe, 0x1}, &(0x7f0000001640)=0x98) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000002700090026bd7000fddbdf25080000000b00010061"], 0x20}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r4, 0xc048aec8, &(0x7f00000000c0)={0x6, 0xc, 0x1ff, 0x4, 0x4}) socket$nl_generic(0x10, 0x3, 0x10) read$FUSE(r1, &(0x7f0000002340)={0x2020}, 0x208b) 8m53.923020019s ago: executing program 0 (id=729): mkdir(&(0x7f00000000c0)='my_configfs\x00', 0x2b) mount(0x0, &(0x7f0000000100)='my_configfs\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdir(0x0, 0x1ff) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) chown(&(0x7f0000000000)='my_configfs/usb_gadget/g1/functions/mass_storage.usb0\x00', 0x0, 0x0) rmdir(0x0) 8m53.205646926s ago: executing program 0 (id=734): socket$nl_rdma(0x10, 0x3, 0x14) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/connector\x00') setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x2, 0x1, 0x2, 0xc, 0xbc, 0x101}, 0x20) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0xe) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@snprintf={{0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x8, 0xfe00}, {0x7, 0x0, 0x8}, {}, {0x5}, {0x7, 0x0, 0x0, 0x0}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x1a}}]}, &(0x7f0000000ac0)='syzkaller\x00', 0xf, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r1, 0x8b32, &(0x7f0000000040)) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r4 = io_uring_setup(0x2e08, &(0x7f00000001c0)={0x0, 0xfffffffc, 0x0, 0xffffffff, 0x1}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r5, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000100)={0x66, 0xfe, 0x4, 0x5, 0xa8, 0x20, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9}, 0xe) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r5, 0x84, 0x21, &(0x7f0000000000)=0x6, 0x4) shutdown(r5, 0x1) recvmmsg(r5, &(0x7f0000005000)=[{{0x0, 0x2a, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x13}, 0x3}], 0x4000169, 0x60, 0x0) 8m37.60552928s ago: executing program 32 (id=734): socket$nl_rdma(0x10, 0x3, 0x14) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/connector\x00') setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x2, 0x1, 0x2, 0xc, 0xbc, 0x101}, 0x20) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0xe) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@snprintf={{0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x8, 0xfe00}, {0x7, 0x0, 0x8}, {}, {0x5}, {0x7, 0x0, 0x0, 0x0}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x1a}}]}, &(0x7f0000000ac0)='syzkaller\x00', 0xf, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r1, 0x8b32, &(0x7f0000000040)) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r4 = io_uring_setup(0x2e08, &(0x7f00000001c0)={0x0, 0xfffffffc, 0x0, 0xffffffff, 0x1}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r5, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000100)={0x66, 0xfe, 0x4, 0x5, 0xa8, 0x20, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9}, 0xe) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r5, 0x84, 0x21, &(0x7f0000000000)=0x6, 0x4) shutdown(r5, 0x1) recvmmsg(r5, &(0x7f0000005000)=[{{0x0, 0x2a, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x13}, 0x3}], 0x4000169, 0x60, 0x0) 1m45.325630603s ago: executing program 1 (id=2066): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x1007, 0x4) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x48103, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) getpid() r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000d00)='/sys/power/mem_sleep', 0x122102, 0x0) syz_open_procfs(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='.\x00', &(0x7f0000000180), 0x2000090, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRES16, @ANYRES8=0x0, @ANYRESOCT=r3, @ANYBLOB]) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getegid() ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r1, 0x8008f511, &(0x7f0000000100)) mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff) writev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000080)="30bbe6d8b7191e2c76d77785fec0a0efd2b53ea526b37b14fa9220db03d1fac0b73b0f0a21ce5280accc8896d93a880e8721fcb3230d3a1d1b35560762e8269b1bb2266c3feaf9c5b59aeae41b5fde2f28d891ffda7e94646233f4e80b9ff2507f07db3ee231cecc4f81c70d0c5a37b16e6b254ad7bd22e49ddb83263ace4aabe6b0937a16821b6895fc9850f484d076854903d422", 0x95}], 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r4, &(0x7f00000000c0)='1', 0x1) openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) connect$inet6(r0, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x5}, 0x1c) 1m42.728119994s ago: executing program 1 (id=2072): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) poll(0x0, 0x0, 0x400) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) write$tun(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40009d0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x50, 0x10, 0x403, 0x70bd27, 0x3, {0x0, 0x0, 0x0, 0x0, 0x90446}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_INGRESS_QOS={0x4}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000600}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x8008, 0x4408}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1m41.653684029s ago: executing program 1 (id=2076): socket(0x40000000015, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYRES32=r0, @ANYBLOB="101000000000000008000d0005000000e4031680a40001800c0007"], 0x40c}}, 0x0) 1m41.365740706s ago: executing program 1 (id=2077): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r3, 0x0, 0x0) 1m41.064417303s ago: executing program 1 (id=2078): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x1a5042, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0xa8011, r0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bf"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r5 = dup(r1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) splice(0xffffffffffffffff, 0x0, r6, 0x0, 0x88000cc, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x100004) write$eventfd(0xffffffffffffffff, &(0x7f0000000240), 0xffffff14) write$UHID_INPUT(r5, &(0x7f0000001040)={0xf, {"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", 0xf8d}}, 0x96d) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, &(0x7f0000000040)=0xe6) socket(0x1a, 0x80000, 0x3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1m39.759929033s ago: executing program 1 (id=2082): r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) setsockopt$sock_int(r0, 0x1, 0x2b, &(0x7f0000000200)=0x1, 0x4) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="0100000042000000060000000800000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r3}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r4}, 0x38) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x4001, 0x3, 0x4e4, 0x0, 0x0, 0x148, 0x0, 0x148, 0x450, 0x240, 0x240, 0x450, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x190, 0x1b0, 0x0, {}, [@common=@unspec=@mark={{0x2c}, {0x400, 0x4}}, @common=@inet=@recent0={{0xf4}, {0x20000000, 0x6, 0x1, 0x1, 'syz1\x00', 0xc}}]}, @unspec=@TRACE={0x20}}, {{@ip={@remote, @multicast1, 0xff000000, 0xff000000, 'tunl0\x00', 'pimreg1\x00', {}, {0xff}, 0x84, 0x0, 0x60}, 0x0, 0x258, 0x2a0, 0x0, {}, [@common=@inet=@recent0={{0xf4}, {0xa, 0x2, 0x1, 0x1, 'syz0\x00'}}, @common=@inet=@recent0={{0xf4}, {0x4, 0x3, 0x1, 0x1, 'syz1\x00', 0x1}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0xbb02, 0x2b, 0x10, 'syz1\x00', {0x6182}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x540) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) bpf$ITER_CREATE(0xb, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r7, 0x10, &(0x7f0000000040)={0x3}) prlimit64(r7, 0x0, &(0x7f0000000300)={0x7}, 0x0) keyctl$reject(0x13, 0x0, 0xd59, 0x1, 0x0) 1m24.681853825s ago: executing program 33 (id=2082): r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) setsockopt$sock_int(r0, 0x1, 0x2b, &(0x7f0000000200)=0x1, 0x4) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="0100000042000000060000000800000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r3}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r4}, 0x38) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x4001, 0x3, 0x4e4, 0x0, 0x0, 0x148, 0x0, 0x148, 0x450, 0x240, 0x240, 0x450, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x190, 0x1b0, 0x0, {}, [@common=@unspec=@mark={{0x2c}, {0x400, 0x4}}, @common=@inet=@recent0={{0xf4}, {0x20000000, 0x6, 0x1, 0x1, 'syz1\x00', 0xc}}]}, @unspec=@TRACE={0x20}}, {{@ip={@remote, @multicast1, 0xff000000, 0xff000000, 'tunl0\x00', 'pimreg1\x00', {}, {0xff}, 0x84, 0x0, 0x60}, 0x0, 0x258, 0x2a0, 0x0, {}, [@common=@inet=@recent0={{0xf4}, {0xa, 0x2, 0x1, 0x1, 'syz0\x00'}}, @common=@inet=@recent0={{0xf4}, {0x4, 0x3, 0x1, 0x1, 'syz1\x00', 0x1}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0xbb02, 0x2b, 0x10, 'syz1\x00', {0x6182}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x540) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) bpf$ITER_CREATE(0xb, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r7, 0x10, &(0x7f0000000040)={0x3}) prlimit64(r7, 0x0, &(0x7f0000000300)={0x7}, 0x0) keyctl$reject(0x13, 0x0, 0xd59, 0x1, 0x0) 15.568314187s ago: executing program 3 (id=2245): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000780)={'pim6reg0\x00', 0x400}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) 15.141750797s ago: executing program 3 (id=2246): r0 = syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_MODULATOR(r0, 0x40445637, &(0x7f0000000180)={0x9, "db283a8c938414baa1f5a31237f99a8993d951aded9a4bd8ca28b17e3d5a1561", 0x8, 0x7, 0x8, 0x10, 0x5}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100000000090003007379"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="3800000055002f0302000000000000000700", @ANYRES32=r3, @ANYBLOB="200001"], 0x38}}, 0x40840) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) sendmsg$NFULNL_MSG_CONFIG(r4, 0x0, 0x4080) r5 = syz_open_dev$video4linux(&(0x7f00000000c0), 0x100000010, 0x42003) ioctl$VIDIOC_SUBDEV_S_FMT(r5, 0xc0305602, &(0x7f00000004c0)={0x1, 0x0, {0x34a, 0x0, 0x2004, 0x8, 0x0, 0x7}}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x4d, 0x0, &(0x7f0000cab000)) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002f40), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r8, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r8, 0x4008af03, &(0x7f0000002280)={0x2, 0x0, [{0x223000, 0x36, &(0x7f0000002180)=""/54}, {0xa000, 0xb9, &(0x7f00000021c0)=""/185}]}) ioctl$VHOST_SET_FEATURES(r8, 0x4008af00, &(0x7f0000000080)=0x200000000) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20,serpent)\x00'}, 0x4e) r10 = syz_open_procfs(0x0, &(0x7f0000000340)='fd\x00') getdents64(r10, &(0x7f0000001f00)=""/4111, 0x100f) r11 = dup2(r8, r8) ioctl$VHOST_VSOCK_SET_RUNNING(r11, 0x4004af61, &(0x7f0000000040)=0x1) ioctl$VHOST_VSOCK_SET_RUNNING(r11, 0x4004af61, &(0x7f0000000000)=0x5) close_range(r8, 0xffffffffffffffff, 0x0) ioctl$KVM_TDX_INIT_VCPU(r4, 0xc008aeba, &(0x7f0000000180)={0x2, 0x0, 0x6}) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3900000000080005400095dd2230d73326fc797a310000000008000a40fffffffc140000001100010000000800000000000100000a"], 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) 13.142929033s ago: executing program 3 (id=2248): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./trace\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000001c0)='bin', 0x3) close(0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./trace/trace\x00', 0x0, 0x0) read(r1, &(0x7f0000000500), 0x1000) 12.973876107s ago: executing program 3 (id=2249): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x28, 0x3, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c050}, 0x48d2) 12.709648243s ago: executing program 3 (id=2252): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000fd"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000000000000000024000380040001001c0003800c000180080001"], 0x50}}, 0x0) 12.445684439s ago: executing program 3 (id=2255): r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) setsockopt$sock_int(r0, 0x1, 0x2b, 0x0, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="0100000042000000060000000800000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r3}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r4}, 0x38) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x4001, 0x3, 0x4e4, 0x0, 0x0, 0x148, 0x0, 0x148, 0x450, 0x240, 0x240, 0x450, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x190, 0x1b0, 0x0, {}, [@common=@unspec=@mark={{0x2c}, {0x400, 0x4}}, @common=@inet=@recent0={{0xf4}, {0x20000000, 0x6, 0x1, 0x1, 'syz1\x00', 0xc}}]}, @unspec=@TRACE={0x20}}, {{@ip={@remote, @multicast1, 0xff000000, 0xff000000, 'tunl0\x00', 'pimreg1\x00', {}, {0xff}, 0x84, 0x0, 0x60}, 0x0, 0x258, 0x2a0, 0x0, {}, [@common=@inet=@recent0={{0xf4}, {0xa, 0x2, 0x1, 0x1, 'syz0\x00'}}, @common=@inet=@recent0={{0xf4}, {0x4, 0x3, 0x1, 0x1, 'syz1\x00', 0x1}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0xbb02, 0x2b, 0x10, 'syz1\x00', {0x6182}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x540) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) bpf$ITER_CREATE(0xb, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r7, 0x10, &(0x7f0000000040)={0x3}) prlimit64(r7, 0x0, &(0x7f0000000300)={0x7}, 0x0) keyctl$reject(0x13, 0x0, 0xd59, 0x1, 0x0) 10.028949176s ago: executing program 2 (id=2259): r0 = syz_open_dev$sndpcmc(&(0x7f0000000a00), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc25c4110, &(0x7f0000000100)={0x6, [[0x1, 0x0, 0x0, 0xfffffffe, 0x1, 0x7, 0x400001], [0x0, 0x2, 0x0, 0xfffff7fd, 0x0, 0xde75], [0x0, 0x0, 0x1, 0x0, 0x4d, 0x2, 0x3, 0x24]], '\x00', [{0x5, 0x1000, 0x0, 0x1, 0x1, 0x1}, {0x1, 0x1, 0x0, 0x1}, {0x0, 0x200}, {0x10000001, 0x10000000}, {0x800, 0x2000000}, {0x36, 0x3}, {0x80000001, 0x81}, {0x0, 0x1000}, {0x4df, 0x1}, {0x3fc, 0x1}, {0x80000, 0x73d}, {0x7, 0xfffffffd}], '\x00', 0x8, 0x0, 0x0, 0x1000000}) r1 = syz_usb_connect(0x3, 0x0, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) bind$packet(r2, &(0x7f0000000580)={0x11, 0x1, 0x0, 0x1, 0x9, 0x6, @random="f2be6749b289"}, 0x14) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = syz_open_dev$video4linux(&(0x7f00000007c0), 0x80000005, 0x20040) ioctl$VIDIOC_SUBDEV_S_FMT(r6, 0xc0585605, &(0x7f0000000280)={0x1, 0x0, {0xa, 0x2000, 0x300e, 0x0, 0xa, 0x4, 0x1, 0x1993012db91ab52e}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000003dc0)) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$sock_int(r9, 0x1, 0x10, &(0x7f00000002c0)=0x8001, 0x4) splice(r7, 0x0, r9, 0x0, 0xd9d7, 0x5) write$FUSE_INIT(r8, &(0x7f0000000340)={0x50, 0x0, 0x0, {0x7, 0x28, 0x1, 0xc002e38, 0x7ff, 0x80, 0x10000, 0xa79, 0x0, 0x0, 0x1}}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001580)=ANY=[@ANYBLOB="600000000206030000000000b8791fa80000000014000780080012400000000005001500010000000500010006000000050005000200000005000400000000000900020073797a310000000012000300686173683a6e65742c706f7274"], 0x60}}, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4620}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x34040017}, 0x80) syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) r12 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000009c0), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a00)=ANY=[@ANYBLOB="5c0005", @ANYRES16=r12, @ANYBLOB="010027bd7000ffdbdf25020000000500010000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x8405d22596f37403}, 0x4054) 9.733831283s ago: executing program 4 (id=2263): fsopen(&(0x7f0000000240)='ubifs\x00', 0x0) 9.610733515s ago: executing program 4 (id=2264): socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x18b040, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) accept4(r0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x80800) recvmsg(r2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r5 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x6) ftruncate(r5, 0x2000000) fcntl$addseals(r5, 0x409, 0x7) ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f0000000000)={r5, 0x1f, 0x0, 0x1000000}) 8.675580457s ago: executing program 2 (id=2266): openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r0, &(0x7f0000000300)='p:test/event1 ./file0:0', 0x17) 8.433179203s ago: executing program 4 (id=2267): r0 = syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_MODULATOR(r0, 0x40445637, &(0x7f0000000180)={0x9, "db283a8c938414baa1f5a31237f99a8993d951aded9a4bd8ca28b17e3d5a1561", 0x8, 0x7, 0x8, 0x10, 0x5}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100000000090003007379"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="3800000055002f0302000000000000000700", @ANYRES32=r3, @ANYBLOB="200001"], 0x38}}, 0x40840) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x3c, 0x1, 0x4, 0x3, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x3}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x5}, @NFULA_CFG_CMD={0x5, 0x1, 0x2}, @NFULA_CFG_CMD={0x5, 0x1, 0x4}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4080) r5 = syz_open_dev$video4linux(&(0x7f00000000c0), 0x100000010, 0x42003) ioctl$VIDIOC_SUBDEV_S_FMT(r5, 0xc0305602, &(0x7f00000004c0)={0x1, 0x0, {0x34a, 0x0, 0x2004, 0x8, 0x0, 0x7}}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x4d, 0x0, &(0x7f0000cab000)) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002f40), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r8, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r8, 0x4008af03, &(0x7f0000002280)={0x2, 0x0, [{0x223000, 0x36, &(0x7f0000002180)=""/54}, {0xa000, 0xb9, &(0x7f00000021c0)=""/185}]}) ioctl$VHOST_SET_FEATURES(r8, 0x4008af00, &(0x7f0000000080)=0x200000000) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20,serpent)\x00'}, 0x4e) r10 = syz_open_procfs(0x0, &(0x7f0000000340)='fd\x00') getdents64(r10, &(0x7f0000001f00)=""/4111, 0x100f) r11 = dup2(r8, r8) ioctl$VHOST_VSOCK_SET_RUNNING(r11, 0x4004af61, &(0x7f0000000040)=0x1) ioctl$VHOST_VSOCK_SET_RUNNING(r11, 0x4004af61, &(0x7f0000000000)=0x5) close_range(r8, 0xffffffffffffffff, 0x0) ioctl$KVM_TDX_INIT_VCPU(r4, 0xc008aeba, &(0x7f0000000180)={0x2, 0x0, 0x6}) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3900000000080005400095dd2230d73326fc797a310000000008000a40fffffffc140000001100010000000800000000000100000a"], 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) 6.505378898s ago: executing program 2 (id=2269): pidfd_send_signal(0xffffffffffffffff, 0x30, &(0x7f0000000140)={0x11, 0x4, 0x6}, 0x0) syz_open_dev$admmidi(&(0x7f0000000000), 0x80, 0x130c42) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r1, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x12, 0x8c, 0x1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r3, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001080)={0x20, 0x0, 0x7, 0x201, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000019}, 0x8080) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}], 0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x100000, 0x1, &(0x7f0000006680)) r4 = socket(0x1d, 0x2, 0x6) bind$can_j1939(r4, &(0x7f0000000380)={0x1d, 0x0, 0xfffffffffffffffd, {0x0, 0x1, 0x3}, 0xfe}, 0x18) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(0xffffffffffffffff, 0x40786e88, &(0x7f0000000b80)={{&(0x7f0000000640)=[{0x627a, 0x5, 0x7fffffff, {0xf99, 0x81}, 0x92a, 0x9, 0x9}, {0x8000000000000001, 0x9, 0x7, {0x10001, 0xba1}, 0xb, 0x3ff, 0x5}, {0x6, 0x6, 0x8, {0xa, 0x5}, 0x1, 0x87, 0x101}, {0x77f8, 0x3, 0x80000000, {0x94, 0x4}, 0x370, 0x8, 0x100}, {0x8c1f, 0xfffffffffffffffe, 0x3, {0x7}, 0x44, 0x8, 0x9}], 0x5, 0x40, 0xfb, 0x6}, {&(0x7f00000007c0)=[{0x1cab, 0x3}, {0xd2f0, 0x3afb}], 0x2, 0x10, 0xe, 0xffffffff}, {&(0x7f0000000880)=[0x800, 0xfffffffffffffff7, 0xff, 0x9, 0x7fffffff, 0xe, 0x5, 0xfffffffffffffff9], 0x8, 0x8, 0x4, 0x4}, {0x0, 0x0, 0x28, 0xf}, {0x0, 0x0, 0x8, 0x7, 0x5927}}) r5 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) listen(r5, 0x9) r6 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r6, &(0x7f00000000c0)="ab", 0xfffd, 0xc1, &(0x7f0000000280)={0x2, 0x4e22, @loopback}, 0x10) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f00000001c0)={{0x3, 0x200, 0x85c2, 0x1, 0x0, 0x4}, 0x348, [0x1, 0x84, 0x1, 0x9, 0x3, 0x9, 0xff, 0x7, 0x7, 0x0, 0x7, 0x5, 0x9c, 0x3, 0x6, 0xb9, 0x4, 0x6, 0x6, 0x7, 0x8, 0x8, 0x9, 0x1, 0x4c1b, 0x3, 0x7, 0x9, 0x4, 0x8295, 0x80000001, 0xb5, 0x8, 0x7, 0x8, 0x6, 0x7fffffff, 0x9, 0x1, 0x2, 0x4, 0x8, 0x2, 0x5, 0x81, 0xcc88, 0x2a6f, 0x10000, 0x6a, 0x0, 0x17, 0x800, 0xfc, 0x8, 0x2, 0x400, 0x0, 0xb22, 0x6, 0xc9a, 0xfff, 0x401, 0x8, 0x9c7d, 0x5, 0x0, 0x6, 0x7fff, 0x1000000, 0x3, 0xffff8382, 0x7fffffff, 0x1ff, 0x6, 0x9, 0x8, 0x0, 0xfffffffa, 0x8, 0x8c, 0x7, 0x400, 0x2, 0x2, 0x10, 0x6, 0x8000, 0xd3, 0x7f, 0x16cf, 0x1, 0x8, 0x2, 0xd7b, 0x9, 0x7fff, 0xffffff5c, 0x1, 0x666, 0x0, 0x8, 0x7, 0x3, 0x3, 0x3, 0x1, 0x4, 0x368, 0x8, 0x3, 0x580, 0x2, 0x6, 0x10, 0x70955bc4, 0x1, 0x2, 0xfffffffb, 0x2, 0x2, 0x3, 0xfffff38f, 0x2, 0xa000000, 0xeb, 0x5b2, 0x4, 0x960, 0x6, 0x79, 0x3, 0x30, 0x3, 0x7, 0x1, 0x7fff, 0xf2, 0x5, 0x7, 0xff, 0x4, 0x3, 0x12e4, 0x3, 0x0, 0x101, 0x200, 0x7, 0x40, 0x0, 0x1, 0x3, 0x2, 0xffffff00, 0x702, 0x7, 0x800, 0x81, 0xfffffff7, 0x7, 0x1, 0xd, 0x40, 0x10000, 0x3, 0xffffffff, 0x23db, 0x6, 0x0, 0x5, 0x7, 0xffffffff, 0x4, 0x7, 0x6, 0x2, 0x200040, 0xb7, 0x6, 0x638, 0x0, 0x800, 0x6, 0x6, 0x0, 0x8, 0x7, 0x2, 0x8, 0x2, 0xfffffffb, 0x2, 0x80, 0xffff7fff, 0x4, 0x200, 0x7f, 0x1, 0x5, 0x9, 0x1, 0xfffffffa, 0xc, 0x50c2, 0xc1ed, 0x401, 0x3, 0x7, 0x101, 0x800, 0x5, 0x5, 0x8, 0x1, 0x1, 0xfffffff8, 0xe9, 0x1, 0x7f, 0x7ff, 0x0, 0x7, 0xac, 0x80000000, 0x81, 0x80000001, 0x2, 0x80, 0x3ff, 0xa639, 0x0, 0x53647e6f, 0x2, 0xd792, 0x14b, 0x4, 0x3, 0xb36, 0xa, 0x1, 0x4, 0x94, 0x5f, 0x1, 0x8, 0xd8, 0x7fff, 0xf, 0x400, 0x7f, 0x80000001, 0xd08, 0x2, 0x1, 0x6, 0x9, 0x7d9, 0x1, 0x3, 0x3, 0x8, 0x6, 0x400, 0x86, 0x2, 0x1000, 0xbdf6, 0x41bf, 0xc, 0x2487005d, 0x2, 0x1, 0xaa1, 0x6, 0x80000001, 0x9, 0xe, 0x2, 0x0, 0x4, 0x401, 0x5, 0x87a0, 0xffffffff, 0x5, 0x3, 0xf, 0x7fffffff, 0x0, 0x8d, 0xe, 0x3, 0xb6, 0x5, 0x9, 0x100, 0xfff, 0x10, 0x1, 0x6, 0xb7, 0x7, 0xfffffffa, 0x4, 0x5, 0x81, 0x6, 0x5, 0xdcdf, 0x7ff, 0x9, 0xffffffe3, 0x1ff, 0x3, 0xf1c, 0x8021, 0xffffffff, 0x70, 0x10000, 0x7, 0x4, 0x1, 0x0, 0x4, 0x7aed, 0x4, 0x8, 0xe, 0xffffffc0, 0x8b7, 0x5, 0x5, 0x200, 0x40, 0x3ff, 0x4, 0x0, 0xa, 0xc, 0x7, 0xe324, 0xf, 0x7, 0x97a, 0x7fff, 0xffffffff, 0x8, 0x7, 0x40000000, 0x7, 0x6, 0x7, 0x6f007526, 0xa, 0x80000000, 0x0, 0x200, 0xaeb, 0x315c, 0x9, 0x1000, 0xd, 0x5, 0x0, 0xf0f, 0x6, 0x20, 0x2, 0x9, 0x2, 0x9, 0x4, 0x6, 0xb37, 0x8, 0x5, 0x8, 0xa6b7, 0x10001, 0x2, 0x1, 0xf, 0x8, 0x8, 0x3ff, 0x1, 0x4, 0xbe, 0x1, 0x10001, 0x7fa, 0xe7ad, 0x4, 0x2, 0x6, 0x81, 0x10000, 0x3, 0xbd7, 0x71e5119d, 0x62, 0xffd, 0x5, 0x6, 0x4, 0xc, 0x3, 0x7, 0x400, 0x4, 0x400277e, 0xe1, 0x3, 0x4, 0x3, 0x4, 0x6, 0xbf, 0x7, 0x6, 0x8, 0x5, 0x3ff, 0x9ad9, 0x8, 0x1, 0x0, 0x3, 0x400, 0x2, 0x9, 0x6, 0x40, 0x1000, 0x82, 0x4, 0x1000, 0x8, 0x3d, 0x2, 0xe, 0x4, 0x3, 0x1, 0x4, 0x8, 0x10, 0x6, 0x9, 0xffffffff, 0x10, 0x0, 0x1, 0x9225, 0x3be, 0xd, 0x401, 0x81, 0x13, 0x5, 0x3b1, 0x1, 0x9f18, 0x2, 0x8f86, 0x417db73f, 0x7, 0x1, 0x7, 0x5, 0x3, 0x6, 0x7, 0x0, 0xd, 0x0, 0x7, 0x7, 0x2, 0x8, 0x5, 0x0, 0xab, 0x5, 0x94, 0xb3ab, 0x5ae, 0x2, 0x40, 0x5, 0x0, 0x8001, 0x8, 0x800, 0xb, 0xa4, 0x50, 0x8, 0x99, 0x10, 0x5, 0x100, 0xfffff800, 0x5, 0xca, 0x3, 0x4, 0x6, 0x7ff, 0x6e15d2ec, 0x7, 0x5, 0x8, 0x7ba, 0x21c0, 0xe64, 0xc, 0x7, 0x6d4, 0x5, 0x3, 0x7fff, 0x121, 0x9, 0xe6d8, 0x1000, 0x1ff, 0x42db5dac, 0xffff, 0x6, 0xfffffff8, 0x3ff, 0xfcf, 0x1000, 0x7, 0x2, 0x2, 0x6, 0x7, 0x2, 0x7, 0x80000001, 0x7, 0x8, 0x7, 0xfffff000, 0xfffffffe, 0x5, 0x5, 0x7, 0x80000001, 0x4, 0x2, 0x53f, 0x8, 0x6, 0x0, 0xffff7ff8, 0x6, 0x8, 0x9, 0x8, 0x6d, 0x48, 0x8001, 0x1, 0x1, 0x2e7a, 0x8, 0x4, 0x10000, 0x5, 0x1ff, 0x1, 0x8, 0xfffffffd, 0xc217, 0x6, 0x59a, 0x2, 0x3, 0xba7a, 0x6d9c7f55, 0x4, 0x9, 0x1000, 0x3, 0x10001, 0x2, 0x2, 0x7, 0x6, 0x2, 0x1, 0x27a, 0x9, 0x2, 0xde26, 0x99, 0xfffffffe, 0x5, 0x1, 0xdba4b27, 0x6, 0x100, 0x0, 0x9, 0x7, 0x1, 0x7ff, 0x0, 0x2, 0xffff9369, 0x4, 0xff, 0x6, 0xed1, 0x6, 0x0, 0x3, 0x80000001, 0xe, 0x9, 0x1, 0xffff, 0x6, 0x9, 0x4, 0xef3, 0x1, 0xfffffffb, 0x7, 0x40, 0x6, 0x4, 0x9, 0x7f, 0x5, 0x1, 0x3, 0x2, 0xc15e, 0x6, 0x0, 0x6, 0x8, 0xffffffff, 0x8, 0x401, 0x0, 0x10, 0x3, 0x2, 0x4, 0x50d, 0x3, 0x4b, 0x7, 0x0, 0x2, 0x75, 0x80, 0x1, 0xdb, 0x401, 0x5, 0x1, 0x3, 0x6, 0xbf0d, 0x18, 0x1, 0x5, 0x95, 0x7fff, 0xe7, 0xa, 0x4, 0x0, 0xffffff16, 0x10, 0xae25, 0x908, 0x78e, 0x6, 0x1, 0xb2b7, 0xc, 0x7, 0x0, 0x5, 0x9, 0x8, 0x73, 0x9, 0xfffffffe, 0x5df, 0x1, 0x7, 0x81, 0xffffffaa, 0x3, 0x6, 0xd, 0xffffc4e6, 0xffff0001, 0x0, 0x5, 0x10001, 0x2, 0x3, 0x0, 0x6, 0x4, 0x3, 0x8, 0x3, 0x8, 0x5, 0x3, 0xc3f, 0x0, 0x2, 0x6, 0x6, 0xaed, 0x4, 0xed4, 0x7, 0x7, 0x8, 0xff, 0x8001, 0x5, 0x9, 0x4, 0xc2, 0x80000000, 0x80000000, 0x4, 0x8, 0xab84, 0xb4, 0xfffffc00, 0x908b, 0x8, 0xc9, 0xfffffffe, 0x1, 0x3, 0x8, 0xfffffffb, 0x0, 0xf8, 0xfffffff0, 0x637, 0x6, 0x4, 0xa, 0x80, 0xfffffff9, 0xfffffb6f, 0x0, 0x120e, 0x7, 0x0, 0x6, 0x2, 0x1000, 0xa, 0x6, 0x2, 0xd, 0x3ff, 0x5e18, 0xf, 0x9ebe, 0x7, 0x2, 0x1, 0x7, 0x7, 0x9e, 0x8, 0xedd3, 0x9, 0x1, 0xffffffff, 0x5, 0x1ff, 0x8, 0x1, 0x5, 0x2, 0x40, 0xe, 0x4, 0xc, 0xc65, 0x40, 0x7, 0xbb7d, 0x10, 0x2, 0x1ff, 0x8, 0x6, 0x80, 0x2, 0xf, 0x7, 0x80000000, 0x6e0, 0x1, 0x5, 0xd1, 0x9, 0x8, 0xfffffe00, 0x0, 0x1, 0x4, 0xe449, 0x4, 0x40, 0x10, 0x1000, 0x0, 0xca, 0xffff, 0x10001, 0xfffff891, 0x2, 0xfe, 0x200, 0xffffff81, 0xfffffff8, 0x4, 0x101, 0x68f0, 0xbfb, 0xdfe2, 0x0, 0x4, 0x9e74, 0x8, 0x7, 0x3ff, 0x80, 0xde7, 0x5, 0x51, 0x0, 0xb, 0x3, 0xad, 0x8, 0x2, 0x1, 0x8000, 0x4, 0x7, 0x8, 0x4, 0x10, 0x80000000, 0x6, 0x1400000, 0xf7, 0x8, 0x81, 0x4, 0x6790, 0x9, 0xfa6, 0x400, 0x7f, 0x3ff, 0x4, 0x2, 0x9, 0x6, 0x9107, 0x1, 0xcac, 0x40, 0x7, 0xc, 0x1, 0x5, 0x7, 0xb923, 0x2, 0xffff3818, 0x3, 0x1, 0x5, 0xe39, 0x4, 0x6, 0x7ff, 0xfff, 0x5, 0x5, 0x1, 0x101, 0xfffffff9, 0x3, 0x1, 0x400, 0xe59, 0x6, 0x8, 0x3ff, 0x6, 0x3ff, 0x9, 0x2, 0x6, 0x12dd, 0x0, 0x10, 0x6, 0x40, 0x0, 0xffffff80, 0x3, 0x0, 0x1, 0x7, 0x997, 0x7, 0x7fffffff, 0x81, 0x1, 0xe, 0x7e, 0x9, 0x3, 0x5, 0x7c, 0x4, 0x9, 0x3, 0x0, 0x1ff, 0x4, 0x926a, 0x9, 0x6, 0xea, 0x9, 0x9, 0xc0000, 0xf4d, 0x80000001, 0x1, 0x2, 0x1, 0x3, 0x7fff, 0x3, 0x1, 0x5851, 0x9fc, 0x0, 0x6, 0xcf4, 0x6, 0x1, 0xffb8, 0x0, 0x10001, 0x7, 0x8, 0x7b, 0x6, 0x89, 0xfffc0000, 0x9, 0x1, 0x4, 0xb, 0x9, 0x3, 0x5, 0xc2, 0x5, 0x2, 0x9, 0x3, 0x2c33, 0x5, 0x4, 0x0, 0x5, 0x9, 0x1, 0xa, 0x819, 0x5, 0x4, 0xeaa8, 0xb, 0x5, 0x8000, 0xffff, 0x8, 0x7fff, 0xe, 0x3, 0x6, 0xffffffff, 0x7, 0xba, 0x1, 0x2, 0xc7c, 0x8, 0xdc, 0x3, 0x5, 0x9, 0x1]}) r7 = openat$vicodec0(0xffffff9c, &(0x7f0000000440), 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) ioctl$VIDIOC_G_EXT_CTRLS(r7, 0xc0185648, &(0x7f0000000080)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98f909, 0x8002, '\x00', @p_u16=&(0x7f00000010c0)=0xa5b}}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000"], 0x66) 6.398335811s ago: executing program 4 (id=2270): r0 = io_uring_setup(0x2a8d, &(0x7f0000000240)={0x0, 0x86a1, 0x2, 0x3, 0x1fb}) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r3, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000500)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010025bd7000fcdbdf250900000008000300", @ANYRES32=r4, @ANYBLOB='\b\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x20040000) sendmsg$NFT_BATCH(r2, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000094}, 0x80) r5 = syz_open_dev$dvb_demux(&(0x7f0000000100), 0xcd79, 0x141000) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r6 = userfaultfd(0x801) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r7, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_BASE(r7, 0x4008af04, &(0x7f0000000740)=0xffffffffffffffff) ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000480)=""/53, 0x0, 0xd000}) ioctl$VHOST_SET_MEM_TABLE(r7, 0x4008af03, &(0x7f0000000300)={0x1, 0x0, [{0x58000, 0x0, 0x0}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r7, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$UFFDIO_API(r6, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, 0x0) r8 = dup2(r5, r0) ioctl$SG_GET_ACCESS_COUNT(r8, 0x2289, &(0x7f0000000040)) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, 0x0, 0x0) ioctl$UFFDIO_WRITEPROTECT(r6, 0xc018aa06, 0x0) syz_usb_disconnect(r1) socket$inet_icmp_raw(0x2, 0x3, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 4.460919446s ago: executing program 5 (id=2273): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000003000000000000200000000c000600010000000100000024002d80050001000000000005000400000000000800020003"], 0x44}}, 0x0) 4.196950562s ago: executing program 5 (id=2274): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x4c, 0x10, 0x403, 0x70bd27, 0x3, {0x0, 0x0, 0x0, 0x0, 0x90446}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000600}, 0x0) 4.149840363s ago: executing program 2 (id=2275): r0 = syz_open_dev$sndpcmc(&(0x7f0000000a00), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc25c4110, &(0x7f0000000100)={0x6, [[0x1, 0x0, 0x0, 0xfffffffe, 0x1, 0x7, 0x400001], [0x0, 0x2, 0x0, 0xfffff7fd, 0x0, 0xde75], [0x0, 0x0, 0x1, 0x0, 0x4d, 0x2, 0x3, 0x24]], '\x00', [{0x5, 0x1000, 0x0, 0x1, 0x1, 0x1}, {0x1, 0x1, 0x0, 0x1}, {0x0, 0x200}, {0x10000001, 0x10000000}, {0x800, 0x2000000}, {0x36, 0x3}, {0x80000001, 0x81}, {0x0, 0x1000}, {0x4df, 0x1}, {0x3fc, 0x1}, {0x80000, 0x73d}, {0x7, 0xfffffffd}], '\x00', 0x8, 0x0, 0x0, 0x1000000}) r1 = syz_usb_connect(0x3, 0x0, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) bind$packet(r2, &(0x7f0000000580)={0x11, 0x1, 0x0, 0x1, 0x9, 0x6, @random="f2be6749b289"}, 0x14) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) pwrite64(0xffffffffffffffff, &(0x7f0000000180)="fb", 0x1, 0x20e7c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_open_dev$video4linux(&(0x7f00000007c0), 0x80000005, 0x20040) ioctl$VIDIOC_SUBDEV_S_FMT(r5, 0xc0585605, &(0x7f0000000280)={0x1, 0x0, {0xa, 0x2000, 0x300e, 0x0, 0xa, 0x4, 0x1, 0x1993012db91ab52e}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000003dc0)) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$sock_int(r8, 0x1, 0x10, &(0x7f00000002c0)=0x8001, 0x4) splice(r6, 0x0, r8, 0x0, 0xd9d7, 0x5) write$FUSE_INIT(r7, &(0x7f0000000340)={0x50, 0x0, 0x0, {0x7, 0x28, 0x1, 0xc002e38, 0x7ff, 0x80, 0x10000, 0xa79, 0x0, 0x0, 0x1}}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001580)=ANY=[@ANYBLOB="600000000206030000000000b8791fa80000000014000780080012400000000005001500010000000500010006000000050005000200000005000400000000000900020073797a310000000012000300686173683a6e65742c706f7274"], 0x60}}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4620}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x34040017}, 0x80) syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) r11 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000009c0), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a00)=ANY=[@ANYBLOB="5c0005", @ANYRES16=r11, @ANYBLOB="010027bd7000ffdbdf25020000000500010000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x8405d22596f37403}, 0x4054) 3.896035269s ago: executing program 5 (id=2276): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x1a5042, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0xa8011, r0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000094000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r5 = dup(r1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) splice(0xffffffffffffffff, 0x0, r6, 0x0, 0x88000cc, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x100004) write$eventfd(0xffffffffffffffff, &(0x7f0000000240), 0xffffff14) write$UHID_INPUT(r5, &(0x7f0000001040)={0xf, {"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", 0xf8d}}, 0x96d) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, &(0x7f0000000040)=0xe6) socket(0x1a, 0x80000, 0x3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1.873131256s ago: executing program 4 (id=2277): userfaultfd(0x801) r0 = gettid() r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'dummy0\x00', 0x0}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000002c0)={r3, 0x1, 0x6, @local}, 0x10) io_setup(0x6, &(0x7f0000000100)=0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) io_submit(r5, 0x1, &(0x7f0000000940)=[&(0x7f0000000040)={0x0, 0x4, 0x0, 0x1, 0x92d, r6, 0x0, 0x0, 0x0, 0x0, 0x2}]) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="c00000001b00210329bd7000ffdbdf25000000000000000000000000000000000a0101010000000000000000000000004e2400004e22fff70a00a0002c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xc0}, 0x1, 0x0, 0x0, 0x1}, 0xc000) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x7fc8, 0x1000, 0x40002, 0x393}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffd000) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) syz_ublk_add_dev(0xffffffffffffffff, r7, r8, r9, &(0x7f0000000400)={0x2e, 0x8, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x3, 0x603, 0x0, 0x0, 0x1000, 0xb6a7, 0x0, 0x0, 0x28}}}, &(0x7f0000000180)=0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47) r12 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x82042, 0x0) syz_ublk_setup_queues(r12, r11, &(0x7f0000000480)={0x0, 0x18ee, 0x1000, 0x3, 0x1d2}, &(0x7f0000002680)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb656, 0x20, 0x2, 0x342, 0x0, r12}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x842d, 0x8, 0x200002, 0x6a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb6d4, 0x4, 0x1, 0x252}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xeaff, 0x8, 0x0, 0x231}}], 0x4, &(0x7f0000003900)={0x2e, 0x62, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x9}, 0x0, r10, '\x00', {0x2003, 0xb66, 0x0, 0x0}}, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x280000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x6088cc00, 0x0, 0xfffffffffffffd74, 0x0, 0x0, &(0x7f0000000980)="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") ppoll(0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x20223000, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r13 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r13, 0xc00c620f, &(0x7f0000000240)={r0}) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) 1.640787661s ago: executing program 5 (id=2278): r0 = syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_MODULATOR(r0, 0x40445637, &(0x7f0000000180)={0x9, "db283a8c938414baa1f5a31237f99a8993d951aded9a4bd8ca28b17e3d5a1561", 0x8, 0x7, 0x8, 0x10, 0x5}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100000000090003007379"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="3800000055002f0302000000000000000700", @ANYRES32=r3, @ANYBLOB="200001"], 0x38}}, 0x40840) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x3c, 0x1, 0x4, 0x3, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x3}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x5}, @NFULA_CFG_CMD={0x5, 0x1, 0x2}, @NFULA_CFG_CMD={0x5, 0x1, 0x4}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4080) r5 = syz_open_dev$video4linux(&(0x7f00000000c0), 0x100000010, 0x42003) ioctl$VIDIOC_SUBDEV_S_FMT(r5, 0xc0305602, &(0x7f00000004c0)={0x1, 0x0, {0x34a, 0x0, 0x2004, 0x8, 0x0, 0x7}}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x4d, 0x0, &(0x7f0000cab000)) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002f40), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r8, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r8, 0x4008af03, &(0x7f0000002280)={0x2, 0x0, [{0x223000, 0x36, &(0x7f0000002180)=""/54}, {0xa000, 0xb9, &(0x7f00000021c0)=""/185}]}) ioctl$VHOST_SET_FEATURES(r8, 0x4008af00, &(0x7f0000000080)=0x200000000) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20,serpent)\x00'}, 0x4e) r10 = syz_open_procfs(0x0, &(0x7f0000000340)='fd\x00') getdents64(r10, &(0x7f0000001f00)=""/4111, 0x100f) r11 = dup2(r8, r8) ioctl$VHOST_VSOCK_SET_RUNNING(r11, 0x4004af61, &(0x7f0000000040)=0x1) ioctl$VHOST_VSOCK_SET_RUNNING(r11, 0x4004af61, &(0x7f0000000000)=0x5) close_range(r8, 0xffffffffffffffff, 0x0) ioctl$KVM_TDX_INIT_VCPU(r4, 0xc008aeba, &(0x7f0000000180)={0x2, 0x0, 0x6}) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3900000000080005400095dd2230d73326fc797a310000000008000a40fffffffc140000001100010000000800000000000100000a"], 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) 1.606885152s ago: executing program 2 (id=2279): prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000102c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00'}) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0186415, &(0x7f0000000040)={&(0x7f0000002000/0x2000)=nil, 0xbe, 0x3, 0x42}) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./myconfig\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./myconfig\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000000000000000000000008500000017000000850000000f00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_mptcp(0xa, 0x1, 0x106) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000280)={0x9}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0xc000, 0x4, 0x5, 0xff, 0x9, 0x3, 0x8, 0xb9, 0x3, 0x8e, 0x5, 0xc50}, {0x804, 0x1, 0x1, 0x45, 0xff, 0x6, 0x2, 0xff, 0x0, 0x4, 0x6, 0x7f, 0x20c}, {0xf1c2, 0x3, 0x38, 0xf, 0x84, 0x7, 0x3, 0x50, 0x0, 0x5, 0x4, 0x5, 0x3a}], 0xffffffff}) openat$vimc2(0xffffffffffffff9c, &(0x7f0000003240), 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0xd4, 0x0, 0x61, 0x200002000001, 0x0, 0x2004c8, 0x0, 0x0, 0x36ae, 0x4, 0x7fff, 0x3, 0x400000000], 0x80a0000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001c00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x20040011}}], 0x1, 0x80) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x15, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020692500000000002020207b1a00fe00400000bfa100000000000007011e00f8ffffffb702000008000000b703000000000000850000000600000085100000010000009500000000000000180100002020782500000000002020207b3af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x3}, 0x90) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10}) 1.333996668s ago: executing program 5 (id=2280): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) poll(0x0, 0x0, 0x400) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) write$tun(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3], 0x3c}}, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40009d0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x50, 0x10, 0x403, 0x70bd27, 0x3, {0x0, 0x0, 0x0, 0x0, 0x90446}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_INGRESS_QOS={0x4}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000600}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x8008, 0x4408}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 441.697789ms ago: executing program 4 (id=2281): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005002100000000080500010004"], 0x4c}}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002001100000004000100080004"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x408c0c0) write(r1, &(0x7f00000000c0)="e100da537ad8c399227dac4f6e3b082d5b3023c6c450e1b851e23131430a3e56f750387572da120dcc48d7936aeaed128233f399dafc068e3c1dc4dd3072d72336173b61a88ee8383fa219c58f4a2ec5e66b70bada010c07d4b2aa4a6d8524830c6339acac617982585151a721da3bb934ae2533b8f89f45a6451e34358cf9c45429e45cd98b2067378701e141059a85dd82749b54539ce7be4c6241f381b2144faf587cd4de7164f0b548c01bbab13abd229b345c0b38161c5683e5d7b4", 0xbe) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000016c0)={'wlan0\x00', 0x0}) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r5, 0xc004562f, &(0x7f0000000080)=0x1) r6 = signalfd4(0xffffffffffffffff, &(0x7f0000000400)={[0xfffffffffffffff5]}, 0x8, 0x80000) r7 = fcntl$dupfd(r6, 0x2, 0xffffffffffffffff) r8 = fanotify_init(0x20, 0x0) fanotify_mark(r8, 0x445, 0x1003, r7, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f0000000340)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010028bd7021fddbdf253b00000008000300", @ANYRES32=r4, @ANYBLOB="30003300c0100500080211000001080211000000505050505050730018008c108302726712ea1b02acf28009ddef7a20"], 0x4c}, 0x1, 0x0, 0x0, 0x20040090}, 0x28008004) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r12 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r12, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) sendmsg$NL80211_CMD_START_AP(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r10, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(r9, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB='D\x00', @ANYRES16=r3, @ANYBLOB="040027bd7000ffdbdf255c0000000800", @ANYRES32=r4, @ANYBLOB="08006b001400003a21006b00b400000008006b000000000008006b00e001000008006b00140000009a913408fd7d846e71dd8d20bc3cda1b41edf4a1f1d771f52cd436b3af76f50573efb6f6"], 0x44}, 0x1, 0x0, 0x0, 0x2401}, 0x20000000) 367.255011ms ago: executing program 5 (id=2282): write$dsp(0xffffffffffffffff, &(0x7f0000000500), 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r4, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r2, 0x1, 0x70bd2c, 0x1000000, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x37}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000) 0s ago: executing program 2 (id=2283): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x4c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) kernel console output (not intermixed with test programs): es in process `syz.0.503'. [ 278.501784][ T7631] ieee802154 phy0 wpan0: encryption failed: -22 [ 278.562314][ T7635] netlink: 'syz.2.505': attribute type 10 has an invalid length. [ 279.467151][ T7639] i2c i2c-0: Failed to register i2c client hd3ss3220 at 0x04 (-16) [ 279.549728][ T7639] i2c i2c-0: delete_device: Can't find device in list [ 279.883764][ T5917] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 280.646626][ T5917] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 280.655629][ T5917] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 280.697877][ T5917] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 280.717152][ T5917] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 280.737694][ T5917] usb 2-1: Manufacturer: syz [ 280.753989][ T5917] usb 2-1: config 0 descriptor?? [ 280.872779][ T7657] binder: 7653:7657 ioctl 4018620d 0 returned -22 [ 280.884097][ T7657] binder: 7653:7657 ioctl c0306201 0 returned -14 [ 281.192632][ T7658] netlink: 8 bytes leftover after parsing attributes in process `syz.2.513'. [ 281.567880][ T5917] rc_core: IR keymap rc-hauppauge not found [ 281.603963][ T5917] Registered IR keymap rc-empty [ 281.648667][ T5917] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 281.690138][ T5917] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input10 [ 282.876959][ T7667] netlink: 'syz.3.516': attribute type 10 has an invalid length. [ 283.101661][ T5917] usb 2-1: USB disconnect, device number 3 [ 283.248421][ T7674] i2c i2c-0: Failed to register i2c client hd3ss3220 at 0x04 (-16) [ 283.257894][ T7674] i2c i2c-0: delete_device: Can't find device in list [ 283.417842][ T7676] netlink: 8 bytes leftover after parsing attributes in process `syz.3.520'. [ 283.462551][ T7678] ieee802154 phy0 wpan0: encryption failed: -22 [ 285.373611][ T7686] netlink: 8 bytes leftover after parsing attributes in process `syz.2.522'. [ 285.473118][ T7691] binder: 7688:7691 ioctl 4018620d 0 returned -22 [ 285.484892][ T7691] binder: 7688:7691 ioctl c0306201 0 returned -14 [ 286.374458][ T7695] i2c i2c-0: Failed to register i2c client hd3ss3220 at 0x04 (-16) [ 286.389844][ T7695] i2c i2c-0: delete_device: Can't find device in list [ 286.508823][ T7699] netlink: 'syz.2.527': attribute type 10 has an invalid length. [ 286.655485][ T7703] netlink: 20 bytes leftover after parsing attributes in process `syz.2.530'. [ 286.773913][ T5904] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 286.976227][ T5904] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 287.739408][ T5904] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 287.752717][ T5904] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 287.763708][ T5904] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 287.771828][ T5904] usb 4-1: Manufacturer: syz [ 287.780402][ T5904] usb 4-1: config 0 descriptor?? [ 287.904185][ T5904] rc_core: IR keymap rc-hauppauge not found [ 287.919426][ T7716] binder: 7711:7716 ioctl 4018620d 0 returned -22 [ 287.929727][ T7716] binder: 7711:7716 ioctl c0306201 0 returned -14 [ 287.968287][ T5904] Registered IR keymap rc-empty [ 288.035098][ T5904] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 288.111464][ T7717] netlink: 8 bytes leftover after parsing attributes in process `syz.1.535'. [ 288.209216][ T5904] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input11 [ 288.514563][ T5904] usb 4-1: USB disconnect, device number 3 [ 288.910352][ T7725] netlink: 'syz.1.538': attribute type 10 has an invalid length. [ 291.870845][ T7753] binder: 7750:7753 ioctl 4018620d 0 returned -22 [ 291.881605][ T7753] binder: 7750:7753 ioctl c0306201 0 returned -14 [ 292.882762][ T7758] binder: 7754:7758 ioctl 4018620d 0 returned -22 [ 292.892697][ T7758] binder: 7754:7758 ioctl c0306201 0 returned -14 [ 294.788322][ T7768] netlink: 'syz.1.550': attribute type 10 has an invalid length. [ 294.878402][ T7772] netlink: 20 bytes leftover after parsing attributes in process `syz.2.553'. [ 296.020523][ T7785] binder: 7783:7785 ioctl 4018620d 0 returned -22 [ 296.030915][ T7785] binder: 7783:7785 ioctl c0306201 0 returned -14 [ 300.265153][ T7813] netlink: 'syz.0.565': attribute type 10 has an invalid length. [ 300.273728][ T7815] md: array md0 already has disks! [ 300.315486][ T7815] md: could not open device unknown-block(1,0). [ 300.322947][ T7815] md: error, md_import_device() returned -16 [ 300.411059][ T7817] netlink: 8 bytes leftover after parsing attributes in process `syz.2.567'. [ 300.511711][ T7819] binder: 7818:7819 ioctl 4018620d 0 returned -22 [ 300.519390][ T7819] binder: 7818:7819 ioctl c0306201 0 returned -14 [ 301.528873][ T7830] warning: `syz.0.574' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 303.985322][ T7845] netlink: 'syz.1.578': attribute type 10 has an invalid length. [ 304.669638][ T7852] netlink: 8 bytes leftover after parsing attributes in process `syz.2.580'. [ 304.755467][ T7853] md: array md0 already has disks! [ 304.781371][ T7853] md: could not open device unknown-block(1,0). [ 304.800463][ T7853] md: error, md_import_device() returned -16 [ 308.242437][ T7892] netlink: 8 bytes leftover after parsing attributes in process `syz.3.591'. [ 308.292193][ T7889] md: array md0 already has disks! [ 308.333018][ T7889] md: could not open device unknown-block(1,0). [ 308.402900][ T7889] md: error, md_import_device() returned -16 [ 310.288362][ T7915] netlink: 20 bytes leftover after parsing attributes in process `syz.2.599'. [ 312.004423][ T7917] i2c i2c-0: Failed to register i2c client hd3ss3220 at 0x04 (-16) [ 312.062126][ T7917] i2c i2c-0: delete_device: Can't find device in list [ 313.173984][ T7931] netlink: 8 bytes leftover after parsing attributes in process `syz.2.603'. [ 313.194843][ T7931] netlink: 8 bytes leftover after parsing attributes in process `syz.2.603'. [ 313.222790][ T7932] md: array md0 already has disks! [ 313.232932][ T7932] md: could not open device unknown-block(1,0). [ 313.324988][ T7932] md: error, md_import_device() returned -16 [ 314.289580][ T7945] netlink: 20 bytes leftover after parsing attributes in process `syz.0.611'. [ 314.395882][ T7951] 9pnet_fd: Insufficient options for proto=fd [ 315.217430][ T7953] i2c i2c-0: Failed to register i2c client hd3ss3220 at 0x04 (-16) [ 315.268479][ T7953] i2c i2c-0: delete_device: Can't find device in list [ 315.333967][ T7959] netlink: 8 bytes leftover after parsing attributes in process `syz.1.616'. [ 315.364999][ T7959] netlink: 8 bytes leftover after parsing attributes in process `syz.1.616'. [ 316.161670][ T7968] netlink: 8 bytes leftover after parsing attributes in process `syz.1.618'. [ 316.210284][ T7966] netlink: 4 bytes leftover after parsing attributes in process `syz.2.617'. [ 317.407723][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.414143][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.488637][ T7980] binder: 7975:7980 ioctl 4018620d 0 returned -22 [ 317.515258][ T7980] binder: 7975:7980 ioctl c0306201 0 returned -14 [ 317.747562][ T7981] netlink: 20 bytes leftover after parsing attributes in process `syz.0.622'. [ 317.873756][ T7989] 9pnet_fd: Insufficient options for proto=fd [ 318.958473][ T7997] i2c i2c-0: Failed to register i2c client hd3ss3220 at 0x04 (-16) [ 319.013102][ T7997] i2c i2c-0: delete_device: Can't find device in list [ 321.067328][ T8016] netlink: 8 bytes leftover after parsing attributes in process `syz.2.633'. [ 321.896405][ T8017] binder: 8013:8017 ioctl 4018620d 0 returned -22 [ 321.970889][ T8017] binder: 8013:8017 ioctl c0306201 0 returned -14 [ 322.186147][ T8024] 9pnet_fd: Insufficient options for proto=fd [ 322.404360][ T8029] netlink: 20 bytes leftover after parsing attributes in process `syz.0.637'. [ 322.441141][ T8032] i2c i2c-0: Failed to register i2c client hd3ss3220 at 0x04 (-16) [ 322.554744][ T8032] i2c i2c-0: delete_device: Can't find device in list [ 326.773014][ T8055] binder: 8049:8055 ioctl 4018620d 0 returned -22 [ 326.834139][ T8055] binder: 8049:8055 ioctl c0306201 0 returned -14 [ 326.946002][ T8062] netlink: 8 bytes leftover after parsing attributes in process `syz.1.648'. [ 326.968396][ T8062] netlink: 8 bytes leftover after parsing attributes in process `syz.1.648'. [ 327.128730][ T8064] netlink: 8 bytes leftover after parsing attributes in process `syz.1.650'. [ 328.083533][ T8069] netlink: 20 bytes leftover after parsing attributes in process `syz.2.651'. [ 328.094522][ T8074] i2c i2c-0: Failed to register i2c client hd3ss3220 at 0x04 (-16) [ 328.106841][ T8074] i2c i2c-0: delete_device: Can't find device in list [ 329.389758][ T8090] netlink: 8 bytes leftover after parsing attributes in process `syz.1.658'. [ 329.410028][ T8090] netlink: 8 bytes leftover after parsing attributes in process `syz.1.658'. [ 329.453710][ T8091] binder: 8088:8091 ioctl 4018620d 0 returned -22 [ 329.470398][ T8091] binder: 8088:8091 ioctl c0306201 0 returned -14 [ 330.675203][ T8101] i2c i2c-0: Failed to register i2c client hd3ss3220 at 0x04 (-16) [ 330.686707][ T8101] i2c i2c-0: delete_device: Can't find device in list [ 330.963064][ T8113] netlink: 8 bytes leftover after parsing attributes in process `syz.0.667'. [ 330.995272][ T8116] netlink: 8 bytes leftover after parsing attributes in process `syz.2.670'. [ 331.055032][ T8116] netlink: 8 bytes leftover after parsing attributes in process `syz.2.670'. [ 332.145800][ T8122] netlink: 4 bytes leftover after parsing attributes in process `syz.1.671'. [ 332.868711][ T8128] binder: 8125:8128 ioctl 4018620d 0 returned -22 [ 332.894031][ T8131] 9pnet_fd: Insufficient options for proto=fd [ 333.051768][ T8128] binder: 8125:8128 ioctl c0306201 0 returned -14 [ 334.363948][ T8143] i2c i2c-0: Failed to register i2c client hd3ss3220 at 0x04 (-16) [ 334.400506][ T8143] i2c i2c-0: delete_device: Can't find device in list [ 335.623892][ T8156] netlink: 4 bytes leftover after parsing attributes in process `syz.0.683'. [ 335.803109][ T8162] binder: 8161:8162 ioctl 4018620d 0 returned -22 [ 335.810932][ T8162] binder: 8161:8162 ioctl c0306201 0 returned -14 [ 336.011176][ T8170] netlink: 8 bytes leftover after parsing attributes in process `syz.0.689'. [ 336.129294][ T8173] 9pnet_fd: Insufficient options for proto=fd [ 337.064568][ T8179] i2c i2c-0: Failed to register i2c client hd3ss3220 at 0x04 (-16) [ 337.119409][ T8179] i2c i2c-0: delete_device: Can't find device in list [ 338.308832][ T8191] netlink: 4 bytes leftover after parsing attributes in process `syz.3.695'. [ 338.552598][ T8197] binder: 8196:8197 ioctl 4018620d 0 returned -22 [ 338.560280][ T8197] binder: 8196:8197 ioctl c0306201 0 returned -14 [ 338.870214][ T8209] 9pnet_fd: Insufficient options for proto=fd [ 338.930822][ T8206] netlink: 20 bytes leftover after parsing attributes in process `syz.3.701'. [ 340.164576][ T8224] netlink: 8 bytes leftover after parsing attributes in process `syz.0.707'. [ 340.241779][ T8226] netlink: 4 bytes leftover after parsing attributes in process `syz.1.706'. [ 341.632382][ T8234] binder: 8233:8234 ioctl 4018620d 0 returned -22 [ 341.665414][ T8234] binder: 8233:8234 ioctl c0306201 0 returned -14 [ 342.097514][ T8248] 9pnet_fd: Insufficient options for proto=fd [ 343.907363][ T8266] netlink: 4 bytes leftover after parsing attributes in process `syz.0.720'. [ 345.020977][ T8272] netlink: 8 bytes leftover after parsing attributes in process `syz.2.723'. [ 346.642812][ T8281] 9pnet_fd: Insufficient options for proto=fd [ 347.232369][ T8296] netlink: 4 bytes leftover after parsing attributes in process `syz.1.731'. [ 350.654755][ T8333] 9pnet_fd: Insufficient options for proto=fd [ 352.624408][ T8356] netlink: 4 bytes leftover after parsing attributes in process `syz.3.744'. [ 354.009920][ T8367] overlayfs: overlapping lowerdir path [ 355.012845][ T8371] 9pnet_fd: Insufficient options for proto=fd [ 355.519513][ T8382] i2c i2c-0: Failed to register i2c client hd3ss3220 at 0x04 (-16) [ 355.564219][ T8382] i2c i2c-0: delete_device: Can't find device in list [ 360.768457][ T8402] overlayfs: overlapping lowerdir path [ 361.760729][ T8407] 9pnet_fd: Insufficient options for proto=fd [ 361.920719][ T8413] i2c i2c-0: Failed to register i2c client hd3ss3220 at 0x04 (-16) [ 361.964463][ T8413] i2c i2c-0: delete_device: Can't find device in list [ 363.148108][ T8420] netlink: 4 bytes leftover after parsing attributes in process `syz.1.764'. [ 363.203793][ T8418] netlink: 20 bytes leftover after parsing attributes in process `syz.2.765'. [ 363.523424][ T5787] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 363.535776][ T5787] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 363.549834][ T5787] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 363.568910][ T5787] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 363.577956][ T5787] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 363.586673][ T5787] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 365.643488][ T5787] Bluetooth: hci4: command tx timeout [ 366.507812][ T8436] overlayfs: overlapping lowerdir path [ 366.571450][ T8426] chnl_net:caif_netlink_parms(): no params data found [ 367.574201][ T8450] i2c i2c-0: Failed to register i2c client hd3ss3220 at 0x04 (-16) [ 367.583879][ T8450] i2c i2c-0: delete_device: Can't find device in list [ 367.723361][ T5787] Bluetooth: hci4: command tx timeout [ 367.934337][ T8426] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.971515][ T8426] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.980232][ T8426] bridge_slave_0: entered allmulticast mode [ 367.988020][ T8426] bridge_slave_0: entered promiscuous mode [ 368.000686][ T8426] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.007984][ T8426] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.015349][ T8426] bridge_slave_1: entered allmulticast mode [ 368.022911][ T8426] bridge_slave_1: entered promiscuous mode [ 368.077682][ T8426] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 368.091195][ T8426] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 368.769494][ T8463] netlink: 4 bytes leftover after parsing attributes in process `syz.1.774'. [ 369.016413][ T8426] team0: Port device team_slave_0 added [ 369.803763][ T5787] Bluetooth: hci4: command tx timeout [ 369.816896][ T8426] team0: Port device team_slave_1 added [ 369.962625][ T8426] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 369.969935][ T8426] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 370.037182][ T8426] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 370.070725][ T8426] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 370.089323][ T8426] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 370.121568][ T8474] netlink: 8 bytes leftover after parsing attributes in process `syz.1.778'. [ 370.132024][ T8426] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 371.071681][ T8481] netlink: 20 bytes leftover after parsing attributes in process `syz.3.780'. [ 371.225986][ T8426] hsr_slave_0: entered promiscuous mode [ 371.276070][ T8426] hsr_slave_1: entered promiscuous mode [ 371.340719][ T8426] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 371.372002][ T8426] Cannot create hsr debugfs directory [ 371.645591][ T8492] binder: 8491:8492 ioctl 4018620d 0 returned -22 [ 371.653128][ T8492] binder: 8491:8492 ioctl c0306201 0 returned -14 [ 371.813031][ T8497] 9pnet_fd: Insufficient options for proto=fd [ 371.893902][ T5787] Bluetooth: hci4: command tx timeout [ 372.146377][ T8502] netlink: 4 bytes leftover after parsing attributes in process `syz.2.786'. [ 373.960544][ T8527] capability: warning: `syz.2.787' uses deprecated v2 capabilities in a way that may be insecure [ 374.019947][ T8426] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 374.067805][ T8426] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 374.099216][ T8426] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 374.144040][ T8426] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 374.422416][ T8538] binder: 8537:8538 ioctl 4018620d 0 returned -22 [ 374.430062][ T8538] binder: 8537:8538 ioctl c0306201 0 returned -14 [ 374.561018][ T12] hsr_slave_0: left promiscuous mode [ 374.616796][ T12] hsr_slave_1: left promiscuous mode [ 374.721564][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 374.741201][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 374.782007][ T12] bridge_slave_1: left allmulticast mode [ 374.803043][ T12] bridge_slave_1: left promiscuous mode [ 374.823644][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.845012][ T12] bridge_slave_0: left allmulticast mode [ 374.850722][ T12] bridge_slave_0: left promiscuous mode [ 374.876652][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.223959][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 376.285435][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 376.729733][ T12] bond0 (unregistering): Released all slaves [ 376.898572][ T8549] netlink: 4 bytes leftover after parsing attributes in process `syz.2.795'. [ 377.144898][ T8426] 8021q: adding VLAN 0 to HW filter on device bond0 [ 377.189317][ T8426] 8021q: adding VLAN 0 to HW filter on device team0 [ 377.389616][ T2994] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.397044][ T2994] bridge0: port 1(bridge_slave_0) entered forwarding state [ 379.114032][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.130725][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.195386][ T2994] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.202665][ T2994] bridge0: port 2(bridge_slave_1) entered forwarding state [ 379.452275][ T8590] process 'syz.1.800' launched './file0' with NULL argv: empty string added [ 379.466860][ T8426] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 379.799107][ T8591] netlink: 20 bytes leftover after parsing attributes in process `syz.3.799'. [ 380.186976][ T8426] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 380.343665][ T8610] binder: 8609:8610 ioctl 4018620d 0 returned -22 [ 380.385071][ T8610] binder: 8609:8610 ioctl c0306201 0 returned -14 [ 380.703384][ T5905] usb 3-1: new low-speed USB device number 3 using dummy_hcd [ 380.892230][ T8622] netlink: 4 bytes leftover after parsing attributes in process `syz.3.805'. [ 380.924159][ T5905] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 380.952878][ T5905] usb 3-1: config 0 has no interface number 0 [ 380.974000][ T5905] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 381.014984][ T5905] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 381.036502][ T5905] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 381.068327][ T5905] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.371033][ T5905] usb 3-1: config 0 descriptor?? [ 381.391731][ T8426] veth0_vlan: entered promiscuous mode [ 381.450268][ T8614] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 381.895394][ T5905] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 381.955873][ T8426] veth1_vlan: entered promiscuous mode [ 382.105234][ T8426] veth0_macvtap: entered promiscuous mode [ 382.148080][ T8636] netlink: 8 bytes leftover after parsing attributes in process `syz.1.809'. [ 382.169805][ T8426] veth1_macvtap: entered promiscuous mode [ 383.089113][ T8426] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 383.122036][ T8426] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 383.157868][ T8426] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.167466][ T8426] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.178424][ T8426] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.187304][ T8426] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.241541][ T5920] usb 3-1: USB disconnect, device number 3 [ 383.633481][ T2994] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 383.652825][ T2994] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 383.766739][ T1134] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 383.808219][ T1134] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 385.143640][ T8666] binder: 8664:8666 ioctl 4018620d 0 returned -22 [ 385.150983][ T8666] binder: 8664:8666 ioctl c0306201 0 returned -14 [ 386.319511][ T8680] netlink: 8 bytes leftover after parsing attributes in process `syz.4.819'. [ 386.684706][ T8680] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.300916][ T8680] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.520745][ T8680] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.524149][ T5822] usb 2-1: new low-speed USB device number 4 using dummy_hcd [ 387.697976][ T8698] binder: 8696:8698 ioctl 4018620d 0 returned -22 [ 387.712626][ T8698] binder: 8696:8698 ioctl c0306201 0 returned -14 [ 387.823892][ T5822] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 387.884596][ T5822] usb 2-1: config 0 has no interface number 0 [ 387.912368][ T8680] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.937163][ T5822] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 387.981332][ T5822] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 388.005781][ T5822] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 388.025599][ T5822] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.132396][ T5822] usb 2-1: config 0 descriptor?? [ 388.169002][ T8689] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 388.196023][ T5822] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 388.308052][ T8680] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.375012][ T8680] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.419807][ T8680] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.466285][ T8680] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.283343][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 389.303337][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 389.823109][ T8724] netlink: 4 bytes leftover after parsing attributes in process `syz.3.830'. [ 390.235752][ T8735] binder: 8732:8735 ioctl 4018620d 0 returned -22 [ 390.244800][ T8735] binder: 8732:8735 ioctl c0306201 0 returned -14 [ 391.223122][ C0] iowarrior 2-1:0.1: iowarrior_callback - usb_submit_urb failed with result -1 [ 391.360408][ T5821] usb 2-1: USB disconnect, device number 4 [ 391.921977][ T8750] netlink: 8 bytes leftover after parsing attributes in process `syz.1.837'. [ 392.762656][ T8730] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.770535][ T8730] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.095154][ T8730] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 393.112199][ T8730] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 393.642581][ T8730] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.651498][ T8730] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.660470][ T8730] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.670961][ T8730] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.761666][ T8757] overlayfs: overlapping lowerdir path [ 395.006842][ T8765] netlink: 4 bytes leftover after parsing attributes in process `syz.3.842'. [ 395.371293][ T8777] binder: 8771:8777 ioctl 4018620d 0 returned -22 [ 395.381507][ T8777] binder: 8771:8777 ioctl c0306201 0 returned -14 [ 396.281950][ T8775] netlink: 20 bytes leftover after parsing attributes in process `syz.4.845'. [ 396.640498][ T8799] overlayfs: overlapping lowerdir path [ 397.699826][ T8809] netlink: 8 bytes leftover after parsing attributes in process `syz.1.856'. [ 398.770665][ T8811] netlink: 4 bytes leftover after parsing attributes in process `syz.3.855'. [ 399.022298][ T8820] binder: 8817:8820 ioctl 4018620d 0 returned -22 [ 399.033883][ T8820] binder: 8817:8820 ioctl c0306201 0 returned -14 [ 400.085045][ T8825] netlink: 20 bytes leftover after parsing attributes in process `syz.2.860'. [ 400.440520][ T8837] overlayfs: overlapping lowerdir path [ 401.271368][ T8840] netlink: 4 bytes leftover after parsing attributes in process `syz.1.865'. [ 401.742600][ T8862] binder: 8858:8862 ioctl 4018620d 0 returned -22 [ 401.752996][ T8862] binder: 8858:8862 ioctl c0306201 0 returned -14 [ 402.804331][ T8871] netlink: 20 bytes leftover after parsing attributes in process `syz.2.872'. [ 402.873569][ T5909] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 403.060070][ T8882] overlayfs: overlapping lowerdir path [ 403.104482][ T5909] usb 4-1: Using ep0 maxpacket: 32 [ 403.146807][ T8853] netlink: 40 bytes leftover after parsing attributes in process `syz.3.867'. [ 403.194120][ T5909] usb 4-1: unable to get BOS descriptor or descriptor too short [ 403.833434][ T5909] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 403.843323][ T5909] usb 4-1: can't read configurations, error -71 [ 404.373843][ T8901] binder: 8896:8901 ioctl 4018620d 0 returned -22 [ 404.384424][ T8901] binder: 8896:8901 ioctl c0306201 0 returned -14 [ 405.333590][ T8904] netlink: 20 bytes leftover after parsing attributes in process `syz.4.884'. [ 405.475559][ T8923] overlayfs: overlapping lowerdir path [ 407.645395][ T8950] binder: 8946:8950 ioctl 4018620d 0 returned -22 [ 407.655196][ T8950] binder: 8946:8950 ioctl c0306201 0 returned -14 [ 408.485552][ T8963] overlayfs: overlapping lowerdir path [ 413.321486][ T9015] i2c i2c-0: delete_device: Can't find device in list [ 413.906265][ T9033] netlink: 8 bytes leftover after parsing attributes in process `syz.1.917'. [ 416.850417][ T9068] i2c i2c-0: delete_device: Can't find device in list [ 418.026393][ T9087] netlink: 'syz.3.930': attribute type 1 has an invalid length. [ 418.318096][ T9087] 8021q: adding VLAN 0 to HW filter on device bond1 [ 418.397732][ T9094] netlink: 8 bytes leftover after parsing attributes in process `syz.1.932'. [ 418.506079][ T9092] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.517996][ T9092] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.528598][ T9092] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.546796][ T9092] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.244753][ T9092] bond1: (slave geneve2): making interface the new active one [ 419.263183][ T9092] af_packet: tpacket_rcv: packet too big, clamped from 46 to 4294967272. macoff=96 [ 419.277499][ T9092] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 419.515272][ T9092] syz.3.930 (9092) used greatest stack depth: 18056 bytes left [ 419.648967][ T9103] netlink: 20 bytes leftover after parsing attributes in process `syz.2.935'. [ 420.174253][ T9125] i2c i2c-0: delete_device: Can't find device in list [ 420.253821][ T9130] netlink: 4 bytes leftover after parsing attributes in process `syz.2.941'. [ 421.417816][ T9145] netlink: 20 bytes leftover after parsing attributes in process `syz.1.945'. [ 421.483851][ T9152] netlink: 8 bytes leftover after parsing attributes in process `syz.2.947'. [ 422.610943][ T9170] blktrace: Concurrent blktraces are not allowed on sg0 [ 422.663075][ T9172] netlink: 4 bytes leftover after parsing attributes in process `syz.3.952'. [ 422.767258][ T9176] netlink: 'syz.4.951': attribute type 1 has an invalid length. [ 422.867122][ T9176] 8021q: adding VLAN 0 to HW filter on device bond1 [ 422.972904][ T9183] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.004318][ T9184] i2c i2c-0: delete_device: Can't find device in list [ 423.011314][ T9183] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.034643][ T9183] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.083500][ T9183] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.124896][ T9183] bond1: (slave geneve2): making interface the new active one [ 423.158765][ T9183] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 424.196370][ T9200] netlink: 20 bytes leftover after parsing attributes in process `syz.4.958'. [ 424.798365][ T9221] i2c i2c-0: delete_device: Can't find device in list [ 426.073616][ T9246] blktrace: Concurrent blktraces are not allowed on sg0 [ 426.290793][ T9249] netlink: 20 bytes leftover after parsing attributes in process `syz.4.969'. [ 426.805728][ T9268] netlink: 'syz.1.973': attribute type 1 has an invalid length. [ 426.864670][ T9268] 8021q: adding VLAN 0 to HW filter on device bond1 [ 427.041504][ T9268] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.063925][ T9268] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.072203][ T9268] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.106833][ T9268] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.145394][ T9268] bond1: (slave geneve2): making interface the new active one [ 427.166216][ T9268] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 427.303562][ T9279] i2c i2c-0: delete_device: Can't find device in list [ 427.322104][ T9281] overlayfs: missing 'lowerdir' [ 428.568687][ T9294] netlink: 20 bytes leftover after parsing attributes in process `syz.4.980'. [ 429.057605][ T9315] blktrace: Concurrent blktraces are not allowed on sg0 [ 429.379960][ T9327] i2c i2c-0: delete_device: Can't find device in list [ 429.567855][ T9333] overlayfs: missing 'lowerdir' [ 430.518028][ T9337] netlink: 8 bytes leftover after parsing attributes in process `syz.2.989'. [ 430.618886][ T9340] 9pnet_fd: Insufficient options for proto=fd [ 431.697182][ T9345] netlink: 20 bytes leftover after parsing attributes in process `syz.4.991'. [ 432.547470][ T9375] i2c i2c-0: delete_device: Can't find device in list [ 432.790619][ T9380] overlayfs: missing 'lowerdir' [ 436.118230][ T9403] netlink: 'syz.2.1007': attribute type 1 has an invalid length. [ 436.184842][ T9403] 8021q: adding VLAN 0 to HW filter on device bond1 [ 436.424312][ T9403] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.673452][ T9403] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.699713][ T9403] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.723941][ T9403] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.763024][ T9403] bond1: (slave geneve2): making interface the new active one [ 436.783140][ T9403] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 436.809539][ T9413] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1008'. [ 436.926713][ T9423] overlay: Unknown parameter '/' [ 438.426711][ T9434] i2c i2c-0: delete_device: Can't find device in list [ 438.821325][ T9445] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1016'. [ 439.457234][ T9453] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1019'. [ 439.560567][ T9453] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.789802][ T9453] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.183483][ T9462] overlay: Unknown parameter '/' [ 440.248492][ T9453] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.287938][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.294423][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.100270][ T9453] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.437288][ T9453] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.112980][ T9453] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.278790][ T9453] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.296157][ T9453] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.363718][ T9483] i2c i2c-0: new_device: Missing parameters [ 442.428018][ T9483] i2c i2c-0: delete_device: Can't find device in list [ 442.502660][ T9490] blktrace: Concurrent blktraces are not allowed on sg0 [ 442.540749][ T9487] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1026'. [ 442.874314][ T9506] overlay: Unknown parameter '/' [ 447.721375][ T9545] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1037'. [ 447.738733][ T9545] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.888346][ T9545] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.113356][ T5909] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 448.604719][ T9551] i2c i2c-0: delete_device: Can't find device in list [ 448.648037][ T9545] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.720152][ T9545] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.793373][ T5909] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 448.819474][ T5909] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 448.865083][ T5909] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 448.893712][ T5909] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 448.913600][ T5909] usb 2-1: Manufacturer: syz [ 448.937150][ T5909] usb 2-1: config 0 descriptor?? [ 449.143333][ T5909] rc_core: IR keymap rc-hauppauge not found [ 449.149444][ T5909] Registered IR keymap rc-empty [ 450.097547][ T5909] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 450.110200][ T5909] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input12 [ 450.176834][ T5909] usb 2-1: USB disconnect, device number 5 [ 450.454284][ T9584] blktrace: Concurrent blktraces are not allowed on sg0 [ 451.558533][ T9603] netlink: 'syz.4.1050': attribute type 1 has an invalid length. [ 451.574146][ T9604] i2c i2c-0: new_device: Missing parameters [ 451.605824][ T9604] i2c i2c-0: delete_device: Can't find device in list [ 451.665356][ T9603] 8021q: adding VLAN 0 to HW filter on device bond2 [ 454.849445][ T5787] Bluetooth: hci4: link tx timeout [ 454.860305][ T5787] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 454.896155][ T51] Bluetooth: hci4: link tx timeout [ 454.901387][ T51] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 454.912943][ T51] Bluetooth: hci4: link tx timeout [ 454.918219][ T51] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 454.935767][ T51] Bluetooth: hci4: link tx timeout [ 454.940962][ T51] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 454.949263][ T51] Bluetooth: hci4: link tx timeout [ 454.954561][ T51] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 454.962290][ T51] Bluetooth: hci4: link tx timeout [ 454.967611][ T51] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 454.977942][ T51] Bluetooth: hci4: link tx timeout [ 454.983168][ T51] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 455.039877][ T51] Bluetooth: hci4: link tx timeout [ 455.046183][ T51] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 455.914501][ T9660] netlink: 'syz.3.1062': attribute type 1 has an invalid length. [ 456.008230][ T9660] 8021q: adding VLAN 0 to HW filter on device bond2 [ 456.078995][ T9664] i2c i2c-0: new_device: Can't parse I2C address [ 456.104464][ T9664] i2c i2c-0: delete_device: Can't find device in list [ 456.204956][ T9668] netlink: 'syz.4.1064': attribute type 1 has an invalid length. [ 456.300256][ T9668] 8021q: adding VLAN 0 to HW filter on device bond3 [ 456.923746][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 459.172497][ T9693] blktrace: Concurrent blktraces are not allowed on sg0 [ 459.337186][ T9697] netlink: 'syz.4.1074': attribute type 1 has an invalid length. [ 459.815304][ T9705] i2c i2c-0: delete_device: Can't find device in list [ 460.062873][ T9697] 8021q: adding VLAN 0 to HW filter on device bond4 [ 461.036583][ T9713] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1077'. [ 461.218667][ T9713] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.288762][ T9713] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.348895][ T9713] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.427880][ T9713] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.571883][ T9737] i2c i2c-0: new_device: Can't parse I2C address [ 463.641957][ T9739] blktrace: Concurrent blktraces are not allowed on sg0 [ 463.649531][ T9737] i2c i2c-0: delete_device: Can't find device in list [ 463.746856][ T9742] netlink: 'syz.4.1087': attribute type 1 has an invalid length. [ 463.876037][ T9742] 8021q: adding VLAN 0 to HW filter on device bond5 [ 464.554079][ T9753] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1091'. [ 464.925497][ T9753] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.221938][ T9753] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.445324][ T9753] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.432584][ T9753] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.682252][ T9753] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.691328][ T9775] netlink: 'syz.2.1098': attribute type 1 has an invalid length. [ 466.727246][ T9775] 8021q: adding VLAN 0 to HW filter on device bond2 [ 466.740344][ T9753] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.756165][ T9753] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.786245][ T9753] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.210474][ T9788] blktrace: Concurrent blktraces are not allowed on sg0 [ 470.198579][ T9803] overlayfs: overlapping lowerdir path [ 471.266721][ T9819] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1111'. [ 471.464312][ T9819] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.622960][ T9819] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.755371][ T9819] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.849826][ T9819] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.122330][ T9819] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.154738][ T9819] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.186579][ T9819] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.210669][ T9827] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1113'. [ 472.236461][ T9819] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.220830][ T9840] netlink: 'syz.3.1117': attribute type 1 has an invalid length. [ 473.277737][ T9840] 8021q: adding VLAN 0 to HW filter on device bond3 [ 473.289715][ T9844] blktrace: Concurrent blktraces are not allowed on sg0 [ 475.641738][ T9869] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1125'. [ 475.747507][ T9874] binder: 9867:9874 ioctl 4018620d 0 returned -22 [ 476.484617][ T9869] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.812483][ T9869] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.035558][ T9869] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.653066][ T9869] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.891316][ T9890] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1127'. [ 478.085011][ T9869] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.140037][ T9869] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.215486][ T9869] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.230525][ T9869] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.267218][ T9904] netlink: 'syz.4.1133': attribute type 1 has an invalid length. [ 478.719248][ T9904] 8021q: adding VLAN 0 to HW filter on device bond6 [ 478.775684][ T9912] blktrace: Concurrent blktraces are not allowed on sg0 [ 479.509154][ T9925] binder: 9922:9925 ioctl 4018620d 0 returned -22 [ 480.441820][ T9936] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1140'. [ 480.674606][ T9945] 9pnet_fd: Insufficient options for proto=fd [ 481.862605][ T9959] blktrace: Concurrent blktraces are not allowed on sg0 [ 483.262914][ T9973] binder: 9969:9973 ioctl 4018620d 0 returned -22 [ 484.243550][ T9983] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1149'. [ 484.410934][ T9986] 9pnet_fd: Insufficient options for proto=fd [ 488.841909][T10016] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1163'. [ 488.883490][T10018] blktrace: Concurrent blktraces are not allowed on sg0 [ 489.892477][T10026] binder: 10017:10026 ioctl 4018620d 0 returned -22 [ 489.903547][T10026] binder: 10017:10026 ioctl c0306201 0 returned -14 [ 490.066894][T10027] 9pnet_fd: Insufficient options for proto=fd [ 493.508624][T10051] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1173'. [ 493.921484][T10059] binder: 10057:10059 ioctl 4018620d 0 returned -22 [ 493.931653][T10059] binder: 10057:10059 ioctl c0306201 0 returned -14 [ 495.784407][T10066] 9pnet_fd: Insufficient options for proto=fd [ 496.258386][T10074] netlink: 'syz.2.1181': attribute type 1 has an invalid length. [ 496.389196][T10075] blktrace: Concurrent blktraces are not allowed on sg0 [ 496.479817][T10074] 8021q: adding VLAN 0 to HW filter on device bond3 [ 496.969078][T10092] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1184'. [ 497.407541][T10099] 9pnet_fd: Insufficient options for proto=fd [ 498.297896][T10096] binder: 10095:10096 ioctl 4018620d 0 returned -22 [ 498.324699][T10096] binder: 10095:10096 ioctl c0306201 0 returned -14 [ 498.351666][T10106] netlink: 'syz.3.1191': attribute type 1 has an invalid length. [ 498.562350][T10106] 8021q: adding VLAN 0 to HW filter on device bond4 [ 499.465489][T10122] blktrace: Concurrent blktraces are not allowed on sg0 [ 499.563540][T10125] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1196'. [ 500.498695][T10136] 9pnet_fd: Insufficient options for proto=fd [ 501.732147][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.741252][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.296096][T10145] netlink: 'syz.4.1202': attribute type 1 has an invalid length. [ 502.434758][T10145] 8021q: adding VLAN 0 to HW filter on device bond7 [ 502.466410][T10153] binder: 10151:10153 ioctl 4018620d 0 returned -22 [ 502.477399][T10153] binder: 10151:10153 ioctl c0306201 0 returned -14 [ 506.519169][T10179] blktrace: Concurrent blktraces are not allowed on sg0 [ 506.548803][T10177] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 507.906682][T10196] binder: 10194:10196 ioctl 4018620d 0 returned -22 [ 507.917946][T10196] binder: 10194:10196 ioctl c0306201 0 returned -14 [ 509.379866][T10215] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1223'. [ 510.605044][T10232] netlink: 'syz.4.1228': attribute type 1 has an invalid length. [ 510.668583][T10232] 8021q: adding VLAN 0 to HW filter on device bond8 [ 510.758282][T10238] binder: 10235:10238 ioctl 4018620d 0 returned -22 [ 510.768458][T10238] binder: 10235:10238 ioctl c0306201 0 returned -14 [ 513.449945][T10253] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1235'. [ 515.001714][T10270] binder: 10265:10270 ioctl 4018620d 0 returned -22 [ 515.011982][T10270] binder: 10265:10270 ioctl c0306201 0 returned -14 [ 515.968484][T10271] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1240'. [ 517.883140][T10286] loop1: detected capacity change from 0 to 524287998 [ 521.412112][T10306] netlink: 'syz.4.1248': attribute type 10 has an invalid length. [ 521.991594][T10315] 9pnet_fd: Insufficient options for proto=fd [ 522.845036][T10306] team0 (unregistering): Port device team_slave_0 removed [ 522.866501][T10306] team0 (unregistering): Port device team_slave_1 removed [ 524.659493][T10337] i2c i2c-0: Failed to register i2c client hd3ss3220 at 0x04 (-16) [ 526.502662][T10349] 9pnet_fd: Insufficient options for proto=fd [ 526.766641][T10355] loop1: detected capacity change from 0 to 524287998 [ 531.264851][T10401] i2c i2c-0: Failed to register i2c client hd3ss3220 at 0x04 (-16) [ 531.310103][T10401] i2c i2c-0: delete_device: Can't find device in list [ 531.651106][T10419] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1279'. [ 535.134413][T10450] i2c i2c-0: Failed to register i2c client hd3ss3220 at 0x04 (-16) [ 535.199198][T10450] i2c i2c-0: delete_device: Can't find device in list [ 535.572229][T10462] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1289'. [ 535.611972][T10466] netlink: 'syz.3.1290': attribute type 1 has an invalid length. [ 535.725538][T10466] 8021q: adding VLAN 0 to HW filter on device bond5 [ 538.553736][T10504] i2c i2c-0: Failed to register i2c client hd3ss3220 at 0x04 (-16) [ 538.575300][T10501] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1301'. [ 538.598163][T10504] i2c i2c-0: delete_device: Can't find device in list [ 538.866970][T10515] netlink: 'syz.2.1303': attribute type 1 has an invalid length. [ 539.094548][T10515] 8021q: adding VLAN 0 to HW filter on device bond4 [ 539.336296][T10532] netlink: 'syz.3.1306': attribute type 10 has an invalid length. [ 540.404080][T10542] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1310'. [ 541.289445][T10546] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1311'. [ 541.413581][T10557] i2c i2c-0: Failed to register i2c client hd3ss3220 at 0x04 (-16) [ 541.489044][T10557] i2c i2c-0: delete_device: Can't find device in list [ 541.514542][T10563] netlink: 'syz.3.1314': attribute type 1 has an invalid length. [ 541.607441][T10563] 8021q: adding VLAN 0 to HW filter on device bond6 [ 541.737749][T10572] netlink: 'syz.2.1316': attribute type 1 has an invalid length. [ 541.864643][T10572] 8021q: adding VLAN 0 to HW filter on device bond5 [ 543.187810][T10587] netlink: 'syz.4.1319': attribute type 10 has an invalid length. [ 544.031634][T10595] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1322'. [ 544.347357][ T28] audit: type=1326 audit(1787115725.969:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10589 comm="syz.3.1321" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa36339e0d9 code=0x0 [ 544.393917][T10599] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1323'. [ 544.670117][T10606] i2c i2c-0: Failed to register i2c client hd3ss3220 at 0x04 (-16) [ 544.731687][T10610] i2c i2c-0: delete_device: Can't find device in list [ 544.964565][T10616] netlink: 'syz.3.1328': attribute type 1 has an invalid length. [ 545.746482][T10616] 8021q: adding VLAN 0 to HW filter on device bond7 [ 545.998964][T10633] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1332'. [ 546.173883][T10637] netlink: 'syz.1.1333': attribute type 10 has an invalid length. [ 546.434475][T10635] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1334'. [ 549.165282][T10666] i2c i2c-0: Failed to register i2c client hd3ss3220 at 0x04 (-16) [ 549.215803][T10669] i2c i2c-0: delete_device: Can't find device in list [ 549.647933][T10685] netlink: 'syz.4.1345': attribute type 10 has an invalid length. [ 550.437067][T10689] netlink: 'syz.3.1346': attribute type 1 has an invalid length. [ 550.611025][T10689] 8021q: adding VLAN 0 to HW filter on device bond8 [ 550.788328][T10696] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1347'. [ 551.187888][T10711] netlink: 'syz.4.1350': attribute type 1 has an invalid length. [ 551.354828][T10711] 8021q: adding VLAN 0 to HW filter on device bond9 [ 551.390609][T10724] i2c i2c-0: Failed to register i2c client hd3ss3220 at 0x04 (-16) [ 551.523646][T10730] i2c i2c-0: delete_device: Can't find device in list [ 552.174505][T10748] netlink: 'syz.3.1360': attribute type 1 has an invalid length. [ 552.177723][T10743] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1358'. [ 552.239030][T10748] 8021q: adding VLAN 0 to HW filter on device bond9 [ 552.782589][ T28] audit: type=1326 audit(1787115734.389:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10737 comm="syz.1.1357" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe43559e0d9 code=0x0 [ 552.811470][T10766] fuse: Bad value for 'fd' [ 554.082548][T10777] i2c i2c-0: Failed to register i2c client hd3ss3220 at 0x04 (-16) [ 554.277794][T10781] i2c i2c-0: delete_device: Can't find device in list [ 555.031189][T10805] netlink: 'syz.2.1368': attribute type 1 has an invalid length. [ 555.032400][T10801] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1370'. [ 555.090447][T10805] 8021q: adding VLAN 0 to HW filter on device bond6 [ 555.274350][ T5787] Bluetooth: hci2: unexpected event for opcode 0x201c [ 557.959955][T10844] 9pnet_fd: Insufficient options for proto=fd [ 558.301366][T10854] netlink: 'syz.3.1381': attribute type 10 has an invalid length. [ 559.415961][T10873] netlink: 'syz.2.1387': attribute type 1 has an invalid length. [ 559.478154][T10873] 8021q: adding VLAN 0 to HW filter on device bond7 [ 560.794750][T10890] 9pnet_fd: Insufficient options for proto=fd [ 561.093971][T10888] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1392'. [ 561.646503][T10894] netlink: 'syz.3.1393': attribute type 10 has an invalid length. [ 561.704040][ T5787] Bluetooth: hci3: unexpected event for opcode 0x2024 [ 563.168327][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.183804][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.372903][T10919] netlink: 'syz.3.1400': attribute type 1 has an invalid length. [ 565.516549][T10919] 8021q: adding VLAN 0 to HW filter on device bond10 [ 565.712862][T10935] 9pnet_fd: Insufficient options for proto=fd [ 566.601346][ T28] audit: type=1326 audit(1787115748.219:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10936 comm="syz.2.1404" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8f4c59e0d9 code=0x0 [ 566.829592][ T5787] Bluetooth: hci1: unexpected event for opcode 0x201c [ 566.909385][T10947] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1407'. [ 566.958652][ T5787] Bluetooth: hci4: unexpected event for opcode 0x2024 [ 568.179056][T10963] netlink: 'syz.4.1412': attribute type 10 has an invalid length. [ 569.065742][T10975] 9pnet_fd: Insufficient options for proto=fd [ 570.219555][T10979] netlink: 'syz.4.1415': attribute type 1 has an invalid length. [ 570.470938][T10979] 8021q: adding VLAN 0 to HW filter on device bond10 [ 570.712334][T10994] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1418'. [ 572.024512][T11009] netlink: 'syz.4.1423': attribute type 10 has an invalid length. [ 572.897108][T11010] 9pnet_fd: Insufficient options for proto=fd [ 573.698253][T11022] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1429'. [ 575.188720][T11019] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1428'. [ 576.259013][ T5787] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 576.269960][ T5787] CPU: 0 PID: 5787 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 576.277555][ T5787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 576.287638][ T5787] Workqueue: hci1 hci_rx_work [ 576.292477][ T5787] Call Trace: [ 576.295812][ T5787] [ 576.298814][ T5787] dump_stack_lvl+0x18c/0x250 [ 576.303607][ T5787] ? show_regs_print_info+0x20/0x20 [ 576.308954][ T5787] ? load_image+0x420/0x420 [ 576.313525][ T5787] sysfs_create_dir_ns+0x26e/0x2a0 [ 576.318681][ T5787] ? __lock_acquire+0x7d80/0x7d80 [ 576.323742][ T5787] ? sysfs_warn_dup+0xa0/0xa0 [ 576.328534][ T5787] ? do_raw_spin_unlock+0x121/0x230 [ 576.333772][ T5787] kobject_add_internal+0x617/0xc90 [ 576.339037][ T5787] kobject_add+0x164/0x240 [ 576.343511][ T5787] ? kobject_init+0x1d0/0x1d0 [ 576.348222][ T5787] ? get_device_parent+0x366/0x390 [ 576.353411][ T5787] device_add+0x3fa/0xc40 [ 576.357774][ T5787] hci_conn_add_sysfs+0xd5/0x1e0 [ 576.362845][ T5787] le_conn_complete_evt+0xe9f/0x1480 [ 576.368161][ T5787] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 576.374437][ T5787] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 576.380172][ T5787] ? mutex_unlock+0x10/0x10 [ 576.384692][ T5787] ? skb_pull_data+0xf0/0x1f0 [ 576.389447][ T5787] hci_le_conn_complete_evt+0x187/0x440 [ 576.395016][ T5787] ? hci_remote_host_features_evt+0x150/0x150 [ 576.401105][ T5787] hci_event_packet+0x7b4/0x1280 [ 576.406067][ T5787] ? __lock_acquire+0x7d80/0x7d80 [ 576.411109][ T5787] ? lock_chain_count+0x20/0x20 [ 576.415974][ T5787] ? bis_list+0x290/0x290 [ 576.420340][ T5787] ? lockdep_hardirqs_on+0x98/0x150 [ 576.425630][ T5787] ? hci_send_to_monitor+0xd7/0x4f0 [ 576.430849][ T5787] hci_rx_work+0x43a/0xd60 [ 576.435285][ T5787] ? process_scheduled_works+0x975/0x1600 [ 576.441113][ T5787] process_scheduled_works+0xa60/0x1600 [ 576.446709][ T5787] ? worker_attach_to_pool+0x370/0x370 [ 576.452204][ T5787] ? assign_work+0x3cc/0x5d0 [ 576.456847][ T5787] worker_thread+0xa5e/0xfe0 [ 576.461473][ T5787] ? _raw_spin_unlock+0x40/0x40 [ 576.466362][ T5787] ? __kthread_parkme+0x71/0x1c0 [ 576.471353][ T5787] kthread+0x2fa/0x390 [ 576.475492][ T5787] ? pr_cont_work+0x550/0x550 [ 576.480203][ T5787] ? kthread_blkcg+0xd0/0xd0 [ 576.484839][ T5787] ret_from_fork+0x48/0x80 [ 576.489305][ T5787] ? kthread_blkcg+0xd0/0xd0 [ 576.493941][ T5787] ret_from_fork_asm+0x11/0x20 [ 576.498782][ T5787] [ 576.508901][ T5787] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 576.523070][ T5787] Bluetooth: hci1: failed to register connection device [ 576.937838][T11049] netlink: 'syz.1.1436': attribute type 10 has an invalid length. [ 577.035048][T11051] 9pnet_virtio: no channels available for device syz [ 577.785527][T11054] 9pnet_fd: Insufficient options for proto=fd [ 578.189820][T11060] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1439'. [ 579.688772][T11064] pim6reg: entered allmulticast mode [ 579.697474][T11064] pim6reg: left allmulticast mode [ 579.754014][T11072] 9pnet_virtio: no channels available for device syz [ 579.958283][T11079] i2c i2c-0: Failed to register i2c client hd3ss3220 at 0x04 (-16) [ 580.020843][T11079] i2c i2c-0: delete_device: Can't find device in list [ 580.942676][ T51] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 580.954275][ T51] CPU: 0 PID: 51 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 580.961716][ T51] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 580.971811][ T51] Workqueue: hci3 hci_rx_work [ 580.976537][ T51] Call Trace: [ 580.979838][ T51] [ 580.982792][ T51] dump_stack_lvl+0x18c/0x250 [ 580.987504][ T51] ? show_regs_print_info+0x20/0x20 [ 580.992728][ T51] ? load_image+0x420/0x420 [ 580.997282][ T51] sysfs_create_dir_ns+0x26e/0x2a0 [ 581.002428][ T51] ? __lock_acquire+0x7d80/0x7d80 [ 581.007490][ T51] ? sysfs_warn_dup+0xa0/0xa0 [ 581.012207][ T51] ? do_raw_spin_unlock+0x121/0x230 [ 581.017446][ T51] kobject_add_internal+0x617/0xc90 [ 581.022712][ T51] kobject_add+0x164/0x240 [ 581.027174][ T51] ? kobject_init+0x1d0/0x1d0 [ 581.031902][ T51] ? get_device_parent+0x366/0x390 [ 581.037051][ T51] device_add+0x3fa/0xc40 [ 581.041429][ T51] hci_conn_add_sysfs+0xd5/0x1e0 [ 581.046405][ T51] le_conn_complete_evt+0xe9f/0x1480 [ 581.051728][ T51] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 581.058037][ T51] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 581.063804][ T51] ? mutex_unlock+0x10/0x10 [ 581.068345][ T51] ? skb_pull_data+0xf0/0x1f0 [ 581.073058][ T51] hci_le_conn_complete_evt+0x187/0x440 [ 581.078643][ T51] ? hci_remote_host_features_evt+0x150/0x150 [ 581.084754][ T51] hci_event_packet+0x7b4/0x1280 [ 581.089732][ T51] ? __lock_acquire+0x7d80/0x7d80 [ 581.094796][ T51] ? lock_chain_count+0x20/0x20 [ 581.099678][ T51] ? bis_list+0x290/0x290 [ 581.104048][ T51] ? lockdep_hardirqs_on+0x98/0x150 [ 581.109288][ T51] ? hci_send_to_monitor+0xd7/0x4f0 [ 581.114522][ T51] hci_rx_work+0x43a/0xd60 [ 581.118984][ T51] ? process_scheduled_works+0x975/0x1600 [ 581.124738][ T51] process_scheduled_works+0xa60/0x1600 [ 581.130347][ T51] ? worker_attach_to_pool+0x370/0x370 [ 581.135854][ T51] ? assign_work+0x3cc/0x5d0 [ 581.140493][ T51] worker_thread+0xa5e/0xfe0 [ 581.145143][ T51] kthread+0x2fa/0x390 [ 581.149239][ T51] ? pr_cont_work+0x550/0x550 [ 581.153952][ T51] ? kthread_blkcg+0xd0/0xd0 [ 581.158575][ T51] ret_from_fork+0x48/0x80 [ 581.163026][ T51] ? kthread_blkcg+0xd0/0xd0 [ 581.167666][ T51] ret_from_fork_asm+0x11/0x20 [ 581.172545][ T51] [ 581.177557][ T51] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 581.191810][ T51] Bluetooth: hci3: failed to register connection device [ 581.457607][T11099] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1451'. [ 581.598998][T11104] 9pnet_fd: Insufficient options for proto=fd [ 581.832417][T11094] Bluetooth: hci4: command 0x0406 tx timeout [ 582.653709][T11112] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1454'. [ 583.014461][T11070] Bluetooth: hci1: command 0x0406 tx timeout [ 584.964578][T11130] 9pnet_virtio: no channels available for device syz [ 585.245506][T11137] i2c i2c-0: delete_device: Can't find device in list [ 585.400464][T11134] i2c i2c-0: Failed to register i2c client hd3ss3220 at 0x04 (-16) [ 585.709793][T11144] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1462'. [ 585.867277][T11149] 9pnet_fd: Insufficient options for proto=fd [ 588.683441][ T5787] Bluetooth: hci3: command 0x0406 tx timeout [ 588.844402][T11169] 9pnet_virtio: no channels available for device syz [ 589.075937][T11177] 9pnet_fd: Insufficient options for proto=fd [ 590.324805][T11190] pim6reg: entered allmulticast mode [ 590.358995][T11190] pim6reg: left allmulticast mode [ 590.417531][T11192] 9pnet_virtio: no channels available for device syz [ 591.135314][ T28] audit: type=1326 audit(1787115772.759:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11173 comm="syz.3.1471" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa36339e0d9 code=0x0 [ 591.349672][T11196] netlink: 'syz.4.1477': attribute type 1 has an invalid length. [ 591.520721][T11196] 8021q: adding VLAN 0 to HW filter on device bond11 [ 594.933452][T11094] Bluetooth: hci4: command 0x0406 tx timeout [ 595.022329][T11216] 9pnet_fd: Insufficient options for proto=fd [ 595.182090][T11221] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1484'. [ 598.335440][T11257] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1495'. [ 598.450078][T11267] netlink: 'syz.3.1493': attribute type 1 has an invalid length. [ 598.586307][T11271] 9pnet_fd: Insufficient options for proto=fd [ 599.328811][T11267] 8021q: adding VLAN 0 to HW filter on device bond11 [ 599.645113][T11283] jffs2: notice: (11283) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 604.321677][T11320] 9pnet_fd: Insufficient options for proto=fd [ 605.267735][T11325] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1507'. [ 605.320565][T11335] netlink: 'syz.2.1508': attribute type 1 has an invalid length. [ 605.567712][T11345] jffs2: notice: (11345) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 606.611493][T11335] 8021q: adding VLAN 0 to HW filter on device bond8 [ 608.546466][T11382] 9pnet_fd: Insufficient options for proto=fd [ 609.351818][T11384] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1519'. [ 610.751047][T11419] netlink: 'syz.2.1522': attribute type 1 has an invalid length. [ 610.827249][T11419] 8021q: adding VLAN 0 to HW filter on device bond9 [ 612.040575][T11442] 9pnet_fd: Insufficient options for proto=fd [ 612.110589][T11441] jffs2: notice: (11441) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 614.031458][T11450] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1530'. [ 616.176862][T11480] netlink: 'syz.2.1537': attribute type 1 has an invalid length. [ 616.242352][T11480] 8021q: adding VLAN 0 to HW filter on device bond10 [ 616.797989][T11494] 9pnet_fd: Insufficient options for proto=fd [ 617.863979][T11507] netlink: 'syz.3.1550': attribute type 1 has an invalid length. [ 617.914875][T11510] 9pnet_fd: Insufficient options for proto=fd [ 618.648413][T11507] 8021q: adding VLAN 0 to HW filter on device bond12 [ 618.904491][T11521] jffs2: notice: (11521) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 620.000725][T11520] 9pnet_fd: Insufficient options for proto=fd [ 620.112750][T11526] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1542'. [ 620.180948][T11527] syz.3.1543: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 620.219053][T11527] CPU: 0 PID: 11527 Comm: syz.3.1543 Not tainted syzkaller #0 [ 620.226575][T11527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 620.236672][T11527] Call Trace: [ 620.240009][T11527] [ 620.243024][T11527] dump_stack_lvl+0x18c/0x250 [ 620.247814][T11527] ? show_regs_print_info+0x20/0x20 [ 620.253077][T11527] ? load_image+0x420/0x420 [ 620.257648][T11527] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 620.264151][T11527] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 620.270710][T11527] warn_alloc+0x246/0x340 [ 620.275130][T11527] ? stack_trace_save+0xaa/0x100 [ 620.280137][T11527] ? zone_watermark_ok_safe+0x230/0x230 [ 620.285736][T11527] ? kasan_set_track+0x5f/0x70 [ 620.290597][T11527] ? kasan_set_track+0x4e/0x70 [ 620.295399][T11527] ? __kasan_kmalloc+0x8f/0xa0 [ 620.300206][T11527] ? xsk_init_queue+0xad/0x100 [ 620.305104][T11527] ? xsk_setsockopt+0x413/0x750 [ 620.309993][T11527] ? do_sock_setsockopt+0x175/0x1a0 [ 620.315269][T11527] ? __x64_sys_setsockopt+0x182/0x200 [ 620.320701][T11527] __vmalloc_node_range+0x129/0x1320 [ 620.326073][T11527] ? free_vm_area+0x50/0x50 [ 620.330710][T11527] vmalloc_user+0x74/0x80 [ 620.335078][T11527] ? xskq_create+0xbf/0x170 [ 620.339610][T11527] xskq_create+0xbf/0x170 [ 620.343980][T11527] xsk_init_queue+0xad/0x100 [ 620.348609][T11527] xsk_setsockopt+0x413/0x750 [ 620.353327][T11527] ? xsk_poll+0x670/0x670 [ 620.357698][T11527] ? __fget_files+0x28/0x460 [ 620.362384][T11527] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 620.367979][T11527] ? security_socket_setsockopt+0x7e/0xa0 [ 620.373770][T11527] ? xsk_poll+0x670/0x670 [ 620.378145][T11527] do_sock_setsockopt+0x175/0x1a0 [ 620.383217][T11527] ? __fdget+0x180/0x210 [ 620.387512][T11527] __x64_sys_setsockopt+0x182/0x200 [ 620.392754][T11527] do_syscall_64+0x55/0xb0 [ 620.397207][T11527] ? clear_bhb_loop+0x40/0x90 [ 620.401992][T11527] ? clear_bhb_loop+0x40/0x90 [ 620.406703][T11527] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 620.412645][T11527] RIP: 0033:0x7fa36339e0d9 [ 620.417132][T11527] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 620.436838][T11527] RSP: 002b:00007fa36423d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 620.445392][T11527] RAX: ffffffffffffffda RBX: 00007fa363625fa0 RCX: 00007fa36339e0d9 [ 620.453425][T11527] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 620.461533][T11527] RBP: 00007fa363435024 R08: 0000000000000004 R09: 0000000000000000 [ 620.469584][T11527] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 620.477602][T11527] R13: 00007fa363626038 R14: 00007fa363625fa0 R15: 00007ffe91b0a058 [ 620.485637][T11527] [ 620.496891][T11526] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1542'. [ 620.505707][T11527] Mem-Info: [ 620.509153][T11527] active_anon:56383 inactive_anon:0 isolated_anon:0 [ 620.509153][T11527] active_file:18063 inactive_file:40144 isolated_file:0 [ 620.509153][T11527] unevictable:768 dirty:163 writeback:0 [ 620.509153][T11527] slab_reclaimable:10844 slab_unreclaimable:93271 [ 620.509153][T11527] mapped:24543 shmem:51676 pagetables:644 [ 620.509153][T11527] sec_pagetables:0 bounce:0 [ 620.509153][T11527] kernel_misc_reclaimable:0 [ 620.509153][T11527] free:1297378 free_pcp:7150 free_cma:0 [ 620.626455][T11527] Node 0 active_anon:225432kB inactive_anon:0kB active_file:72252kB inactive_file:160372kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:98072kB dirty:652kB writeback:0kB shmem:205168kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12472kB pagetables:2576kB sec_pagetables:0kB all_unreclaimable? no [ 620.770487][T11527] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 621.065488][T11527] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 621.485126][T11527] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 621.491058][T11527] Node 0 DMA32 free:1280416kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:229024kB inactive_anon:0kB active_file:72252kB inactive_file:159552kB unevictable:1536kB writepending:652kB present:3129332kB managed:2586828kB mlocked:0kB bounce:0kB free_pcp:8340kB local_pcp:2964kB free_cma:0kB [ 621.522598][T11527] lowmem_reserve[]: 0 0 0 0 0 [ 621.527528][T11527] Node 0 Normal free:4kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:820kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 621.554538][T11527] lowmem_reserve[]: 0 0 0 0 0 [ 621.559342][T11527] Node 1 Normal free:3889448kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:18796kB local_pcp:10152kB free_cma:0kB [ 621.589179][T11527] lowmem_reserve[]: 0 0 0 0 0 [ 621.594463][T11527] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 621.607509][T11527] Node 0 DMA32: 560*4kB (UM) 694*8kB (UME) 345*16kB (UME) 369*32kB (UME) 98*64kB (UME) 36*128kB (UME) 15*256kB (M) 7*512kB (M) 2*1024kB (ME) 1*2048kB (M) 301*4096kB (UM) = 1280416kB [ 621.626255][T11527] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 621.638444][T11527] Node 1 Normal: 180*4kB (U) 59*8kB (UME) 36*16kB (UME) 74*32kB (UME) 22*64kB (UE) 3*128kB (UM) 2*256kB (UE) 2*512kB (UM) 1*1024kB (E) 1*2048kB (E) 947*4096kB (M) = 3889448kB [ 621.661691][T11527] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 621.754869][T11527] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 621.778697][T11527] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 621.809124][T11527] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 621.824107][T11527] 110542 total pagecache pages [ 621.829012][T11527] 0 pages in swap cache [ 621.837360][T11527] Free swap = 124524kB [ 621.841588][T11527] Total swap = 124996kB [ 621.847500][T11527] 2097051 pages RAM [ 621.851367][T11527] 0 pages HighMem/MovableOnly [ 621.860888][T11527] 416958 pages reserved [ 621.868169][T11527] 0 pages cma reserved [ 622.235336][T11556] netlink: 'syz.3.1555': attribute type 1 has an invalid length. [ 622.310937][T11556] 8021q: adding VLAN 0 to HW filter on device bond13 [ 622.420977][ T28] audit: type=1326 audit(1787115804.039:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11549 comm="syz.2.1554" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8f4c59e0d9 code=0x0 [ 622.845860][T11565] 9pnet_fd: Insufficient options for proto=fd [ 623.856730][T11567] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1558'. [ 624.608577][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.615056][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.676859][T11579] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1561'. [ 625.142940][T11594] netlink: 'syz.4.1567': attribute type 1 has an invalid length. [ 625.199522][T11594] 8021q: adding VLAN 0 to HW filter on device bond12 [ 625.247910][T11595] tipc: Started in network mode [ 625.254965][T11595] tipc: Node identity 2007ff, cluster identity 4711 [ 625.261658][T11595] tipc: Node number set to 2099199 [ 625.546932][T11604] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1570'. [ 625.594158][T11604] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1570'. [ 625.686780][T11608] 9pnet_fd: Insufficient options for proto=fd [ 626.463784][ T28] audit: type=1326 audit(1787115808.079:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11598 comm="syz.1.1568" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe43559e0d9 code=0x0 [ 626.511506][T11613] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1573'. [ 628.391968][T11638] 9pnet_fd: Insufficient options for proto=fd [ 629.137654][T11640] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1581'. [ 629.262664][T11640] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1581'. [ 629.698377][T11647] netlink: 'syz.2.1582': attribute type 1 has an invalid length. [ 629.857965][T11647] 8021q: adding VLAN 0 to HW filter on device bond11 [ 629.934705][T11650] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1583'. [ 630.437706][T11666] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 630.444339][T11666] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 630.452599][T11666] vhci_hcd vhci_hcd.0: Device attached [ 630.835968][ T5820] usb 37-1: new high-speed USB device number 2 using vhci_hcd [ 631.138322][T11667] vhci_hcd: connection reset by peer [ 631.160503][ T2972] vhci_hcd: stop threads [ 631.220955][ T2972] vhci_hcd: release socket [ 631.291641][ T2972] vhci_hcd: disconnect device [ 632.370041][ T28] audit: type=1326 audit(1787115813.989:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11654 comm="syz.4.1584" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7622b9e0d9 code=0x0 [ 632.601930][T11679] 9pnet_fd: Insufficient options for proto=fd [ 633.506446][T11681] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1592'. [ 633.568846][T11681] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1592'. [ 633.858112][T11691] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1595'. [ 633.940558][T11693] netlink: 'syz.2.1596': attribute type 1 has an invalid length. [ 634.062187][T11693] 8021q: adding VLAN 0 to HW filter on device bond12 [ 634.123088][ T28] audit: type=1326 audit(1787115815.739:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11698 comm="syz.3.1598" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa36339e0d9 code=0x7ffc0000 [ 634.147172][ C1] vkms_vblank_simulate: vblank timer overrun [ 634.160738][ T28] audit: type=1326 audit(1787115815.739:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11698 comm="syz.3.1598" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa36339e0d9 code=0x7ffc0000 [ 634.191338][ T28] audit: type=1326 audit(1787115815.739:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11698 comm="syz.3.1598" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7fa36339e0d9 code=0x7ffc0000 [ 634.469408][T11702] netlink: 'syz.4.1599': attribute type 3 has an invalid length. [ 634.478487][T11702] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1599'. [ 634.557346][ T28] audit: type=1326 audit(1787115815.779:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11698 comm="syz.3.1598" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa36339e0d9 code=0x7ffc0000 [ 634.895724][T11709] 9pnet_fd: Insufficient options for proto=fd [ 636.093348][ T5820] vhci_hcd: vhci_device speed not set [ 636.272200][T11717] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1604'. [ 636.387004][T11717] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1604'. [ 636.988167][T11728] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1607'. [ 637.159274][T11724] netlink: 'syz.2.1606': attribute type 10 has an invalid length. [ 637.275834][T11724] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 637.680581][ T28] audit: type=1326 audit(1787115819.299:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11718 comm="syz.3.1605" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa36339e0d9 code=0x0 [ 638.003273][T11740] 9pnet_fd: Insufficient options for proto=fd [ 639.402611][T11748] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1614'. [ 639.496935][T11752] netlink: 'syz.2.1612': attribute type 1 has an invalid length. [ 639.580911][T11752] 8021q: adding VLAN 0 to HW filter on device bond13 [ 639.597941][T11748] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1614'. [ 639.646692][T11760] binder: 11759:11760 ioctl c0306201 200000000680 returned -14 [ 639.770586][T11763] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1617'. [ 640.089431][T11770] 9pnet_fd: Insufficient options for proto=fd [ 641.408183][T11786] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1627'. [ 641.512658][T11785] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1627'. [ 642.243588][T11793] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1628'. [ 642.573283][ T5821] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 642.581393][ T28] audit: type=1326 audit(1787115824.199:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11777 comm="syz.3.1621" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa36339e0d9 code=0x0 [ 642.662818][ T5787] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 642.674331][ T5787] CPU: 1 PID: 5787 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 642.681953][ T5787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 642.692062][ T5787] Workqueue: hci2 hci_rx_work [ 642.696787][ T5787] Call Trace: [ 642.700123][ T5787] [ 642.703082][ T5787] dump_stack_lvl+0x18c/0x250 [ 642.707808][ T5787] ? show_regs_print_info+0x20/0x20 [ 642.713050][ T5787] ? load_image+0x420/0x420 [ 642.717601][ T5787] sysfs_create_dir_ns+0x26e/0x2a0 [ 642.722744][ T5787] ? __lock_acquire+0x7d80/0x7d80 [ 642.727831][ T5787] ? sysfs_warn_dup+0xa0/0xa0 [ 642.732557][ T5787] ? do_raw_spin_unlock+0x121/0x230 [ 642.738070][ T5787] kobject_add_internal+0x617/0xc90 [ 642.743322][ T5787] kobject_add+0x164/0x240 [ 642.747786][ T5787] ? kobject_init+0x1d0/0x1d0 [ 642.752503][ T5787] ? get_device_parent+0x366/0x390 [ 642.757649][ T5787] device_add+0x3fa/0xc40 [ 642.762014][ T5787] hci_conn_add_sysfs+0xd5/0x1e0 [ 642.766989][ T5787] le_conn_complete_evt+0xe9f/0x1480 [ 642.772316][ T5787] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 642.778599][ T5787] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 642.784290][ T5787] ? mutex_unlock+0x10/0x10 [ 642.788830][ T5787] ? skb_pull_data+0xf0/0x1f0 [ 642.793543][ T5787] hci_le_conn_complete_evt+0x187/0x440 [ 642.799131][ T5787] ? hci_remote_host_features_evt+0x150/0x150 [ 642.805230][ T5787] hci_event_packet+0x7b4/0x1280 [ 642.810233][ T5787] ? __lock_acquire+0x7d80/0x7d80 [ 642.815380][ T5787] ? lock_chain_count+0x20/0x20 [ 642.820270][ T5787] ? bis_list+0x290/0x290 [ 642.824644][ T5787] ? lockdep_hardirqs_on+0x98/0x150 [ 642.829889][ T5787] ? hci_send_to_monitor+0xd7/0x4f0 [ 642.835129][ T5787] hci_rx_work+0x43a/0xd60 [ 642.839590][ T5787] ? process_scheduled_works+0x975/0x1600 [ 642.845381][ T5787] process_scheduled_works+0xa60/0x1600 [ 642.851002][ T5787] ? worker_attach_to_pool+0x370/0x370 [ 642.856512][ T5787] ? assign_work+0x3cc/0x5d0 [ 642.861185][ T5787] worker_thread+0xa5e/0xfe0 [ 642.865842][ T5787] kthread+0x2fa/0x390 [ 642.869944][ T5787] ? pr_cont_work+0x550/0x550 [ 642.874658][ T5787] ? kthread_blkcg+0xd0/0xd0 [ 642.879285][ T5787] ret_from_fork+0x48/0x80 [ 642.883741][ T5787] ? kthread_blkcg+0xd0/0xd0 [ 642.888365][ T5787] ret_from_fork_asm+0x11/0x20 [ 642.893205][ T5787] [ 642.897238][ T5787] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 642.911420][ T5787] Bluetooth: hci2: failed to register connection device [ 642.964076][ T5821] usb 5-1: device descriptor read/64, error -71 [ 643.105810][T11804] 9pnet_fd: Insufficient options for proto=fd [ 644.041030][T11811] netlink: 'syz.2.1632': attribute type 1 has an invalid length. [ 644.049122][ T5821] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 644.086833][T11811] 8021q: adding VLAN 0 to HW filter on device bond14 [ 644.206342][ T5821] usb 5-1: device descriptor read/64, error -71 [ 644.334058][ T5821] usb usb5-port1: attempt power cycle [ 644.367632][T11821] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1636'. [ 644.399506][T11821] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1636'. [ 645.874410][T11094] Bluetooth: hci2: command 0x0406 tx timeout [ 645.896973][ T5909] IPVS: starting estimator thread 0... [ 647.133500][T11832] IPVS: using max 19 ests per chain, 45600 per kthread [ 647.277393][T11840] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1639'. [ 647.294038][T11843] 9pnet_fd: Insufficient options for proto=fd [ 648.342465][T11859] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1646'. [ 648.508581][ T28] audit: type=1326 audit(1787115830.129:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11849 comm="syz.4.1642" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7622b9e0d9 code=0x0 [ 648.583661][T11868] netlink: 'syz.3.1648': attribute type 1 has an invalid length. [ 648.614637][T11868] 8021q: adding VLAN 0 to HW filter on device bond14 [ 650.109301][T11878] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 650.404785][T11887] 9pnet_fd: Insufficient options for proto=fd [ 650.431714][T11886] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1652'. [ 651.338716][T11896] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1656'. [ 651.483260][ T28] audit: type=1326 audit(1787115833.099:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11899 comm="syz.2.1657" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8f4c59e0d9 code=0x0 [ 651.787248][T11914] netlink: 'syz.1.1662': attribute type 1 has an invalid length. [ 651.828421][T11914] 8021q: adding VLAN 0 to HW filter on device bond2 [ 652.472517][T11925] 9pnet_fd: Insufficient options for proto=fd [ 653.841684][T11933] 8021q: adding VLAN 0 to HW filter on device bond3 [ 654.150748][T11940] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1670'. [ 654.163023][T11942] netlink: 'syz.1.1671': attribute type 1 has an invalid length. [ 654.291484][T11942] 8021q: adding VLAN 0 to HW filter on device bond4 [ 654.503698][ T28] audit: type=1326 audit(1787115836.109:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11947 comm="syz.4.1672" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7622b9e0d9 code=0x0 [ 654.659816][T11958] 9pnet_fd: Insufficient options for proto=fd [ 655.732046][T11969] bonding: unable to delete non-existent bo [ 655.745084][T11966] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1680'. [ 655.880366][T11966] 8021q: adding VLAN 0 to HW filter on device bond15 [ 655.889511][T11972] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1681'. [ 655.932490][T11978] netlink: 'syz.4.1682': attribute type 1 has an invalid length. [ 656.150784][T11978] 8021q: adding VLAN 0 to HW filter on device bond13 [ 656.271886][T11987] 9pnet_fd: Insufficient options for proto=fd [ 657.363511][ T28] audit: type=1326 audit(1787115838.979:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11990 comm="syz.4.1686" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7622b9e0d9 code=0x0 [ 658.591098][T12012] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1693'. [ 658.621437][T12015] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1694'. [ 658.902887][T12022] 9pnet_fd: Insufficient options for proto=fd [ 660.505094][ T28] audit: type=1326 audit(1787115842.129:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12027 comm="syz.1.1698" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe43559e0d9 code=0x0 [ 661.207854][T12047] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1703'. [ 661.343719][T12052] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1705'. [ 661.508580][T12057] 9pnet_fd: Insufficient options for proto=fd [ 663.167811][ T28] audit: type=1326 audit(1787115844.789:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12072 comm="syz.3.1713" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa36339e0d9 code=0x0 [ 664.251568][ T28] audit: type=1326 audit(1787115845.869:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12068 comm="syz.2.1711" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8f4c59e0d9 code=0x0 [ 664.565539][T12080] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1715'. [ 664.822680][T12079] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1714'. [ 665.174530][T12088] 9pnet_fd: Insufficient options for proto=fd [ 667.058276][T12114] 9pnet_fd: Insufficient options for proto=fd [ 668.017609][T12116] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1727'. [ 668.032602][T12123] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1729'. [ 668.839937][T12123] 8021q: adding VLAN 0 to HW filter on device bond15 [ 668.984063][T12130] Invalid argument reading file caps for ./file0 [ 669.252391][ T28] audit: type=1326 audit(1787115850.859:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12127 comm="syz.2.1731" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8f4c59e0d9 code=0x0 [ 669.851668][T12146] 9pnet_fd: Insufficient options for proto=fd [ 670.826999][T12153] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1740'. [ 671.048270][T12157] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1742'. [ 671.121422][T12157] 8021q: adding VLAN 0 to HW filter on device bond16 [ 672.281747][T12176] 9pnet_fd: Insufficient options for proto=fd [ 673.263377][ T28] audit: type=1326 audit(1787115854.869:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12179 comm="syz.4.1749" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7622b9e0d9 code=0x0 [ 673.319560][T12186] smc: net device ip6_vti0 applied user defined pnetid SYZ2 [ 673.465023][T12189] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1751'. [ 673.613497][ T8] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 674.500944][T12196] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1753'. [ 674.633937][ T8] usb 2-1: Using ep0 maxpacket: 32 [ 674.649320][ T8] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 674.674175][ T8] usb 2-1: config 0 has no interfaces? [ 674.685146][ T8] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 674.694949][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 674.705216][ T8] usb 2-1: Product: syz [ 674.709815][ T8] usb 2-1: Manufacturer: syz [ 674.715594][ T8] usb 2-1: SerialNumber: syz [ 674.724665][ T8] usb 2-1: config 0 descriptor?? [ 675.314830][ T5821] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 675.513598][ T5821] usb 3-1: Using ep0 maxpacket: 8 [ 675.539415][ T5821] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 675.589362][ T5821] usb 3-1: config 0 has no interface number 0 [ 675.632707][ T5821] usb 3-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 675.666980][ T5821] usb 3-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 675.755580][ T5821] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 675.774230][ T5821] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 675.784918][ T5821] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 675.831337][ T5821] usb 3-1: config 0 descriptor?? [ 675.850781][ T5821] ldusb 3-1:0.55: Interrupt in endpoint not found [ 675.926120][T12214] 9pnet_fd: Insufficient options for proto=fd [ 676.785475][ T5821] usb 2-1: USB disconnect, device number 6 [ 676.922081][T12218] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1761'. [ 678.051908][T12235] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1765'. [ 678.297177][ T8] usb 3-1: USB disconnect, device number 4 [ 678.420595][ T28] audit: type=1326 audit(1787115860.039:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12228 comm="syz.3.1764" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa36339e0d9 code=0x0 [ 678.656476][T12245] 9pnet_fd: Insufficient options for proto=fd [ 679.706383][T12247] syzkaller0: entered promiscuous mode [ 679.715408][T12247] syzkaller0: entered allmulticast mode [ 679.804519][T12250] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1771'. [ 680.873994][T12264] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1775'. [ 680.951434][T12269] 9pnet_fd: Insufficient options for proto=fd [ 681.870372][T12277] netlink: 'syz.1.1778': attribute type 1 has an invalid length. [ 681.940564][T12277] 8021q: adding VLAN 0 to HW filter on device bond5 [ 682.071119][ T28] audit: type=1326 audit(1787115863.689:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12280 comm="syz.4.1781" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7622b9e0d9 code=0x0 [ 682.163285][ T23] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 682.346227][ T23] usb 4-1: Using ep0 maxpacket: 32 [ 682.354645][ T23] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 682.365319][ T23] usb 4-1: config 155 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 682.376250][ T23] usb 4-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 682.393048][ T23] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 682.402635][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 682.417480][ T23] usb 4-1: Product: syz [ 682.421717][ T23] usb 4-1: Manufacturer: syz [ 682.427132][ T23] usb 4-1: SerialNumber: syz [ 682.449174][ T23] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 682.458546][ T23] imon 4-1:155.0: unable to initialize intf0, err -19 [ 682.471760][ T23] imon:imon_probe: failed to initialize context! [ 682.478307][ T23] imon 4-1:155.0: unable to register, err -19 [ 682.681137][ T8] usb 4-1: USB disconnect, device number 6 [ 682.720229][T12292] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1783'. [ 685.819364][T12314] 9pnet_fd: Insufficient options for proto=fd [ 686.047842][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.047955][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.365218][T12329] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1793'. [ 686.399902][T12333] netlink: 'syz.4.1792': attribute type 1 has an invalid length. [ 686.650949][T12333] 8021q: adding VLAN 0 to HW filter on device bond14 [ 688.014371][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 688.547219][T12361] 9pnet_fd: Insufficient options for proto=fd [ 689.362994][T12365] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1804'. [ 689.901176][T12380] Invalid ELF header magic: != ELF [ 690.093310][T12380] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 690.099922][T12380] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 690.107965][T12380] vhci_hcd vhci_hcd.0: Device attached [ 690.137455][T12384] netlink: 'syz.2.1807': attribute type 1 has an invalid length. [ 690.449179][T12381] vhci_hcd: connection closed [ 690.457573][ T6132] vhci_hcd: stop threads [ 690.589346][ T6132] vhci_hcd: release socket [ 690.603390][ T6132] vhci_hcd: disconnect device [ 690.623338][ T5821] usb 41-1: new high-speed USB device number 2 using vhci_hcd [ 690.631123][ T5821] usb 41-1: enqueue for inactive port 0 [ 690.642833][T12384] 8021q: adding VLAN 0 to HW filter on device bond16 [ 690.717628][ T5821] vhci_hcd: vhci_device speed not set [ 691.308997][T12396] 9pnet_fd: Insufficient options for proto=fd [ 692.159278][ T5921] IPVS: starting estimator thread 0... [ 692.323525][T12401] IPVS: using max 16 ests per chain, 38400 per kthread [ 692.630258][T12409] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1815'. [ 692.639787][ T8] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 692.855199][ T8] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 692.937933][ T8] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 692.986996][ T5820] libceph: connect (1)[c::]:6789 error -101 [ 693.007291][ T8] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 693.019211][ T5820] libceph: mon0 (1)[c::]:6789 connect error [ 693.044853][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 693.149290][T12415] ceph: No mds server is up or the cluster is laggy [ 693.185279][ T8] usb 3-1: SerialNumber: syz [ 693.685667][T12398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 693.695552][T12398] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 693.747234][ T8] usb 3-1: 0:2 : does not exist [ 693.909120][ T8] usb 3-1: USB disconnect, device number 5 [ 694.091138][T12426] bridge_slave_0: default FDB implementation only supports local addresses [ 694.116340][ T9515] udevd[9515]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 694.545332][T12434] netlink: 'syz.2.1821': attribute type 1 has an invalid length. [ 694.890486][T12434] 8021q: adding VLAN 0 to HW filter on device bond17 [ 695.319865][T12440] 9pnet_fd: Insufficient options for proto=fd [ 696.367655][T12449] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1825'. [ 696.624174][T12459] md: could not open device unknown-block(1,0). [ 696.635762][T12459] md: invalid raid superblock magic on ram3 [ 696.642010][T12459] md: ram3 does not have a valid v0.90 superblock, not importing! [ 696.816552][T12455] smc: net device ip6_vti0 erased user defined pnetid SYZ2 [ 696.889970][T12459] md/raid10:md0: unsupported raid10 layout: 0x 0 [ 696.897850][T12459] md: pers->run() failed ... [ 698.092959][T12473] netlink: 'syz.3.1833': attribute type 1 has an invalid length. [ 698.177908][T12477] 9pnet_fd: Insufficient options for proto=fd [ 698.948257][T12473] 8021q: adding VLAN 0 to HW filter on device bond17 [ 698.995850][T12481] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1836'. [ 700.920723][T12508] 9pnet_fd: Insufficient options for proto=fd [ 701.996323][T12515] netlink: 'syz.3.1847': attribute type 1 has an invalid length. [ 702.099570][T12515] 8021q: adding VLAN 0 to HW filter on device bond18 [ 702.215073][T12517] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1849'. [ 703.548038][T12539] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1855'. [ 703.745561][T12543] 9pnet_fd: Insufficient options for proto=fd [ 704.705693][T12547] md/raid10:md0: unsupported raid10 layout: 0x 0 [ 704.715742][T12547] md: pers->run() failed ... [ 704.781858][T12554] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1862'. [ 706.073391][T12566] netlink: 'syz.2.1865': attribute type 1 has an invalid length. [ 706.374777][T12566] 8021q: adding VLAN 0 to HW filter on device bond18 [ 707.466950][T12584] 9pnet_fd: Insufficient options for proto=fd [ 707.537780][T12583] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1870'. [ 708.153687][T12592] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 708.184902][T12592] CIFS: Attempting to mount //127.0.0.1/share [ 708.686658][ T8] hid-generic 0000:0000:0000.0001: item fetching failed at offset 0/2 [ 708.904069][ T8] hid-generic: probe of 0000:0000:0000.0001 failed with error -22 [ 708.980615][T12591] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1873'. [ 709.846952][T12592] CIFS: VFS: Error connecting to socket. Aborting operation. [ 709.861101][T12592] CIFS: VFS: cifs_mount failed w/return code = -4 [ 709.989767][T12603] block nbd0: not configured, cannot reconfigure [ 710.897708][T12624] 9pnet_fd: Insufficient options for proto=fd [ 711.530093][T12629] netlink: 'syz.2.1883': attribute type 1 has an invalid length. [ 711.746650][T12629] 8021q: adding VLAN 0 to HW filter on device bond19 [ 711.837718][T12632] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1882'. [ 712.656242][T12639] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1885'. [ 712.744193][T12646] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1887'. [ 713.310705][T12660] 9pnet_fd: Insufficient options for proto=fd [ 714.059535][T12667] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1896'. [ 714.248380][T12673] netlink: 'syz.3.1897': attribute type 1 has an invalid length. [ 714.312152][T12673] 8021q: adding VLAN 0 to HW filter on device bond19 [ 714.370314][T12676] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1898'. [ 715.459722][T12688] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1900'. [ 716.085911][T12702] 9pnet_fd: Insufficient options for proto=fd [ 716.770392][T12711] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1907'. [ 716.935090][T12717] CIFS: Attempting to mount //127.0.0.1/share [ 717.724433][T12717] CIFS: VFS: Error connecting to socket. Aborting operation. [ 717.737846][T12717] CIFS: VFS: cifs_mount failed w/return code = -4 [ 718.728162][T12725] netlink: 'syz.1.1911': attribute type 1 has an invalid length. [ 718.961377][T12725] 8021q: adding VLAN 0 to HW filter on device bond6 [ 719.034150][T12730] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1913'. [ 721.190233][T12741] 9pnet_fd: Insufficient options for proto=fd [ 721.792745][T12745] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1918'. [ 722.517394][T12761] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1923'. [ 723.206243][T12761] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 723.318623][T12761] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 723.561574][T12765] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1924'. [ 723.671684][T12772] 9pnet_fd: Insufficient options for proto=fd [ 723.716437][T12761] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 724.071449][T12761] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 724.679328][T12761] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.900671][T12761] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.925220][T12784] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1929'. [ 724.936797][T12781] netlink: 'syz.1.1928': attribute type 1 has an invalid length. [ 724.994808][T12781] 8021q: adding VLAN 0 to HW filter on device bond7 [ 726.169690][T12761] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 726.802185][T12761] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 727.942813][T12805] 9pnet_fd: Insufficient options for proto=fd [ 728.215197][T12802] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1934'. [ 730.806486][T12829] futex_wake_op: syz.4.1942 tries to shift op by 144; fix this program [ 730.894126][T12830] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1940'. [ 731.135208][T12832] netlink: 'syz.1.1941': attribute type 1 has an invalid length. [ 731.605437][T12832] 8021q: adding VLAN 0 to HW filter on device bond8 [ 731.911881][T12841] 9pnet_fd: Insufficient options for proto=fd [ 733.279686][T12850] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1948'. [ 733.523391][T12860] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1951'. [ 735.439546][T12872] netlink: 'syz.4.1954': attribute type 1 has an invalid length. [ 735.568246][T12879] 9pnet_fd: Insufficient options for proto=fd [ 735.582672][T12874] loop0: detected capacity change from 0 to 3904 [ 735.909017][T12880] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 736.028559][T12880] ldm_validate_privheads(): Disk read failed. [ 736.137148][T12880] ldm_parse_tocblock(): TOCBLOCK's second bitmap is 'log', should be ''. [ 736.220386][T12880] ldm_parse_tocblock(): Cannot find TOCBLOCK, database may be corrupt. [ 736.334048][T12880] ldm_validate_tocblocks(): Disk read failed for TOCBLOCK 2. [ 736.341664][T12880] ldm_validate_tocblocks(): Disk read failed for TOCBLOCK 3. [ 736.349225][T12880] ldm_validate_tocblocks(): Failed to find a valid TOCBLOCK. [ 736.356827][T12880] loop0: [ 736.359843][T12880] loop0: partition table partially beyond EOD, truncated [ 736.415362][T12872] 8021q: adding VLAN 0 to HW filter on device bond15 [ 736.992283][T12887] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1959'. [ 737.333245][T12892] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1961'. [ 739.175537][T12906] 9pnet_fd: Insufficient options for proto=fd [ 741.336220][T12920] netlink: 'syz.1.1968': attribute type 1 has an invalid length. [ 741.379220][T12920] 8021q: adding VLAN 0 to HW filter on device bond9 [ 741.793233][T12925] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(0.0.0), cmd(3) [ 742.398507][T12929] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1971'. [ 742.888434][T12934] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1973'. [ 742.941886][T12940] gre1: entered promiscuous mode [ 743.198882][T12947] 9pnet_fd: Insufficient options for proto=fd [ 746.086628][T12962] netlink: 'syz.2.1981': attribute type 1 has an invalid length. [ 746.411191][T12962] 8021q: adding VLAN 0 to HW filter on device bond20 [ 746.511314][T12972] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1984'. [ 746.579636][T12975] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1985'. [ 746.888378][T12985] bridge_slave_0: default FDB implementation only supports local addresses [ 747.476809][T12994] 9pnet_fd: Insufficient options for proto=fd [ 748.280497][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 748.303302][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 749.479656][T13010] netlink: 'syz.1.1995': attribute type 1 has an invalid length. [ 749.578778][T13010] 8021q: adding VLAN 0 to HW filter on device bond10 [ 749.628640][T13017] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1997'. [ 749.649679][T13014] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1996'. [ 749.699817][T13017] 8021q: adding VLAN 0 to HW filter on device bond21 [ 749.928007][T13030] 9pnet_fd: Insufficient options for proto=fd [ 752.249761][T13047] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2007'. [ 752.306906][T13051] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2008'. [ 752.447718][T13051] 8021q: adding VLAN 0 to HW filter on device bond11 [ 754.281962][T13062] 9pnet_fd: Insufficient options for proto=fd [ 755.029302][T13076] Mass Storage Function, version: 2009/09/11 [ 755.037792][T13076] LUN: removable file: (no medium) [ 755.049845][ T28] audit: type=1800 audit(1787115936.669:46): pid=13076 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2014" name="file" dev="configfs" ino=37992 res=0 errno=0 [ 755.050941][T13077] netlink: 'syz.4.2011': attribute type 1 has an invalid length. [ 755.277449][T13041] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 755.346207][T13077] 8021q: adding VLAN 0 to HW filter on device bond16 [ 756.146006][T13092] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2018'. [ 756.158721][T13088] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2017'. [ 756.282605][T13092] 8021q: adding VLAN 0 to HW filter on device bond17 [ 756.717202][T13106] 9pnet_fd: Insufficient options for proto=fd [ 760.261503][T13126] netlink: 'syz.2.2026': attribute type 1 has an invalid length. [ 760.441148][T13125] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2027'. [ 760.466631][T13126] 8021q: adding VLAN 0 to HW filter on device bond22 [ 761.299603][T13137] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2029'. [ 761.564250][T13137] 8021q: adding VLAN 0 to HW filter on device bond20 [ 761.848645][T13155] 9pnet_fd: Insufficient options for proto=fd [ 764.473207][T13166] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2038'. [ 765.333809][T13141] null_blk: disk nullb1 created [ 765.483044][T13178] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2041'. [ 765.518254][T13178] 8021q: adding VLAN 0 to HW filter on device bond21 [ 767.869401][T13193] 9pnet_fd: Insufficient options for proto=fd [ 769.404500][T13215] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2053'. [ 769.462131][T13215] 8021q: adding VLAN 0 to HW filter on device bond22 [ 769.701395][T13224] 9pnet_fd: Insufficient options for proto=fd [ 771.911530][T13233] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2059'. [ 775.179712][T13254] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2065'. [ 775.251524][T13254] 8021q: adding VLAN 0 to HW filter on device bond18 [ 777.179585][T13268] 9pnet_fd: Insufficient options for proto=fd [ 777.768940][T13271] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2070'. [ 778.878541][T13295] fuse: Bad value for 'user_id' [ 778.936180][T13300] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2076'. [ 778.963630][T13300] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 779.150404][T13308] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2077'. [ 779.263704][T13308] 8021q: adding VLAN 0 to HW filter on device bond12 [ 780.765575][T13327] 9pnet_fd: Insufficient options for proto=fd [ 782.379003][T13330] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2081'. [ 782.705038][T13353] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2086'. [ 782.759430][T13353] 8021q: adding VLAN 0 to HW filter on device bond23 [ 785.590570][T13391] 9pnet_fd: Insufficient options for proto=fd [ 786.287554][T13404] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2096'. [ 786.301720][T13399] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2094'. [ 786.355698][T13404] 8021q: adding VLAN 0 to HW filter on device bond23 [ 787.785330][T13428] 9pnet_fd: Insufficient options for proto=fd [ 791.038618][T13445] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2105'. [ 791.141185][T13445] 8021q: adding VLAN 0 to HW filter on device bond24 [ 791.317742][T13454] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2107'. [ 791.590271][T13467] 9pnet_fd: Insufficient options for proto=fd [ 794.895670][T13486] 9pnet_fd: Insufficient options for proto=fd [ 794.934891][T13486] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 795.083441][T13490] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2117'. [ 795.572907][T13494] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2118'. [ 795.592984][T13490] 8021q: adding VLAN 0 to HW filter on device bond24 [ 797.540697][ T5787] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 797.568375][ T5787] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 797.578840][ T5787] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 797.593648][ T5787] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 797.603359][ T5787] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 797.615895][ T5787] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 798.189721][T13542] chnl_net:caif_netlink_parms(): no params data found [ 798.360563][T13553] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2128'. [ 800.173516][T11094] Bluetooth: hci0: command tx timeout [ 800.326921][T13564] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2129'. [ 800.551141][T13564] 8021q: adding VLAN 0 to HW filter on device bond25 [ 800.574692][T13542] bridge0: port 1(bridge_slave_0) entered blocking state [ 800.592487][T13542] bridge0: port 1(bridge_slave_0) entered disabled state [ 800.617277][T13542] bridge_slave_0: entered allmulticast mode [ 800.639769][T13542] bridge_slave_0: entered promiscuous mode [ 801.116217][T13542] bridge0: port 2(bridge_slave_1) entered blocking state [ 801.135892][T13542] bridge0: port 2(bridge_slave_1) entered disabled state [ 801.167185][T13542] bridge_slave_1: entered allmulticast mode [ 801.194674][T13542] bridge_slave_1: entered promiscuous mode [ 801.387067][T13542] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 801.418168][T13542] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 801.550018][T13542] team0: Port device team_slave_0 added [ 801.585496][T13542] team0: Port device team_slave_1 added [ 801.681868][T13542] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 801.713437][T13542] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 801.768134][T13542] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 801.792876][T13542] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 801.807908][T13542] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 801.912165][T13542] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 802.068341][T13542] hsr_slave_0: entered promiscuous mode [ 802.090799][T13542] hsr_slave_1: entered promiscuous mode [ 802.215797][T11094] Bluetooth: hci0: command tx timeout [ 802.305243][T13576] pci 0000:00:04.0: [1af4:1000] type 00 class 0x020000 [ 802.350945][T13576] pci 0000:00:04.0: BAR 0 [io 0xc040-0xc07f] [ 802.378628][T13576] pci 0000:00:04.0: BAR 1 [mem 0xfe801000-0xfe80107f] [ 802.467414][T13576] pci 0000:00:04.0: BAR 1 [mem 0xc0000000-0xc000007f]: assigned [ 802.483751][T13576] pci 0000:00:04.0: BAR 0 [io 0xc040-0xc07f]: assigned [ 802.549578][ T8] virtio-pci 0000:00:04.0: virtio_pci: leaving for legacy driver [ 802.824771][T13612] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2137'. [ 803.563447][ T5821] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 803.861856][ T5821] usb 4-1: Using ep0 maxpacket: 32 [ 803.992767][ T5821] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 804.188361][ T5821] usb 4-1: config 0 has no interfaces? [ 804.283638][T11094] Bluetooth: hci0: command tx timeout [ 804.327622][ T5821] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 804.467564][ T5821] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 804.595601][ T5821] usb 4-1: Product: syz [ 804.669571][ T5821] usb 4-1: Manufacturer: syz [ 804.746287][ T5821] usb 4-1: SerialNumber: syz [ 805.004013][ T5821] usb 4-1: config 0 descriptor?? [ 806.363274][T11094] Bluetooth: hci0: command tx timeout [ 806.437834][T13542] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 806.710702][ T8] usb 4-1: USB disconnect, device number 7 [ 806.731927][T13542] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 806.878709][T13542] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 806.913981][T13542] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 807.137450][T13542] 8021q: adding VLAN 0 to HW filter on device bond0 [ 807.229741][T13542] 8021q: adding VLAN 0 to HW filter on device team0 [ 807.254052][ T2972] bridge0: port 1(bridge_slave_0) entered blocking state [ 807.261244][ T2972] bridge0: port 1(bridge_slave_0) entered forwarding state [ 807.303963][ T2972] bridge0: port 2(bridge_slave_1) entered blocking state [ 807.311122][ T2972] bridge0: port 2(bridge_slave_1) entered forwarding state [ 807.878185][T13542] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 808.560371][T13542] veth0_vlan: entered promiscuous mode [ 808.602125][T13542] veth1_vlan: entered promiscuous mode [ 808.681747][T13542] veth0_macvtap: entered promiscuous mode [ 808.745535][T13542] veth1_macvtap: entered promiscuous mode [ 808.789656][T13542] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 808.835438][T13542] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 808.884082][T13542] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 808.892883][T13542] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 808.908487][T13542] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 808.918514][T13542] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 808.934907][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.941341][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.103316][ T2935] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 809.111211][ T2935] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 809.169651][ T2994] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 809.190815][ T2994] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 809.487244][T13692] 9pnet_fd: Insufficient options for proto=fd [ 812.771472][ T2935] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 812.823823][ T2935] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 812.880221][ T2935] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 812.960508][ T2935] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 814.062862][ T2935] hsr_slave_0: left promiscuous mode [ 814.069268][ T2935] hsr_slave_1: left promiscuous mode [ 814.075957][ T2935] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 814.084132][ T2935] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 814.091885][ T2935] bridge_slave_1: left allmulticast mode [ 814.098378][ T2935] bridge_slave_1: left promiscuous mode [ 814.104532][ T2935] bridge0: port 2(bridge_slave_1) entered disabled state [ 814.116320][ T2935] bridge_slave_0: left allmulticast mode [ 814.122021][ T2935] bridge_slave_0: left promiscuous mode [ 814.128315][ T2935] bridge0: port 1(bridge_slave_0) entered disabled state [ 814.341677][ T2935] bond12 (unregistering): Released all slaves [ 814.507613][ T2935] bond11 (unregistering): Released all slaves [ 814.668441][ T2935] bond10 (unregistering): Released all slaves [ 814.818514][ T2935] bond9 (unregistering): Released all slaves [ 814.974893][ T2935] bond8 (unregistering): Released all slaves [ 815.133579][ T2935] bond7 (unregistering): Released all slaves [ 815.289566][ T2935] bond6 (unregistering): Released all slaves [ 815.449285][ T2935] bond5 (unregistering): Released all slaves [ 815.609861][ T2935] bond4 (unregistering): Released all slaves [ 815.767550][ T2935] bond3 (unregistering): Released all slaves [ 815.923968][ T2935] bond2 (unregistering): Released all slaves [ 815.947586][ T2935] bond1 (unregistering): (slave geneve2): Releasing active interface [ 816.098365][ T2935] bond1 (unregistering): Released all slaves [ 816.810907][ T2935] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 816.866186][ T2935] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 817.276798][ T2935] bond0 (unregistering): Released all slaves [ 828.861267][T13856] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2140'. [ 830.358636][T13881] 9pnet_fd: Insufficient options for proto=fd [ 830.561595][T13875] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2148'. `syz.4.2151'. [ 841.978353][T13894] workqueue: Failed to create a rescuer kthread for wq "bond19": -EINTR [ 842.773309][ T5914] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 843.000006][ T5914] usb 3-1: config 0 interface 0 altsetting 255 has an invalid endpoint with address 0xFF, skipping [ 843.023801][ T5914] usb 3-1: config 0 interface 0 has no altsetting 0 [ 843.044574][ T5914] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 843.071155][ T5914] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 843.087573][ T5914] usb 3-1: Product: syz [ 843.104483][ T5914] usb 3-1: Manufacturer: syz [ 843.114856][ T5914] usb 3-1: SerialNumber: syz [ 843.137781][ T5914] usb 3-1: config 0 descriptor?? [ 843.230277][ T5914] snd-usb-audio: probe of 3-1:0.0 failed with error -22 [ 843.358119][T13902] udevd[13902]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 843.450734][ T5914] usb 3-1: USB disconnect, device number 6 [ 844.964819][T13934] 9pnet_fd: Insufficient options for proto=fd [ 845.231014][T13941] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2162'. [ 845.390597][T13950] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2163'. [ 845.535421][T13950] 8021q: adding VLAN 0 to HW filter on device bond25 [ 845.768667][T13961] ntfs3: nullb0: Primary boot signature is not NTFS. [ 845.788038][T13961] ntfs3: nullb0: try to read out of volume at offset 0x3e7ffffe00 [ 845.809283][T13965] binder: 13962:13965 ioctl c0306201 0 returned -14 [ 848.695914][T14001] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2172'. [ 848.944812][ T5914] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 849.163508][ T5914] usb 3-1: Using ep0 maxpacket: 8 [ 849.191183][ T5914] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 849.208482][ T5914] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 849.219392][ T5914] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 849.234187][ T5914] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 849.249031][ T5914] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 849.267094][ T5914] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 849.277127][ T5914] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 849.317760][T14014] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2176'. [ 849.430102][T14014] 8021q: adding VLAN 0 to HW filter on device bond19 [ 849.547372][ T5914] usb 3-1: usb_control_msg returned -32 [ 849.583256][ T5914] usbtmc 3-1:16.0: can't read capabilities [ 851.056660][T14061] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2182'. [ 852.214117][ T5821] usb 3-1: USB disconnect, device number 7 [ 852.277837][T14077] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2186'. [ 852.513268][T14077] 8021q: adding VLAN 0 to HW filter on device bond20 [ 853.671905][T11094] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 853.827039][T14112] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2192'. [ 854.252845][T14120] jffs2: notice: (14120) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 855.688120][T14141] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 855.715878][T14141] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 855.730325][T14141] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 855.739625][T14141] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 855.805231][T14142] trusted_key: encrypted_key: insufficient parameters specified [ 855.869598][T14144] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2199'. [ 855.912331][T14144] 8021q: adding VLAN 0 to HW filter on device bond21 [ 856.147223][T14153] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2202'. [ 858.041563][T14174] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2208'. [ 858.535632][T14197] jffs2: notice: (14197) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 860.042404][T14206] gadgetfs: bound to dummy_udc driver [ 860.496133][T14215] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2221'. [ 860.609748][T14217] 9pnet_virtio: no channels available for device syz [ 861.579755][T14221] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2223'. [ 862.364417][T14232] netlink: 9 bytes leftover after parsing attributes in process `syz.3.2227'. [ 862.393616][T14232] 0·: renamed from hsr_slave_1 [ 862.415833][T14232] 0·: entered allmulticast mode [ 862.451364][T14232] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 862.902991][T14242] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2231'. [ 862.941943][T14242] 8021q: adding VLAN 0 to HW filter on device bond22 [ 864.171955][T14255] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2235'. [ 864.434153][T14265] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2238'. [ 864.460591][T14269] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2240'. [ 864.500518][T14269] 8021q: adding VLAN 0 to HW filter on device bond26 [ 867.095064][T14291] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2246'. [ 867.344429][T14294] random: crng reseeded on system resumption [ 867.506520][T14299] 9pnet_fd: Insufficient options for proto=fd [ 867.562188][T14299] 9pnet_fd: Insufficient options for proto=fd [ 867.737585][T14304] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2250'. [ 867.834685][T14304] 8021q: adding VLAN 0 to HW filter on device bond27 [ 868.075506][T14318] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2254'. [ 870.360557][T14332] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2257'. [ 870.376870][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.389166][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.599040][T14340] UDC core: g_uac2: couldn't find an available UDC or it's busy [ 870.778350][T14346] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2262'. [ 870.838355][T14346] 8021q: adding VLAN 0 to HW filter on device bond1 [ 873.998955][T14367] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2267'. [ 874.004485][T14372] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2269'. [ 874.032155][T14372] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 875.513480][ T5914] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 875.577457][T14372] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 875.729924][T14372] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 875.783292][ T5914] usb 5-1: Using ep0 maxpacket: 32 [ 875.791532][ T5914] usb 5-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 875.806172][ T5914] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 875.825254][T14372] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 875.838008][ T5914] usb 5-1: config 0 descriptor?? [ 875.889289][ T5914] as10x_usb: device has been detected [ 875.904441][ T5914] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 875.975803][ T5914] usb 5-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 876.032717][T14372] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 876.109840][T14372] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 876.146992][T14372] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 876.171436][T14372] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 876.244735][ T5914] as10x_usb: error during firmware upload part1 [ 876.267351][ T5914] Registered device nBox DVB-T Dongle [ 876.287340][ T5914] usb 5-1: USB disconnect, device number 5 [ 876.375270][T14394] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2274'. [ 876.426543][T14394] 8021q: adding VLAN 0 to HW filter on device bond2 [ 876.451498][ T5914] Unregistered device nBox DVB-T Dongle [ 876.472392][ T5914] as10x_usb: device has been disconnected [ 878.864330][T14405] dummy0: entered promiscuous mode [ 879.023587][T14409] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2278'. [ 879.272231][T14413] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2280'. [ 879.699905][T14407] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 880.186581][T14423] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2281'. [ 880.566977][T14423] BUG: unable to handle page fault for address: fffff52004753200 [ 880.567001][T14423] #PF: supervisor read access in kernel mode [ 880.567014][T14423] #PF: error_code(0x0000) - not-present page [ 880.567037][T14423] PGD 23ffed067 P4D 23ffed067 PUD 19a7e067 PMD 0 [ 880.567075][T14423] Oops: 0000 [#1] PREEMPT SMP KASAN [ 880.567241][T14423] CPU: 0 PID: 14423 Comm: syz.4.2281 Not tainted syzkaller #0 [ 880.567263][T14423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 880.567277][T14423] RIP: 0010:sys_imageblit+0x1889/0x25d0 [ 880.567334][T14423] Code: 89 74 24 10 0f 85 e8 02 00 00 0f b6 46 ff c1 e8 07 21 d0 8b 9c 84 c0 00 00 00 4c 8b 7c 24 30 4b 8d 3c 37 48 89 f8 48 c1 e8 03 <0f> b6 04 08 84 c0 0f 85 f8 02 00 00 43 89 1c 37 0f b6 46 ff c1 e8 [ 880.567354][T14423] RSP: 0018:ffffc9000b6273a0 EFLAGS: 00010a06 [ 880.567373][T14423] RAX: 1ffff92004753200 RBX: 0000000000000000 RCX: dffffc0000000000 [ 880.567390][T14423] RDX: 0000000000000001 RSI: ffff88801aefd451 RDI: ffffc90023a99000 [ 880.567405][T14423] RBP: ffffc9000b627520 R08: ffff88802a975a00 R09: 0000000000000003 [ 880.567421][T14423] R10: 0000000000000004 R11: 0000000000000002 R12: 0000000000000010 [ 880.567435][T14423] R13: 1ffff110035dfa8a R14: 0000000000000000 R15: ffffc90023a99000 [ 880.567451][T14423] FS: 00007f7623b3c6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 880.567471][T14423] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 880.567486][T14423] CR2: fffff52004753200 CR3: 000000005f5ed000 CR4: 00000000003506f0 [ 880.567506][T14423] Call Trace: [ 880.567514][T14423] [ 880.567532][T14423] ? sys_copyarea+0x2530/0x2530 [ 880.567572][T14423] ? __lock_acquire+0x7d80/0x7d80 [ 880.567598][T14423] ? rcu_is_watching+0x15/0xb0 [ 880.567628][T14423] ? trace_contention_end+0x39/0xe0 [ 880.567652][T14423] drm_fbdev_generic_defio_imageblit+0x2c/0x110 [ 880.567702][T14423] ccw_putcs+0xf2a/0x11e0 [ 880.567752][T14423] ? ccw_clear+0x250/0x250 [ 880.567794][T14423] ? drm_fb_helper_set_suspend_unlocked+0x190/0x190 [ 880.567824][T14423] ? fb_get_color_depth+0x162/0x280 [ 880.567850][T14423] fbcon_putcs+0x35c/0x520 [ 880.567880][T14423] ? ccw_clear+0x250/0x250 [ 880.567911][T14423] do_update_region+0x4e9/0x640 [ 880.567944][T14423] ? __asan_memcpy+0x40/0x70 [ 880.567981][T14423] ? hide_cursor+0x320/0x320 [ 880.568029][T14423] redraw_screen+0xa30/0x1000 [ 880.568055][T14423] ? _raw_spin_unlock+0x40/0x40 [ 880.568092][T14423] ? clear_buffer_attributes+0x320/0x320 [ 880.568120][T14423] ? tty_do_resize+0xe1/0x120 [ 880.568147][T14423] vc_do_resize+0x1256/0x17f0 [ 880.568186][T14423] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 880.568218][T14423] ? vc_resize+0x50/0x50 [ 880.568249][T14423] vt_resizex+0x3f0/0x5a0 [ 880.568282][T14423] ? vt_disallocate+0x90/0x90 [ 880.568313][T14423] ? security_capable+0x89/0xb0 [ 880.568342][T14423] vt_ioctl+0x1254/0x1f00 [ 880.568375][T14423] ? __vt_event_wait+0x260/0x260 [ 880.568411][T14423] ? __fget_files+0x28/0x460 [ 880.568442][T14423] ? tty_jobctrl_ioctl+0x378/0xba0 [ 880.568469][T14423] tty_ioctl+0x91e/0xdc0 [ 880.568495][T14423] ? tty_get_icount+0xb0/0xb0 [ 880.568521][T14423] __se_sys_ioctl+0xfd/0x170 [ 880.568549][T14423] do_syscall_64+0x55/0xb0 [ 880.568573][T14423] ? clear_bhb_loop+0x40/0x90 [ 880.568597][T14423] ? clear_bhb_loop+0x40/0x90 [ 880.568622][T14423] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 880.568646][T14423] RIP: 0033:0x7f7622b9e0d9 [ 880.568665][T14423] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 880.568682][T14423] RSP: 002b:00007f7623b3c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 880.568705][T14423] RAX: ffffffffffffffda RBX: 00007f7622e25fa0 RCX: 00007f7622b9e0d9 [ 880.568721][T14423] RDX: 00002000000006c0 RSI: 000000000000560a RDI: 000000000000000a [ 880.568736][T14423] RBP: 00007f7622c35024 R08: 0000000000000000 R09: 0000000000000000 [ 880.568749][T14423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 880.568763][T14423] R13: 00007f7622e26038 R14: 00007f7622e25fa0 R15: 00007fff471435f8 [ 880.568798][T14423] [ 880.568812][T14423] Modules linked in: [ 880.568829][T14423] CR2: fffff52004753200 [ 880.568841][T14423] ---[ end trace 0000000000000000 ]--- [ 880.568851][T14423] RIP: 0010:sys_imageblit+0x1889/0x25d0 [ 880.568873][T14423] Code: 89 74 24 10 0f 85 e8 02 00 00 0f b6 46 ff c1 e8 07 21 d0 8b 9c 84 c0 00 00 00 4c 8b 7c 24 30 4b 8d 3c 37 48 89 f8 48 c1 e8 03 <0f> b6 04 08 84 c0 0f 85 f8 02 00 00 43 89 1c 37 0f b6 46 ff c1 e8 [ 880.568892][T14423] RSP: 0018:ffffc9000b6273a0 EFLAGS: 00010a06 [ 880.568911][T14423] RAX: 1ffff92004753200 RBX: 0000000000000000 RCX: dffffc0000000000 [ 880.568926][T14423] RDX: 0000000000000001 RSI: ffff88801aefd451 RDI: ffffc90023a99000 [ 880.568942][T14423] RBP: ffffc9000b627520 R08: ffff88802a975a00 R09: 0000000000000003 [ 880.568957][T14423] R10: 0000000000000004 R11: 0000000000000002 R12: 0000000000000010 [ 880.568971][T14423] R13: 1ffff110035dfa8a R14: 0000000000000000 R15: ffffc90023a99000 [ 880.568986][T14423] FS: 00007f7623b3c6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 880.569006][T14423] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 880.569021][T14423] CR2: fffff52004753200 CR3: 000000005f5ed000 CR4: 00000000003506f0 [ 880.569091][T14423] Kernel panic - not syncing: Fatal exception [ 880.569657][T14423] Kernel Offset: disabled