last executing test programs: 1m25.356696532s ago: executing program 4 (id=579): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000080)=0x7) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000580)=ANY=[@ANYRESOCT, @ANYRES64=r3, @ANYBLOB="785e1068fe054d5a7b6254bbaf66dc47d871f8873f61e9c9d4ee4f9022f3503c4a7ccc6170f8afcc8e52eef82a1ac4f9918eec56ebdec04ff1fa448c2e598a659bdba332fa758768ac16bc295c744c8c6cb9d10407b9c8c6c3e685bfe0fd3e5ffa8c3b40c7b5790ba3e507244eedf5aa50dec083dcbcb7747741237d20fe3fddf97281090ecad9e8ce75bb425dedddd22f4904a60e99a79d0f93c65f7f59c2877f8d953e028d74eeb1e07c1f7e4bef298e977d75c70bc1cd1eb3bb8d144f7de060f804af09ec77d61ac6e8aed4b7606a02dd03f534c9"], 0x2a, 0x0) r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)={0x14, 0x25, 0x1, 0x70bd2c, 0x25dfdbfb, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x10) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, 0x0, 0x0) keyctl$read(0xb, r4, &(0x7f0000000240)=""/112, 0x349b7f55) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x5, &(0x7f0000000040)=""/162, &(0x7f0000000100)=0xa2) r7 = gettid() bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @func={0x1, 0x0, 0x0, 0x12}, @ptr={0x0, 0x0, 0x0, 0x2, 0x2}]}, {0x0, [0x2e, 0x0, 0x0, 0x61]}}, 0x0, 0x46}, 0x28) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb08004500002800000000002f907864e5be33c6a8010102ac1414aa4001880bbeb9ba7ca80efb743e86633e907b8fd16c6984cdea36ddc547d2803ee847b46a33002cd17f711456761da2de0a7a09d4a8628c98b3077afcb55a81b7552abfd67ec95c85f671d0a1feceff6f9874ddd1bb4d78c84355b6b2f7403dfc11e20328f77eabe5fb130db03c5caaa71237a9cfcc12742827e04b2e1812", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c00000090780000"], 0x0) 1m22.424519716s ago: executing program 4 (id=590): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001340)=ANY=[@ANYBLOB="05000000030000000400000002"], 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@getchain={0x24, 0x66, 0xfcd66a900070b359, 0x78bd27, 0x0, {0x0, 0x0, 0x0, r3, {0xfff3}, {0xfff3}, {0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x44) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x80c80, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}, 0x4000010) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f0000000100)={{0x7000, 0xdddd1000, 0x0, 0x0, 0x8, 0x8, 0x0, 0x2, 0x0, 0x6, 0x9, 0x10}, {0x8080000, 0x0, 0xc, 0x8, 0x7c, 0x0, 0x0, 0x0, 0x7, 0x7, 0x0, 0xff}, {0x2fff, 0x5000, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x100000, 0xd000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x4}, {0xeeee8000, 0x3000, 0x9, 0x0, 0x0, 0x4, 0x20, 0xe, 0x0, 0x3c}, {0x0, 0x0, 0xd, 0x7, 0x0, 0x0, 0x2, 0xfe, 0x0, 0x0, 0x80}, {0x8080000, 0x0, 0xf, 0x6, 0x5, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0xfe}, {0x80a0000, 0xdddd0000, 0x0, 0x1, 0x0, 0x1, 0x0, 0xa, 0x26, 0x0, 0xfc}, {0x80a0000}, {0xeeef0000}, 0xfdfcffdb, 0x0, 0x0, 0x28, 0xb, 0xf801, 0x0, [0x0, 0x0, 0x1]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000fe, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYRESHEX=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r1}, &(0x7f00000001c0), &(0x7f0000000340)}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r7, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="54000000020601110000000000000000010000064000078008000a400000000b060004404e230000050007005c0000000c000280080001406401015dec0005404e1e0000080013400000064a08000a4000000008"], 0x54}, 0x1, 0x0, 0x0, 0x40000010}, 0x260000d0) r8 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) setreuid(0x0, 0xee00) ioctl$SCSI_IOCTL_SEND_COMMAND(r8, 0x1, &(0x7f00000000c0)=ANY=[@ANYRES64=r8]) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r10, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r10, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/timers\x00', 0x0, 0x0) 1m20.66485148s ago: executing program 4 (id=595): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x430, @local, 0x9}, 0x1c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = timerfd_create(0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r5, 0xd0009411, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) r7 = socket$unix(0x1, 0x2, 0x0) bind$unix(r7, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r8 = socket$unix(0x1, 0x2, 0x0) r9 = socket$unix(0x1, 0x2, 0x0) connect$unix(r9, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r9, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) connect$unix(r8, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ppoll(&(0x7f0000000300)=[{r9, 0x3328}, {r8, 0x4236}], 0x2, 0x0, 0x0, 0x0) recvmmsg$unix(r9, &(0x7f0000001f00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20, 0x0) close(r7) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, &(0x7f0000000240)={{0x32, @loopback, 0x4e22, 0x2, 'dh\x00', 0x20, 0xd049, 0x55}, {@broadcast, 0x4e23, 0x2004, 0x8, 0x8, 0x374}}, 0x44) 1m19.741402862s ago: executing program 4 (id=597): r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB=' '], 0x40}}], 0x1, 0x40000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010002000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000050000000090a010400000000000000000100000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000150c00098008000140ff"], 0x98}}, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) 1m19.131635418s ago: executing program 4 (id=600): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x401101, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) openat$kvm(0xffffffffffffff9c, 0x0, 0xec800, 0x0) unshare(0x2040400) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/protocols\x00') preadv(r1, &(0x7f0000000000)=[{&(0x7f0000000480)=""/187, 0x10d}], 0x1, 0x76, 0x0) lseek(r1, 0x8001, 0x0) sendmsg$netlink(r1, 0x0, 0x1) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_clone(0x60100000, &(0x7f0000002240), 0x0, &(0x7f00000022c0), &(0x7f0000002300), 0x0) r3 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_WAKE(r3, 0x8010aa02, &(0x7f00000000c0)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e21, @empty}], 0x10) sendmsg$inet_sctp(r4, &(0x7f0000000140)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000000)='N', 0x1}], 0x1, 0x0, 0x0, 0xc04c000}, 0x24000010) setsockopt$inet_sctp_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000180)={0x0, 0x9, 0x5, 0x0, 0x1, 0xe}, 0x14) 1m15.952478561s ago: executing program 4 (id=610): r0 = io_uring_setup(0x598, &(0x7f0000000300)={0x0, 0x77ae, 0x400, 0x8000002, 0x3d7}) r1 = fanotify_init(0x200, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r3 = dup(r2) fanotify_mark(r1, 0x201, 0x48001038, r3, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m15.411235883s ago: executing program 32 (id=610): r0 = io_uring_setup(0x598, &(0x7f0000000300)={0x0, 0x77ae, 0x400, 0x8000002, 0x3d7}) r1 = fanotify_init(0x200, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r3 = dup(r2) fanotify_mark(r1, 0x201, 0x48001038, r3, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 18.709796172s ago: executing program 2 (id=768): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="180000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$audio1(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) setgroups(0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200), 0xa2442, 0x0) write$dsp(r5, &(0x7f00000004c0)="01", 0x1) ioctl$SNDCTL_DSP_SYNC(r5, 0x5001, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) 17.479029658s ago: executing program 2 (id=772): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000001c0), 0x10) socket$kcm(0x11, 0x2, 0x300) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip6_flowlabel\x00') sendto$inet6(r2, &(0x7f00000000c0)="7d5938c913341eb3aec505ffad8e4a271b1999f4cf2950a1a0b1ae060dc053c5b79733bf1afebeda993f05c95eda892b5bdb567c7c4278a3289e7a94a8b079a42b98936288255ee228dc85f98d9a87f40f234d2c49ad0f3c51ab68b041700bb9ece8443bacd8203fcc2af87397c7536e686b0db2e4f3ebce1f08e812fed355b40ec0b150e23fa7282186d2efb6ebc5e2285ed6bbaf334391ed2ce819281859071f3b24", 0xa3, 0x0, &(0x7f0000000040)={0xa, 0x4e22, 0x9, @remote, 0xb}, 0x1c) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0xb2}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r3, 0x2) 12.268143595s ago: executing program 2 (id=782): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) (async) unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)) (async) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x73, @dev={0xac, 0x14, 0x14, 0x4}, 0x4, 0x40020002, 'wrr\x00', 0x1}, 0x62) (async) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r2, @ANYBLOB="00000000000000001c"], 0x3c}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@ptr={0x0, 0x0, 0x0, 0x2, 0x2}, @func={0x5, 0x0, 0x0, 0xc, 0x1}]}, {0x0, [0x2e, 0x61, 0x5f, 0x30, 0x61]}}, 0x0, 0x37}, 0x28) (async) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) (async) syz_emit_ethernet(0x2e, &(0x7f0000000400)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}, @val={@void, {0x88a8}}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}, @empty, @link_local, @private=0xa010100}}}}, 0x0) 11.457193s ago: executing program 2 (id=785): userfaultfd(0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) socket(0x40000000015, 0x5, 0x0) (async) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) (async) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) recvmmsg(r1, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x10c4}], 0x1}}], 0x4000210, 0x2, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xc4}}, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000c0780a402a1101007f9e010203010902"], 0x0) (async) syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000c0780a402a1101007f9e010203010902"], 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f00000001c0)={0x1ff, 0x9, 0x2283, 0x0, 0x71, 0x0, 0x100000001, 0xffffffffffffff42}, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x1) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) (async) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (async) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x281c2, 0x0) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x281c2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) (async) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x260) fcntl$setlease(r2, 0x400, 0x1) (async) fcntl$setlease(r2, 0x400, 0x1) open(&(0x7f0000000340)='./file1\x00', 0x0, 0x100) (async) r4 = open(&(0x7f0000000340)='./file1\x00', 0x0, 0x100) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRES64=r4], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRESDEC=r5, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001e000000850000000700000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000640)="d9b9547ed3c0021a6fd6a67ab922", 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0, 0x10) 11.084748851s ago: executing program 5 (id=787): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x430, @local, 0x9}, 0x1c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = timerfd_create(0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r5, 0xd0009411, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) r7 = socket$unix(0x1, 0x2, 0x0) bind$unix(r7, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r8 = socket$unix(0x1, 0x2, 0x0) r9 = socket$unix(0x1, 0x2, 0x0) connect$unix(r9, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r9, 0x0, 0x0, 0x0) connect$unix(r8, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ppoll(&(0x7f0000000300)=[{r9, 0x3328}, {r8, 0x4236}], 0x2, 0x0, 0x0, 0x0) recvmmsg$unix(r9, &(0x7f0000001f00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20, 0x0) close(r7) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, &(0x7f0000000240)={{0x32, @loopback, 0x4e22, 0x2, 'dh\x00', 0x20, 0xd049, 0x55}, {@broadcast, 0x4e23, 0x2004, 0x8, 0x8, 0x374}}, 0x44) 10.158947617s ago: executing program 2 (id=788): syz_io_uring_setup(0x231, &(0x7f0000000180)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r0, r1, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}) (async) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async) utimensat(0xffffffffffffff9c, &(0x7f00000003c0)='.\x00', &(0x7f00000002c0)={{0x0, 0x3fffffff}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async, rerun: 64) r6 = fsopen(&(0x7f0000000e40)='ramfs\x00', 0x1) (rerun: 64) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) (async, rerun: 64) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (rerun: 64) close_range(r7, 0xffffffffffffffff, 0x0) (async, rerun: 32) creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) (rerun: 32) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r8, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) (async) r9 = dup(r8) write$FUSE_BMAP(r9, &(0x7f0000000100)={0x18}, 0x18) r10 = socket$pppl2tp(0x18, 0x1, 0x1) r11 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r11, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$pppl2tp(r10, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r11, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) (async) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r11, 0x29, 0x37, &(0x7f0000000000)=ANY=[], 0x8) writev(r10, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) 10.085044425s ago: executing program 5 (id=789): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b07080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf5af51d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa16509945ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a0000000000000000000000000000cf7b6c4ba9bec153d6834bfef080df374703a8ff56a63ec1fe5f2e05a79e3cace7283dd68d41e94420c325fe4dae144fde5ec25a87d625cab20753a77b323fa3783c8b675859b9012647885a242adfee2fe812ecbe5191e0a15142f7349e7627cc39d724e2e34e7a24154f26ae3125b36d0504965295d0453902ac7079b11a3a1e655e482331e3dc35b2e7e4e3ea99064fe5b9c8ae0ca3e5fd653f3286a99d81ce4eba765c38d097391ad4babac38ce5b4344e24a361cd54e5"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000003c0)='rcu_utilization\x00', r0}, 0x18) (async) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000003c0)='rcu_utilization\x00', r0}, 0x18) getpid() (async) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES8=r1], 0x14}}, 0x800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x7) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) (async) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x83f, 0x0, 0x0, 0x0) (async) syz_io_uring_setup(0x83f, 0x0, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), 0xffffffffffffffff) (async) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(r7, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000540)={0x2c, r8, 0x21, 0x70bd2b, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) (async) sendmsg$ETHTOOL_MSG_EEE_SET(r7, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000540)={0x2c, r8, 0x21, 0x70bd2b, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r9 = socket(0x10, 0x3, 0x0) recvmmsg$unix(r9, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000003700)=[{&(0x7f0000002480)=""/9, 0x9}, {&(0x7f00000024c0)=""/225, 0xe1}, {&(0x7f00000025c0)=""/4096, 0x1000}, {&(0x7f00000035c0)=""/139, 0x8b}], 0x4}}], 0x1, 0x2, 0x0) sendmsg$nl_route(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=@bridge_getvlan={0x20, 0x72, 0x7e3bfe4fa73db39f, 0x0, 0x0, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}]}, 0x20}}, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) 10.056490749s ago: executing program 0 (id=790): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x4}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() r2 = userfaultfd(0x801) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x3000)=nil, 0x301f}, 0x3}) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = add_key$keyring(0x0, &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="090000001c000000080000004000000042000000", @ANYRES32=0x1, @ANYBLOB="c76e8d55c7cb23940100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000500)={r6, &(0x7f0000000340), 0x0}, 0x20) add_key(0x0, 0x0, &(0x7f0000000d80), 0x0, r5) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) mount$bind(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2003041, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_io_uring_setup(0x1092, &(0x7f0000000280)={0x0, 0x7f34, 0x0, 0xffffffff, 0x34f}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r7, 0x47bc, 0x0, 0x0, 0x0, 0x0) 9.325020299s ago: executing program 5 (id=791): bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='&\x00\x00\x00\x00', @ANYRES32], 0x10) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) io_setup(0x7d, &(0x7f0000000600)=0x0) io_submit(r2, 0x2, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000000740)={0x0, 0x0, 0x41, 0x0, 0x0, r0, 0x0, 0x0, 0xffffffffffffffff}]) syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d240701060000fd80000000e809240300"], 0x0) 9.040980496s ago: executing program 1 (id=793): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x2, @remote, 'ip_vti0\x00'}}, 0x1e) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000180)={0x18, 0x0, {0x42, @remote, 'ip6gre0\x00'}}, 0x1e) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0x4, @multicast, 'veth1_to_bond\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f0000000340)={0x18, 0x0, {0x0, @multicast, 'macvlan0\x00'}}, 0x1e) 8.552949444s ago: executing program 0 (id=794): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) getsockopt$sock_int(r0, 0x1, 0x28, &(0x7f00000000c0), &(0x7f00000004c0)=0x4) r2 = mq_open(&(0x7f00000001c0)='#\x00', 0x2, 0x0, &(0x7f0000000300)={0x847, 0x3, 0x8001, 0x5}) mq_notify(r2, &(0x7f0000000440)={0x0, 0x5, 0x0, @thr={&(0x7f0000000340)="b17a1d0bdc867fdeafa7d0bd2061f22d0bd88f2375257b2486092ae6768f417e48cd351ce98d3e155ea7037f856bb4c62e6727bcf29320c8b3dafea7b107430dd1970b2ad2ef5e3e0dd841249dca4843", &(0x7f00000003c0)="3ee855272a324f3555006b86a5f6eae0c34a5ced665f2933690539610dde5ddfe0621aaa03a6e240b36d839668f1165ddf2e40259a06e3f7a2fbe55f66fbbb986db5a4d93be69823e1590cd159cbe6b8"}}) syz_open_procfs(0x0, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e20, @dev}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4000000020000100000000000000000002000000000000000000000014"], 0x40}, 0x1, 0x0, 0x0, 0x4010}, 0x4044) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_link_settings={0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, [0xa1010000, 0x0, 0x0, 0x9, 0x832]}}) 8.230739027s ago: executing program 1 (id=795): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) mkdir(&(0x7f00000000c0)='./file0\x00', 0x16) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="01072bbd7000000000001900000008000300", @ANYRES32=r6], 0x1c}}, 0x0) unlinkat(r2, &(0x7f0000000280)='./file0\x00', 0x200) lstat(&(0x7f0000000380)='./file0/file0\x00', 0x0) symlinkat(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000000)=0x0) sched_setaffinity(r7, 0x8, &(0x7f0000000080)=0x5) setxattr$trusted_overlay_upper(&(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000040), 0x0, 0x0, 0x3) 8.178149921s ago: executing program 2 (id=796): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="180000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$audio1(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) setgroups(0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200), 0xa2442, 0x0) write$dsp(r5, &(0x7f00000004c0)="01", 0x1) ioctl$SNDCTL_DSP_SYNC(r5, 0x5001, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) 7.103278099s ago: executing program 33 (id=796): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="180000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$audio1(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) setgroups(0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200), 0xa2442, 0x0) write$dsp(r5, &(0x7f00000004c0)="01", 0x1) ioctl$SNDCTL_DSP_SYNC(r5, 0x5001, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) 7.060896382s ago: executing program 1 (id=798): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) (async) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x100}) (async) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00008aa000/0x2000)=nil, 0x2000}, 0x1}) (async) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000c07000/0x1000)=nil, 0x1000}, 0x1}) (async) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) syz_emit_ethernet(0x4a, &(0x7f00000024c0)=ANY=[@ANYRES64=r2, @ANYBLOB="787af6776a9f74eea99bb3034118ee17f9dc11cb00f902a53f519b55d2678e44e167e9b1087cd08868aa3cad53e58c7aa9e91c1c34f29a7ad5bb165a28d2ffdb53c9c805728106e8827028bdc28273e2c967cabd2e63caee96c8d854e66082f8690e44076a935b6d28668a982b3dea03e60cbcfe0a6ec08699d1684db0208ccaf3e802def36f479b9d89c58bd86bf2fc967f226697e8bf8b3e0a2e57ace8b9e8055a43a127276efa0854d82ec36c7618518c9ff56fbcfdca495084fe5e87f91b2419f76dab7b607a767fd79aa693bc66b2d2686e362431e8269c894fe27caee7c3fec9770921185ed76e457c6d28a90f238415a90559ff23ec1acb6f7267b0df960d10c3def2eb119a0a05c5e0365bbf6822a1e82de21559fc0341b0c8b6e0f5f575a683af2e80c0653b42b1cfedff49667753e6687ccfc6060e639fe5131c7af8f79de8441f6bf3ba460e9113b082a053a6cc97450328b826ae62c8ced8f668b08d610f5caeb40f9be41c22c04e35cf0b0523b4c8a6dce188c52e1bd4d0e173f515f3bdfbd94e99122087b5d163bd70d05f0aab9530685ebeea7e95dfe2b52b1d512d010902a75bf5318b9a329c662bf7508e27e699e8feb5c75c2dc5088adc3c0766299e7ff07faf3f955be1ec7a330570fa4244ac74f109b8feedf6f170d782a712b7834a292b711e554d54dd218181353b0ac8c151d5a672f791fc670d1f4982fa09c459d6e7f730580cbc80633764af5ee308194a24874b178561824fee497fe5327a0bc8b71e02ecb37e4b017c91345b8b582be051dafb22938cab83c19b12642091659f9fd0a346a54c99d0c49e948edcb764f4b8c42e08379f5a0cfa1a4a1e3636b9f2d154dab1a4e0bdf0ef45c15861085e53f3613639ee8a4e931737f4b72b30992f458bc4738101614a8a5c113127af96532354297aaf88d03f103a99657c2c9c18ebcfe7a8401852c47f92e80f5b65d3f03d24ce8672fbb494cf393b57f9bb410611654060876aaf0c70e8f90670975f068950178c457b6db76d1b084fedb28b47117ace44d659e9ee0757a50daaa042d568369f7501360ec627dbc5d7633236bc59297fa1bbfd73805face8786ac6c22420387c2fb694b59b88515c1d095e6993c0a45ee5bd191ee901c0b1ee1b56abf4ef53a852ce2f2d32c57a5aac65ad7089b7c0207890bb36bba745b1bb697991888cb99b13b90dfd7866d2ae586ccfa2768fc3caf4e86dfa19751dbb324b194c12efd5968a7a5bc1b2e665eb44088f881fb82fa3e808db8998f98f8bda1fa8005f3654ef6458951edc4382f9fa76471b890e6962ba8e5f0a7093b70630ab8055543f9931af77190ebb750cf3f76b0a1ae38b2240f146c03184a0d45df0209f98238fd7935b34574c220186dbb7024ae5f818a9d7cd5ea838de87cd25b3e51e1bea05fcf96423b90e150c5984a716ac479dcb99c23aa79d9c39bd776aedbdfc1a35712185ac66c3874fbd66121116e9b641d360cdd711a30ee9a1f84b9e61b5d35a9d79a24cdcaf8af66ba8d369716680d7650da8f6a6ac51aeb4fab5647427fe46302ab7b274f7c856042940ba80c3507980bc12a8cf397134dd153091608619c6fddadb4f556bbde963f402eeac57e10331f1c14909c55c3d441ac0779d3370dafab4513775b45f4a330bf3ab6b84479f30da9a94b0f265e27ad810d5b2db3cd34d3c719a5ae86c058bddd53d67647327a9194bd690340afd0036655500ca5d0d44c25b2f7c955348bb948b8820bacfddaf534a145c96a2d67f13b70367989e084d422486552fe849192033a2e0813606b9eca53a7c767d8da7f468e00cea9d85c1992034355c326c73f9ce63a8ff032c9ab2810d1716d0f837b76d83a875f04092ebec12537e5a7c05a9483950ecfce5d46bbe79a5c69d914d11b67e0ab43be80e0583a92cb573788a79d21896abe3586fafcb73b0e8782702eca1aa8042e770b1fcebc93c85d5f985393239f0c91ada6a5cc098697354bea914e21e44584bd057d943907936f822b79ec625240ebd279b1b2ce1f2ac6f0690e4c75d25fd0dd359cbed53a2ad6acbb429307da55451cb9718305a085502e22347102057b37762fc3fa4c53151e7f063ec7b6de589ea163ce8ab640a052e4dd8466eab30201906329eb7a2a97a72e558780e2e4a8221ad72affcb3e660a07b012050de2235d676a0ea9c1c538a31f2999becd4eb26ce29a7028b66f466e0d240d0eaef03402292032e0db6646339d17e136e6fcd8d6d08e969b84bbb8b5de14a2a5d2d576cd602e1cdcfe232b3dba9ebd2b8cd2a51510781d0402b47c9ee31eff4668f15b1e15579f55c31373837368e14fdb7943784bbd07fd4fc6c4a6e76f2d1d894efc423b7540da89d48f369c0677d7e5484c430b1de00cfea3dcbe5ac1c6c033b4c2354ee5153cda1d9bb02732fd09f472175768e906b73bd8d13e248e1e5bb9003be1a4ea6726886c6c53e65d72535bc7738b7a954be89ae8a8e8e2c0b236319a15564e4ca8d1f21186a506159ccf2da3078c049e1cc3268940f5dedbe694ec00a86566feae44a579c53652b59d65eb843955c7f8fecc12c515d883229fef1ec9f483412eb023107fc48af9c67cc590ba9d31dd1e64d426a4d073ab8e43616d6076b96ba4a0ef00d7aa4d577027dcd3dae8e728fef86074c58b040839e53b3c4b8c8d613a0a20475877a36622abe580f8e19de7b07fb02744807306fedfb97a52d847716a7bd92277bc6c773203a0b2880eca9f82212864d63e685b7d11dfb8808c0ad3eb761aafc9fb0437026ef859ae7307bc49d1dc67d8951e30460d17b208909e6278a7b35b042620d6881141fac5a1d9985aa670bd1f91a83e87ab9437a15c3090f82984e03e483b045cad14988285f7cfffff76f12cd8770e146202917d73d4b1a15ce20d516ffda1217eee6f3145b52ed871a3e52ac9e35887269f7b56bbbf859bf34b1f27e394eeb1fa56cd676895f71fb97663c0d2a9687e3d5778a2cc3d9506f9df0ece4bfed9231f26561592818096a47c1d76d1a1fd697535cef738504137a8ca35bd68aa3da1f8a289eeb86f17d162c08f9dc684d763214ae5b4fb1abe1a915b167d881d8ae835c6a65339a8d617f5f084eb3d9a8119e7e68639557ee8ac6f2f4b8013f90708989eb26da5ac72f0ef78cf2c68ee133658d7e9b4cc886f5b9fa4ffdb5c18771195d8910570dc4b7a75e78a1fbb1d9ff3a59a80e707ed4ed92530454c563dbeb65f90ec83f4575e70f52828cceca2fcdb2ce0d96ac7d4dce52cd9848cdd0fba0b2e6674a8d4dcbdb86898caee9f947bcf7d27feab22faaf960f0a10417ea030daea8266fed23644c1748e23c810c65590e83bf0e2bda6e29ff1bb87fa65d8cef53d5b0a702ec0dbb1ca20684fb42adabfb80b26fe8af9802edb59f5e2ad34578adf50ba085cf0494ff3bb9f5b95ebdccd91077c7e72099dd80473305428b05b4428c20572e6d82912eec7fff6f1239bde5993272d0ca55d86f6f6d83f28850aa8f6bbb17f107e7de11ce3e4d6842c22ec43c4ea3eeb16d67d1136d146cfcf10cf2bd9c0db42a448df1bc6e9705e631756db103b694cf246b743986f468c225fa3a458229fa1977f7ff18a0683a4a1aad0960811688ec842d48b94f223c113b56bc3869f4c62741ebec194b229ab0d55b712d06f15373755657bb39ce10f661c9d0167fd9074bb455606bc19a1f9bd27ec7f2223b33f632e7e4664bc7bf3152302b580be76da8da6e206e2d8606173fd3107ded87e54e0623893d771d84d654c599e274c7ca3a9d201d2b074bfc605cb8e1a4aa775b7d28c3c8b12e372f084adc7246e7ee5146919474e7844030d813e88aba164c1b08bdf22f1ed964be5ca56bb04afb8b9be9d3c0203146db9d115fe7fdeb5b2f9cf61b616ab52915d70b1ce2b9ecdb3a29df2e8494da0d497dba732421a019ebbe5f0beea3a3234618dd95b4d1d81637512230a3cb7d8739cd11d3c478a3a81780e9a43deaf4d1a1a7cabba337f4875c704f1b9324d5ac16b11e45a0e33bd3b5bc4c1dfbe53b1701e32122eeb8fa3d5eff182a1cb5d05d3580e9f69b237825f058dc3846a864bf87fefb863777d5ba6181a9de413a67f21992efff05ff38eeb764ba772d3bb9b6fb5702b7f1b978c87ad4b12a8dac15eb6116cc924b9819cc26f67434fd10be301f36006d0b610714989ac0ca400cabeeaf449461595f315412c9bf7090b02d662b9ebcc867be3a61183828c3da9436a3d5a66c08a0eb63b9e33b33ecc075bf8f71afe38a0cdd098be1fea18a1a9d23aae37395d8f6f231b3c25ac3bdafccc7df50d5826eb6b041f8485941f13adb22a29259529b7a4d044ae701a6fba013390079c21ebb632f34ba9a1f67c8b60b28413ae36af97fe08698750ddeb7eda692e91812a22b375e804888e001da0eb754d21ce7149790a0bcb1d22e23849f553bc4c5f7a5e331e1a6a12009cfd3385f48cdfad118a89098f9eb424e05d627fb898a2f2bcd46bc3d682db4dfa5a6634786db50ac2c5d291fc0691ced4a078248e6e4fc577796636217f2d372abc99469d25950bb087e34fd8343478fcca7afa65872aee196c58db16b18c1bba32e91fedeb46d42de8fd8e5abc147673f4c4d180c5328acfa31a2835f2b831ed8540aec7c0b8cd20c9c6cb18780e75e276553cccb5adaebbe714a3cda1f0409eb57329650080f28e86af870c68d145016332159b48661effebd4cc44990e5d1d5661cd15a149e8b2105b94e8b6357903ac9326b353d1946004db26bbcc0c1553c624bc7b4db66d286c74dd8776c07e7ebef7db1db9bebfa7cc86868b7f302f55ec74f1ddd7592d6cb695cd489be220aae0cbd2c30ea75c48cbcdf841f555c916998fbfca79f3c4d716d29f7111eea01fda18c9f5e87bf72ce1b16235d1f69341866bc52a51b65e64e13badc88074bb0abf272f92959574b4140f50ab8e5c4f06d0ee1179872049ee19cc4c69f237c7c32d16a4ab5d90c6ff9cf4950ad2596f891ccf863036d69f53e46c9bb4f8521f852d664c91d9c418c3f17fd74c5201aa7296772feba7b9f6e4d17d17c90ece8c4797b085ffc7ba7ccf1502832d2dfc63d14f0c857fd892ccdf79fa8b07d2ccb19be96dbdb61ccc382162de3c2da6c61f81b5566561619b1ae1ef640e41f7f1b8512eb2e12a704b1e9413c778ed1bfc549d926ca9f536ef43d95f7166cb29ef5a8f0fedb881e5737b0922e99908f24de8ad26418e66e6acee0be0c9d651c95623b48573f8de6c0b2df79a9cba94099feebdc0c59e1717a6fd4095ebcd2d52f4d8db8b8bbf8176b130aca7ff4607ea8111a83e351bac6232b70f4d1d9eff6fb33c9c694096ba1c79ed2e49dd92df3540322229618f126058539cc22ee09bac913e0ff1315df4800c5e18ba2a9e1ae23f8ccc2e63f37226e57490b741581b70cafe64fd80dca71695d3634dac83c9452a88cf20b7ae61469bd855bca35d3f4194706896208d4aa253527ff9a2208db014ba36dc88258e6ed9ecf1e82df6b43c1cb895e6e2132b1f0046f2069331a03248806dd44817f1ab72d9a533aac3e1ce510db7cfa7f7e26b45df2fbe2bb60fc9870ca0f0cd0369dbde358b64c7d25f3e6b4195305d04e2487b0ce2d71785926deeb9e9d931ef3694d9338a6c68142164881eada59bd347c5d74ec9d72c773c6d725ac5508d5996da941df7426547e1fa0b3bf27411082a53ce8b82dd456f944528c9d62c291b10ade150f3f0d95eb4cde5500c4ae357679e5785454e3464b", @ANYRES32=0x41424344, @ANYRESDEC=r1], 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f000001d300)=""/102400, 0x19000) (async) socket$xdp(0x2c, 0x3, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000001600)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf200000000000002600020007ffffffbd0310000000000095002000000000006916000000000000bf6700000000000004070000b964b01a4607feff00200000540700000ee61e00bf150000000000000f5700000000000065070000d23700002c030000000000001f75000000000000bf54000000000000070000000400f9ffad430100000000007c000000000000000500000000000000950000000000000032ed3c5be95e5db67754bb12dc8c4ed68ecf264e0f84f9f17d3c30e3c7bdd2d17f2f175455000078af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd390700000500000000f18c30907d7bee45a0100000fe9de56c9d05000000c6c60bef0d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cac3f1d5af65727546e7c955ccefa1f6ab689ffffff7f63ede202fa4e0a2127b8b83c71a51445dc8dfd13ff15f852a39e5b2ab7bcb8f512036a5ba6d04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916fcecc8158f0200000000c8fb735fd552bdc268694aeb0743e326c819b6cf5c8ac86f8a297dff0445a13d0045fb3cda30a673a6037ed8c85f21ec2c081bdce431e56723888fb126a19bc1172b84b3ebe174aba210d739a018f9bbec63222d20cecac4d03723f1c921b5bbf7949632cacfdd32b3a6aa57f1ad2e99e0e67a993716dbf580469f0f53acbb400001e3738270b315d362ed834f2af97787f696649a462e7e090000000000000045eac1f2014f720e83b7838e3eede14308d582685e1becd6f35154bcb4000000000000000000000000000000bc3af2b170ad3e2b26539cebca8f4ddc211bc3ccf0bd9d42ca019dd5d022cf74686e9fbe2562979eaed840a7afaab43176e65ec1118d46d1e827f3472f4445d353887a5ad103649afa1769080584f800031e03a651bb04000000ab04871bc47287cd31cc43ea0ffb567b4040c1458d0320ce7d0000413a0000000000000000005f37983f84e98a523d80bd56a57fa82b82f639601ae899a559944cb9a62a29ab028acfc1cb26a0f6a5480a55d624a0c544ba0dc828c22fe30000aa391598000000437d57fcf8295f63a70837f5cd4e5e77964522dc7ca3aa3476b7f2d851d27fd4de6eabb43e0799dc8d9fb7dc6c523ffbd74a6a40e4acb1ac872ade9d1f2ab779b8dbe843aeeda0426c767c00327b8c95b2bb6ddb55117669d9598c0f3598073f3a921c76beceff7e4fbf909a2cabf5b8ea5011db9020823b83abe54346c7af0a99fa077ffe7000feb9e44023a1749eb1d0d572b77d6e0d0fcd74031c8ef2629f5ecff4626746d6abe98a255e92c3c4f79bfcd0d91741380000cfeb73dec68ed56b5d3dfdf0cb8b71ad79000000000000000000000000000000dd434a25e95d0ec29d3adaccf89d0888031ecdfdb4dfbe444673be099ece7e4009c76c7108ef0a7e59fd6d906fbc3c9b412e0478cfee4485f423c63f49db43833c92eeeb647cebd4d7a93a17bcbb6bae5ff876375d4fe39cc2d292691672cc18ca372104ceb83a35ecedd97fc191d8f64d2b1d60c6d12911aada66c26aa4802c3514c3d92ec905000000b13f4a2575fbe943a6c40000000000000000000000000000028026b80c3899543223a6079ee96198b9a326db3be3a48af415ca28ca68c502550044ed8e29af8d763ef9b1f31befcad2ce5394601c7cdc233bff7f0000000000009fb3ad650f77e339768924dfdbeead13b88371154d743544a6091ec93e0d3fd5b4dc42911c1ba322fd4d6fbf19e617d51f964727bfd5cc5ba15370f6e1141d2271eded0b15e4316a1e4623272beb249a0928c417720be14c898f397411c88a7bcf3df46ab3efe7cd5e160c2afd3cc945f75011a102d952c7ad17a58d9be691c334ea35bae71e76e160cc2260bd028162917807ce89e11b5f261052ee0dde18efa1d802af2b7bcf6f8af41933cea0d0343261bccf64ca1c81045153eafbefdb91fbdff9ee3307d4a1837963b2dc2a3698d90e7915b098f19392e792adaea86052f4e948184001b6494e906925a092483adc7e9c8f7a29d226763c100aecae7f00619c36bceb9fb6dd7e55487d8485e498fdfc377fd3d266d21d46ab2f6b2ce22cd0aebba9b0ffbfe8ec3143c3734967c90b16ebbeeae1ce2baaae05aed6bf0f40c8a323f9235dc99698bd0b800067a901a79daada03cc77e74feb98b1586946b452764ff917a8ecc10e529c5bea49cad70e22df522c2803b6ef65df70223c6e22c3433e322d8dbd6e9b040065a9d6b3d5ae276cffe935d559bea88e1aa36b4e6c19e78457904297e77370e013b705a96548d47c609a93c45f4d1382b39c05dcc07d5b49ad75ddb3ce5b5b9416e03995da04647aa5e6fc1a6f5d663380967ccef9de49a90ced031335e3219ebd9d06c257a50497ec523f5ff7361261ccfe239d603364a42e2e81fc068fcbb9792b673827fe7018a988fbce55bb74cdb327ced4b77b8743fb3cb72cc280b9f62e4f92f46a19600b802cba88b7d0a938d9e0e6cfe5d66b874c9a0c6c04b96360d6f499d004179e5b6025c0e1050faec7ecd9de190a975db2f8c06a551236278c4766d7e22e3b85168c9851de6266c791252f919b4f8b257b5a786734e5142e4666c67aef5b7b2f88c6640995434aa8636993089c73f196c54ae829ad4307132655b075ae534fa7f1ea9a17e62357b0bd2bd1d62d34bfc1364640250136729ba4f763ff25c33e8acc806611792add8254e705fefd2a44d5b15e3b36f6b75c97c9c04c511d8cf9e24c61c8284a913a381cb1a5628878040000000000000017b68afd95d4abf7920de9ebe1c89661f4adc3d83d72b1b778e30c2bf2efbbcd054cf51f4205ebf9a98a0d9f18135cb1d8d567c3436fa697b72c3b0200000000000079c0b3339debc78352b2e65299223d7ef2bd540e78167b3ac92a4c4f826f6d0e5c4ebf4f7a70c03e2f5ddbebf168586360c3663531eb5995d228f011a10ffc8b17d716b0c528dab6d0c4fe2ee402348104bc5d4012babedee898c6d3e1017be2e9bc759d3ab4d615f5000000000000000000000000000000000000000000007fff0000000000e693e314adf7dc9f517d04f1e6ca367d30d31d3647c6059db6e1e9529eb1623ef99e2d9ac2ab4872f8e784b07a31110bef6d000000a6f9e89e6d50ee06ce716f94da60f1f22d9669560d296287c13c92070000ee7553eb2df17839542fa88d09f000e88a90cf4406b9000000000000000000000000f441d6a6f516c235c6f5863e7f454ee0e16b9aa2593eb31fa3836703e7765aaeb77a8770e518efaa6d3dd85e03b3b133eb749057cea9af75a0e6f633532f2891b8e263cb6eecea691842827bc7c8c0130187081c8d320642389f5f0c42dba0ff68e84d7b130906f17f6aa075a257310f2d92cb1d1e16468949f5675262ee318e735930b01d8f586e34537bcff7d6196f494cdcf3a712078d745db0f5687a78ee6d000b3d171a0f08299b52d207f32e9da311ca090000003a42732808515eec574f892622c5be497fc3d9ca122d7c18b9e54637812c8debc61f0e42d838e44a819b74bce1a56108bb0fde97a02475920532309c55b2c9ae9f281391ec5cc72a5e94cca1cbf1ff01000000000000bdb537a0c52bd45a9f966c25616cec30c3ea3246cb8e6aac7cf273638e6656a3e4ccadc348f0172028c99cc5f6d5c6d09ed65aa54549e73c28b7c8ad06ad3c5e3c27eec0eff1a6c84f1189919eefcee807fc081e004ffb7d3104af00ac92f1080211c4bee74381a0e31021918f27863fdbafb50f70857d52a1f7df51935a80b1980a4778d35f183ea517f55a98095305701ab3f3ae43f06e91bc7d85e3800b46926944fba9805a985e63e53a62232fcd3f01dbe1728f300e247a7ebe344f9749818ff3961b2a42664ccd680a90bbb6ab400e286acc8f9febef64594777f848ed1cf980a3da2f0f7745760a05887d0c28060d613dd6539d392fc21fee0b5131609664b821d7a994e6c5965a4fa1ec1790c54e54586907dcc5e8bac16e79da9c2444420900000000000000f888a94365b99b72796fca1b922fc9aefaf1546c17cbb1d2d2fd12cb1a49cad501a3ca218c595b667b634606c57987ebfb0783a4948e4561d5cda158fe74453ff4a837beeedba483842c57d6005b544b4f80003386edfd3d4a88a667bd41eefe0d808abed08a29e6bc370a80cc0366fb4080bfbaaa946fd47ab662c794846e403950bbc3a48bb276cbb08a8eab145c06221ef16a238e3d50ad18aea9a2cec97d3c2d0569caabe2bffe02506bc9cb7294c5d020536dd5e7a6351642112df3b55d0215aaec7e45598995e79699e47567e353e68b03f82be860b188554b734e1192f9c1a867b815ef52cdc3307c0cc9be05a40fde69c350e59f11f1d26a4d04d8c8b2c4a4d23ec931d14bc7807db773a614b670acf46f83f7c65a0f8d43c5f64705f0d27c46d4b686e867e9b0be76a7978a8f962bb5a070df97f2bf7612115cfe5ebdc7ad0bc5a5f3ace25347d0e5c347279d55aa67a967380000000000000000000000000000000000000000000000ed0942d980c754c6c69ef65c375ad018824f78b260d5f51bc3feba504408a8c8141d84f3f417603b5081680f346ff0ffbe4ae19e936511966965ce268b6345a0001c0f26a32e0a999fc869292e939dcf89b9bfd794f9c12d41959a00688cca43015a9eec58f647796adea520cd2abeb0b55c22949d10e5a05fee4543fdc1e02554a55b5fef2427a6e5708edc38fac53c2f961945a3f83cdf01979939b49bc6b1aef8c733401bbe473de8d64efbe0d123739f387d1c0d9e74f2175c174ada1678c7db79492e8dd0f34e2ccf419cf7f14ffa408b50a52685b36aed14aa22ad928191d5a2697646edc52a1c0c5d720ae690add2b34aed161f51cc1cb424f76098e1e1921e5a405f9d298a8461f2da30e47b7c6ed7c95c84c745f58723e4cddffae3b53b5b947f9435e589f9ae55b30ecd3827b2de5df31976870823da8058c2538c04e397f3d0ef90c11c74da984fa558697ecb57224ce8fa6f79aadbd7dbf3678e74d790bc2ee72769a3ada1dd504f8e4133ce1effd446bc9a2f139e65cc4bd83912af3122352506c7c2191b3705116b2f4fc20d4e93882bdd6ccea97f3a08d3565b0000000000000000000000000000d35fb97c2d7a9374294dcec3da3df9a13c4fc63b00426682534d894caee0b963a3"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe50}, 0x48) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r3, 0x0) (async) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mtu(r5, 0x0, 0xa, &(0x7f0000000080)=0x3, 0x4) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x24000}, 0x0) (async) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000ff0700020073797a3100008f4abf3e55c951da00000900010073797a3000000000080003400000000a140000001100010000000200010000000000000a"], 0x64}}, 0x0) sendto$inet(r5, &(0x7f0000000040)="0e00", 0xffec, 0x0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) (async) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0xfffffffffffffffe, 0x3, 0x20000e691, 0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffe, 0x0, 0xd1, 0xfffffffffffffffc, 0x6, 0x6, 0x3, 0x100000000000000], 0x0, 0x8340}) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000440000009"], 0x48) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES16=r6, @ANYRESHEX=r6], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r8}, &(0x7f0000000840), &(0x7f0000000340)=r7}, 0x20) (async) close(0x3) 6.843072468s ago: executing program 5 (id=800): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x8) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r0, 0xc0086202, 0x0) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket(0x25, 0x5, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0x1000000000000d}, 0x18) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e1e, 0xfffffffc, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x6}, 0x1c) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x1810c2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x400, 0x0, 0x3, 0x1, 0x0, 0x5}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x8}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x5) ioctl$TCFLSH(r5, 0x400455c8, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000cc0)=[{{&(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, &(0x7f0000000480), 0x0, &(0x7f0000000380)=""/193, 0xc1}, 0xc}, {{0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000500)=""/159, 0x9f}, 0x4}, {{0x0, 0x0, &(0x7f0000000640), 0x0, &(0x7f0000000a80)=""/129, 0x81}, 0xe}, {{&(0x7f0000000b40)=@nfc_llcp, 0x80, &(0x7f0000000780)}, 0x9}], 0x4, 0x2, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x6, &(0x7f0000000040)=0x2, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, r7, 0x0) 5.851198597s ago: executing program 3 (id=801): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000c00000028000580"], 0x3c}}, 0x0) (async) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) close_range(r2, 0xffffffffffffffff, 0x0) 5.68860009s ago: executing program 1 (id=802): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b705ccfdff577f00000000000061107300000000000400000000000000950000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() syz_open_dev$usbfs(&(0x7f00000001c0), 0x8, 0x80) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) utimensat(0xffffffffffffff9c, &(0x7f00000003c0)='.\x00', 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r5, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000100)='.\x00', &(0x7f0000002280)='vxfs\x00', 0x1000080, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000400)={'ip6gre0\x00', &(0x7f0000000f00)=@ethtool_per_queue_op={0x4b, 0xf, [0x2000f68f, 0x8, 0x9, 0x10001ff, 0x0, 0x4, 0xe97, 0x4, 0x6, 0xecbf, 0xff, 0x101, 0x7, 0x203, 0x3d, 0x5e, 0x1000, 0x1, 0xf557, 0x2, 0x5, 0x7c, 0xce, 0x2, 0xffffff6b, 0xe52c, 0xaa8, 0x80000000, 0x1, 0xe9c4, 0x5, 0x6c, 0x6, 0x7, 0xd, 0x7, 0x81, 0x6, 0x10000006, 0x3, 0x3, 0xfffffffc, 0xfd2, 0x6, 0x8, 0x800, 0xfffff801, 0x2b, 0xa, 0x0, 0x6, 0x8, 0x5, 0x0, 0x6, 0x8, 0x23, 0x8e0, 0x3, 0x10, 0x3, 0xffffffff, 0x6, 0x6000000, 0xd1, 0xf, 0x4, 0xa, 0x0, 0x3ff, 0x80000000, 0x8000, 0x3, 0x5, 0x2, 0x0, 0x2, 0x9, 0x80, 0x4, 0x2, 0x0, 0xd, 0x6, 0x3, 0x8, 0x10, 0x1, 0xfffffffc, 0x9, 0x7ff, 0x7, 0x100, 0xbde, 0x37, 0x9, 0x4, 0x1, 0x9, 0x6, 0x7fff, 0x1, 0x704, 0x33e4, 0x401, 0x5, 0x7fff, 0x8, 0x100, 0x3, 0xfffffffd, 0x2, 0x6, 0x8, 0x6, 0x7, 0x200, 0x9, 0xe, 0x81, 0x0, 0x4, 0x5, 0x5, 0x8, 0x3, 0x1, 0xfffffffa]}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE_TAIL_CALL(0x9, &(0x7f0000000900)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) syz_usb_connect$uac1(0x0, 0x98, &(0x7f0000000740)=ANY=[@ANYBLOB="12010002000000406b1d010140000102030109028600030109000702010209240323000303030b052405060109040100000102000009968095f1e9cecb8b04010101010200000724018008021009050109ff03ffc803072501410405000904020000010200000904020101010200000b24020106010b0100000007240101c0020009058209500005080f07250182fe070000000000000000"], &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x6, [{0x11, &(0x7f0000000180)=@string={0x11, 0x3, "5be53b6b34edd09e786ae12e1303f7"}}, {0x1c, &(0x7f00000004c0)=@string={0x1c, 0x3, "3eef7959e340e424949e622d73cbc006bd00d94e5e9fe39fc7a2"}}, {0x5d, &(0x7f0000000440)=@string={0x5d, 0x3, "8254e8c6149498e77bc23809858e7c692a5bc9028b6d60992ec930d911cef6576e356b21ceed6783006f72bc7f069c873503466d0a8ca01c04ababc048ce1da80d44e6cbfb4d80821b1afa2c9d517eed973e0aecc7526782e6912e"}}, {0xc3, &(0x7f0000000800)=ANY=[@ANYBLOB="c3031865b1d2aef972b7f033e9e07397fecbe4ef34075bc45b598132dceb2ad0082cfc1164e95a2b304269ac9be3c4d887f4e2fc82eeb5c8a48152055a9058b048eab93218a2ba6cd70a5249a21df3bd20009395929b0000000000000000000000f900007148172e3a43ddc0d0fb84608ba3cfeaa0570ac850af2f1837c99b9d4a03548b6263261aedcde3305e90158f44ebb02d84cd3b5806000000aea1f7d31247a65805cb19bc874667000000000000"]}, {0x81, &(0x7f0000000500)=@string={0x81, 0x3, "d46fd392fe0ed752e675cce0f8d96bffb938f047f5758b6bb907bb1cc438c94f9022c8bdebed309e8d30e7b79e941c7f54a33cc7da62733b9b60a516f0c27272fb11da0caabbba0cedb52e1112f530441d92abb890c09618446579c68d14087143a5ff350bb1a3cbdb8cb80c6cd43cb292a6c45af14041833aa014dfe69a94"}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x405}}]}) 5.356382337s ago: executing program 3 (id=803): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000340)=ANY=[], 0x15) socket$inet_mptcp(0x2, 0x1, 0x106) syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) r0 = gettid() mknod(&(0x7f0000000180)='./file0\x00', 0x1ffa, 0x0) acct(&(0x7f0000000140)='./file0\x00') timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) timer_settime(r1, 0x0, &(0x7f0000000080)={{}, {r2, r3+10000000}}, &(0x7f00000000c0)) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$UHID_INPUT(r4, &(0x7f0000000300)={0x8, {"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", 0x1000}}, 0x1006) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000002700)=""/102392, 0x18ff8) write$P9_RWSTAT(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000011b40)=[{{&(0x7f0000007f80)={0xa, 0x4e22, 0x2, @remote, 0x3}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40084) 4.751123026s ago: executing program 5 (id=804): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, r0, 0x1c243811) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) keyctl$chown(0x4, r0, 0xee00, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/pm_debug_messages', 0x80802, 0x0) sendfile(r3, r3, 0x0, 0x6) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x1) syz_usb_connect(0x5, 0x24, &(0x7f00000009c0)={{0x12, 0x1, 0x201, 0x60, 0x7e, 0x68, 0x10, 0xa257, 0x2013, 0x8f26, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7, 0x8, 0x40, 0x8, [{{0x9, 0x4, 0x0, 0x5, 0x0, 0x43, 0x67, 0xc6, 0x2}}]}}]}}, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0}) 3.868797281s ago: executing program 3 (id=805): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000034000)=""/102392, 0x18ff8) socket(0x10, 0x803, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x0, 0x0}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = syz_io_uring_setup(0x1179, &(0x7f0000001240)={0x0, 0x10008cc8, 0x10100, 0x2, 0x75}, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(r3, 0x7a98, 0x20000000, 0x0, 0x0, 0xfffffffffffffc76) syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010, 0x1, 0x377}, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c00000029000b00ffffffff000000000500"], 0x2c}}, 0x0) ioctl$VIDIOC_S_OUTPUT(r2, 0xc004562f, &(0x7f0000000000)=0x1) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r1, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f00000007c0)="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", 0x20c}], 0x1}}], 0x2, 0x0) 3.326300683s ago: executing program 0 (id=806): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace(0x8, r1) unshare(0x8040480) r2 = syz_pidfd_open(r1, 0x0) process_mrelease(r2, 0x700000000000000) 2.906185246s ago: executing program 3 (id=807): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x121003, 0x0) r1 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x68, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000340)={0x0, 0x4005, 0x1, {0x1, @win={{}, 0x0, 0xfffffff8, 0x0, 0x0, 0x0}}}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000140)=0x1) ioctl$FS_IOC_SETFLAGS(r0, 0x40081271, &(0x7f0000000980)=0x4000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)={0x2c, r3, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x4}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000a00)='.\x00', &(0x7f0000000040)='ocfs2\x00', 0x800, 0x0) (fail_nth: 22) 2.100601836s ago: executing program 1 (id=808): openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x4014f964}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x9, 0x10, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x1b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000037}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0x5) setuid(r6) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="e40400003e000701fefffffffcffffff017c0000bc044280783290e24080ec9042f00572b1d889374c7da99cb85deaf87e75a22df3f048598110f88443dc528715b2e0aa83298a2a90c8bbb4e78d335b93dba9f5aeb1efe392d408ba6d960fab3c494127b035e8bb9677c6d0aba6ee87ee77995bb792b554212d0698cd04da7f3ad6bcce828cf1161f06f8b459102938ac39344b36bef159c6cb73589c844143697ac97d7cba251cc3a6d173d4eb030e25ee891f265e1e4b052d4e044aa638b34026f56c3b871ac8f6c6572da26ff33bcbe77a788ad1be08f6030c80d25bffb35f635ef06be1b65d8eee320d2df05a75cb867f680257b2befa647a39ae6045dd443939a58f87726f67ad8e870d915bd1c185a6e712ea5a6c806240d7b5cdfba172f67862d808f3652409825a6a46fbb5b91ae8a4801cc3b15622100d1df020b2599ead98ee9d411b8874341ff57d137bed831e1319a523e9b4a94f8d15b43a1cc578b40fd7648f41652ff0f1a503d4db1dfb58c7c4bd54eb58b93b13de50a174a115b94111179896ab8242410e51c44b45236aad2eaaffb0f919216019eab8dabee59c8126c344ebe0de0073", @ANYRES32=r6, @ANYBLOB="08139fdc864f575b302f22273989610cf3e808faa7c6c1c713b998bf734e6837c7c352327bae66bd601419ad66fd69976b0179662c35c41ab252990d9abacf771eff853b91a5d9222b0159039d68c644a176f38c9d61cbe9b7e96e42bfd822bc5a777c2a4b862f0c8c8f1090632ededfeb597a2e4fab1b8305edaec58f170cd37e6a7222859b5f1a22a52020f017090319c20f13b53b7ba55632e4e6b9e3fa90708b3887a05159e0a8201356135028fe6bc669d1de587286c1cbe425d7e3f48fe08dbdd3b5fc220ae362c6d027075d75d1e25516189904c94ae11dbc003d802b73c4136e0d9766be09f9b5d17050edcec549326cac7bc07cd5d83aea3d7b351db4cd1a7cf041ceea27af8071542f02184bb26581968aaaed589c0313d9b816877a1af6f683aa23999a0a1377ae4fdbc4b26c484c0f574b811fda706b1c9a28e8eec94412926bc221f48efb6f09ffd89d73f392c5788866f700a46fb0d0978a344911020c6b23a1bc74ef77b8e5c3346b012a1d415ed6fc1ec4f46b72ead4a1e62ee36fe0729693d290376a11fa1668a361769d040004801400170000000000000000000000000000000001f1002b800400e58004004a800400240078ccb6189d0c86ba9c418cf331b25457e21f5f72f5941ab5d6703607d9852be9d52dc7b6241709e47f548748d35b1985fd53a2eef76d414c69b4f867a9afcd198b44c614997f300b14ff0e14f71bf86f28124c8411889088a6ba1997a041395b5b60bdff8c818b37388337ee4e6ebdff2e81f0d7dcd58aa56d74d5c1d1144ac6653007c09a2c1b26857b4e00fb4b367297ab43cc09855074a2eb640ea76a261ea2244885af911aabf642fd982b20a1360486f47f3c7d29afeab59357cbc80feb1c416afd65140677a49344ea171d4b2d29284a0a6261359221811d69cc55e048df00000074dfc21421f97a837f7012ddd0c0083b897fba5b6a997e259649018715fabbdb21bc2c20c83f58c16487ceff9afe57f0804a0ccdc57ad204ae388b3f72c809e442b341379fd8b7de9d6f96f9acdbfcfbfe7360e2441b89573b90e1b569bf1e759ec13b974e7ec148d1e2d526e4aceed4fc8b78d4d306200800fb00", @ANYRES32, @ANYBLOB="00000c00018006000600800a00000800028004001780"], 0x4e4}, 0x1, 0x0, 0x0, 0x40008000}, 0xc000) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000000240)={0x1, @raw_data="a425e2f1a54d24f15655595860608d70566e425a6c36af37b33fac9d31c8a9c7044410d324b03e044e454d2092a62fea8f13441431ce248bfc73a6726ee61ba491d15d8f392ff66fe0b17f0e11f5d2367d5593205ab1efa97d40619a553e7da2518125b850a186ef691daa55c9e50ffaf6ddc25220ded32aeba4524cec1afbd17abba1d15ea05e97ed3dcad452db6e08a991e2c78b057f55de7fdeba7411ce65700c0a1ad7946ff7c355db87566e3e5abb7a37a06731ed19ddfa970bb58a27fd9fa194c092730319"}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) unshare(0x4000280) landlock_create_ruleset(0x0, 0x0, 0x0) socket(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) listen(r2, 0x400) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r8, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x8}}) 1.792050042s ago: executing program 0 (id=809): syz_io_uring_setup(0x31c7, &(0x7f0000000400)={0x0, 0x0, 0x40, 0x0, 0xffffffff}, &(0x7f00000001c0), &(0x7f0000000380)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4400000002060108a40000000000000000000000050001000700000005000466e900000000000900020073797a310000000013000300686173683a6e65742c696661636500004a406db316af272cb2c427e5ed"], 0x44}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r1 = creat(&(0x7f0000000080)='./file0\x00', 0x11c) fadvise64(r1, 0x4, 0xfc, 0x4) 1.765079873s ago: executing program 3 (id=810): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="590000001000010400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="009000007c8cf01ad78b74e83a3dc0baefd750ddde7b1728aba3036f972b79c622abc63cb4c701ebee6dc4583c0f22ab899391d35ee0bea262ecc99ce046434fc9d6477f0a85644eddadc04f45ab657056b0ad4b4c6a252532cfd4c20a11c4e35dfe5840c8a6380f683c462f2843b8a71ea4d1df6d40e10bd7c45cbbbcf337d147899ae47f43a2ee6f239ee75d9065d4d11e889a51d51b4f146462bc822bbb5ddf7627367a202991db67257543bd7c0aef20310035a71a310cc9c68e4246c3e12011b3e43b3ec1aaef63fcdd13730926ce388de774c1"], 0x4a}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0x30, 0x20, 0x53, 0xfffff004}, {0x6, 0x4, 0x8, 0xffff}]}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) getsockopt$IP_SET_OP_GET_BYINDEX(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000180), &(0x7f00000001c0)=0x28) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xb, 0xa, 0x5, 0x100008, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0), &(0x7f00000003c0), 0x3f, r2}, 0x38) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$binfmt_format(r3, &(0x7f0000000040)='1\x00', 0x2) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f00000005c0)={{0x21, @private=0xa010102, 0x4e20, 0x3, 'sed\x00', 0x4, 0x5b4, 0x61}, {@loopback, 0x4e20, 0x2000, 0x5, 0x2, 0xd0c}}, 0x44) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r2, &(0x7f0000000040)=')', 0x0}, 0x20) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000480)="cdcca7499c09c8885fbb3d7937ac3d9d0e69d7e5dae68c", 0x17) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYRES8=r2], 0x68}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)=@newtaction={0x280, 0x30, 0x200, 0x70bd26, 0x25dfdbff, {}, [{0x26c, 0x1, [@m_bpf={0x134, 0x13, 0x0, 0x0, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x44, 0x4, [{0x3, 0x6, 0x6, 0x6}, {0x7, 0xe, 0x9, 0x9}, {0xe, 0x10, 0x31, 0x1}, {0x3, 0x3, 0x2, 0x9}, {0x7, 0x99, 0xd1, 0x80}, {0xc, 0x6, 0x2, 0x401}, {0x2, 0x0, 0x0, 0x25}, {0x60a3, 0x9, 0x2, 0x7699}]}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS={0x34, 0x4, [{0x6, 0x8, 0x7, 0x8}, {0xfffa, 0x4, 0x6, 0x10}, {0x3, 0x9, 0x1, 0x2c4}, {0x4, 0x10, 0x1, 0x400}, {0x6, 0x2, 0x9, 0x3ff}, {0xa9, 0x6, 0x7f, 0x3}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0x9d, 0x5, 0x1, 0x4800}}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x5b, 0x6, "470be4e529e553aa2c369102e37ab15ce396842414241e870c642e834ba766e04e9c7b96b7200d9be82359bebb44df8a08c2879fc3d2ba042aa779addba61e3a93d6838965f5fbdf73c5664d91973c5337faa424787592"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ctinfo={0x134, 0xb, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0xffa}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x5043}]}, {0xf7, 0x6, "0bdbcced23069e62d0ea25ece0c325484c466cb43ab93da0dfcc2858d3d967d05cd911eb74c2edd12d657138a2443a413fc587f28bcc482c8293be2112d237d1bd151a69432de3fbcf304af5d77d640abc39186f8f1a6e77d2af60e3c871853177c1bc3ffe730d8fcb6c830d6a01b693d464bf60827193d5c5a4d2d70a9b908938031a099abfc458385ab6fc023f4b50ab8e490eb3ec7a5487fac362202ad6c5e7412edba62545e456113118f3464507989ebd36cc4e097ed7fa17c461dd4bb6a808294084c5196cc22a03cec9b4f4ba21586d66c47967d4a4da0250f0c1120c4e5310474f89c5658c98459497b26099797110"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x280}, 0x1, 0x0, 0x0, 0x40}, 0x40800) 1.465047974s ago: executing program 0 (id=811): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvtap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280000001d000100fcffffff0000040007000000", @ANYRES32=r1, @ANYBLOB="000012000a0002"], 0x28}}, 0x0) semget$private(0x0, 0x6, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r3, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)=""/89, 0x59}, {&(0x7f0000002740)=""/4097, 0x1001}, {&(0x7f00000002c0)=""/177, 0xb1}], 0x3}, 0x9}], 0x8000000000002e0, 0x40010000, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, 0x0, 0x0) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x24040084) sendmsg$SMC_PNETID_ADD(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x43}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000040)=@arm64={0x7, 0x6, 0x81, '\x00', 0x3c}) ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, &(0x7f00000000c0)=0xffff) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x4, &(0x7f0000000fc0)=""/99, 0x0) r7 = socket(0xa, 0x2, 0x0) bind$inet6(r7, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x2d, 0x0, 0x0, 0x1}, {0x6, 0x2, 0x4, 0xd060}]}, 0x10) 1.396823773s ago: executing program 3 (id=812): mknod$loop(&(0x7f0000000040)='./file0\x00', 0x1b004, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) fadvise64(r1, 0x8000000000000000, 0x0, 0x5) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x90}}, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x2}, 0x94) r3 = syz_io_uring_setup(0xd1c, &(0x7f0000000480)={0x0, 0x1, 0x80, 0x1, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000340)=0x0) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xc70, 0xf014, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f00000013c0)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "741cb976"}]}}, 0x0}, 0x0) r7 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1, 0xff3f}) r8 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000100)={0x2098, 0x5, 0x1000, 0xfffffffd}, 0x10) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=@delchain={0x24, 0x5f, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1f00}, {0x5, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4800}, 0x40) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x21}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_VALIDATION={0x5, 0xd, 0x7}]}}}]}, 0x3c}}, 0x8000) ioctl$BTRFS_IOC_GET_FEATURES(r2, 0x80189439, &(0x7f0000000180)) r10 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000002380)="1b0000001a007f029e741683c28f7b332300"/27, 0x1b}], 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2c, 0x0, 0x0, 0x4}]}, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x42, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x1, {0x2}}) r11 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r11, &(0x7f0000001880)=[{{0x0, 0x4, &(0x7f00000010c0)=[{&(0x7f00000000c0)="c8", 0x1}], 0x1, 0x0, 0x0, 0x60ff}}, {{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000001280)=',', 0x1}], 0x11}}], 0x2, 0x0) io_uring_enter(r3, 0x47bc, 0x0, 0x0, 0x0, 0x0) 814.334056ms ago: executing program 5 (id=813): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000004740)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000180)={0x12, 0x10, 0xfa00, {0x0, r2, r0}}, 0x18) r3 = syz_open_dev$evdev(&(0x7f0000000400), 0x7ec9, 0x66040) ioctl$EVIOCGPROP(r3, 0x80404509, &(0x7f0000000480)=""/220) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000009574c524546607daa272d96b621d62f261b469bd8b4244b6e93a008a0d335f2514029911a6d2e94e41d7b7c1cce7"], &(0x7f0000000100)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='contention_end\x00', r4}, 0x10) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r5 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0x4008af12, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) close(0xffffffffffffffff) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000bff000/0x400000)=nil) r6 = fanotify_init(0x200, 0x0) fanotify_mark(r6, 0x8, 0x4800003e, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0xffffffffffffffff, 0x1008a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, 0x0) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="00000000007ee2baad39b42b6afd1f508d6c00000000000000010000800000000053a4dd651a4f029a09ce0e9e891a6484dcdc5e0fb968ced00ed1020f9a901155dd8a256e076a5aee29baeccc9cace2cd6ab9b538ed0000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xb, 0x10, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000f7ffffff000000000000000018110000", @ANYRES32=r8, @ANYBLOB="00000000000000161602000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000000000d738f4fffcffffffbf9800000000000056080000010000008500000005000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) 615.828726ms ago: executing program 1 (id=814): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)={0x14, 0x38, 0x301, 0x70bd2b, 0x25dfdbfa, {0x5}}, 0x14}}, 0x40800) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r5}, @IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}]}, 0x3c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {0x7a}, [{0x78, 0x1, [@m_police={0x74, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x2, 0x2, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0xfffd}}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x10000000}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x8c}}, 0x0) r8 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r8, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r9 = getpid() sched_setscheduler(r9, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r10, &(0x7f000057eff8)=@abs, 0x6e) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x20, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r12, 0x0, 0x14, 0x0, &(0x7f0000000040)="f6f4e9a100000000002a8bc686ddb7dbfc007024", 0x0, 0x4, 0x0, 0x9, 0x0, &(0x7f0000000940)="01020ef222540f58f0", 0x0}, 0x50) sendmmsg$unix(r11, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r10, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000001000000000000000000000071123b000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x28, r13, 0xc4fc9e906872338b, 0x24, 0x0, {{0x15}, {@void, @val={0xc, 0x99, {0x8, 0x2}}}}, [@NL80211_ATTR_TID_CONFIG={0x8, 0x11d, 0x0, 0x1, [{0x4}]}]}, 0x28}}, 0x0) 0s ago: executing program 0 (id=815): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) getsockopt$sock_int(r0, 0x1, 0x28, &(0x7f00000000c0), &(0x7f00000004c0)=0x4) r2 = mq_open(&(0x7f00000001c0)='#\x00', 0x2, 0x0, &(0x7f0000000300)={0x847, 0x3, 0x8001, 0x5}) mq_notify(r2, &(0x7f0000000440)={0x0, 0x5, 0x0, @thr={&(0x7f0000000340)="b17a1d0bdc867fdeafa7d0bd2061f22d0bd88f2375257b2486092ae6768f417e48cd351ce98d3e155ea7037f856bb4c62e6727bcf29320c8b3dafea7b107430dd1970b2ad2ef5e3e0dd841249dca4843", &(0x7f00000003c0)="3ee855272a324f3555006b86a5f6eae0c34a5ced665f2933690539610dde5ddfe0621aaa03a6e240b36d839668f1165ddf2e40259a06e3f7a2fbe55f66fbbb986db5a4d93be69823e1590cd159cbe6b8"}}) syz_open_procfs(0x0, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e20, @dev}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4000000020000100000000000000000002000000000000000000000014"], 0x40}, 0x1, 0x0, 0x0, 0x4010}, 0x4044) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_link_settings={0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, [0xa1010000, 0x0, 0x0, 0x9, 0x832]}}) kernel console output (not intermixed with test programs): 139.675127][ T5923] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.726964][ T5923] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.305766][ T5923] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 140.569391][ T5923] usb 4-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 140.635977][ T5923] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.701865][ T5923] usb 4-1: config 0 descriptor?? [ 140.747381][ T5923] usb 4-1: can't set config #0, error -71 [ 140.819017][ T5923] usb 4-1: USB disconnect, device number 8 [ 141.034357][ T6594] netlink: 4 bytes leftover after parsing attributes in process `syz.1.158'. [ 141.745173][ T10] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 142.036531][ T10] usb 3-1: device descriptor read/64, error -71 [ 142.520266][ T10] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 142.644982][ T6604] netlink: 36 bytes leftover after parsing attributes in process `syz.1.161'. [ 143.158754][ T10] usb 3-1: device descriptor read/64, error -71 [ 143.186776][ T6604] bridge_slave_1: left allmulticast mode [ 143.221629][ T6608] trusted_key: syz.1.161 sent an empty control message without MSG_MORE. [ 143.230645][ T6604] bridge_slave_1: left promiscuous mode [ 143.237176][ T6604] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.266439][ T6604] bridge_slave_0: left allmulticast mode [ 143.290895][ T10] usb usb3-port1: attempt power cycle [ 143.309852][ T6604] bridge_slave_0: left promiscuous mode [ 143.337634][ T6604] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.640927][ T10] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 143.677768][ T10] usb 3-1: device descriptor read/8, error -71 [ 144.392561][ T10] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 144.832426][ T6630] netlink: 16 bytes leftover after parsing attributes in process `syz.2.166'. [ 144.977719][ T6624] netlink: 16 bytes leftover after parsing attributes in process `syz.2.166'. [ 145.114414][ T10] usb 3-1: device not accepting address 7, error -71 [ 145.121576][ T10] usb usb3-port1: unable to enumerate USB device [ 145.128713][ T6617] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 145.136471][ T6630] openvswitch: netlink: Flow actions attr not present in new flow. [ 145.150342][ T6617] macvtap1: entered allmulticast mode [ 145.155979][ T6617] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 145.181147][ T6624] openvswitch: netlink: Flow actions attr not present in new flow. [ 145.226053][ T6631] netlink: 212272 bytes leftover after parsing attributes in process `syz.1.167'. [ 145.245572][ T6617] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 145.255795][ T6617] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 145.530407][ T926] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 146.442947][ T926] usb 1-1: device descriptor read/64, error -71 [ 146.563618][ T6640] (syz.2.171,6640,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 146.572723][ T6640] (syz.2.171,6640,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 146.939499][ T926] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 146.986299][ T6647] netlink: 8 bytes leftover after parsing attributes in process `syz.2.172'. [ 147.034513][ T6647] netlink: 24 bytes leftover after parsing attributes in process `syz.2.172'. [ 147.109858][ T926] usb 1-1: device descriptor read/64, error -71 [ 147.246407][ T6655] netlink: 87 bytes leftover after parsing attributes in process `syz.2.174'. [ 147.270262][ T926] usb usb1-port1: attempt power cycle [ 147.610111][ T926] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 147.787552][ T5909] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 147.846689][ T926] usb 1-1: device descriptor read/8, error -71 [ 147.960119][ T5909] usb 3-1: Using ep0 maxpacket: 32 [ 147.992491][ T5909] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 148.010058][ T5909] usb 3-1: config 0 has no interface number 0 [ 148.042184][ T5909] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 148.067638][ T5909] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.105700][ T5909] usb 3-1: Product: syz [ 148.125132][ T5909] usb 3-1: Manufacturer: syz [ 148.155565][ T5909] usb 3-1: SerialNumber: syz [ 148.198468][ T5909] usb 3-1: config 0 descriptor?? [ 148.256460][ T5909] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 148.318148][ T5909] usb 3-1: selecting invalid altsetting 1 [ 148.394607][ T5909] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 148.489024][ T6655] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.530402][ T6655] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.548392][ T5909] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 148.655893][ T5909] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 148.808008][ T5909] usb 3-1: media controller created [ 148.937006][ T5909] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 149.041872][ T6673] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 149.204506][ T6673] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 149.242190][ T5909] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 149.298759][ T5909] zl10353_read_register: readreg error (reg=127, ret==-71) [ 149.914296][ T5909] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 150.154998][ T5909] usb 3-1: USB disconnect, device number 8 [ 150.549942][ T5909] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 150.560616][ T5835] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 150.703752][ T5909] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 150.716044][ T5909] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 150.720708][ T5835] usb 2-1: Using ep0 maxpacket: 16 [ 150.728497][ T5909] usb 3-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00 [ 150.745068][ T5909] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.746941][ T5835] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 150.759504][ T5909] usb 3-1: config 0 descriptor?? [ 150.773383][ T5835] usb 2-1: config 0 has no interface number 0 [ 150.775262][ T6683] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 150.782850][ T5835] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 150.811816][ T6692] netlink: 32 bytes leftover after parsing attributes in process `syz.0.186'. [ 150.823047][ T5835] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.840204][ T5922] usb 4-1: new low-speed USB device number 9 using dummy_hcd [ 150.865552][ T5835] usb 2-1: Product: syz [ 150.870277][ T5835] usb 2-1: Manufacturer: syz [ 150.875212][ T5835] usb 2-1: SerialNumber: syz [ 150.888140][ T5835] usb 2-1: config 0 descriptor?? [ 150.913332][ T5835] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 151.020763][ T5922] usb 4-1: device descriptor read/64, error -71 [ 151.201990][ T5909] sony 0003:1345:3008.0001: unknown main item tag 0x0 [ 151.209539][ T5909] sony 0003:1345:3008.0001: unknown main item tag 0x0 [ 151.217581][ T5909] sony 0003:1345:3008.0001: unknown main item tag 0x0 [ 151.225658][ T5909] sony 0003:1345:3008.0001: unknown main item tag 0x0 [ 151.234818][ T5909] sony 0003:1345:3008.0001: unknown main item tag 0x0 [ 151.290342][ T5922] usb 4-1: new low-speed USB device number 10 using dummy_hcd [ 151.307296][ T6698] process 'syz.4.189' launched './file1' with NULL argv: empty string added [ 151.323640][ T5909] sony 0003:1345:3008.0001: hiddev0,hidraw0: USB HID v80.05 Device [HID 1345:3008] on usb-dummy_hcd.2-1/input0 [ 151.336134][ T5909] sony 0003:1345:3008.0001: failed to claim input [ 151.831584][ T6703] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.842976][ T6703] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.087023][ T5922] usb 4-1: device descriptor read/64, error -71 [ 152.142996][ T6700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.178515][ T6700] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.201773][ T5922] usb usb4-port1: attempt power cycle [ 152.234121][ T5923] usb 3-1: USB disconnect, device number 9 [ 152.564168][ T5922] usb 4-1: new low-speed USB device number 11 using dummy_hcd [ 152.621758][ T5922] usb 4-1: device descriptor read/8, error -71 [ 153.290929][ T5835] gspca_spca1528: reg_w err -110 [ 153.321652][ T5835] spca1528 2-1:0.1: probe with driver spca1528 failed with error -110 [ 153.372499][ T5922] usb 4-1: new low-speed USB device number 12 using dummy_hcd [ 153.415633][ T5922] usb 4-1: device descriptor read/8, error -71 [ 153.596422][ T5922] usb usb4-port1: unable to enumerate USB device [ 153.740259][ T5835] usb 2-1: USB disconnect, device number 5 [ 154.092226][ T6726] netlink: 4 bytes leftover after parsing attributes in process `syz.3.197'. [ 154.946233][ T6734] Bluetooth: MGMT ver 1.23 [ 155.033350][ T6734] hub 1-0:1.0: USB hub found [ 155.040174][ T6734] hub 1-0:1.0: 1 port detected [ 157.791737][ T6763] ALSA: mixer_oss: invalid index 40000 [ 158.456658][ T6770] comedi comedi3: comedi_config --init_data is deprecated [ 158.594348][ T6779] netlink: 32 bytes leftover after parsing attributes in process `syz.1.212'. [ 158.607357][ T6779] fuse: Bad value for 'user_id' [ 158.613976][ T6779] fuse: Bad value for 'user_id' [ 158.619989][ T9] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 158.643941][ T6779] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 158.667785][ T6779] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 158.782540][ T9] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 158.795489][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.804995][ T5923] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 158.838757][ T9] usb 4-1: config 0 descriptor?? [ 158.861982][ T9] cp210x 4-1:0.0: cp210x converter detected [ 158.940265][ T5923] usb 3-1: device descriptor read/64, error -71 [ 159.184127][ T5923] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 159.267010][ T9] cp210x 4-1:0.0: failed to get vendor val 0x370c size 13: -121 [ 159.275249][ T9] cp210x 4-1:0.0: GPIO initialisation failed: -121 [ 159.294647][ T9] usb 4-1: cp210x converter now attached to ttyUSB0 [ 159.319897][ T5923] usb 3-1: device descriptor read/64, error -71 [ 159.390161][ T5893] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 159.440363][ T5923] usb usb3-port1: attempt power cycle [ 159.485699][ T6767] tipc: Started in network mode [ 159.490845][ T6767] tipc: Node identity 160e289a7822, cluster identity 4711 [ 159.498352][ T6767] tipc: Enabled bearer , priority 0 [ 159.507757][ T6767] syzkaller0: entered promiscuous mode [ 159.515069][ T6767] syzkaller0: entered allmulticast mode [ 159.542920][ T5893] usb 1-1: device descriptor read/64, error -71 [ 159.563029][ T6767] tipc: Resetting bearer [ 159.624716][ T6766] tipc: Resetting bearer [ 159.662614][ T6766] tipc: Disabling bearer [ 159.722794][ T5835] usb 4-1: USB disconnect, device number 13 [ 159.736296][ T5835] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 159.770888][ T5835] cp210x 4-1:0.0: device disconnected [ 159.790716][ T5893] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 159.790851][ T5923] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 159.850715][ T5923] usb 3-1: device descriptor read/8, error -71 [ 159.929864][ T5893] usb 1-1: device descriptor read/64, error -71 [ 160.110157][ T5923] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 160.136354][ T5893] usb usb1-port1: attempt power cycle [ 160.163071][ T5923] usb 3-1: device descriptor read/8, error -71 [ 160.490055][ T5893] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 160.681475][ T5893] usb 1-1: device descriptor read/8, error -71 [ 160.761072][ T5923] usb usb3-port1: unable to enumerate USB device [ 161.029931][ T5893] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 161.504666][ T5893] usb 1-1: device descriptor read/8, error -71 [ 161.762677][ T5893] usb usb1-port1: unable to enumerate USB device [ 161.886329][ T6826] xt_socket: unknown flags 0xd0 [ 162.375376][ T5923] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 162.595763][ T5923] usb 2-1: Using ep0 maxpacket: 8 [ 162.600402][ C1] vcan0: j1939_tp_txtimer: 0xffff8880343f3800: tx aborted with unknown reason: -2 [ 162.623495][ T5923] usb 2-1: unable to get BOS descriptor or descriptor too short [ 162.637623][ T5923] usb 2-1: config 4 has an invalid interface number: 147 but max is 0 [ 162.662286][ T5923] usb 2-1: config 4 has an invalid descriptor of length 15, skipping remainder of the config [ 162.686004][ T5923] usb 2-1: config 4 has no interface number 0 [ 162.700059][ T5835] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 162.729624][ T5923] usb 2-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 162.745504][ T6844] netlink: 8 bytes leftover after parsing attributes in process `syz.3.232'. [ 162.755491][ T5923] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.979908][ T5835] usb 3-1: Using ep0 maxpacket: 32 [ 163.111262][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880343f3800: abort rx timeout. Force session deactivation [ 163.173841][ T5923] usb 2-1: Product: syz [ 163.262366][ T5835] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 163.289875][ T5923] usb 2-1: Manufacturer: syz [ 163.310831][ T5835] usb 3-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 163.320647][ T5923] usb 2-1: SerialNumber: syz [ 163.339224][ T5835] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.401249][ T6853] netlink: 4 bytes leftover after parsing attributes in process `syz.0.231'. [ 163.406571][ T5835] usb 3-1: config 0 descriptor?? [ 163.598145][ T5923] usb 2-1: Found UVC 0.02 device syz (04f2:b746) [ 163.636542][ T5923] uvcvideo 2-1:4.147: Entity type for entity Output 251 was not initialized! [ 163.664864][ T5923] usb 2-1: Failed to create links for entity 251 [ 163.680315][ T5923] usb 2-1: Failed to register entities (-22). [ 163.727576][ T5923] usb 2-1: USB disconnect, device number 6 [ 163.870893][ T5835] magicmouse 0003:05AC:0265.0002: hidraw0: USB HID v0.00 Device [HID 05ac:0265] on usb-dummy_hcd.2-1/input0 [ 163.946537][ T6860] syz.3.234 (6860) used greatest stack depth: 17992 bytes left [ 165.549913][ T5922] usb 3-1: USB disconnect, device number 14 [ 166.680050][ T5922] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 166.942591][ T6890] (syz.1.239,6890,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 166.951476][ T6890] (syz.1.239,6890,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 167.243576][ T5922] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 167.258785][ T5922] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 167.273052][ T6899] Cannot find map_set index 0 as target [ 167.274709][ T5922] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 167.340612][ T5922] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.378281][ T5922] usb 3-1: Product: syz [ 167.384224][ T5922] usb 3-1: Manufacturer: syz [ 167.388871][ T5922] usb 3-1: SerialNumber: syz [ 167.669829][ T5922] usb 3-1: 0:2 : does not exist [ 167.692198][ T5922] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 167.853802][ T5922] usb 3-1: USB disconnect, device number 15 [ 167.976557][ T5971] udevd[5971]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 168.011539][ T5909] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 168.287527][ T5909] usb 2-1: Using ep0 maxpacket: 16 [ 168.296888][ T5909] usb 2-1: config 0 has an invalid interface number: 63 but max is 0 [ 168.324755][ T5909] usb 2-1: config 0 has no interface number 0 [ 168.458843][ T6914] tipc: Started in network mode [ 168.463908][ T6914] tipc: Node identity ac14140f, cluster identity 4711 [ 168.471425][ T6914] tipc: New replicast peer: 255.255.255.255 [ 168.478219][ T6914] tipc: Enabled bearer , priority 10 [ 168.679664][ T5909] usb 2-1: config 0 interface 63 altsetting 150 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.725348][ T5909] usb 2-1: config 0 interface 63 altsetting 150 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.761603][ T5909] usb 2-1: config 0 interface 63 altsetting 150 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 168.821803][ T5909] usb 2-1: config 0 interface 63 has no altsetting 0 [ 168.877853][ T5909] usb 2-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00 [ 168.905541][ T5909] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.006920][ T5909] usb 2-1: config 0 descriptor?? [ 169.408926][ T6925] netlink: 16 bytes leftover after parsing attributes in process `syz.0.250'. [ 170.234803][ T6927] netlink: 'syz.2.252': attribute type 10 has an invalid length. [ 170.263453][ T5835] tipc: Node number set to 2886997007 [ 170.631474][ T6927] bond0: (slave wlan1): Releasing backup interface [ 170.720237][ T6927] team0: Port device wlan1 added [ 170.833915][ T6934] sp0: Synchronizing with TNC [ 170.928757][ T5909] uclogic 0003:28BD:0909.0003: interface is invalid, ignoring [ 171.253346][ T5909] usb 2-1: USB disconnect, device number 7 [ 172.035019][ T6956] netlink: 40 bytes leftover after parsing attributes in process `syz.0.259'. [ 172.755515][ T6969] netlink: 16 bytes leftover after parsing attributes in process `syz.2.263'. [ 172.940284][ T5909] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 174.021727][ T5909] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 174.042429][ T5909] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 174.134573][ T5909] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 174.183780][ T5909] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 174.223380][ T5909] usb 1-1: SerialNumber: syz [ 174.489689][ T5909] usb 1-1: 0:2 : does not exist [ 174.595522][ T5909] usb 1-1: USB disconnect, device number 17 [ 174.643799][ T6983] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 174.700700][ T5971] udevd[5971]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 174.870167][ T5901] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 175.029962][ T5901] usb 4-1: device descriptor read/64, error -71 [ 175.299997][ T5901] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 175.500124][ T5901] usb 4-1: device descriptor read/64, error -71 [ 175.620359][ T5901] usb usb4-port1: attempt power cycle [ 176.099843][ T5901] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 176.151690][ T5901] usb 4-1: device descriptor read/8, error -71 [ 176.167999][ T7001] lo speed is unknown, defaulting to 1000 [ 176.478832][ T5901] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 176.531643][ T5901] usb 4-1: device descriptor read/8, error -71 [ 176.532938][ T5922] IPVS: starting estimator thread 0... [ 176.571708][ T7006] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.650284][ T7010] IPVS: using max 30 ests per chain, 72000 per kthread [ 176.670848][ T5901] usb usb4-port1: unable to enumerate USB device [ 176.869543][ T7006] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.996672][ T7006] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.188925][ T7006] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.567514][ T7006] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.757888][ T7006] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.850415][ T7006] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.883531][ T7006] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.019913][ T7022] evm: overlay not supported [ 179.655575][ T7039] loop2: detected capacity change from 0 to 7 [ 179.720186][ T7039] Dev loop2: unable to read RDB block 7 [ 179.732345][ T7039] loop2: unable to read partition table [ 179.738332][ T7039] loop2: partition table beyond EOD, truncated [ 179.750626][ T7039] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 180.027575][ T7046] capability: warning: `syz.4.282' uses deprecated v2 capabilities in a way that may be insecure [ 180.626759][ T5835] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 180.755470][ T5205] Dev loop2: unable to read RDB block 7 [ 180.770570][ T7048] FAULT_INJECTION: forcing a failure. [ 180.770570][ T7048] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 180.814053][ T7048] CPU: 1 UID: 0 PID: 7048 Comm: syz.2.281 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 180.814084][ T7048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 180.814096][ T7048] Call Trace: [ 180.814104][ T7048] [ 180.814113][ T7048] dump_stack_lvl+0x189/0x250 [ 180.814148][ T7048] ? __pfx____ratelimit+0x10/0x10 [ 180.814161][ T7048] ? __pfx_dump_stack_lvl+0x10/0x10 [ 180.814173][ T7048] ? __pfx__printk+0x10/0x10 [ 180.814192][ T7048] should_fail_ex+0x414/0x560 [ 180.814207][ T7048] strncpy_from_user+0x36/0x290 [ 180.814225][ T7048] getname_flags+0xf3/0x540 [ 180.814240][ T7048] do_sys_openat2+0xbc/0x1c0 [ 180.814256][ T7048] ? __pfx_do_sys_openat2+0x10/0x10 [ 180.814270][ T7048] ? ksys_write+0x22a/0x250 [ 180.814280][ T7048] ? __pfx_ksys_write+0x10/0x10 [ 180.814288][ T7048] ? rcu_is_watching+0x15/0xb0 [ 180.814301][ T7048] __x64_sys_openat+0x138/0x170 [ 180.814317][ T7048] do_syscall_64+0xfa/0x3b0 [ 180.814330][ T7048] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.814339][ T7048] ? asm_sysvec_call_function_single+0x1a/0x20 [ 180.814349][ T7048] ? clear_bhb_loop+0x60/0xb0 [ 180.814361][ T7048] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.814370][ T7048] RIP: 0033:0x7f7f1878ebe9 [ 180.814383][ T7048] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 180.814392][ T7048] RSP: 002b:00007f7f195c4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 180.814404][ T7048] RAX: ffffffffffffffda RBX: 00007f7f189b6090 RCX: 00007f7f1878ebe9 [ 180.814411][ T7048] RDX: 000000000008417f RSI: 0000200000000140 RDI: ffffffffffffff9c [ 180.814418][ T7048] RBP: 00007f7f195c4090 R08: 0000000000000000 R09: 0000000000000000 [ 180.814424][ T7048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 180.814430][ T7048] R13: 00007f7f189b6128 R14: 00007f7f189b6090 R15: 00007ffe849eeb48 [ 180.814446][ T7048] [ 180.815048][ T5205] loop2: unable to read partition table [ 181.110045][ T5835] usb 2-1: Using ep0 maxpacket: 16 [ 181.119646][ T7056] netlink: 16 bytes leftover after parsing attributes in process `syz.0.283'. [ 181.212592][ T5835] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 181.223493][ T7056] netlink: 'syz.0.283': attribute type 1 has an invalid length. [ 181.241257][ T5835] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=222 [ 181.249727][ T5205] loop2: partition table beyond EOD, truncated [ 181.336956][ T5835] usb 2-1: SerialNumber: syz [ 181.386117][ T5835] usb 2-1: config 0 descriptor?? [ 181.468853][ T5835] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 181.539409][ T5835] usb 2-1: Detected FT232A [ 181.541274][ T7062] rdma_rxe: rxe_newlink: failed to add veth1 [ 181.564467][ T5835] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 181.739613][ T5835] usb 2-1: USB disconnect, device number 8 [ 181.794650][ T5835] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 181.796050][ T7064] overlayfs: failed to clone upperpath [ 181.867467][ T5835] ftdi_sio 2-1:0.0: device disconnected [ 182.190060][ T9] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 182.364335][ T9] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 182.387204][ T9] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 182.402814][ T9] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 182.412911][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.668957][ T9] usb 1-1: GET_CAPABILITIES returned 0 [ 182.679029][ T9] usbtmc 1-1:16.0: can't read capabilities [ 182.806107][ T9] usb 1-1: USB disconnect, device number 18 [ 183.786220][ T7090] netlink: 16 bytes leftover after parsing attributes in process `syz.3.291'. [ 183.846391][ T7091] netlink: 24 bytes leftover after parsing attributes in process `syz.4.293'. [ 184.019743][ T7093] netlink: 16 bytes leftover after parsing attributes in process `syz.1.294'. [ 184.572284][ T7101] syzkaller1: entered promiscuous mode [ 184.590220][ T7101] syzkaller1: entered allmulticast mode [ 184.725222][ T7110] IPv6: addrconf: prefix option has invalid lifetime [ 184.789608][ T7111] netlink: 180 bytes leftover after parsing attributes in process `syz.3.299'. [ 185.067889][ T7116] fuse: Bad value for 'user_id' [ 185.086043][ T7116] fuse: Bad value for 'user_id' [ 185.853732][ T7130] IPVS: Error connecting to the multicast addr [ 185.966090][ T7129] netlink: 32 bytes leftover after parsing attributes in process `syz.4.307'. [ 186.799985][ T9] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 186.919485][ T7147] FAULT_INJECTION: forcing a failure. [ 186.919485][ T7147] name failslab, interval 1, probability 0, space 0, times 0 [ 186.922808][ T7142] netlink: 8 bytes leftover after parsing attributes in process `syz.0.311'. [ 186.943140][ T7147] CPU: 0 UID: 0 PID: 7147 Comm: syz.2.308 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 186.943166][ T7147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 186.943177][ T7147] Call Trace: [ 186.943185][ T7147] [ 186.943194][ T7147] dump_stack_lvl+0x189/0x250 [ 186.943221][ T7147] ? __pfx____ratelimit+0x10/0x10 [ 186.943242][ T7147] ? __pfx_dump_stack_lvl+0x10/0x10 [ 186.943264][ T7147] ? __pfx__printk+0x10/0x10 [ 186.943295][ T7147] ? __pfx___might_resched+0x10/0x10 [ 186.943318][ T7147] ? fs_reclaim_acquire+0x7d/0x100 [ 186.943346][ T7147] should_fail_ex+0x414/0x560 [ 186.943372][ T7147] should_failslab+0xa8/0x100 [ 186.943395][ T7147] kmem_cache_alloc_noprof+0x73/0x3c0 [ 186.943414][ T7147] ? alloc_empty_file+0x55/0x1d0 [ 186.943442][ T7147] alloc_empty_file+0x55/0x1d0 [ 186.943468][ T7147] path_openat+0x107/0x3830 [ 186.943493][ T7147] ? arch_stack_walk+0xfc/0x150 [ 186.943538][ T7147] ? __lock_acquire+0xab9/0xd20 [ 186.943562][ T7147] ? kasan_save_track+0x4f/0x80 [ 186.943588][ T7147] ? kasan_save_track+0x3e/0x80 [ 186.943613][ T7147] ? __kasan_slab_alloc+0x6c/0x80 [ 186.943630][ T7147] ? getname_flags+0xb8/0x540 [ 186.943651][ T7147] ? __pfx_path_openat+0x10/0x10 [ 186.943675][ T7147] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.943716][ T7147] do_filp_open+0x1fa/0x410 [ 186.943741][ T7147] ? __lock_acquire+0xab9/0xd20 [ 186.943761][ T7147] ? __pfx_do_filp_open+0x10/0x10 [ 186.943812][ T7147] ? _raw_spin_unlock+0x28/0x50 [ 186.943839][ T7147] ? alloc_fd+0x64c/0x6c0 [ 186.943872][ T7147] do_sys_openat2+0x121/0x1c0 [ 186.943899][ T7147] ? __pfx_do_sys_openat2+0x10/0x10 [ 186.943925][ T7147] ? ksys_write+0x22a/0x250 [ 186.943945][ T7147] ? __pfx_ksys_write+0x10/0x10 [ 186.943961][ T7147] ? rcu_is_watching+0x15/0xb0 [ 186.943986][ T7147] __x64_sys_openat+0x138/0x170 [ 186.944017][ T7147] do_syscall_64+0xfa/0x3b0 [ 186.944040][ T7147] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.944058][ T7147] ? asm_sysvec_call_function_single+0x1a/0x20 [ 186.944077][ T7147] ? clear_bhb_loop+0x60/0xb0 [ 186.944107][ T7147] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.944125][ T7147] RIP: 0033:0x7f7f1878ebe9 [ 186.944142][ T7147] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 186.944158][ T7147] RSP: 002b:00007f7f195c4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 186.944179][ T7147] RAX: ffffffffffffffda RBX: 00007f7f189b6090 RCX: 00007f7f1878ebe9 [ 186.944193][ T7147] RDX: 000000000008417f RSI: 0000200000000140 RDI: ffffffffffffff9c [ 186.944207][ T7147] RBP: 00007f7f195c4090 R08: 0000000000000000 R09: 0000000000000000 [ 186.944218][ T7147] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 186.944230][ T7147] R13: 00007f7f189b6128 R14: 00007f7f189b6090 R15: 00007ffe849eeb48 [ 186.944262][ T7147] [ 187.239311][ T7146] netlink: 16 bytes leftover after parsing attributes in process `syz.4.309'. [ 187.346460][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 187.355720][ T9] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 187.370148][ T9] usb 2-1: config 0 has no interface number 0 [ 187.376364][ T9] usb 2-1: config 0 interface 184 has no altsetting 0 [ 187.415715][ T9] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 187.426496][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.435933][ T9] usb 2-1: Product: syz [ 187.435953][ T9] usb 2-1: Manufacturer: syz [ 187.435982][ T9] usb 2-1: SerialNumber: syz [ 187.439798][ T9] usb 2-1: config 0 descriptor?? [ 187.460252][ T9] smsc75xx v1.0.0 [ 187.740024][ T5893] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 187.873007][ T7155] netlink: 4 bytes leftover after parsing attributes in process `syz.0.313'. [ 188.039969][ T5893] usb 4-1: Using ep0 maxpacket: 8 [ 188.048348][ T5893] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 188.057272][ T5893] usb 4-1: config 0 has no interface number 0 [ 188.058660][ T7157] fuse: Bad value for 'user_id' [ 188.069887][ T7157] fuse: Bad value for 'user_id' [ 188.071340][ T5893] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 188.081450][ T7157] overlayfs: failed to clone upperpath [ 188.088376][ T5893] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 188.102563][ T5893] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 188.116804][ T5893] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 188.126245][ T5893] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.157488][ T5893] usb 4-1: config 0 descriptor?? [ 188.173359][ T5893] ldusb 4-1:0.55: Interrupt in endpoint not found [ 188.317462][ T9] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 188.337228][ T9] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 188.377567][ T5893] usb 4-1: USB disconnect, device number 18 [ 188.561801][ T9] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 188.656168][ T9] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 188.683589][ T9] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 188.703257][ T9] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 188.874414][ T7172] netlink: 32 bytes leftover after parsing attributes in process `syz.0.319'. [ 189.135871][ T9] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 189.173016][ T9] usb 2-1: USB disconnect, device number 9 [ 190.638992][ T7189] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 191.053297][ T7194] netlink: 16 bytes leftover after parsing attributes in process `syz.4.324'. [ 191.128618][ T7196] fuse: Unknown parameter 'grou00000000000000000000' [ 191.735011][ T7201] Cannot find add_set index 0 as target [ 191.757354][ T7207] netlink: 16 bytes leftover after parsing attributes in process `syz.2.329'. [ 191.781722][ T7207] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 192.094128][ T10] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 192.281974][ T7212] (syz.1.330,7212,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 192.291147][ T7212] (syz.1.330,7212,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 192.480581][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 192.664826][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 192.711530][ T10] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 192.757962][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 192.778441][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 192.793212][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 192.824371][ T7216] CIFS: VFS: Malformed UNC in devname [ 192.845862][ T10] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1 [ 192.866366][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 192.884367][ T10] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xAC, changing to 0x8C [ 192.906592][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 192.935525][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 192.962547][ T10] usb 3-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 192.972966][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.999846][ T10] usb 3-1: Product: syz [ 193.009902][ T10] usb 3-1: Manufacturer: syz [ 193.015245][ T10] usb 3-1: SerialNumber: syz [ 193.037033][ T10] usb 3-1: config 0 descriptor?? [ 193.046798][ T7207] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 193.077267][ T10] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 193.769888][ T5835] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 193.866836][ T5885] udevd[5885]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 193.939354][ T7232] fuse: Unknown parameter 'grou00000000000000000000' [ 193.962823][ T5835] usb 4-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice= 0.7f [ 193.988621][ T5835] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.000866][ T5835] usb 4-1: config 0 descriptor?? [ 194.218976][ T5835] usb 4-1: string descriptor 0 read error: -71 [ 194.237963][ T5835] ldusb 4-1:0.0: Interrupt in endpoint not found [ 194.260082][ T5835] usb 4-1: USB disconnect, device number 19 [ 194.420834][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.427205][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.562525][ T7241] netlink: 16 bytes leftover after parsing attributes in process `syz.1.338'. [ 194.992020][ T5922] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 195.006089][ T5893] usb 3-1: USB disconnect, device number 16 [ 195.201218][ T5922] usb 1-1: device descriptor read/64, error -71 [ 195.396403][ T7249] FAULT_INJECTION: forcing a failure. [ 195.396403][ T7249] name failslab, interval 1, probability 0, space 0, times 0 [ 195.435749][ T7249] CPU: 0 UID: 0 PID: 7249 Comm: syz.3.340 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 195.435777][ T7249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 195.435788][ T7249] Call Trace: [ 195.435795][ T7249] [ 195.435803][ T7249] dump_stack_lvl+0x189/0x250 [ 195.435827][ T7249] ? __pfx____ratelimit+0x10/0x10 [ 195.435845][ T7249] ? __pfx_dump_stack_lvl+0x10/0x10 [ 195.435866][ T7249] ? __pfx__printk+0x10/0x10 [ 195.435892][ T7249] ? __pfx___might_resched+0x10/0x10 [ 195.435913][ T7249] ? fs_reclaim_acquire+0x7d/0x100 [ 195.435941][ T7249] should_fail_ex+0x414/0x560 [ 195.435966][ T7249] should_failslab+0xa8/0x100 [ 195.435989][ T7249] kmem_cache_alloc_noprof+0x73/0x3c0 [ 195.436007][ T7249] ? security_file_alloc+0x34/0x330 [ 195.436033][ T7249] security_file_alloc+0x34/0x330 [ 195.436056][ T7249] init_file+0x93/0x2f0 [ 195.436082][ T7249] alloc_empty_file+0x6e/0x1d0 [ 195.436107][ T7249] path_openat+0x107/0x3830 [ 195.436134][ T7249] ? arch_stack_walk+0xfc/0x150 [ 195.436184][ T7249] ? kasan_save_track+0x4f/0x80 [ 195.436211][ T7249] ? kasan_save_track+0x3e/0x80 [ 195.436236][ T7249] ? __kasan_slab_alloc+0x6c/0x80 [ 195.436253][ T7249] ? getname_flags+0xb8/0x540 [ 195.436274][ T7249] ? __pfx_path_openat+0x10/0x10 [ 195.436298][ T7249] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.436338][ T7249] do_filp_open+0x1fa/0x410 [ 195.436363][ T7249] ? __lock_acquire+0xab9/0xd20 [ 195.436382][ T7249] ? __pfx_do_filp_open+0x10/0x10 [ 195.436431][ T7249] ? _raw_spin_unlock+0x28/0x50 [ 195.436459][ T7249] ? alloc_fd+0x64c/0x6c0 [ 195.436491][ T7249] do_sys_openat2+0x121/0x1c0 [ 195.436519][ T7249] ? __pfx_do_sys_openat2+0x10/0x10 [ 195.436544][ T7249] ? ksys_write+0x22a/0x250 [ 195.436564][ T7249] ? __pfx_ksys_write+0x10/0x10 [ 195.436586][ T7249] __x64_sys_openat+0x138/0x170 [ 195.436616][ T7249] do_syscall_64+0xfa/0x3b0 [ 195.436639][ T7249] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.436656][ T7249] ? asm_sysvec_call_function_single+0x1a/0x20 [ 195.436675][ T7249] ? clear_bhb_loop+0x60/0xb0 [ 195.436704][ T7249] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.436722][ T7249] RIP: 0033:0x7fae2b78ebe9 [ 195.436739][ T7249] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 195.436755][ T7249] RSP: 002b:00007fae2c5e5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 195.436775][ T7249] RAX: ffffffffffffffda RBX: 00007fae2b9b6090 RCX: 00007fae2b78ebe9 [ 195.436789][ T7249] RDX: 000000000008417f RSI: 0000200000000140 RDI: ffffffffffffff9c [ 195.436802][ T7249] RBP: 00007fae2c5e5090 R08: 0000000000000000 R09: 0000000000000000 [ 195.436814][ T7249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 195.436825][ T7249] R13: 00007fae2b9b6128 R14: 00007fae2b9b6090 R15: 00007ffe6b806848 [ 195.436856][ T7249] [ 195.439876][ T5922] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 195.579895][ T55] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 195.740186][ T55] usb 2-1: Using ep0 maxpacket: 8 [ 195.755901][ T55] usb 2-1: config 2 has an invalid interface number: 147 but max is 1 [ 195.795268][ T55] usb 2-1: config 2 has an invalid interface number: 144 but max is 1 [ 195.817250][ T55] usb 2-1: config 2 contains an unexpected descriptor of type 0x1, skipping [ 195.844736][ T55] usb 2-1: config 2 has no interface number 0 [ 195.860054][ T55] usb 2-1: config 2 has no interface number 1 [ 195.877739][ T55] usb 2-1: config 2 interface 147 altsetting 1 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 195.896429][ T7252] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 195.909938][ T5922] usb 1-1: device descriptor read/64, error -71 [ 195.961087][ T55] usb 2-1: config 2 interface 147 altsetting 1 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 195.972793][ T55] usb 2-1: config 2 interface 144 altsetting 0 has a duplicate endpoint with address 0x5, skipping [ 195.985500][ T55] usb 2-1: config 2 interface 144 altsetting 0 has a duplicate endpoint with address 0x5, skipping [ 195.999798][ T55] usb 2-1: config 2 interface 144 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 196.011822][ T55] usb 2-1: config 2 interface 144 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 196.023075][ T55] usb 2-1: config 2 interface 144 altsetting 0 has an endpoint descriptor with address 0x5E, changing to 0xE [ 196.030293][ T5922] usb usb1-port1: attempt power cycle [ 196.035013][ T55] usb 2-1: config 2 interface 144 altsetting 0 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 196.051377][ T55] usb 2-1: config 2 interface 144 altsetting 0 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 196.063601][ T55] usb 2-1: config 2 interface 144 altsetting 0 has a duplicate endpoint with address 0x5, skipping [ 196.074798][ T55] usb 2-1: config 2 interface 144 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 196.086537][ T55] usb 2-1: config 2 interface 144 altsetting 0 has a duplicate endpoint with address 0x5, skipping [ 196.103941][ T55] usb 2-1: config 2 interface 147 has no altsetting 0 [ 196.120689][ T55] usb 2-1: Dual-Role OTG device on HNP port [ 196.127356][ T55] usb 2-1: New USB device found, idVendor=2304, idProduct=0248, bcdDevice=7c.8c [ 196.137130][ T55] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.145441][ T10] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 196.154779][ T55] usb 2-1: Product: ┼ޮㆬ걊劣摪Ⲃ劳逫ꤖꮚ崭츼縚纴度ᢕ頿곡횬몮齼꯺鋿ಃ⓴ꘆ醨ේ꭭ម辉ㇷ힠恇숫ᄇ刘㝲虀掌袺⭅୲쁠᭤西識颴돩䐽拡趰帔쟼強 [ 196.174469][ T55] usb 2-1: Manufacturer: 썡赏⏜짝䩾੔튕즍흭팩뒘勖巺៚颫灉囬䬒쒛䫒ᴷ髟⒝技籭挖썏⫌쎻韦䅦랃擛폄赬㠘㗻漀읅Ù檙请蕗젚뷣澥㊏菂ꑡ鉼輓욺ᯛ귗噝씭鶼䗢ඤ弑㛗㠾᫹疛㤛뜛䑯髏ঊ쐀醉㉶瘵涍鯉Ⓟ蘲鍗᥮Ꙩ [ 196.204195][ T55] usb 2-1: SerialNumber: 倩긟롔碴꿛࢈鸖䟤紳면蛁뱢辞Ξ幩Ț㙙Ӹ饊Ꮡ싗莯≳쑗嗏ऱ軺爭祓ꕍ蓗坳ⴸ㷶暽柸曈⡳ȿ [ 196.301144][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 196.311531][ T10] usb 3-1: config 7 has an invalid interface number: 46 but max is 0 [ 196.320194][ T10] usb 3-1: config 7 has no interface number 0 [ 196.326685][ T10] usb 3-1: config 7 interface 46 has no altsetting 0 [ 196.337071][ T10] usb 3-1: New USB device found, idVendor=9fdb, idProduct=cfba, bcdDevice=f1.37 [ 196.349435][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.361843][ T10] usb 3-1: Product: syz [ 196.366060][ T10] usb 3-1: Manufacturer: syz [ 196.371157][ T10] usb 3-1: SerialNumber: syz [ 196.389998][ T5922] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 196.410698][ T5922] usb 1-1: device descriptor read/8, error -71 [ 196.480904][ T55] dvb-usb: found a 'Pinnacle PCTV 282e' in cold state, will try to load a firmware [ 196.582581][ T55] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 196.603991][ T55] dib0700: firmware download failed at 7 with -8 [ 196.634464][ T55] dvb-usb: found a 'Pinnacle PCTV 282e' in cold state, will try to load a firmware [ 196.650182][ T5922] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 196.653299][ T55] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 196.667335][ T55] dib0700: firmware download failed at 7 with -8 [ 196.680692][ T5922] usb 1-1: device descriptor read/8, error -71 [ 196.689415][ T55] usb 2-1: USB disconnect, device number 10 [ 196.800437][ T5922] usb usb1-port1: unable to enumerate USB device [ 196.823644][ T7258] netlink: 32 bytes leftover after parsing attributes in process `syz.4.345'. [ 197.081080][ T7262] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=576 (1152 ns) > initial count (34 ns). Using initial count to start timer. [ 197.107982][ T7262] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 198.240280][ T10] usb 3-1: USB disconnect, device number 17 [ 199.412965][ T7286] netlink: 16 bytes leftover after parsing attributes in process `syz.1.352'. [ 199.545703][ T7290] libceph: resolve '4.' (ret=-3): failed [ 199.615706][ T926] IPVS: starting estimator thread 0... [ 199.729996][ T7291] IPVS: using max 30 ests per chain, 72000 per kthread [ 200.120038][ T7303] netlink: 32 bytes leftover after parsing attributes in process `syz.1.356'. [ 201.540761][ T5901] usb 2-1: new low-speed USB device number 11 using dummy_hcd [ 201.665946][ T5853] Bluetooth: hci2: command 0x0406 tx timeout [ 201.666709][ T5843] Bluetooth: hci3: command 0x206a tx timeout [ 201.672036][ T5850] Bluetooth: hci4: command 0x0406 tx timeout [ 201.672077][ T5850] Bluetooth: hci0: command 0x0406 tx timeout [ 201.672120][ T5850] Bluetooth: hci1: command 0x0406 tx timeout [ 201.842442][ T5901] usb 2-1: config index 0 descriptor too short (expected 1307, got 27) [ 201.851242][ T5901] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 201.859357][ T5901] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 201.880317][ T5901] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 201.892370][ T5901] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 201.917965][ T5901] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 201.940341][ T5901] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 201.976586][ T5901] usb 2-1: string descriptor 0 read error: -22 [ 201.983899][ T5901] usb 2-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 201.996062][ T5901] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.045347][ T5901] usb 2-1: config 0 descriptor?? [ 202.053352][ T5901] hub 2-1:0.0: bad descriptor, ignoring hub [ 202.059409][ T5901] hub 2-1:0.0: probe with driver hub failed with error -5 [ 202.084079][ T5901] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input9 [ 202.150536][ T7328] netlink: 16 bytes leftover after parsing attributes in process `syz.3.363'. [ 202.403059][ T7333] netlink: 24 bytes leftover after parsing attributes in process `syz.4.366'. [ 202.721261][ T5901] usb 2-1: USB disconnect, device number 11 [ 203.510235][ T7353] netlink: 32 bytes leftover after parsing attributes in process `syz.0.369'. [ 205.205956][ T7365] netlink: 16 bytes leftover after parsing attributes in process `syz.4.375'. [ 205.780060][ T7374] IPVS: Unknown mcast interface: nicvf0 [ 205.879939][ T24] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 206.029922][ T24] usb 2-1: device descriptor read/64, error -71 [ 206.290545][ T24] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 206.849950][ T24] usb 2-1: device descriptor read/64, error -71 [ 207.132508][ T24] usb usb2-port1: attempt power cycle [ 207.831819][ T7404] netlink: 20 bytes leftover after parsing attributes in process `syz.3.382'. [ 207.858731][ T7404] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 207.962097][ T7406] netlink: 24 bytes leftover after parsing attributes in process `syz.4.383'. [ 208.396249][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 208.396267][ T30] audit: type=1326 audit(1755946363.802:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7407 comm="syz.1.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3adb58ebe9 code=0x7ffc0000 [ 208.501070][ T30] audit: type=1326 audit(1755946363.802:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7407 comm="syz.1.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3adb58ebe9 code=0x7ffc0000 [ 208.529353][ T30] audit: type=1326 audit(1755946363.802:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7407 comm="syz.1.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3adb58ebe9 code=0x7ffc0000 [ 208.554315][ T30] audit: type=1326 audit(1755946363.832:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7407 comm="syz.1.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3adb58ebe9 code=0x7ffc0000 [ 208.599736][ T30] audit: type=1326 audit(1755946363.832:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7407 comm="syz.1.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3adb58ebe9 code=0x7ffc0000 [ 208.635211][ T30] audit: type=1326 audit(1755946363.852:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7407 comm="syz.1.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3adb58ebe9 code=0x7ffc0000 [ 208.660856][ T7421] netlink: 16 bytes leftover after parsing attributes in process `syz.4.387'. [ 208.844963][ T7422] netlink: 'syz.3.388': attribute type 29 has an invalid length. [ 208.873475][ T30] audit: type=1326 audit(1755946363.852:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7407 comm="syz.1.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3adb58ebe9 code=0x7ffc0000 [ 208.934386][ T7423] netlink: 'syz.3.388': attribute type 29 has an invalid length. [ 208.962484][ T30] audit: type=1326 audit(1755946363.852:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7407 comm="syz.1.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3adb58ebe9 code=0x7ffc0000 [ 208.984078][ T30] audit: type=1326 audit(1755946363.852:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7407 comm="syz.1.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3adb58ebe9 code=0x7ffc0000 [ 209.026997][ T30] audit: type=1326 audit(1755946363.852:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7407 comm="syz.1.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3adb58ebe9 code=0x7ffc0000 [ 209.060923][ T7422] netlink: 500 bytes leftover after parsing attributes in process `syz.3.388'. [ 209.137602][ T7431] netlink: 132 bytes leftover after parsing attributes in process `syz.0.389'. [ 209.340652][ T55] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 209.617764][ T55] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 209.630964][ T55] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 209.670936][ T55] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 209.979197][ T55] usb 2-1: New USB device found, idVendor=05ac, idProduct=029f, bcdDevice= 0.00 [ 210.087804][ T55] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.152486][ T55] usb 2-1: config 0 descriptor?? [ 211.514841][ T7425] netlink: 88 bytes leftover after parsing attributes in process `syz.1.390'. [ 211.521804][ T55] apple 0003:05AC:029F.0004: unknown main item tag 0x0 [ 211.545118][ T55] apple 0003:05AC:029F.0004: unknown main item tag 0x0 [ 211.564692][ T55] apple 0003:05AC:029F.0004: unknown main item tag 0x0 [ 211.574208][ T55] apple 0003:05AC:029F.0004: unknown main item tag 0x0 [ 211.599014][ T55] apple 0003:05AC:029F.0004: hidraw0: USB HID v0.00 Device [HID 05ac:029f] on usb-dummy_hcd.1-1/input0 [ 211.688402][ T55] usb 2-1: USB disconnect, device number 15 [ 211.806410][ T7450] fido_id[7450]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 212.616731][ T7458] sock: sock_timestamping_bind_phc: sock not bind to device [ 212.627621][ T7459] sock: sock_timestamping_bind_phc: sock not bind to device [ 212.638587][ T7459] netlink: 20 bytes leftover after parsing attributes in process `syz.0.400'. [ 212.900198][ T55] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 213.059879][ T55] usb 1-1: Using ep0 maxpacket: 32 [ 213.084536][ T55] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 213.142998][ T55] usb 1-1: config 0 has no interface number 0 [ 213.161990][ T55] usb 1-1: config 0 interface 12 has no altsetting 0 [ 213.179024][ T55] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 213.199045][ T55] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.222066][ T55] usb 1-1: Product: syz [ 213.229881][ T55] usb 1-1: Manufacturer: syz [ 213.238779][ T55] usb 1-1: SerialNumber: syz [ 213.259588][ T55] usb 1-1: config 0 descriptor?? [ 213.279367][ T55] f81534 1-1:0.12: required endpoints missing [ 213.526608][ T7477] netlink: 'syz.1.406': attribute type 10 has an invalid length. [ 213.586663][ T7477] geneve0: entered promiscuous mode [ 213.619511][ T24] usb 1-1: USB disconnect, device number 23 [ 213.679087][ T7482] netlink: 32 bytes leftover after parsing attributes in process `syz.3.402'. [ 213.691368][ T7482] fuse: Bad value for 'user_id' [ 213.696345][ T7482] fuse: Bad value for 'user_id' [ 213.734542][ T7477] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 214.174086][ T24] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 214.499882][ T5901] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 214.561376][ T24] usb 3-1: device descriptor read/64, error -71 [ 214.919345][ T7496] netlink: 16 bytes leftover after parsing attributes in process `syz.4.410'. [ 214.979920][ T24] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 215.020464][ T5901] usb 2-1: config 0 has an invalid interface number: 23 but max is 0 [ 215.031971][ T5901] usb 2-1: config 0 has no interface number 0 [ 215.044071][ T5901] usb 2-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice= 1.7b [ 215.055023][ T5901] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.063452][ T5901] usb 2-1: Product: syz [ 215.064023][ T7502] netlink: 4 bytes leftover after parsing attributes in process `syz.4.410'. [ 215.067702][ T5901] usb 2-1: Manufacturer: syz [ 215.082284][ T5901] usb 2-1: SerialNumber: syz [ 215.093222][ T5901] usb 2-1: config 0 descriptor?? [ 215.119128][ T5901] ftdi_sio 2-1:0.23: FTDI USB Serial Device converter detected [ 215.130660][ T5901] usb 2-1: Detected SIO [ 215.130724][ T24] usb 3-1: device descriptor read/64, error -71 [ 215.140781][ T5901] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 215.250333][ T24] usb usb3-port1: attempt power cycle [ 215.270008][ T5893] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 215.524264][ T926] usb 2-1: USB disconnect, device number 16 [ 215.533168][ T5893] usb 4-1: no configurations [ 215.537862][ T5893] usb 4-1: can't read configurations, error -22 [ 215.544579][ T926] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 215.556368][ T926] ftdi_sio 2-1:0.23: device disconnected [ 215.593788][ T24] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 215.622112][ T24] usb 3-1: device descriptor read/8, error -71 [ 215.679941][ T5893] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 215.832143][ T5893] usb 4-1: no configurations [ 215.837163][ T5893] usb 4-1: can't read configurations, error -22 [ 215.861121][ T5893] usb usb4-port1: attempt power cycle [ 215.869886][ T24] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 215.900993][ T24] usb 3-1: device descriptor read/8, error -71 [ 215.936721][ T7511] delete_channel: no stack [ 215.970112][ T926] usb 2-1: new low-speed USB device number 17 using dummy_hcd [ 216.032417][ T24] usb usb3-port1: unable to enumerate USB device [ 216.099916][ T926] usb 2-1: device descriptor read/64, error -71 [ 216.815053][ T5893] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 216.978079][ T5893] usb 4-1: no configurations [ 216.983051][ T5893] usb 4-1: can't read configurations, error -22 [ 217.102763][ T926] usb 2-1: new low-speed USB device number 18 using dummy_hcd [ 217.130070][ T5893] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 217.237334][ T7524] overlay: filesystem on ./bus not supported as upperdir [ 217.343694][ T5893] usb 4-1: no configurations [ 217.349002][ T5893] usb 4-1: can't read configurations, error -22 [ 217.356993][ T5893] usb usb4-port1: unable to enumerate USB device [ 217.409940][ T926] usb 2-1: device descriptor read/64, error -71 [ 217.521388][ T926] usb usb2-port1: attempt power cycle [ 218.873009][ T926] usb 2-1: new low-speed USB device number 19 using dummy_hcd [ 218.983764][ T926] usb 2-1: device descriptor read/8, error -71 [ 219.295686][ T24] IPVS: starting estimator thread 0... [ 219.370102][ T55] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 219.391066][ T7551] IPVS: using max 29 ests per chain, 69600 per kthread [ 219.532837][ T55] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 219.556782][ T55] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 219.567183][ T55] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 219.577470][ T55] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 219.587715][ T55] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 219.597187][ T55] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.610070][ T24] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 219.618873][ T55] usb 3-1: config 0 descriptor?? [ 219.799817][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 219.812214][ T24] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 219.850257][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 219.917708][ T24] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 219.941326][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.949646][ T24] usb 1-1: Product: syz [ 219.960878][ T24] usb 1-1: Manufacturer: syz [ 219.965542][ T24] usb 1-1: SerialNumber: syz [ 220.011361][ T24] usb 1-1: config 0 descriptor?? [ 220.034142][ T24] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 220.065822][ T24] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 220.220052][ T55] hdpvr 3-1:0.0: firmware version 0x0 dated [ 220.226328][ T55] hdpvr 3-1:0.0: untested firmware, the driver might not work. [ 220.339990][ T7582] netlink: 4 bytes leftover after parsing attributes in process `syz.3.431'. [ 220.966900][ T24] em28xx 1-1:0.0: chip ID is em2874 [ 221.075703][ T55] hdpvr 3-1:0.0: device init failed [ 221.095284][ T55] hdpvr 3-1:0.0: probe with driver hdpvr failed with error -12 [ 221.100833][ T7553] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.123895][ T55] usb 3-1: USB disconnect, device number 22 [ 221.140868][ T7553] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.193315][ T5952] usb 1-1: USB disconnect, device number 24 [ 221.224505][ T5952] em28xx 1-1:0.0: Disconnecting em28xx [ 221.273816][ T5952] em28xx 1-1:0.0: Freeing device [ 222.091682][ T7603] netlink: 'syz.3.436': attribute type 10 has an invalid length. [ 222.166610][ T7603] 8021q: adding VLAN 0 to HW filter on device bond0 [ 222.175644][ T7603] team0: Port device bond0 added [ 222.213100][ T7600] netlink: 14 bytes leftover after parsing attributes in process `syz.1.435'. [ 222.313727][ T7607] netlink: 32 bytes leftover after parsing attributes in process `syz.4.438'. [ 222.486755][ T7614] xt_l2tp: v2 doesn't support IP mode [ 222.964253][ T7612] netlink: 4 bytes leftover after parsing attributes in process `syz.0.439'. [ 222.964614][ T7600] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 222.998069][ T7600] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 223.014774][ T7600] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 223.028757][ T7600] bond0 (unregistering): Released all slaves [ 223.089942][ T5952] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 223.243923][ T7626] erspan0: entered promiscuous mode [ 223.255980][ T5952] usb 4-1: Using ep0 maxpacket: 8 [ 223.277284][ T5952] usb 4-1: config index 0 descriptor too short (expected 30, got 18) [ 223.298075][ T7626] batman_adv: batadv0: Adding interface: macvlan2 [ 223.311861][ T5952] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 223.323848][ T7626] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.330641][ T5952] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.372652][ T7626] batman_adv: batadv0: Interface activated: macvlan2 [ 223.373007][ T5952] usb 4-1: Product: syz [ 223.384918][ T5952] usb 4-1: Manufacturer: syz [ 223.389718][ T5952] usb 4-1: SerialNumber: syz [ 223.405322][ T5952] usb 4-1: config 0 descriptor?? [ 223.417570][ T5952] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 223.439181][ T5952] usb 4-1: setting power ON [ 223.449679][ T5952] dvb-usb: bulk message failed: -22 (2/0) [ 223.469198][ T7638] netlink: 8 bytes leftover after parsing attributes in process `syz.4.444'. [ 223.471220][ T5952] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 223.478723][ T7638] netlink: 12 bytes leftover after parsing attributes in process `syz.4.444'. [ 223.534565][ T5952] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 223.565229][ T5952] usb 4-1: media controller created [ 223.634837][ T7617] netlink: 'syz.3.440': attribute type 1 has an invalid length. [ 223.647181][ T5952] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 223.946485][ T7646] netlink: 4 bytes leftover after parsing attributes in process `syz.0.446'. [ 224.133162][ T7648] netlink: 8 bytes leftover after parsing attributes in process `syz.1.447'. [ 224.693340][ T5952] usb 4-1: selecting invalid altsetting 6 [ 224.699379][ T5952] usb 4-1: digital interface selection failed (-22) [ 224.715435][ T5952] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 225.028473][ T5952] usb 4-1: setting power OFF [ 225.063956][ T5952] dvb-usb: bulk message failed: -22 (2/0) [ 225.140684][ T5952] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 225.199939][ T5952] (NULL device *): no alternate interface [ 225.353219][ T7659] netlink: 8 bytes leftover after parsing attributes in process `syz.3.449'. [ 225.647589][ T7659] ip6gre1: entered promiscuous mode [ 225.668613][ T7659] ip6gre1: entered allmulticast mode [ 225.752704][ T7660] Illegal XDP return value 4294967294 on prog (id 124) dev N/A, expect packet loss! [ 225.850795][ T5952] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 225.903887][ T5952] usb 4-1: USB disconnect, device number 24 [ 226.072427][ T7669] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 226.646300][ T7683] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.657243][ T7683] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.661491][ T7679] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 226.750364][ T7679] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 228.835046][ T7705] netlink: 4 bytes leftover after parsing attributes in process `syz.4.461'. [ 229.486471][ T7706] netlink: 32 bytes leftover after parsing attributes in process `syz.1.462'. [ 229.934755][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 229.934774][ T30] audit: type=1326 audit(1755946385.342:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7712 comm="syz.0.465" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4e2f98ebe9 code=0x0 [ 230.676709][ T10] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 230.981157][ T7727] 9pnet_fd: Insufficient options for proto=fd [ 231.049945][ T10] usb 4-1: device descriptor read/64, error -71 [ 231.440053][ T10] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 231.452910][ T7729] (syz.1.469,7729,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 231.462087][ T7729] (syz.1.469,7729,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 231.709919][ T10] usb 4-1: device descriptor read/64, error -71 [ 231.820120][ T10] usb usb4-port1: attempt power cycle [ 232.091439][ T7741] warning: `syz.1.472' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 232.122199][ T7722] mmap: syz.0.467 (7722): VmData 25841664 exceed data ulimit 2. Update limits or use boot option ignore_rlimit_data. [ 232.170080][ T10] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 232.210708][ T10] usb 4-1: device descriptor read/8, error -71 [ 232.480118][ T10] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 232.533244][ T10] usb 4-1: device descriptor read/8, error -71 [ 232.640375][ T7749] netlink: 4 bytes leftover after parsing attributes in process `syz.4.474'. [ 233.270053][ T10] usb usb4-port1: unable to enumerate USB device [ 233.560814][ T10] kernel write not supported for file bpf-prog (pid: 10 comm: kworker/0:1) [ 233.958280][ T7761] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 234.143209][ T7773] netlink: 24 bytes leftover after parsing attributes in process `syz.2.480'. [ 234.385855][ T7781] netlink: 32 bytes leftover after parsing attributes in process `syz.2.482'. [ 236.012361][ T7799] netlink: 32 bytes leftover after parsing attributes in process `syz.0.488'. [ 236.035393][ T7799] fuse: Bad value for 'user_id' [ 236.046416][ T7799] fuse: Bad value for 'user_id' [ 237.337218][ T7817] netlink: 44 bytes leftover after parsing attributes in process `syz.1.494'. [ 237.522904][ T7818] ieee802154 phy0 wpan0: encryption failed: -22 [ 237.588364][ T7822] tmpfs: Cannot disable swap on remount [ 237.729508][ T7823] (syz.0.495,7823,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 237.738352][ T7823] (syz.0.495,7823,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 240.726796][ T7843] netlink: 32 bytes leftover after parsing attributes in process `syz.4.500'. [ 240.752825][ T7843] fuse: Bad value for 'user_id' [ 240.757734][ T7843] fuse: Bad value for 'user_id' [ 241.005334][ T7843] overlayfs: failed to clone upperpath [ 243.110346][ T7872] netlink: 4 bytes leftover after parsing attributes in process `syz.2.507'. [ 244.854080][ T7895] netlink: 32 bytes leftover after parsing attributes in process `syz.1.511'. [ 246.061512][ T7910] fuse: Bad value for 'user_id' [ 248.302509][ T7910] fuse: Bad value for 'user_id' [ 248.605119][ T7903] overlayfs: failed to resolve './bus': -2 [ 251.679891][ T926] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 252.060366][ T926] usb 4-1: Using ep0 maxpacket: 8 [ 252.277533][ T926] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 252.331927][ T926] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 252.517223][ T926] usb 4-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x76, changing to 0x6 [ 253.125477][ T926] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 100, changing to 10 [ 253.184585][ T926] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 24936, setting to 1024 [ 253.246854][ T926] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 253.278431][ T926] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.328099][ T926] hub 4-1:1.0: bad descriptor, ignoring hub [ 253.349206][ T926] hub 4-1:1.0: probe with driver hub failed with error -5 [ 253.386840][ T926] cdc_wdm 4-1:1.0: skipping garbage [ 253.416988][ T926] cdc_wdm 4-1:1.0: skipping garbage [ 253.420827][ T7952] overlayfs: failed to clone upperpath [ 253.454198][ T926] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 253.524224][ T7923] netlink: 'syz.3.517': attribute type 10 has an invalid length. [ 254.733500][ T5893] usb 4-1: USB disconnect, device number 29 [ 256.070568][ T7971] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.527'. [ 256.079901][ T7971] netlink: zone id is out of range [ 256.085019][ T7971] netlink: get zone limit has 8 unknown bytes [ 256.096786][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.110168][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.446249][ T7976] netlink: 32 bytes leftover after parsing attributes in process `syz.1.528'. [ 256.489166][ T7976] fuse: Bad value for 'user_id' [ 256.494218][ T7976] fuse: Bad value for 'user_id' [ 256.619890][ T926] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 256.756504][ T7980] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=640 (1280 ns) > initial count (34 ns). Using initial count to start timer. [ 256.780339][ T926] usb 4-1: device descriptor read/64, error -71 [ 256.944272][ T7983] netlink: 16 bytes leftover after parsing attributes in process `syz.2.531'. [ 257.035894][ T7983] netlink: 16 bytes leftover after parsing attributes in process `syz.2.531'. [ 257.070632][ T926] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 257.077680][ T7988] loop6: detected capacity change from 0 to 63 [ 257.078844][ T7988] Buffer I/O error on dev loop6, logical block 0, async page read [ 257.078920][ T7988] Buffer I/O error on dev loop6, logical block 0, async page read [ 257.078976][ T7988] Buffer I/O error on dev loop6, logical block 0, async page read [ 257.079042][ T7988] Buffer I/O error on dev loop6, logical block 0, async page read [ 257.079096][ T7988] Buffer I/O error on dev loop6, logical block 0, async page read [ 257.079162][ T7988] Buffer I/O error on dev loop6, logical block 0, async page read [ 257.079223][ T7988] Buffer I/O error on dev loop6, logical block 0, async page read [ 257.079277][ T7988] Buffer I/O error on dev loop6, logical block 0, async page read [ 257.079314][ T7988] ldm_validate_partition_table(): Disk read failed. [ 257.079339][ T7988] Buffer I/O error on dev loop6, logical block 0, async page read [ 257.079392][ T7988] Buffer I/O error on dev loop6, logical block 0, async page read [ 257.080428][ T7988] Dev loop6: unable to read RDB block 0 [ 257.080897][ T7988] loop6: unable to read partition table [ 257.082347][ T7988] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 257.128801][ T7990] netlink: 4 bytes leftover after parsing attributes in process `syz.0.532'. [ 257.169311][ T7990] team_slave_0: entered promiscuous mode [ 257.169394][ T7990] team_slave_1: entered promiscuous mode [ 257.178529][ T7990] macvtap1: entered promiscuous mode [ 257.178571][ T7990] team0: entered promiscuous mode [ 257.179320][ T7990] macvtap1: entered allmulticast mode [ 257.179338][ T7990] team0: entered allmulticast mode [ 257.179351][ T7990] team_slave_0: entered allmulticast mode [ 257.179403][ T7990] team_slave_1: entered allmulticast mode [ 257.200022][ T926] usb 4-1: device descriptor read/64, error -71 [ 257.207593][ T7990] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 257.257866][ T7991] team0: left allmulticast mode [ 257.257894][ T7991] team_slave_0: left allmulticast mode [ 257.257922][ T7991] team_slave_1: left allmulticast mode [ 257.257945][ T7991] team0: left promiscuous mode [ 257.258600][ T7991] team_slave_0: left promiscuous mode [ 257.258683][ T7991] team_slave_1: left promiscuous mode [ 257.295600][ T7994] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 257.310512][ T926] usb usb4-port1: attempt power cycle [ 257.672616][ T926] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 257.715989][ T926] usb 4-1: device descriptor read/8, error -71 [ 259.386183][ T8016] netlink: 32 bytes leftover after parsing attributes in process `syz.4.540'. [ 259.388599][ T8016] fuse: Bad value for 'user_id' [ 259.388619][ T8016] fuse: Bad value for 'user_id' [ 259.390279][ T8016] overlayfs: failed to clone upperpath [ 260.519684][ T8036] netlink: 36 bytes leftover after parsing attributes in process `syz.0.546'. [ 260.986024][ T8051] overlayfs: overlapping lowerdir path [ 261.001048][ T8051] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 265.187847][ T8070] (syz.1.553,8070,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 265.239970][ T8070] (syz.1.553,8070,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 265.576326][ T8092] x_tables: unsorted underflow at hook 2 [ 265.686906][ T30] audit: type=1326 audit(1755946421.082:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8093 comm="syz.4.562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2ec112ade9 code=0x7ffc0000 [ 265.831552][ T30] audit: type=1326 audit(1755946421.082:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8093 comm="syz.4.562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2ec112ade9 code=0x7ffc0000 [ 265.831963][ T55] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 265.883094][ T30] audit: type=1326 audit(1755946421.082:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8093 comm="syz.4.562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ec118ebe9 code=0x7ffc0000 [ 266.200342][ T30] audit: type=1326 audit(1755946421.082:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8093 comm="syz.4.562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2ec112ade9 code=0x7ffc0000 [ 266.245397][ T30] audit: type=1326 audit(1755946421.082:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8093 comm="syz.4.562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ec118ebe9 code=0x7ffc0000 [ 266.279063][ T30] audit: type=1326 audit(1755946421.082:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8093 comm="syz.4.562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ec118ebe9 code=0x7ffc0000 [ 266.397071][ T30] audit: type=1326 audit(1755946421.082:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8093 comm="syz.4.562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ec118ebe9 code=0x7ffc0000 [ 266.430906][ T8113] kAFS: unable to lookup cell '.,' [ 266.436578][ T30] audit: type=1326 audit(1755946421.082:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8093 comm="syz.4.562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2ec112ade9 code=0x7ffc0000 [ 266.490114][ T30] audit: type=1326 audit(1755946421.082:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8093 comm="syz.4.562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ec118ebe9 code=0x7ffc0000 [ 266.490307][ T55] usb 4-1: Using ep0 maxpacket: 16 [ 266.511889][ T30] audit: type=1326 audit(1755946421.082:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8093 comm="syz.4.562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ec118ebe9 code=0x7ffc0000 [ 266.586510][ T8114] pim6reg: entered allmulticast mode [ 266.692232][ T55] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 266.729636][ T55] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 266.760110][ T55] usb 4-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 266.784695][ T55] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.824955][ T55] usb 4-1: config 0 descriptor?? [ 267.311422][ T55] input: HID 05ac:8241 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:05AC:8241.0005/input/input11 [ 267.443705][ T8092] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 267.452471][ T8092] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 267.486190][ T55] appleir 0003:05AC:8241.0005: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.3-1/input0 [ 267.555504][ T55] usb 4-1: USB disconnect, device number 34 [ 267.705802][ T8119] fido_id[8119]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 268.650263][ T55] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 269.110146][ T24] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 269.253363][ T8145] netlink: 72 bytes leftover after parsing attributes in process `syz.4.576'. [ 269.291507][ T10] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 269.320780][ T55] usb 4-1: Using ep0 maxpacket: 8 [ 269.329412][ T55] usb 4-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 269.338552][ T55] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.341932][ T24] usb 3-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 269.347827][ T55] usb 4-1: Product: syz [ 269.364809][ T55] usb 4-1: Manufacturer: syz [ 269.369439][ T55] usb 4-1: SerialNumber: syz [ 269.372229][ T24] usb 3-1: config 0 interface 0 has no altsetting 0 [ 269.381691][ T24] usb 3-1: New USB device found, idVendor=046a, idProduct=0023, bcdDevice= 0.00 [ 269.388377][ T55] usb 4-1: config 0 descriptor?? [ 269.391376][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.413805][ T24] usb 3-1: config 0 descriptor?? [ 269.421097][ T55] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 269.490662][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 269.513642][ T10] usb 2-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 269.527837][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.541533][ T10] usb 2-1: config 0 descriptor?? [ 269.790061][ T5923] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 269.816983][ T8149] loop8: detected capacity change from 0 to 8 [ 269.833006][ T8149] Dev loop8: unable to read RDB block 8 [ 269.848257][ T8149] loop8: unable to read partition table [ 269.857377][ T8149] loop8: partition table beyond EOD, truncated [ 269.864572][ T8149] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 269.945771][ T5901] usb 2-1: USB disconnect, device number 21 [ 269.958991][ T5923] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 269.981983][ T5923] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 270.006149][ T5923] usb 1-1: config 4 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 270.016567][ T5923] usb 1-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0xDC, changing to 0x8C [ 270.031347][ T5923] usb 1-1: config 4 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 243 [ 270.050805][ T5923] usb 1-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=d1.41 [ 270.061050][ T5923] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.069565][ T5923] usb 1-1: Product: syz [ 270.085731][ T5923] usb 1-1: Manufacturer: syz [ 270.100828][ T5923] usb 1-1: SerialNumber: syz [ 270.122600][ T8147] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 270.139130][ T5923] usb 1-1: ucan: probing device on interface #0 [ 270.148038][ T5923] usb 1-1: ucan: invalid out_ep MaxPacketSize [ 270.155407][ T5923] usb 1-1: ucan: probe failed; try to update the device firmware [ 270.341775][ T55] gspca_sonixj: reg_r err -32 [ 270.346611][ T55] sonixj 4-1:0.0: probe with driver sonixj failed with error -32 [ 270.362404][ T5922] usb 1-1: USB disconnect, device number 25 [ 270.612158][ T8161] trusted_key: encrypted_key: insufficient parameters specified [ 271.123348][ T24] usbhid 3-1:0.0: can't add hid device: -71 [ 271.147969][ T24] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 271.170026][ T24] usb 3-1: USB disconnect, device number 23 [ 271.202808][ T8164] netlink: 24 bytes leftover after parsing attributes in process `syz.1.580'. [ 271.526616][ T8169] overlayfs: missing 'lowerdir' [ 271.777268][ T5893] usb 4-1: USB disconnect, device number 35 [ 272.099810][ T55] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 272.248209][ T55] usb 2-1: device descriptor read/64, error -71 [ 272.501743][ T55] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 272.639842][ T55] usb 2-1: device descriptor read/64, error -71 [ 272.750234][ T55] usb usb2-port1: attempt power cycle [ 273.091945][ T55] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 273.130419][ T55] usb 2-1: device descriptor read/8, error -71 [ 273.379697][ T55] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 273.411276][ T55] usb 2-1: device descriptor read/8, error -71 [ 273.530477][ T55] usb usb2-port1: unable to enumerate USB device [ 273.557993][ T8205] fuse: Unknown parameter 'allow_xther' [ 274.482307][ T8208] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 275.927593][ T8224] netlink: 24 bytes leftover after parsing attributes in process `syz.2.594'. [ 276.110245][ T8227] netlink: 8 bytes leftover after parsing attributes in process `syz.4.597'. [ 276.676526][ T8242] netlink: 4 bytes leftover after parsing attributes in process `syz.2.602'. [ 278.102456][ T8252] netlink: 8 bytes leftover after parsing attributes in process `syz.3.606'. [ 278.139903][ T8252] netlink: 20 bytes leftover after parsing attributes in process `syz.3.606'. [ 278.954998][ T8253] 9pnet: Could not find request transport: nd [ 279.023292][ T8248] sp0: Synchronizing with TNC [ 279.438078][ T8252] geneve2: entered promiscuous mode [ 279.449805][ T8252] geneve2: entered allmulticast mode [ 279.700009][ T7583] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.820277][ T7583] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.988481][ T7583] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.211930][ T7583] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.343511][ T8279] lo speed is unknown, defaulting to 1000 [ 280.425374][ T8283] input: syz1 as /devices/virtual/input/input12 [ 280.845301][ T5840] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 280.865509][ T8291] trusted_key: encrypted_key: insufficient parameters specified [ 280.874373][ T5840] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 280.890369][ T5840] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 280.898660][ T7583] bridge_slave_1: left allmulticast mode [ 280.930031][ T5840] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 280.953390][ T7583] bridge_slave_1: left promiscuous mode [ 280.960925][ T7583] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.980116][ T5840] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 281.001459][ T8293] netlink: 16 bytes leftover after parsing attributes in process `syz.2.616'. [ 281.028407][ T7583] bridge_slave_0: left allmulticast mode [ 281.053781][ T7583] bridge_slave_0: left promiscuous mode [ 281.059647][ T7583] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.165965][ T8304] netlink: 4096 bytes leftover after parsing attributes in process `syz.3.618'. [ 281.205149][ T8304] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 283.026466][ T5843] Bluetooth: hci4: command tx timeout [ 283.834466][ T7583] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 283.845745][ T7583] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 283.856170][ T7583] bond0 (unregistering): Released all slaves [ 283.872333][ T8297] batadv_slave_1: entered promiscuous mode [ 283.881050][ T8297] batadv_slave_1: left promiscuous mode [ 283.950546][ T5922] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 284.015022][ T7583] tipc: Disabling bearer [ 284.047517][ T7583] tipc: Left network mode [ 284.063514][ T8289] lo speed is unknown, defaulting to 1000 [ 284.087132][ T8354] netlink: 348 bytes leftover after parsing attributes in process `syz.0.626'. [ 284.129904][ T5922] usb 2-1: Using ep0 maxpacket: 8 [ 284.233235][ T8356] vlan2: entered allmulticast mode [ 284.238401][ T8356] mac80211_hwsim hwsim8 wlan1: entered allmulticast mode [ 284.539890][ T5923] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 284.682085][ T24] usb 1-1: new full-speed USB device number 26 using dummy_hcd [ 285.127922][ T5843] Bluetooth: hci4: command tx timeout [ 285.169198][ T8362] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 285.184267][ T8362] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 285.353147][ T24] usb 1-1: config 0 has an invalid interface number: 128 but max is 0 [ 285.359971][ T5923] usb 3-1: Using ep0 maxpacket: 8 [ 285.368847][ T5923] usb 3-1: config 0 has an invalid interface number: 54 but max is 0 [ 285.376731][ T24] usb 1-1: config 0 has no interface number 0 [ 285.401231][ T24] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 285.411116][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.420578][ T5923] usb 3-1: config 0 has no interface number 0 [ 285.435455][ T24] usb 1-1: Product: syz [ 285.438690][ T5923] usb 3-1: New USB device found, idVendor=0c52, idProduct=2852, bcdDevice=b3.13 [ 285.445722][ T24] usb 1-1: Manufacturer: syz [ 285.454357][ T24] usb 1-1: SerialNumber: syz [ 285.460261][ T5923] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.488687][ T24] usb 1-1: config 0 descriptor?? [ 285.493991][ T5923] usb 3-1: Product: syz [ 285.520890][ T5923] usb 3-1: Manufacturer: syz [ 285.529383][ T5923] usb 3-1: SerialNumber: syz [ 285.546055][ T5923] usb 3-1: config 0 descriptor?? [ 285.558145][ T5923] ftdi_sio 3-1:0.54: FTDI USB Serial Device converter detected [ 285.570103][ T5923] ftdi_sio ttyUSB0: unknown device type: 0xb313 [ 285.975044][ T7583] hsr_slave_0: left promiscuous mode [ 285.986854][ T7583] hsr_slave_1: left promiscuous mode [ 285.998052][ T7583] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 286.017824][ T7583] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 286.033422][ T7583] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 286.042014][ T7583] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 286.087842][ T24] usb 1-1: Firmware: major: 0, minor: 174, hardware type: UNKNOWN (19) [ 286.115780][ T7583] veth1_macvtap: left promiscuous mode [ 286.165113][ T7583] veth0_macvtap: left promiscuous mode [ 286.180384][ T7583] veth1_vlan: left promiscuous mode [ 286.186490][ T7583] veth0_vlan: left promiscuous mode [ 286.300663][ T24] usb 1-1: failed to fetch extended address, random address set [ 286.316393][ T24] usb 1-1: atusb_probe: initialization failed, error = -524 [ 286.329116][ T24] atusb 1-1:0.128: probe with driver atusb failed with error -524 [ 286.371727][ T24] usb 1-1: USB disconnect, device number 26 [ 287.179831][ T5843] Bluetooth: hci4: command tx timeout [ 287.200189][ T24] usb 3-1: USB disconnect, device number 24 [ 287.223041][ T24] ftdi_sio 3-1:0.54: device disconnected [ 287.517330][ T7583] team0 (unregistering): Port device team_slave_1 removed [ 287.566411][ T7583] team0 (unregistering): Port device team_slave_0 removed [ 287.907235][ T5922] usb 2-1: unable to get BOS descriptor or descriptor too short [ 287.956422][ T5922] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 287.980729][ T5922] usb 2-1: can't read configurations, error -71 [ 288.533703][ T8398] netlink: 44 bytes leftover after parsing attributes in process `syz.2.632'. [ 288.542769][ T8398] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 288.754371][ T8410] netlink: 16 bytes leftover after parsing attributes in process `syz.0.635'. [ 288.773915][ T8410] netlink: 16 bytes leftover after parsing attributes in process `syz.0.635'. [ 288.793406][ T8410] netlink: 5 bytes leftover after parsing attributes in process `syz.0.635'. [ 289.267892][ T5843] Bluetooth: hci4: command tx timeout [ 289.298230][ T8421] trusted_key: encrypted_key: insufficient parameters specified [ 289.371310][ T7583] IPVS: stop unused estimator thread 0... [ 289.990257][ T8289] chnl_net:caif_netlink_parms(): no params data found [ 290.146263][ T8433] netlink: 24 bytes leftover after parsing attributes in process `syz.2.637'. [ 291.046992][ T8289] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.092309][ T8289] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.123649][ T8289] bridge_slave_0: entered allmulticast mode [ 291.151970][ T8289] bridge_slave_0: entered promiscuous mode [ 291.223493][ T8449] misc userio: The device must be registered before sending interrupts [ 291.306972][ T8449] misc userio: The device must be registered before sending interrupts [ 291.329940][ T8289] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.337127][ T8289] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.391111][ T8289] bridge_slave_1: entered allmulticast mode [ 291.399015][ T8289] bridge_slave_1: entered promiscuous mode [ 291.502591][ T8454] netlink: 8 bytes leftover after parsing attributes in process `syz.2.642'. [ 291.618270][ T8289] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 291.688858][ T8289] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 291.918038][ T8289] team0: Port device team_slave_0 added [ 292.052518][ T8466] befs: (nullb0): No write support. Marking filesystem read-only [ 292.065195][ T8466] befs: (nullb0): invalid magic header [ 292.633595][ T8289] team0: Port device team_slave_1 added [ 292.994656][ T8289] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 293.023937][ T8289] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 293.049883][ C0] vkms_vblank_simulate: vblank timer overrun [ 293.064663][ T8289] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 293.108468][ T8289] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 293.116542][ T8289] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 293.268376][ T8289] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 293.780981][ T5909] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 293.996191][ T5909] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 294.046247][ T5909] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 294.151116][ T5909] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 294.223326][ T5909] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.300030][ T5909] usb 2-1: Product: syz [ 294.334282][ T5909] usb 2-1: Manufacturer: syz [ 294.385529][ T5909] usb 2-1: SerialNumber: syz [ 295.029332][ T5909] usb 2-1: config 0 descriptor?? [ 295.079407][ T8289] hsr_slave_0: entered promiscuous mode [ 295.136033][ T8480] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 295.187225][ T8289] hsr_slave_1: entered promiscuous mode [ 295.224983][ T8480] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 295.269666][ T8289] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 296.065017][ T8289] Cannot create hsr debugfs directory [ 296.182569][ T8486] misc userio: The device must be registered before sending interrupts [ 296.228907][ T8486] misc userio: The device must be registered before sending interrupts [ 296.284217][ T5909] dm9601 2-1:0.0: probe with driver dm9601 failed with error -71 [ 296.359629][ T5909] usb 2-1: USB disconnect, device number 28 [ 297.536556][ T8289] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 297.577563][ T8289] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 297.691082][ T8289] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 297.730749][ T8289] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 298.106677][ T8289] 8021q: adding VLAN 0 to HW filter on device bond0 [ 298.386956][ T8289] 8021q: adding VLAN 0 to HW filter on device team0 [ 298.449943][ T5909] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 298.458812][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.466035][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 298.507916][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.515142][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 298.648076][ T5909] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 298.662558][ T5909] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.713035][ T5909] usb 3-1: config 0 descriptor?? [ 298.743520][ T5909] cp210x 3-1:0.0: cp210x converter detected [ 298.800346][ T24] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 299.066777][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 299.089809][ T24] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 299.101868][ T24] usb 4-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 299.124353][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.197194][ T24] usb 4-1: config 0 descriptor?? [ 299.236297][ T5909] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 299.377872][ T8289] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 299.419902][ T10] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 299.492750][ T5909] usb 3-1: cp210x converter now attached to ttyUSB0 [ 299.592477][ T10] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 299.610483][ T10] usb 2-1: config 0 has no interface number 0 [ 299.625632][ T24] Bluetooth: Can't get state to change to load configuration err [ 299.649683][ T24] Bluetooth: Loading sysconfig file failed [ 299.653539][ T10] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 299.672405][ T24] ath3k 4-1:0.0: probe with driver ath3k failed with error -16 [ 299.673298][ T5923] usb 3-1: USB disconnect, device number 25 [ 299.701845][ T24] usb 4-1: USB disconnect, device number 36 [ 299.716047][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.735882][ T5923] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 299.790879][ T10] usb 2-1: config 0 descriptor?? [ 299.813578][ T5923] cp210x 3-1:0.0: device disconnected [ 299.830343][ T10] usb 2-1: selecting invalid altsetting 1 [ 299.836774][ T10] dvb_ttusb_budget: ttusb_init_controller: error [ 299.861590][ T10] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 300.198308][ T10] DVB: Unable to find symbol cx22700_attach() [ 300.254823][ T8574] misc userio: The device must be registered before sending interrupts [ 300.287112][ T8574] misc userio: The device must be registered before sending interrupts [ 300.458582][ T10] DVB: Unable to find symbol tda10046_attach() [ 300.674637][ T8584] (syz.3.665,8584,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 300.683485][ T8584] (syz.3.665,8584,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 300.718377][ T10] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 300.927990][ T10] usb 2-1: USB disconnect, device number 29 [ 301.064862][ T8588] netlink: 32 bytes leftover after parsing attributes in process `syz.1.667'. [ 301.081462][ T8588] fuse: Bad value for 'user_id' [ 301.086461][ T8588] fuse: Bad value for 'user_id' [ 301.178120][ T8289] veth0_vlan: entered promiscuous mode [ 301.292161][ T8289] veth1_vlan: entered promiscuous mode [ 301.472897][ T8289] veth0_macvtap: entered promiscuous mode [ 301.505325][ T8289] veth1_macvtap: entered promiscuous mode [ 301.609433][ T8289] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 301.913753][ T8289] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 302.009497][ T8289] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.018836][ T8289] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.032185][ T8289] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.049838][ T8289] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.305301][ T8614] trusted_key: encrypted_key: insufficient parameters specified [ 302.531891][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 302.648072][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 302.749924][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 302.779144][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 302.875758][ T8624] virtio-fs: tag not found [ 303.062819][ T5909] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 303.279193][ T30] kauditd_printk_skb: 37 callbacks suppressed [ 303.279212][ T30] audit: type=1326 audit(1755946458.682:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8632 comm="syz.0.674" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4e2f98ebe9 code=0x0 [ 303.333532][ T5909] usb 4-1: config 1 interface 0 has no altsetting 0 [ 303.342692][ T5909] usb 4-1: New USB device found, idVendor=046d, idProduct=ffff, bcdDevice= 0.40 [ 303.352856][ T5909] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.361185][ T5909] usb 4-1: Product: ӿ [ 303.365283][ T5909] usb 4-1: Manufacturer: 푧穌纓੼鵋楋둝浥掽̬钷뻌쏨罫䫀ꍨ僿ﲬꫜﴑߚ錩啑䡎틡銋쭉ꩳ㚝誮⮡쿫꧕೅ᎺⰝ䊇䃈馇篚僪羚맘皖ᛳࣣ䶛溫ଠ럴䁘Ҵ把뷄㩂ꈿჺ嬫 [ 303.386337][ T5909] usb 4-1: SerialNumber: 僁겯㛅ꡇৈ泝ဋ舥᚛㫖㙔洡諾瑢ḃ쀆䅜支䧽冽╌뮥尌ᧄࡃ [ 303.657088][ T8621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 303.727156][ T8621] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 303.849034][ T5909] usbhid 4-1:1.0: can't add hid device: -71 [ 303.864519][ T5909] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 304.171674][ T5909] usb 4-1: USB disconnect, device number 37 [ 304.253917][ T8653] netlink: 24 bytes leftover after parsing attributes in process `syz.0.676'. [ 304.279877][ T5901] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 304.340178][ T5922] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 304.563006][ T5922] usb 2-1: config 0 has an invalid interface number: 229 but max is 0 [ 304.601650][ T5922] usb 2-1: config 0 has no interface number 0 [ 304.635938][ T5922] usb 2-1: New USB device found, idVendor=0dfc, idProduct=0001, bcdDevice= c.19 [ 304.695077][ T5901] usb 6-1: config 1 has an invalid descriptor of length 104, skipping remainder of the config [ 304.719241][ T5922] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.732525][ T5901] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 304.755610][ T5922] usb 2-1: config 0 descriptor?? [ 304.800850][ T8657] netlink: 32 bytes leftover after parsing attributes in process `syz.3.677'. [ 304.810439][ T5901] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 304.836637][ T5901] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.929896][ T5901] usb 6-1: Product: syz [ 304.934130][ T5901] usb 6-1: Manufacturer: syz [ 304.995713][ T5901] usb 6-1: SerialNumber: syz [ 305.637357][ T5909] usb 2-1: USB disconnect, device number 30 [ 306.120095][ T5922] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 306.281645][ T5922] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 306.301096][ T5922] usb 1-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= 1.41 [ 306.311104][ T5922] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.342629][ T5922] usb 1-1: Product: syz [ 306.351456][ T5922] usb 1-1: Manufacturer: syz [ 306.361706][ T5922] usb 1-1: SerialNumber: syz [ 306.379634][ T5922] usb 1-1: config 0 descriptor?? [ 306.401938][ T5922] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 306.420776][ T5922] usb 1-1: Detected SIO [ 306.432737][ T5922] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 306.615930][ T8674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 306.629820][ T8674] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 306.662423][ T5909] usb 1-1: USB disconnect, device number 27 [ 306.697579][ T5909] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 306.814711][ T5909] ftdi_sio 1-1:0.0: device disconnected [ 306.890557][ T8694] IPVS: length: 129 != 24 [ 307.170021][ T24] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 308.110997][ T24] usb 3-1: device descriptor read/64, error -71 [ 308.192770][ T8714] netlink: 32 bytes leftover after parsing attributes in process `syz.1.688'. [ 308.210011][ T5901] usb 6-1: 0:2 : does not exist [ 308.235364][ T5901] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 308.273077][ T30] audit: type=1804 audit(1755946463.672:93): pid=8717 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.3.690" name="/newroot/133/bus/file1" dev="overlay" ino=2 res=1 errno=0 [ 308.286284][ T5901] usb 6-1: USB disconnect, device number 2 [ 308.328408][ T30] audit: type=1800 audit(1755946463.732:94): pid=8717 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.690" name="file1" dev="overlay" ino=2 res=0 errno=0 [ 308.379832][ T24] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 308.449966][ T5952] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 308.472010][ T5971] udevd[5971]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 308.539823][ T24] usb 3-1: device descriptor read/64, error -71 [ 308.610045][ T5952] usb 1-1: Using ep0 maxpacket: 32 [ 308.621533][ T5952] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 308.641256][ T5952] usb 1-1: config 0 has no interface number 0 [ 308.650255][ T24] usb usb3-port1: attempt power cycle [ 308.659433][ T5952] usb 1-1: config 0 interface 184 has no altsetting 0 [ 308.715733][ T5952] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 308.725180][ T10] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 308.746552][ T5952] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.758951][ T5952] usb 1-1: Product: syz [ 308.765846][ T5952] usb 1-1: Manufacturer: syz [ 308.771046][ T5952] usb 1-1: SerialNumber: syz [ 308.780866][ T5952] usb 1-1: config 0 descriptor?? [ 308.798585][ T5952] smsc75xx v1.0.0 [ 308.802809][ T5952] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 308.823472][ T5952] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -22 [ 308.913082][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 308.926933][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 308.937754][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 308.953269][ T10] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 308.963026][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.980706][ T10] usb 2-1: config 0 descriptor?? [ 309.020087][ T24] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 309.052551][ T24] usb 3-1: device descriptor read/8, error -71 [ 309.197408][ T8742] trusted_key: encrypted_key: insufficient parameters specified [ 309.289981][ T24] usb 3-1: new full-speed USB device number 29 using dummy_hcd [ 309.312323][ T24] usb 3-1: device descriptor read/8, error -71 [ 309.421809][ T24] usb usb3-port1: unable to enumerate USB device [ 309.563671][ T5901] usb 1-1: USB disconnect, device number 28 [ 310.058285][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 310.092691][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 310.142515][ T10] usb 2-1: USB disconnect, device number 31 [ 310.235724][ T8752] misc userio: The device must be registered before sending interrupts [ 310.616384][ T8763] misc userio: The device must be registered before sending interrupts [ 312.328876][ T8784] netlink: 32 bytes leftover after parsing attributes in process `syz.2.702'. [ 312.957910][ T8815] misc userio: The device must be registered before sending interrupts [ 313.187981][ T8791] comedi comedi3: comedi_config --init_data is deprecated [ 313.275418][ T8820] misc userio: The device must be registered before sending interrupts [ 314.363301][ T8830] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 314.476195][ T8830] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 314.519832][ T55] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 314.690087][ T55] usb 4-1: Using ep0 maxpacket: 8 [ 314.836082][ T55] usb 4-1: device descriptor read/all, error -71 [ 315.123682][ T8849] netlink: 32 bytes leftover after parsing attributes in process `syz.0.717'. [ 315.193320][ T8849] overlayfs: failed to resolve './file1': -2 [ 315.706452][ T8855] netlink: 10320 bytes leftover after parsing attributes in process `syz.0.719'. [ 315.722192][ T8861] netlink: 'syz.5.720': attribute type 24 has an invalid length. [ 315.788665][ T8862] trusted_key: encrypted_key: insufficient parameters specified [ 316.300449][ T24] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 316.499964][ T24] usb 1-1: device descriptor read/64, error -71 [ 316.739990][ T24] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 316.889910][ T24] usb 1-1: device descriptor read/64, error -71 [ 317.020879][ T24] usb usb1-port1: attempt power cycle [ 317.050981][ T8876] netlink: 'syz.5.725': attribute type 3 has an invalid length. [ 317.265838][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.274001][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.407392][ T8880] binder: 8875:8880 ioctl c018620b 0 returned -14 [ 317.789950][ T55] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 317.862926][ T5909] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 317.929967][ T24] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 317.963863][ T24] usb 1-1: device descriptor read/8, error -71 [ 318.056078][ T5909] usb 2-1: config 0 has an invalid interface number: 207 but max is 0 [ 318.072431][ T55] usb 6-1: config 0 has an invalid interface number: 197 but max is 0 [ 318.072659][ T5909] usb 2-1: config 0 has no interface number 0 [ 318.088443][ T55] usb 6-1: config 0 has no interface number 0 [ 318.094663][ T55] usb 6-1: config 0 interface 197 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 8 [ 318.117804][ T5909] usb 2-1: New USB device found, idVendor=12d1, idProduct=ed56, bcdDevice=46.dd [ 318.118591][ T55] usb 6-1: config 0 interface 197 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 318.137685][ T5909] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.142020][ T55] usb 6-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=bb.42 [ 318.146952][ T5909] usb 2-1: Product: syz [ 318.160738][ T55] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.164847][ T5909] usb 2-1: Manufacturer: syz [ 318.169295][ T55] usb 6-1: Product: syz [ 318.175474][ T5909] usb 2-1: SerialNumber: syz [ 318.180132][ T55] usb 6-1: Manufacturer: syz [ 318.185771][ T5909] usb 2-1: config 0 descriptor?? [ 318.193569][ T55] usb 6-1: SerialNumber: syz [ 318.208738][ T55] usb 6-1: config 0 descriptor?? [ 318.209999][ T5909] qmi_wwan 2-1:0.207: bogus CDC Union: master=0, slave=1 [ 318.218201][ T8881] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 318.233037][ T24] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 318.320438][ T24] usb 1-1: device descriptor read/8, error -71 [ 318.432389][ T8874] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 318.440077][ T8874] IPv6: NLM_F_CREATE should be set when creating new route [ 318.447424][ T8874] IPv6: NLM_F_CREATE should be set when creating new route [ 318.451030][ T24] usb usb1-port1: unable to enumerate USB device [ 318.454714][ T8874] IPv6: NLM_F_CREATE should be set when creating new route [ 318.513670][ T5909] qmi_wwan 2-1:0.207: probe with driver qmi_wwan failed with error -22 [ 318.552580][ T5909] usb 2-1: USB disconnect, device number 32 [ 318.967113][ T8905] netlink: 32 bytes leftover after parsing attributes in process `syz.2.729'. [ 318.984668][ T8905] overlayfs: failed to resolve './file1': -2 [ 319.949832][ T24] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 320.065348][ T10] usb 6-1: USB disconnect, device number 3 [ 320.071284][ T55] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 320.122007][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 320.150343][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 320.174529][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 320.187907][ T24] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 320.198396][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.219098][ T24] usb 4-1: config 0 descriptor?? [ 320.227531][ T24] hub 4-1:0.0: USB hub found [ 320.335341][ T55] usb 2-1: Using ep0 maxpacket: 32 [ 320.344484][ T55] usb 2-1: unable to get BOS descriptor or descriptor too short [ 320.586307][ T24] hub 4-1:0.0: 14 ports detected [ 320.685037][ T24] hub 4-1:0.0: insufficient power available to use all downstream ports [ 320.704178][ T55] usb 2-1: config 128 has an invalid interface number: 127 but max is 3 [ 320.718173][ T55] usb 2-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 320.728664][ T55] usb 2-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 320.738298][ T55] usb 2-1: config 128 has no interface number 0 [ 320.745649][ T55] usb 2-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 320.758002][ T55] usb 2-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 320.770563][ T55] usb 2-1: config 128 interface 127 has no altsetting 0 [ 320.780295][ T55] usb 2-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 320.935384][ T55] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.968699][ T55] usb 2-1: Product: syz [ 320.978870][ T55] usb 2-1: Manufacturer: syz [ 320.998284][ T8930] netlink: 16 bytes leftover after parsing attributes in process `syz.2.734'. [ 321.700868][ T24] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 321.723948][ T55] usb 2-1: SerialNumber: syz [ 321.737465][ T24] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 321.832323][ T24] usb 4-1: USB disconnect, device number 40 [ 322.002989][ T8910] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 322.035123][ T8910] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 322.378614][ T55] usb 2-1: USB disconnect, device number 33 [ 323.224686][ T5971] udevd[5971]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 323.903194][ T8965] netlink: 32 bytes leftover after parsing attributes in process `syz.1.741'. [ 324.052400][ T8965] overlayfs: failed to resolve './file1': -2 [ 333.761913][ T9078] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 334.713558][ T9083] misc userio: The device must be registered before sending interrupts [ 335.043412][ T9089] misc userio: The device must be registered before sending interrupts [ 335.726211][ T9088] netlink: 32 bytes leftover after parsing attributes in process `syz.2.765'. [ 337.122452][ T9114] FAULT_INJECTION: forcing a failure. [ 337.122452][ T9114] name failslab, interval 1, probability 0, space 0, times 0 [ 337.135676][ T9114] CPU: 0 UID: 0 PID: 9114 Comm: syz.0.770 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 337.135700][ T9114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 337.135712][ T9114] Call Trace: [ 337.135720][ T9114] [ 337.135727][ T9114] dump_stack_lvl+0x189/0x250 [ 337.135751][ T9114] ? __pfx____ratelimit+0x10/0x10 [ 337.135772][ T9114] ? __pfx_dump_stack_lvl+0x10/0x10 [ 337.135805][ T9114] ? __pfx__printk+0x10/0x10 [ 337.135832][ T9114] ? __pfx___might_resched+0x10/0x10 [ 337.135851][ T9114] ? fs_reclaim_acquire+0x7d/0x100 [ 337.135875][ T9114] should_fail_ex+0x414/0x560 [ 337.135898][ T9114] should_failslab+0xa8/0x100 [ 337.135917][ T9114] __kmalloc_cache_noprof+0x70/0x3d0 [ 337.135933][ T9114] ? shrinker_alloc+0x59/0xa70 [ 337.135958][ T9114] shrinker_alloc+0x59/0xa70 [ 337.135977][ T9114] ? __raw_spin_lock_init+0x45/0x100 [ 337.136003][ T9114] ? __raw_spin_lock_init+0x45/0x100 [ 337.136030][ T9114] alloc_super+0x6de/0x970 [ 337.136056][ T9114] ? __pfx_super_s_dev_test+0x10/0x10 [ 337.136072][ T9114] sget_fc+0x329/0xa40 [ 337.136098][ T9114] ? __pfx_super_s_dev_set+0x10/0x10 [ 337.136115][ T9114] get_tree_bdev_flags+0x203/0x4d0 [ 337.136132][ T9114] ? __pfx_ocfs2_fill_super+0x10/0x10 [ 337.136148][ T9114] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 337.136163][ T9114] ? __pfx_ocfs2_get_tree+0x10/0x10 [ 337.136186][ T9114] vfs_get_tree+0x92/0x2b0 [ 337.136204][ T9114] do_new_mount+0x24a/0xa40 [ 337.136230][ T9114] __se_sys_mount+0x317/0x410 [ 337.136254][ T9114] ? __pfx___se_sys_mount+0x10/0x10 [ 337.136270][ T9114] ? rcu_is_watching+0x15/0xb0 [ 337.136293][ T9114] ? do_syscall_64+0xbe/0x3b0 [ 337.136309][ T9114] ? __x64_sys_mount+0x20/0xc0 [ 337.136330][ T9114] do_syscall_64+0xfa/0x3b0 [ 337.136346][ T9114] ? lockdep_hardirqs_on+0x9c/0x150 [ 337.136363][ T9114] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.136379][ T9114] ? clear_bhb_loop+0x60/0xb0 [ 337.136399][ T9114] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.136415][ T9114] RIP: 0033:0x7f4e2f98ebe9 [ 337.136430][ T9114] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 337.136445][ T9114] RSP: 002b:00007f4e30745038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 337.136463][ T9114] RAX: ffffffffffffffda RBX: 00007f4e2fbb6180 RCX: 00007f4e2f98ebe9 [ 337.136476][ T9114] RDX: 0000200000000040 RSI: 0000200000000a00 RDI: 0000200000000000 [ 337.136488][ T9114] RBP: 00007f4e30745090 R08: 0000000000000000 R09: 0000000000000000 [ 337.136498][ T9114] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000002 [ 337.136509][ T9114] R13: 00007f4e2fbb6218 R14: 00007f4e2fbb6180 R15: 00007ffe7f78aa28 [ 337.136536][ T9114] [ 339.981917][ T5893] usb 1-1: new low-speed USB device number 33 using dummy_hcd [ 340.334805][ T5893] usb 1-1: device descriptor read/64, error -71 [ 340.545738][ T9141] netlink: 12 bytes leftover after parsing attributes in process `syz.1.776'. [ 340.769809][ T5893] usb 1-1: new low-speed USB device number 34 using dummy_hcd [ 341.033232][ T5893] usb 1-1: device descriptor read/64, error -71 [ 341.618275][ T5893] usb usb1-port1: attempt power cycle [ 342.080726][ T5893] usb 1-1: new low-speed USB device number 35 using dummy_hcd [ 342.754865][ T5893] usb 1-1: device descriptor read/8, error -71 [ 343.355511][ T9193] netlink: 28 bytes leftover after parsing attributes in process `syz.2.782'. [ 344.095572][ T9211] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 344.198578][ T9211] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 344.319928][ T5901] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 345.947569][ T30] audit: type=1326 audit(1755946501.102:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9222 comm="syz.5.789" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbf2c78ebe9 code=0x0 [ 346.399947][ T5893] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 347.030434][ T5893] usb 6-1: Using ep0 maxpacket: 16 [ 347.052688][ T5893] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 347.064905][ T5893] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 347.119753][ T5893] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 347.168130][ T5893] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 347.218291][ T5893] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.263933][ T5893] usb 6-1: Product: syz [ 347.289435][ T5893] usb 6-1: Manufacturer: syz [ 347.315746][ T5893] usb 6-1: SerialNumber: syz [ 347.321165][ T6538] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.645983][ T5893] usb 6-1: 0:2 : does not exist [ 347.813229][ T5893] usb 6-1: USB disconnect, device number 4 [ 347.913116][ T5971] udevd[5971]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 347.948676][ T6538] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.117703][ T6538] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.161355][ T9259] netlink: 16 bytes leftover after parsing attributes in process `syz.0.794'. [ 348.512281][ T6538] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.444749][ T9273] mkiss: ax0: crc mode is auto. [ 349.552779][ T9280] netlink: 36 bytes leftover after parsing attributes in process `syz.3.801'. [ 350.128143][ T9291] vxfs: WRONG superblock magic 00000000 at 1 [ 350.136446][ T9291] vxfs: WRONG superblock magic 00000000 at 8 [ 350.142625][ T9291] vxfs: can't find superblock. [ 350.460391][ T5893] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 350.530096][ T6538] bridge_slave_1: left allmulticast mode [ 350.561281][ T6538] bridge_slave_1: left promiscuous mode [ 350.598348][ T6538] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.665732][ T5893] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 350.711743][ T5893] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 350.757905][ T5893] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 350.820789][ T6538] bridge_slave_0: left allmulticast mode [ 350.866582][ T5893] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 350.914386][ T6538] bridge_slave_0: left promiscuous mode [ 350.970152][ T6538] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.979898][ T5893] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.995185][ T5840] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 351.008764][ T5840] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 351.023112][ T5893] usb 2-1: Product: 咂웨鐔쉻स躅楼嬪ˉ涋饠줮츑埶㕮Ⅻ荧漀뱲ٿ螜̵浆谊Რꬄ삫칈ꠝ䐍쯦䷻芀ᨛ⳺冝㺗勇艧釦 [ 351.048638][ T5893] usb 2-1: Manufacturer: 她䃣ⓤ麔ⵢ쭳ۀ½仙齞鿣ꋇ [ 351.048952][ T5840] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 351.056634][ T5893] usb 2-1: SerialNumber: 攘튱瑩띲㏰靳쯾ܴ쑛奛㊁퀪Ⰸᇼ⭚䈰걩ﳢ좵膤Ւ遚끘㊹ꈘ沺૗䥒ᶢ뷳 間鮒 [ 351.263057][ T5840] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 351.275379][ T5840] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 351.580079][ T5952] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 351.794229][ T9309] netlink: 24 bytes leftover after parsing attributes in process `syz.3.805'. [ 351.886615][ T5952] usb 6-1: Using ep0 maxpacket: 16 [ 351.977342][ T5952] usb 6-1: unable to get BOS descriptor or descriptor too short [ 352.001404][ T5952] usb 6-1: config 7 interface 0 has no altsetting 0 [ 352.179869][ T5952] usb 6-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice=8f.26 [ 352.230837][ T5952] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.257070][ T5952] usb 6-1: Product: syz [ 352.285135][ T5952] usb 6-1: Manufacturer: syz [ 352.305302][ T5952] usb 6-1: SerialNumber: syz [ 352.643453][ T9320] FAULT_INJECTION: forcing a failure. [ 352.643453][ T9320] name failslab, interval 1, probability 0, space 0, times 0 [ 352.657540][ T9320] CPU: 0 UID: 0 PID: 9320 Comm: syz.3.807 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 352.657566][ T9320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 352.657578][ T9320] Call Trace: [ 352.657586][ T9320] [ 352.657594][ T9320] dump_stack_lvl+0x189/0x250 [ 352.657621][ T9320] ? __pfx____ratelimit+0x10/0x10 [ 352.657642][ T9320] ? __pfx_dump_stack_lvl+0x10/0x10 [ 352.657672][ T9320] ? __pfx__printk+0x10/0x10 [ 352.657703][ T9320] ? __pfx___might_resched+0x10/0x10 [ 352.657724][ T9320] ? fs_reclaim_acquire+0x7d/0x100 [ 352.657753][ T9320] should_fail_ex+0x414/0x560 [ 352.657780][ T9320] should_failslab+0xa8/0x100 [ 352.657802][ T9320] __kmalloc_noprof+0xcb/0x4f0 [ 352.657820][ T9320] ? __list_lru_init+0xba/0x5c0 [ 352.657849][ T9320] __list_lru_init+0xba/0x5c0 [ 352.657882][ T9320] alloc_super+0x819/0x970 [ 352.657911][ T9320] ? __pfx_super_s_dev_test+0x10/0x10 [ 352.657930][ T9320] sget_fc+0x329/0xa40 [ 352.657959][ T9320] ? __pfx_super_s_dev_set+0x10/0x10 [ 352.657981][ T9320] get_tree_bdev_flags+0x203/0x4d0 [ 352.658000][ T9320] ? __pfx_ocfs2_fill_super+0x10/0x10 [ 352.658020][ T9320] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 352.658037][ T9320] ? cap_capable+0x11f/0x460 [ 352.658056][ T9320] ? ocfs2_init_fs_context+0x65/0x260 [ 352.658083][ T9320] ? safesetid_security_capable+0xa9/0x1a0 [ 352.658111][ T9320] vfs_get_tree+0x92/0x2b0 [ 352.658134][ T9320] do_new_mount+0x24a/0xa40 [ 352.658165][ T9320] __se_sys_mount+0x317/0x410 [ 352.658194][ T9320] ? __pfx___se_sys_mount+0x10/0x10 [ 352.658222][ T9320] ? do_syscall_64+0xbe/0x3b0 [ 352.658242][ T9320] ? __x64_sys_mount+0x20/0xc0 [ 352.658266][ T9320] do_syscall_64+0xfa/0x3b0 [ 352.658288][ T9320] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.658306][ T9320] ? asm_sysvec_call_function_single+0x1a/0x20 [ 352.658326][ T9320] ? clear_bhb_loop+0x60/0xb0 [ 352.658349][ T9320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.658368][ T9320] RIP: 0033:0x7fae2b78ebe9 [ 352.658385][ T9320] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 352.658402][ T9320] RSP: 002b:00007fae2c5e5038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 352.658423][ T9320] RAX: ffffffffffffffda RBX: 00007fae2b9b6090 RCX: 00007fae2b78ebe9 [ 352.658438][ T9320] RDX: 0000200000000040 RSI: 0000200000000a00 RDI: 0000200000000000 [ 352.658451][ T9320] RBP: 00007fae2c5e5090 R08: 0000000000000000 R09: 0000000000000000 [ 352.658462][ T9320] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000002 [ 352.658473][ T9320] R13: 00007fae2b9b6128 R14: 00007fae2b9b6090 R15: 00007ffe6b806848 [ 352.658502][ T9320] [ 352.660635][ T9289] ceph: No mds server is up or the cluster is laggy [ 353.028757][ T5952] usb 6-1: USB disconnect, device number 5 [ 353.247699][ T5893] usb 2-1: USB disconnect, device number 34 [ 353.355079][ T5843] Bluetooth: hci2: command tx timeout [ 353.714028][ T9326] netlink: 32 bytes leftover after parsing attributes in process `syz.0.809'. [ 354.576815][ T6538] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 354.588918][ T6538] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 354.605813][ T6538] bond0 (unregistering): Released all slaves [ 354.841441][ T5893] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 355.186663][ T9347] batman_adv: batadv0: Adding interface: dummy0 [ 355.196993][ T9347] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 355.267654][ T9347] batman_adv: batadv0: Interface activated: dummy0 [ 355.364086][ T5893] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 355.372953][ T9350] netlink: 'syz.1.814': attribute type 10 has an invalid length. [ 355.397247][ T5893] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 355.423445][ T5893] usb 4-1: New USB device found, idVendor=0c70, idProduct=f014, bcdDevice= 0.00 [ 355.428316][ T5843] Bluetooth: hci2: command tx timeout [ 355.434169][ T6538] [ 355.441028][ T6538] ====================================================== [ 355.448052][ T6538] WARNING: possible circular locking dependency detected [ 355.455090][ T6538] 6.16.0-syzkaller #0 Not tainted [ 355.460107][ T6538] ------------------------------------------------------ [ 355.467122][ T6538] kworker/u8:10/6538 is trying to acquire lock: [ 355.473351][ T6538] ffff88802d680e00 (team->team_lock_key#3){+.+.}-{4:4}, at: team_del_slave+0x32/0x1c0 [ 355.482953][ T6538] [ 355.482953][ T6538] but task is already holding lock: [ 355.490313][ T6538] ffff888056f80768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0x133/0x6d0 [ 355.500686][ T6538] [ 355.500686][ T6538] which lock already depends on the new lock. [ 355.500686][ T6538] [ 355.511089][ T6538] [ 355.511089][ T6538] the existing dependency chain (in reverse order) is: [ 355.520107][ T6538] [ 355.520107][ T6538] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 355.527860][ T6538] lock_acquire+0x120/0x360 [ 355.532887][ T6538] __mutex_lock+0x182/0xe80 [ 355.537922][ T6538] ieee80211_open+0xed/0x1f0 [ 355.543041][ T6538] __dev_open+0x470/0x880 [ 355.547897][ T6538] netif_open+0xaa/0x170 [ 355.552661][ T6538] dev_open+0x125/0x260 [ 355.557344][ T6538] team_add_slave+0xb36/0x2840 [ 355.562630][ T6538] do_set_master+0x530/0x6d0 [ 355.567750][ T6538] do_setlink+0xcf0/0x41c0 [ 355.572690][ T6538] rtnl_newlink+0x160b/0x1c70 [ 355.577888][ T6538] rtnetlink_rcv_msg+0x7cc/0xb70 [ 355.583345][ T6538] netlink_rcv_skb+0x205/0x470 [ 355.588631][ T6538] netlink_unicast+0x75c/0x8e0 [ 355.593917][ T6538] netlink_sendmsg+0x805/0xb30 [ 355.599221][ T6538] __sock_sendmsg+0x21c/0x270 [ 355.604424][ T6538] ____sys_sendmsg+0x505/0x830 [ 355.609724][ T6538] ___sys_sendmsg+0x21f/0x2a0 [ 355.614928][ T6538] __x64_sys_sendmsg+0x19b/0x260 [ 355.620388][ T6538] do_syscall_64+0xfa/0x3b0 [ 355.625411][ T6538] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.631820][ T6538] [ 355.631820][ T6538] -> #0 (team->team_lock_key#3){+.+.}-{4:4}: [ 355.640008][ T6538] validate_chain+0xb9b/0x2140 [ 355.645296][ T6538] __lock_acquire+0xab9/0xd20 [ 355.650489][ T6538] lock_acquire+0x120/0x360 [ 355.655510][ T6538] __mutex_lock+0x182/0xe80 [ 355.660539][ T6538] team_del_slave+0x32/0x1c0 [ 355.665660][ T6538] team_device_event+0x285/0xa20 [ 355.671111][ T6538] notifier_call_chain+0x1b3/0x3e0 [ 355.676738][ T6538] unregister_netdevice_many_notify+0x15d8/0x2320 [ 355.683670][ T6538] unregister_netdevice_queue+0x33c/0x380 [ 355.689906][ T6538] _cfg80211_unregister_wdev+0x165/0x590 [ 355.696063][ T6538] ieee80211_remove_interfaces+0x49a/0x6d0 [ 355.702402][ T6538] ieee80211_unregister_hw+0x5d/0x2c0 [ 355.708330][ T6538] mac80211_hwsim_del_radio+0x275/0x460 [ 355.714409][ T6538] hwsim_exit_net+0x584/0x640 [ 355.719617][ T6538] ops_undo_list+0x497/0x990 [ 355.724738][ T6538] cleanup_net+0x4c5/0x800 [ 355.729682][ T6538] process_scheduled_works+0xade/0x17b0 [ 355.735752][ T6538] worker_thread+0x8a0/0xda0 [ 355.740865][ T6538] kthread+0x70e/0x8a0 [ 355.745456][ T6538] ret_from_fork+0x3fc/0x770 [ 355.750562][ T6538] ret_from_fork_asm+0x1a/0x30 [ 355.755847][ T6538] [ 355.755847][ T6538] other info that might help us debug this: [ 355.755847][ T6538] [ 355.766064][ T6538] Possible unsafe locking scenario: [ 355.766064][ T6538] [ 355.773506][ T6538] CPU0 CPU1 [ 355.778861][ T6538] ---- ---- [ 355.784214][ T6538] lock(&rdev->wiphy.mtx); [ 355.788715][ T6538] lock(team->team_lock_key#3); [ 355.796179][ T6538] lock(&rdev->wiphy.mtx); [ 355.803200][ T6538] lock(team->team_lock_key#3); [ 355.808156][ T6538] [ 355.808156][ T6538] *** DEADLOCK *** [ 355.808156][ T6538] [ 355.816341][ T6538] 5 locks held by kworker/u8:10/6538: [ 355.821712][ T6538] #0: ffff88801b2fb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 355.832614][ T6538] #1: ffffc90003287bc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 355.843260][ T6538] #2: ffffffff8f4fd310 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800 [ 355.852587][ T6538] #3: ffffffff8f509f08 (rtnl_mutex){+.+.}-{4:4}, at: ieee80211_unregister_hw+0x55/0x2c0 [ 355.862481][ T6538] #4: ffff888056f80768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0x133/0x6d0 [ 355.873304][ T6538] [ 355.873304][ T6538] stack backtrace: [ 355.879183][ T6538] CPU: 1 UID: 0 PID: 6538 Comm: kworker/u8:10 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 355.879202][ T6538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 355.879214][ T6538] Workqueue: netns cleanup_net [ 355.879238][ T6538] Call Trace: [ 355.879246][ T6538] [ 355.879254][ T6538] dump_stack_lvl+0x189/0x250 [ 355.879274][ T6538] ? __pfx_dump_stack_lvl+0x10/0x10 [ 355.879291][ T6538] ? __pfx__printk+0x10/0x10 [ 355.879311][ T6538] ? print_lock_name+0xde/0x100 [ 355.879331][ T6538] print_circular_bug+0x2ee/0x310 [ 355.879351][ T6538] check_noncircular+0x134/0x160 [ 355.879372][ T6538] validate_chain+0xb9b/0x2140 [ 355.879393][ T6538] ? lockdep_hardirqs_on+0x9c/0x150 [ 355.879413][ T6538] __lock_acquire+0xab9/0xd20 [ 355.879431][ T6538] ? team_del_slave+0x32/0x1c0 [ 355.879451][ T6538] lock_acquire+0x120/0x360 [ 355.879464][ T6538] ? team_del_slave+0x32/0x1c0 [ 355.879486][ T6538] ? __mutex_trylock_common+0x153/0x260 [ 355.879508][ T6538] __mutex_lock+0x182/0xe80 [ 355.879525][ T6538] ? team_del_slave+0x32/0x1c0 [ 355.879545][ T6538] ? rcu_is_watching+0x15/0xb0 [ 355.879564][ T6538] ? team_del_slave+0x32/0x1c0 [ 355.879585][ T6538] ? __pfx___mutex_lock+0x10/0x10 [ 355.879602][ T6538] ? bond_netdev_event+0xd9/0xe80 [ 355.879626][ T6538] ? __pfx___mutex_lock+0x10/0x10 [ 355.879642][ T6538] ? __pfx_bond_netdev_event+0x10/0x10 [ 355.879673][ T6538] team_del_slave+0x32/0x1c0 [ 355.879696][ T6538] team_device_event+0x285/0xa20 [ 355.879713][ T6538] notifier_call_chain+0x1b3/0x3e0 [ 355.879734][ T6538] unregister_netdevice_many_notify+0x15d8/0x2320 [ 355.879758][ T6538] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 355.879778][ T6538] ? __lock_acquire+0xab9/0xd20 [ 355.879801][ T6538] unregister_netdevice_queue+0x33c/0x380 [ 355.879818][ T6538] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 355.879838][ T6538] _cfg80211_unregister_wdev+0x165/0x590 [ 355.879862][ T6538] ieee80211_remove_interfaces+0x49a/0x6d0 [ 355.879881][ T6538] ? __pfx_synchronize_rcu+0x10/0x10 [ 355.879900][ T6538] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 355.879918][ T6538] ? rcu_is_watching+0x15/0xb0 [ 355.879937][ T6538] ieee80211_unregister_hw+0x5d/0x2c0 [ 355.879963][ T6538] mac80211_hwsim_del_radio+0x275/0x460 [ 355.879988][ T6538] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 355.880015][ T6538] hwsim_exit_net+0x584/0x640 [ 355.880036][ T6538] ? __pfx_hwsim_exit_net+0x10/0x10 [ 355.880057][ T6538] ? __ip_vs_dev_cleanup_batch+0x238/0x260 [ 355.880081][ T6538] ops_undo_list+0x497/0x990 [ 355.880104][ T6538] ? __pfx_ops_undo_list+0x10/0x10 [ 355.880129][ T6538] cleanup_net+0x4c5/0x800 [ 355.880151][ T6538] ? __pfx_cleanup_net+0x10/0x10 [ 355.880172][ T6538] ? _raw_spin_unlock_irq+0x23/0x50 [ 355.880186][ T6538] ? process_scheduled_works+0x9ef/0x17b0 [ 355.880201][ T6538] ? process_scheduled_works+0x9ef/0x17b0 [ 355.880218][ T6538] process_scheduled_works+0xade/0x17b0 [ 355.880245][ T6538] ? __pfx_process_scheduled_works+0x10/0x10 [ 355.880267][ T6538] worker_thread+0x8a0/0xda0 [ 355.880286][ T6538] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 355.880313][ T6538] ? __kthread_parkme+0x7b/0x200 [ 355.880334][ T6538] kthread+0x70e/0x8a0 [ 355.880355][ T6538] ? __pfx_worker_thread+0x10/0x10 [ 355.880372][ T6538] ? __pfx_kthread+0x10/0x10 [ 355.880392][ T6538] ? _raw_spin_unlock_irq+0x23/0x50 [ 355.880405][ T6538] ? lockdep_hardirqs_on+0x9c/0x150 [ 355.880421][ T6538] ? __pfx_kthread+0x10/0x10 [ 355.880440][ T6538] ret_from_fork+0x3fc/0x770 [ 355.880456][ T6538] ? __pfx_ret_from_fork+0x10/0x10 [ 355.880472][ T6538] ? __switch_to_asm+0x39/0x70 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 355.880491][ T6538] ? __switch_to_asm+0x33/0x70 [ 355.880508][ T6538] ? __pfx_kthread+0x10/0x10 [ 355.880528][ T6538] ret_from_fork_asm+0x1a/0x30 [ 355.880553][ T6538] [ 356.246857][ T5893] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.424789][ T5893] usb 4-1: config 0 descriptor?? [ 356.582440][ T9356] netlink: 16 bytes leftover after parsing attributes in process `syz.0.815'. [ 356.600275][ T6538] team0: Port device wlan1 removed [ 356.687356][ T9298] lo speed is unknown, defaulting to 1000 [ 356.782720][ T9347] batadv0: mtu less than device minimum [ 356.789079][ T9347] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 356.800316][ T9347] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 356.811599][ T9347] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 356.822752][ T9347] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 356.834006][ T9347] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 356.845158][ T9347] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 356.856292][ T9347] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 356.867449][ T9347] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 356.878662][ T9347] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 357.448662][ T6538] hsr_slave_0: left promiscuous mode [ 357.479458][ T6538] hsr_slave_1: left promiscuous mode [ 357.509909][ T5843] Bluetooth: hci2: command tx timeout [ 357.516741][ T6538] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 357.542584][ T6538] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 357.588610][ T6538] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 357.612045][ T6538] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 357.671839][ T6538] veth1_macvtap: left promiscuous mode [ 357.677430][ T6538] veth0_macvtap: left promiscuous mode [ 357.708321][ T6538] veth1_vlan: left promiscuous mode [ 357.728634][ T6538] veth0_vlan: left promiscuous mode [ 357.989041][ T6538] team0 (unregistering): Port device team_slave_1 removed [ 358.009060][ T6538] team0 (unregistering): Port device team_slave_0 removed [ 358.572569][ T5893] usbhid 4-1:0.0: can't add hid device: -71 [ 358.578593][ T5893] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 358.662070][ T5893] usb 4-1: USB disconnect, device number 41 [ 358.758740][ T6538] IPVS: stop unused estimator thread 0... [ 358.777367][ T6538] ------------[ cut here ]------------ [ 358.783287][ T6538] WARNING: CPU: 0 PID: 6538 at net/xfrm/xfrm_state.c:3284 xfrm_state_fini+0x270/0x2f0 [ 358.793135][ T6538] Modules linked in: [ 358.797061][ T6538] CPU: 0 UID: 0 PID: 6538 Comm: kworker/u8:10 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 358.807493][ T6538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 358.818348][ T6538] Workqueue: netns cleanup_net [ 358.823833][ T6538] RIP: 0010:xfrm_state_fini+0x270/0x2f0 [ 358.829423][ T6538] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 d8 e3 10 f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 36 f4 f1 f7 e8 81 fc b0 f7 90 <0f> 0b 90 e9 fd fd ff ff e8 73 fc b0 f7 90 0f 0b 90 e9 60 fe ff ff [ 358.849232][ T6538] RSP: 0018:ffffc90003287898 EFLAGS: 00010293 [ 358.855443][ T6538] RAX: ffffffff8a0f293f RBX: ffff8880353c0000 RCX: ffff888029aabc00 [ 358.864141][ T6538] RDX: 0000000000000000 RSI: ffffffff8be1ba20 RDI: ffff888029aabc00 [ 358.872228][ T6538] RBP: ffffc900032879b0 R08: ffffffff8fa0b3f7 R09: 1ffffffff1f4167e [ 358.880266][ T6538] R10: dffffc0000000000 R11: fffffbfff1f4167f R12: ffffffff8f6054a0 [ 358.888264][ T6538] R13: 1ffff92000650f40 R14: ffff8880353c14c0 R15: dffffc0000000000 [ 358.896334][ T6538] FS: 0000000000000000(0000) GS:ffff888125c57000(0000) knlGS:0000000000000000 [ 358.905370][ T6538] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 358.912485][ T6538] CR2: 00007f0c3be24286 CR3: 000000000df38000 CR4: 00000000003526f0 [ 358.920887][ T6538] Call Trace: [ 358.924185][ T6538] [ 358.927128][ T6538] xfrm_net_exit+0x2d/0x70 [ 358.931610][ T6538] ops_undo_list+0x497/0x990 [ 358.936231][ T6538] ? __pfx_ops_undo_list+0x10/0x10 [ 358.941421][ T6538] cleanup_net+0x4c5/0x800 [ 358.945862][ T6538] ? __pfx_cleanup_net+0x10/0x10 [ 358.950866][ T6538] ? _raw_spin_unlock_irq+0x23/0x50 [ 358.956087][ T6538] ? process_scheduled_works+0x9ef/0x17b0 [ 358.961933][ T6538] ? process_scheduled_works+0x9ef/0x17b0 [ 358.967677][ T6538] process_scheduled_works+0xade/0x17b0 [ 358.973333][ T6538] ? __pfx_process_scheduled_works+0x10/0x10 [ 358.979359][ T6538] worker_thread+0x8a0/0xda0 [ 358.984044][ T6538] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 358.990461][ T6538] ? __kthread_parkme+0x7b/0x200 [ 358.995439][ T6538] kthread+0x70e/0x8a0 [ 358.999547][ T6538] ? __pfx_worker_thread+0x10/0x10 [ 359.004746][ T6538] ? __pfx_kthread+0x10/0x10 [ 359.009366][ T6538] ? _raw_spin_unlock_irq+0x23/0x50 [ 359.015102][ T6538] ? lockdep_hardirqs_on+0x9c/0x150 [ 359.020724][ T6538] ? __pfx_kthread+0x10/0x10 [ 359.025354][ T6538] ret_from_fork+0x3fc/0x770 [ 359.030261][ T6538] ? __pfx_ret_from_fork+0x10/0x10 [ 359.035548][ T6538] ? __switch_to_asm+0x39/0x70 [ 359.040383][ T6538] ? __switch_to_asm+0x33/0x70 [ 359.045165][ T6538] ? __pfx_kthread+0x10/0x10 [ 359.049843][ T6538] ret_from_fork_asm+0x1a/0x30 [ 359.054637][ T6538] [ 359.057662][ T6538] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 359.064950][ T6538] CPU: 0 UID: 0 PID: 6538 Comm: kworker/u8:10 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 359.075122][ T6538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 359.085207][ T6538] Workqueue: netns cleanup_net [ 359.090008][ T6538] Call Trace: [ 359.093298][ T6538] [ 359.096298][ T6538] dump_stack_lvl+0x99/0x250 [ 359.100915][ T6538] ? __asan_memcpy+0x40/0x70 [ 359.105541][ T6538] ? __pfx_dump_stack_lvl+0x10/0x10 [ 359.110758][ T6538] ? __pfx__printk+0x10/0x10 [ 359.115360][ T6538] panic+0x2db/0x790 [ 359.119271][ T6538] ? __pfx_panic+0x10/0x10 [ 359.123715][ T6538] ? ret_from_fork_asm+0x1a/0x30 [ 359.128676][ T6538] __warn+0x31b/0x4b0 [ 359.132666][ T6538] ? xfrm_state_fini+0x270/0x2f0 [ 359.137630][ T6538] ? xfrm_state_fini+0x270/0x2f0 [ 359.142584][ T6538] report_bug+0x2be/0x4f0 [ 359.146917][ T6538] ? xfrm_state_fini+0x270/0x2f0 [ 359.151855][ T6538] ? xfrm_state_fini+0x270/0x2f0 [ 359.156824][ T6538] ? xfrm_state_fini+0x272/0x2f0 [ 359.161767][ T6538] handle_bug+0x84/0x160 [ 359.166015][ T6538] exc_invalid_op+0x1a/0x50 [ 359.170520][ T6538] asm_exc_invalid_op+0x1a/0x20 [ 359.175366][ T6538] RIP: 0010:xfrm_state_fini+0x270/0x2f0 [ 359.180924][ T6538] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 d8 e3 10 f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 36 f4 f1 f7 e8 81 fc b0 f7 90 <0f> 0b 90 e9 fd fd ff ff e8 73 fc b0 f7 90 0f 0b 90 e9 60 fe ff ff [ 359.200556][ T6538] RSP: 0018:ffffc90003287898 EFLAGS: 00010293 [ 359.206624][ T6538] RAX: ffffffff8a0f293f RBX: ffff8880353c0000 RCX: ffff888029aabc00 [ 359.214595][ T6538] RDX: 0000000000000000 RSI: ffffffff8be1ba20 RDI: ffff888029aabc00 [ 359.222567][ T6538] RBP: ffffc900032879b0 R08: ffffffff8fa0b3f7 R09: 1ffffffff1f4167e [ 359.230540][ T6538] R10: dffffc0000000000 R11: fffffbfff1f4167f R12: ffffffff8f6054a0 [ 359.238507][ T6538] R13: 1ffff92000650f40 R14: ffff8880353c14c0 R15: dffffc0000000000 [ 359.246480][ T6538] ? xfrm_state_fini+0x26f/0x2f0 [ 359.251451][ T6538] ? xfrm_state_fini+0x26f/0x2f0 [ 359.256397][ T6538] xfrm_net_exit+0x2d/0x70 [ 359.260811][ T6538] ops_undo_list+0x497/0x990 [ 359.265407][ T6538] ? __pfx_ops_undo_list+0x10/0x10 [ 359.270548][ T6538] cleanup_net+0x4c5/0x800 [ 359.274967][ T6538] ? __pfx_cleanup_net+0x10/0x10 [ 359.279906][ T6538] ? _raw_spin_unlock_irq+0x23/0x50 [ 359.285099][ T6538] ? process_scheduled_works+0x9ef/0x17b0 [ 359.290815][ T6538] ? process_scheduled_works+0x9ef/0x17b0 [ 359.296531][ T6538] process_scheduled_works+0xade/0x17b0 [ 359.302093][ T6538] ? __pfx_process_scheduled_works+0x10/0x10 [ 359.308077][ T6538] worker_thread+0x8a0/0xda0 [ 359.312667][ T6538] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 359.319002][ T6538] ? __kthread_parkme+0x7b/0x200 [ 359.323943][ T6538] kthread+0x70e/0x8a0 [ 359.328017][ T6538] ? __pfx_worker_thread+0x10/0x10 [ 359.333125][ T6538] ? __pfx_kthread+0x10/0x10 [ 359.337714][ T6538] ? _raw_spin_unlock_irq+0x23/0x50 [ 359.342907][ T6538] ? lockdep_hardirqs_on+0x9c/0x150 [ 359.348100][ T6538] ? __pfx_kthread+0x10/0x10 [ 359.352694][ T6538] ret_from_fork+0x3fc/0x770 [ 359.357279][ T6538] ? __pfx_ret_from_fork+0x10/0x10 [ 359.362391][ T6538] ? __switch_to_asm+0x39/0x70 [ 359.367159][ T6538] ? __switch_to_asm+0x33/0x70 [ 359.371925][ T6538] ? __pfx_kthread+0x10/0x10 [ 359.376517][ T6538] ret_from_fork_asm+0x1a/0x30 [ 359.381286][ T6538] [ 359.384561][ T6538] Kernel Offset: disabled [ 359.388873][ T6538] Rebooting in 86400 seconds..