last executing test programs: 10.271962884s ago: executing program 2 (id=1059): r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x10) 10.233881077s ago: executing program 2 (id=1060): r0 = landlock_create_ruleset(&(0x7f0000000140)={0x0, 0x2}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000006c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0x62, [@typedef={0x4, 0x0, 0x0, 0x7}, @union={0x12, 0x1, 0x0, 0x5, 0x1, 0xab9, [{0x5, 0x5, 0x8d}]}, @struct={0x7, 0x0, 0x0, 0x4, 0x1, 0xfffffff7, [{0x4, 0x2, 0x5}, {0x8, 0x1, 0x6131}]}, @restrict={0xc, 0x0, 0x0, 0xb, 0x1}]}, {0x0, [0x2e, 0x0, 0x0, 0xda]}}, 0x0, 0x6a, 0xfd3e}, 0x20) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) 10.135898536s ago: executing program 2 (id=1061): syz_emit_ethernet(0x3e, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa000000000000080045000030000000000001ac1414000000800000000000450000000000000000000000ac141400ac141400000000000000"], 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000240)=ANY=[@ANYBLOB="80000000ffffffffffff"], 0x24) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = accept4(r0, &(0x7f00000000c0)=@in={0x2, 0x0, @loopback}, &(0x7f0000000000)=0x80, 0x80000) sendmsg$nl_route(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="b80000002100000228bd7000fddbdf25e90f1467060000070800000014000100fc00000000000000000000000000000814000100fe8000000000000000000000000000bb14000200fc01000000000000000000000000000114000200ff020000000000000000000000000001080010000004000014000100fe8000000000000000000000000000aa08000f00e30d00001400010000000000000000000000000000000001140011007465616d5f736c6176655f3100000000"], 0xb8}, 0x1, 0x0, 0x0, 0x40040}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008004600002b0000000000119078699a85eb98f162d9e739c66d5fe24e0000000000"], 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0xfffc, @remote}], 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000008c0)=[@in6={0xa, 0x4e1c, 0x2, @empty, 0x3ff}, @in={0x2, 0x4e24, @local}], 0x2c) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000540)=ANY=[@ANYBLOB="80110000005050505050500000000000000000000064000000001602020202020201000503000000710040000000000000"], 0x3c) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000700)={'veth1_macvtap\x00', 0x8000}) sendmmsg$inet6(r0, &(0x7f000000cf00)=[{{&(0x7f00000084c0)={0xa, 0xfffc, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f0000000780)=[{&(0x7f00000007c0)="88", 0x1}, {&(0x7f0000000680)="af3ed760c4f62ce1e2f1b3d2939586fcb71a127f6f9d5f574994d93d9cc81d7a916a034aa7183aa239597093c3789e6dd69085236bb3", 0x36}], 0x2}}], 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r5 = gettid() process_vm_writev(r5, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) ioctl$UFFDIO_WRITEPROTECT(r4, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f0000497000/0x4000)=nil, 0x7fffdfb68000}}) unshare(0x20000400) pipe(&(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={r6, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000002c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000340), 0x0, 0x81, &(0x7f0000000800)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f00000003c0), &(0x7f0000000340), 0x8, 0xcd, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, 0x0) 8.68797052s ago: executing program 2 (id=1067): r0 = landlock_create_ruleset(&(0x7f0000000140)={0x0, 0x2}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) 8.599899293s ago: executing program 2 (id=1069): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000002200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000cc0)={0x2c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4, 0xa}, @NL80211_KEY_IDX={0x5, 0x2, 0x6}]}]}, 0x2c}}, 0x0) 8.519925375s ago: executing program 2 (id=1070): r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x10) 8.011474712s ago: executing program 0 (id=1073): iopl(0x3) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fstat(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r1) getgroups(0x2, &(0x7f0000000240)=[0x0, 0x0]) setregid(r2, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af25, &(0x7f0000000080)=0x0) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="0405fdffc80000"], 0x7) syz_80211_inject_frame(0x0, 0x0, 0x60) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) listen(r5, 0xfffffffc) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000240)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000080)=0x10) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000140)) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f00000000c0)=0x41) syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000094037b40fd080200fdca010203010902120001000000000904"], 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) 7.539810811s ago: executing program 1 (id=1076): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) r1 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000f40)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) signalfd4(r1, &(0x7f0000000180), 0x8, 0x0) 7.351708632s ago: executing program 4 (id=1077): syz_emit_ethernet(0x3e, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa000000000000080045000030000000000001ac1414000000800000000000450000000000000000000000ac141400ac141400000000000000"], 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000240)=ANY=[@ANYBLOB="80000000ffffffffffff"], 0x24) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = accept4(r0, &(0x7f00000000c0)=@in={0x2, 0x0, @loopback}, &(0x7f0000000000)=0x80, 0x80000) sendmsg$nl_route(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="b80000002100000228bd7000fddbdf25e90f1467060000070800000014000100fc00000000000000000000000000000814000100fe8000000000000000000000000000bb14000200fc01000000000000000000000000000114000200ff020000000000000000000000000001080010000004000014000100fe8000000000000000000000000000aa08000f00e30d00001400010000000000000000000000000000000001140011007465616d5f736c6176655f3100000000"], 0xb8}, 0x1, 0x0, 0x0, 0x40040}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008004600002b0000000000119078699a85eb98f162d9e739c66d5fe24e0000000000"], 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0xfffc, @remote}], 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000008c0)=[@in6={0xa, 0x4e1c, 0x2, @empty, 0x3ff}, @in={0x2, 0x4e24, @local}], 0x2c) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000540)=ANY=[@ANYBLOB="80110000005050505050500000000000000000000064000000001602020202020201000503000000710040000000000000"], 0x3c) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000700)={'veth1_macvtap\x00', 0x8000}) sendmmsg$inet6(r0, &(0x7f000000cf00)=[{{&(0x7f00000084c0)={0xa, 0xfffc, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f0000000780)=[{&(0x7f00000007c0)="88", 0x1}, {&(0x7f0000000680)="af3ed760c4f62ce1e2f1b3d2939586fcb71a127f6f9d5f574994d93d9cc81d7a916a034aa7183aa239597093c3789e6dd69085236bb3", 0x36}], 0x2}}], 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r5 = gettid() process_vm_writev(r5, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) ioctl$UFFDIO_WRITEPROTECT(r4, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f0000497000/0x4000)=nil, 0x7fffdfb68000}}) unshare(0x20000400) pipe(&(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={r6, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000002c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000340), 0x0, 0x81, &(0x7f0000000800)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f00000003c0), &(0x7f0000000340), 0x8, 0xcd, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, 0x0) 6.482873322s ago: executing program 1 (id=1078): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)='<', 0x7fb5, 0x45, 0x0, 0x0) 6.299924326s ago: executing program 1 (id=1079): mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000005800)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='kfree\x00'}, 0x10) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = creat(&(0x7f0000000340)='./file0/file0\x00', 0x0) lsetxattr(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000040)=@random={'security.', '-\x00'}, &(0x7f0000000100)='\x00', 0x1, 0x0) chdir(&(0x7f0000000140)='./bus\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000005840)) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(r2, 0x0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'geneve0\x00', 0x0}) recvfrom$inet_nvme(r0, &(0x7f0000000680)=""/235, 0xeb, 0x40000000, &(0x7f0000000280)=@qipcrtr={0x2a, 0xffffffffffffffff, 0x1}, 0x80) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000140)=0x3, 0x4) sendto$packet(r4, &(0x7f00000000c0)="3f05fe7f7028120006001e0089e9aaa921d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 5.988232499s ago: executing program 1 (id=1081): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000040)) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r4 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r4, 0x4148, 0x0) rt_sigreturn() iopl(0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r1, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e22, @multicast2}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000100)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a) r6 = syz_open_dev$cec(&(0x7f0000000100), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r6, 0xc05c6104, &(0x7f0000000440)={"fe403ca4", 0x0, 0x0, 0x81, 0x0, 0x7, "de6c0a5bcee099303c9842579a1c19", "dba0a737", "4da264d5", '\x00', ["4fdd51b5a333d64fd52f79de", "0c13895a26e4cb6b2f9782fc", "674a440d6cdaaf6be57cc8cd", "2d66c39cea6bb67af44fa6da"]}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r5, 0x0) writev(r0, &(0x7f0000000400)=[{0x0}], 0x1) 5.918622159s ago: executing program 4 (id=1082): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0xfffffffffffffd04, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[], 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0xbc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000038c0)=@newtfilter={0x1c78, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x5}}, [@filter_kind_options=@f_fw={{0x7}, {0x1c4c, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xd, 0xfff1}}, @TCA_FW_ACT={0x130, 0x4, [@m_sample={0x48, 0x6, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x2}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x9}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x80}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_skbmod={0x64, 0xb, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @random="813cb47ffa56"}, @TCA_SKBMOD_DMAC={0xa, 0x3, @remote}]}, {0x1e, 0x6, "993bb44e4d511c824a40ec8aa8e76b1dfe2bb09f40f5166a1aa0"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x7}}}}, @m_mpls={0x80, 0x1, 0x0, 0x0, {{0x9}, {0x54, 0x2, 0x0, 0x1, [@TCA_MPLS_BOS={0x5}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_PROTO={0x6, 0x4, 0x800}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_LABEL={0x8, 0x5, 0x46d44}, @TCA_MPLS_PROTO={0x6, 0x4, 0x22f0}, @TCA_MPLS_LABEL={0x8, 0x5, 0x6f7f3}, @TCA_MPLS_TC={0x5, 0x6, 0x1}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_LABEL={0x8}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2}}}}]}, @TCA_FW_ACT={0x350, 0x4, [@m_tunnel_key={0x108, 0x0, 0x0, 0x0, {{0xf}, {0x80, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @mcast2}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @remote}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @mcast2}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private0}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @mcast2}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private0}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x41}}]}, {0x5a, 0x6, "4359fdbdc724c7ef9c78f291b75dd48767c1b286911fee91d2bf36cca64693b3eb7c693dc3cb35d68ff5d2ca2d4caba0f70baa34869f9347a3a7115bf454a72d4b3105238a4aaa8d8bc1ba73e8b22f2e7bcbc23e49fc"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_vlan={0xb4, 0x9, 0x0, 0x0, {{0x9}, {0x68, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xf61}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x7, 0x2, 0x7, 0x1, 0xfffffff8}, 0x3}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0xef1, 0x0, 0x5, 0x7}, 0x1}}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x9, 0x9, 0x20000000, 0x5, 0x80000000}, 0x3}}]}, {0x21, 0x6, "85941ce8d36e34079bf6bfc773ffd6fa99d9cb27844a6cc7263730f006"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_tunnel_key={0x64, 0x0, 0x0, 0x0, {{0xf}, {0x18, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0xd}}]}, {0x20, 0x6, "43114e76aa766b6c5e455b0323326f0e46c5989e1621f65189bd416a"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_mirred={0x12c, 0x1b, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x6, 0x0, 0x4, 0x1}, 0x2}}]}, {0xde, 0x6, "03ce70fb338199cfff8e9fa8c51b52ee359541cf6048432759cc3a6b5659d90c070f229834c6c572e50029950bc5aeef589ec3b46c0afe480edb6628d2091cdc5b6c9a6e384050305deb0276cd202224e6e3002a1a1dc195e041661ca00604a0a46223e595d8edb5b0e095097712d31f5d6e2db28abb2f533a997d4c0ec5aa19a192ccc432ff9ef539f7db05aaf781549c974cf7d15f46d3ddeebbd658f11dbcd260c00573a6342955f958f152235fd094de03b9ebbd35f57d505b1d810c6bc9e2567b005cdb2cdc78cd6e91c1a9fd7f9f1121552cab5aa664fc"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}, @TCA_FW_MASK={0x8, 0x5, 0x2}, @TCA_FW_POLICE={0x40}, @TCA_FW_ACT={0x1624, 0x4, [@m_ct={0x180, 0x0, 0x0, 0x0, {{0x7}, {0x7c, 0x2, 0x0, 0x1, [@TCA_CT_LABELS={0x14, 0x7, "fcdb0aa89963f9676c5713f5b5fee05c"}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @rand_addr=' \x01\x00'}, @TCA_CT_PARMS={0x18, 0x1, {0x4, 0x0, 0x2, 0x8}}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @dev={0xac, 0x14, 0x14, 0x39}}, @TCA_CT_MARK_MASK={0x8}, @TCA_CT_PARMS={0x18, 0x1, {0xbf1, 0xfffffff6, 0x6, 0x511, 0x7}}, @TCA_CT_ACTION={0x6, 0x3, 0x2}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e22}]}, {0xe0, 0x6, "de353e191fbf4149b5c777702cd2b0b25bd24b1d4c9879b0e54285997f1f22b90e441861f0e2d5a476530076c446b12a35ae00b5591912c87f5f3ff005f1847f7e2383d961ea5bd32e168fd11c6d8a25cce72b07f95dd81a2bae9baf801e7d9a5b49fae34ecd2795d9ef4b53be2fd464d02f22c78d520ac6195a90bf026130a985da0fac6ca2d6e1e7b5f330115847a517d1a44a98ca42166b821e0380dbe03b3bffbdf215cf03b049ae9d238f86780d94352e86df4b2e309ff9e1209e4d85ce256b1257e1aad6d028dc14b27d84ea1bd8078ec1de1058c94d4bcd9e"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_mirred={0x17c, 0x0, 0x0, 0x0, {{0xb}, {0xc4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x4, 0x800, 0x800}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x10000005, 0x5, 0x1000, 0x3}, 0x3, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x0, 0x0, 0x9, 0x5}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xfffffffc, 0x0, 0x0, 0x259d}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xfe, 0x0, 0x10000000}, 0x3, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xec, 0x2, 0x10000000}, 0x4, r2}}]}, {0x90, 0x6, "050aa4291291d47d510bb60aaf0c24253002b361efe0b7eaa1560032b7369d9fa82221aabf1d356fddfef5a5499510892e9f2735930927d2ce99205d4f8391a488e09b533239df9ee5bb13ca76ecf5e3798cf55f6d2d79d9317896276973c312e6be74ff7606178bed161ff6bc358fa38c5fdeee9a44e9d68a6f0f4ae32ea3cde280fb492a3e506fae6c2369"}, {0xfffffffffffffdb7, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_connmark={0x1114, 0x1, 0x0, 0x0, {{0xd}, {0xe4, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x0, 0x0, 0x0, 0x5}, 0xfe00}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x0, 0x6, 0x9}, 0xff}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{}, 0x6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x0, 0xffffffffffffffff, 0x40000000, 0x8001}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x71, 0x1}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x2, 0x3, 0x7, 0x80000}, 0xc6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7ff, 0x1, 0x7, 0x9}}}, @TCA_CONNMARK_PARMS={0x1c}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ife={0x1ac, 0x3, 0x0, 0x0, {{0x8}, {0x88, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6}, @TCA_IFE_SMAC={0xa, 0x4, @broadcast}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x7fff, 0x2, 0x20000000, 0x5, 0x2}}}, @TCA_IFE_METALST={0x38, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0xfff}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x8}, @IFE_META_PRIO={0x8, 0x3, @val=0x101}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x6b}, @IFE_META_SKBMARK={0x8}, @IFE_META_PRIO={0x8, 0x3, @val=0x80000000}, @IFE_META_TCINDEX={0x4, 0x5, @void}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0xfffffffa, 0x3, 0x2}}}]}, {0x100, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_gact={0x64, 0x0, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}]}, {0x1f, 0x6, "e3ed391d16eb1c97c12d3b085f6df4d7c83efaa0b00ae7c25c0e49"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}, @TCA_FW_INDEV={0x14, 0x3, 'ip_vti0\x00'}, @TCA_FW_CLASSID={0x8, 0x1, {0x9}}, @TCA_FW_ACT={0x130, 0x4, [@m_tunnel_key={0x12c, 0x1b, 0x0, 0x0, {{0xf}, {0x70, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @multicast2}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @private=0xa010100}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xe000000, 0x1, 0x0, 0x0, 0x2}}}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @local}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @private}}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e21}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @private=0xa010102}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @mcast1}]}, {0x90, 0x6, "afd95464e95d47e5a69cc41b034acd1d48cf7d976f7eae17ade112f38a4236345171808d6e1862d54cf2721170806a6fee00cbc275e2e9410be243e3ea8798c0194f9295b9fb7f366303357debb6d82aa26bb5ca968165529c76fe0551ea4771999e6ff302f3b975e480f244e373ace5bf6701db2994bcc4f20e03331f4e62b703a289df8b1c9bfe4bae83d7"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}]}, @TCA_FW_CLASSID={0x8, 0x1, {0xd}}]}}]}, 0x1c78}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 5.860286363s ago: executing program 3 (id=1083): syz_emit_vhci(0x0, 0x22) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) syz_emit_vhci(0x0, 0xd) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="04090003c800000000f8ffffffffffffff000002"], 0x14) write$binfmt_script(r0, &(0x7f00000005c0)={'#! ', '', [], 0xa, "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"}, 0x248) ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, &(0x7f00000002c0)={0x0, &(0x7f0000000340)=""/121, 0x79}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) r2 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x100000, @loopback, 0x2}, 0x1c) r3 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r3, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r3, 0x10d, 0x3, &(0x7f0000000000), &(0x7f0000000200)=0x4) r4 = socket(0x1, 0x2, 0x1) syz_io_uring_setup(0x3ccf, &(0x7f0000000340)={0x0, 0x2ce8, 0x0, 0xffffffff, 0x319, 0x0, r1}, 0x0, 0x0) syz_open_dev$swradio(&(0x7f00000046c0), 0x1, 0x2) readv(r3, &(0x7f0000000100)=[{&(0x7f0000000500)=""/126, 0x7e}], 0x1) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_perm_addr={0x33}}) socket$xdp(0x2c, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000f80)={0x2c, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000440), 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r5, 0x40505330, &(0x7f0000000700)) 5.657449437s ago: executing program 4 (id=1084): r0 = socket$inet6(0xa, 0x2, 0x401004) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5}]}, 0x34}}, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='rose0\x00', 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan0\x00'}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket(0x0, 0x0, 0x0) listen(r2, 0x8) unshare(0x0) socket(0x0, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) rseq(&(0x7f0000000040), 0xfffffffffffffe82, 0x0, 0x0) socket(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f000000d380)) r3 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x400000000c0201, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000100)=0x6) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000040)) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000500)={0xa00, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) syz_usb_connect$hid(0x6, 0x0, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x655e, 0x4) dup2(0xffffffffffffffff, 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004840)={0x3c, 0x0, 0x731, 0x0, 0x0, {0x38}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x2}}}]}, 0x3c}, 0x1, 0x2}, 0x0) 4.776837722s ago: executing program 0 (id=1085): r0 = socket$packet(0x11, 0x3, 0x300) socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000005c0)={0x1, 0x58, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}}]}]}, 0x54}}, 0x0) socket(0x10, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x8002, @TCA_SFB_PARMS={0x28, 0x2}}}]}, 0x58}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="a0010000", @ANYRES16=0x0, @ANYBLOB="00012dbd7000ffdbdf250400000050000180080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="140002007665746830000000000000000000000014000200766972745f7769666930000000000000140002006970365f76746930000000000000000070000180140002006272696467655f736c6176655f3100001400020073797a5f74756e000000000000000000080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="0800030000000000140002006e657464657673696d3000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000300020000001c000180080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="08000300030000002800018008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r1, @ANYBLOB="140002006e696376663000000000000000000000240001800800030002000000080003000300000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="1400eb7b00000000", @ANYRES32=r5, @ANYBLOB="08000300030000002000018008000300000000001400020076657468305f746f5f687372000000003000018008000300030000001400020076657468315f76697274"], 0x1a0}, 0x1, 0x0, 0x0, 0x4040}, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES32=r7, @ANYRES16=r6], 0x20}, 0x1, 0xc00000000000000}, 0x0) bind$bt_hci(r8, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r8, &(0x7f0000000080)=ANY=[@ANYBLOB="4c00030007"], 0xd) socket$packet(0x11, 0x3, 0x300) r9 = socket$packet(0x11, 0x2, 0x300) dup2(r0, r9) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000001c0)={'ip6_vti0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="10030600e0ff020002004788aa96a13bb100001100007fca1a00", 0x1000a, 0x0, &(0x7f0000000140)={0x11, 0x0, r11}, 0x14) 4.349907558s ago: executing program 3 (id=1086): iopl(0x3) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fstat(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r1) getgroups(0x2, &(0x7f0000000240)=[0x0, 0x0]) setregid(r2, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af25, &(0x7f0000000080)=0x0) sched_setscheduler(0x0, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_DEL_KEY(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="14070000", @ANYRES16=r5, @ANYBLOB="000826bd7000000000000a000000"], 0xffffffffffffff73}}, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="0405fdffc80000"], 0x7) syz_80211_inject_frame(0x0, 0x0, 0x60) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) listen(r7, 0xfffffffc) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000240)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000080)=0x10) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000140)) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) ioctl$PPPIOCSFLAGS1(r6, 0x40047459, &(0x7f00000000c0)=0x41) syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000094037b40fd080200fdca010203010902120001000000000904"], 0x0) io_uring_setup(0x10002edd, &(0x7f00000002c0)={0x0, 0x0, 0x8}) openat$vmci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) 3.955924168s ago: executing program 0 (id=1087): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000f40)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) signalfd4(r1, &(0x7f0000000180), 0x8, 0x0) 3.241330366s ago: executing program 4 (id=1088): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_route(0x10, 0x3, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x12, 0x10, 0xfa00, {0x0}}, 0x18) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$int_in(r2, 0x5452, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000400)={0xa, 0x4e24, 0x0, @private1}, 0x1c) sendto$inet6(r2, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000004380)=@newtaction={0x14, 0x30, 0xffff}, 0x14}}, 0x0) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000240)={0x1f}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x198780, 0x0) ioctl$RNDZAPENTCNT(r4, 0x5204, 0x0) 2.795853889s ago: executing program 0 (id=1089): syz_emit_vhci(0x0, 0x22) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="04040a00000000000054679202ce9eaa48b326b038d97544c8b681bad547412afab3663029531077c8c4fa2f7501610d4eae6214096ae92430cd63486f07b04d9c519ab15a6e842e1352398f95ff35f5115a2c6c50f63336179b5e6b1f774a63506e8cb76bba42c6bee078240ec871a2bcf7dd5691833ac53a02f3614eae3afb9549df1b77ce0baebc9f6306644f6f08bbd3ca3229d272acd3483bf3ae4228f7a2b839594856918b10ca47ad4dc249d99c244aba277d101b5ac305"], 0xd) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="04090003c800000000f8ffffffffffffff000002"], 0x14) write$binfmt_script(r0, &(0x7f00000005c0)={'#! ', '', [], 0xa, "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"}, 0x224) ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, &(0x7f00000002c0)={0x0, &(0x7f0000000340)=""/121, 0x79}) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000ac0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xffffffffffffffe1, 0x0, 0x0, 0x10001, 0xfffffffffffff924]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) r2 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x100000, @loopback, 0x2}, 0x1c) r3 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r3, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r3, 0x10d, 0x3, &(0x7f0000000000), &(0x7f0000000200)=0x4) r4 = socket(0x1, 0x2, 0x1) syz_io_uring_setup(0x3ccf, &(0x7f0000000340)={0x0, 0x2ce8, 0x0, 0xffffffff, 0x319, 0x0, r1}, 0x0, 0x0) syz_open_dev$swradio(&(0x7f00000046c0), 0x1, 0x2) readv(r3, &(0x7f0000000100)=[{&(0x7f0000000500)=""/126, 0x7e}], 0x1) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_perm_addr={0x33}}) socket$xdp(0x2c, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000f80)={0x2c, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000440), 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r5, 0x40505330, &(0x7f0000000700)) 2.79286596s ago: executing program 3 (id=1090): mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000005800)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='kfree\x00'}, 0x10) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = creat(&(0x7f0000000340)='./file0/file0\x00', 0x0) lsetxattr(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000040)=@random={'security.', '-\x00'}, &(0x7f0000000100)='\x00', 0x1, 0x0) chdir(&(0x7f0000000140)='./bus\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000005840)) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(r2, 0x0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'geneve0\x00', 0x0}) recvfrom$inet_nvme(r0, &(0x7f0000000680)=""/235, 0xeb, 0x40000000, &(0x7f0000000280)=@qipcrtr={0x2a, 0xffffffffffffffff, 0x1}, 0x80) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000140)=0x3, 0x4) sendto$packet(r4, &(0x7f00000000c0)="3f05fe7f7028120006001e0089e9aaa921d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 2.785683358s ago: executing program 1 (id=1091): syz_emit_ethernet(0x3e, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa000000000000080045000030000000000001ac1414000000800000000000450000000000000000000000ac141400ac141400000000000000"], 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000240)=ANY=[@ANYBLOB="80000000ffffffffffff"], 0x24) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = accept4(r0, &(0x7f00000000c0)=@in={0x2, 0x0, @loopback}, &(0x7f0000000000)=0x80, 0x80000) sendmsg$nl_route(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="b80000002100000228bd7000fddbdf25e90f1467060000070800000014000100fc00000000000000000000000000000814000100fe8000000000000000000000000000bb14000200fc01000000000000000000000000000114000200ff020000000000000000000000000001080010000004000014000100fe8000000000000000000000000000aa08000f00e30d00001400010000000000000000000000000000000001140011007465616d5f736c6176655f3100000000"], 0xb8}, 0x1, 0x0, 0x0, 0x40040}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008004600002b0000000000119078699a85eb98f162d9e739c66d5fe24e0000000000"], 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0xfffc, @remote}], 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000008c0)=[@in6={0xa, 0x4e1c, 0x2, @empty, 0x3ff}, @in={0x2, 0x4e24, @local}], 0x2c) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000540)=ANY=[@ANYBLOB="80110000005050505050500000000000000000000064000000001602020202020201000503000000710040000000000000"], 0x3c) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000700)={'veth1_macvtap\x00', 0x8000}) sendmmsg$inet6(r0, &(0x7f000000cf00)=[{{&(0x7f00000084c0)={0xa, 0xfffc, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f0000000780)=[{&(0x7f00000007c0)="88", 0x1}, {&(0x7f0000000680)="af3ed760c4f62ce1e2f1b3d2939586fcb71a127f6f9d5f574994d93d9cc81d7a916a034aa7183aa239597093c3789e6dd69085236bb3", 0x36}], 0x2}}], 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r5 = gettid() process_vm_writev(r5, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) ioctl$UFFDIO_WRITEPROTECT(r4, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f0000497000/0x4000)=nil, 0x7fffdfb68000}}) unshare(0x20000400) pipe(&(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={r6, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000002c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000340), 0x0, 0x81, &(0x7f0000000800)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f00000003c0), &(0x7f0000000340), 0x8, 0xcd, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000006c0)={'syztnl2\x00', 0x0}) 2.431168632s ago: executing program 3 (id=1092): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000002200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000cc0)={0x2c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4, 0xa}, @NL80211_KEY_IDX={0x5, 0x2, 0x6}]}]}, 0x2c}}, 0x0) 2.12110275s ago: executing program 4 (id=1093): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0xfffffffffffffd04, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[], 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0xbc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000038c0)=@newtfilter={0x1c78, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x5}}, [@filter_kind_options=@f_fw={{0x7}, {0x1c4c, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xd, 0xfff1}}, @TCA_FW_ACT={0x130, 0x4, [@m_sample={0x48, 0x6, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x2}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x9}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x80}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_skbmod={0x64, 0xb, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @random="813cb47ffa56"}, @TCA_SKBMOD_DMAC={0xa, 0x3, @remote}]}, {0x1e, 0x6, "993bb44e4d511c824a40ec8aa8e76b1dfe2bb09f40f5166a1aa0"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x7}}}}, @m_mpls={0x80, 0x1, 0x0, 0x0, {{0x9}, {0x54, 0x2, 0x0, 0x1, [@TCA_MPLS_BOS={0x5}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_PROTO={0x6, 0x4, 0x800}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_LABEL={0x8, 0x5, 0x46d44}, @TCA_MPLS_PROTO={0x6, 0x4, 0x22f0}, @TCA_MPLS_LABEL={0x8, 0x5, 0x6f7f3}, @TCA_MPLS_TC={0x5, 0x6, 0x1}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_LABEL={0x8}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2}}}}]}, @TCA_FW_ACT={0x350, 0x4, [@m_tunnel_key={0x108, 0x0, 0x0, 0x0, {{0xf}, {0x80, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @mcast2}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @remote}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @mcast2}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private0}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @mcast2}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private0}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x41}}]}, {0x5a, 0x6, "4359fdbdc724c7ef9c78f291b75dd48767c1b286911fee91d2bf36cca64693b3eb7c693dc3cb35d68ff5d2ca2d4caba0f70baa34869f9347a3a7115bf454a72d4b3105238a4aaa8d8bc1ba73e8b22f2e7bcbc23e49fc"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_vlan={0xb4, 0x9, 0x0, 0x0, {{0x9}, {0x68, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xf61}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x7, 0x2, 0x7, 0x1, 0xfffffff8}, 0x3}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0xef1, 0x0, 0x5, 0x7}, 0x1}}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x9, 0x9, 0x20000000, 0x5, 0x80000000}, 0x3}}]}, {0x21, 0x6, "85941ce8d36e34079bf6bfc773ffd6fa99d9cb27844a6cc7263730f006"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_tunnel_key={0x64, 0x0, 0x0, 0x0, {{0xf}, {0x18, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0xd}}]}, {0x20, 0x6, "43114e76aa766b6c5e455b0323326f0e46c5989e1621f65189bd416a"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_mirred={0x12c, 0x1b, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x6, 0x0, 0x4, 0x1}, 0x2}}]}, {0xde, 0x6, "03ce70fb338199cfff8e9fa8c51b52ee359541cf6048432759cc3a6b5659d90c070f229834c6c572e50029950bc5aeef589ec3b46c0afe480edb6628d2091cdc5b6c9a6e384050305deb0276cd202224e6e3002a1a1dc195e041661ca00604a0a46223e595d8edb5b0e095097712d31f5d6e2db28abb2f533a997d4c0ec5aa19a192ccc432ff9ef539f7db05aaf781549c974cf7d15f46d3ddeebbd658f11dbcd260c00573a6342955f958f152235fd094de03b9ebbd35f57d505b1d810c6bc9e2567b005cdb2cdc78cd6e91c1a9fd7f9f1121552cab5aa664fc"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}, @TCA_FW_MASK={0x8, 0x5, 0x2}, @TCA_FW_POLICE={0x40}, @TCA_FW_ACT={0x1624, 0x4, [@m_ct={0x180, 0x0, 0x0, 0x0, {{0x7}, {0x7c, 0x2, 0x0, 0x1, [@TCA_CT_LABELS={0x14, 0x7, "fcdb0aa89963f9676c5713f5b5fee05c"}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @rand_addr=' \x01\x00'}, @TCA_CT_PARMS={0x18, 0x1, {0x4, 0x0, 0x2, 0x8}}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @dev={0xac, 0x14, 0x14, 0x39}}, @TCA_CT_MARK_MASK={0x8}, @TCA_CT_PARMS={0x18, 0x1, {0xbf1, 0xfffffff6, 0x6, 0x511, 0x7}}, @TCA_CT_ACTION={0x6, 0x3, 0x2}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e22}]}, {0xe0, 0x6, "de353e191fbf4149b5c777702cd2b0b25bd24b1d4c9879b0e54285997f1f22b90e441861f0e2d5a476530076c446b12a35ae00b5591912c87f5f3ff005f1847f7e2383d961ea5bd32e168fd11c6d8a25cce72b07f95dd81a2bae9baf801e7d9a5b49fae34ecd2795d9ef4b53be2fd464d02f22c78d520ac6195a90bf026130a985da0fac6ca2d6e1e7b5f330115847a517d1a44a98ca42166b821e0380dbe03b3bffbdf215cf03b049ae9d238f86780d94352e86df4b2e309ff9e1209e4d85ce256b1257e1aad6d028dc14b27d84ea1bd8078ec1de1058c94d4bcd9e"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_mirred={0x17c, 0x0, 0x0, 0x0, {{0xb}, {0xc4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x4, 0x800, 0x800}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x10000005, 0x5, 0x1000, 0x3}, 0x3, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x0, 0x0, 0x9, 0x5}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xfffffffc, 0x0, 0x0, 0x259d}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xfe, 0x0, 0x10000000}, 0x3, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xec, 0x2, 0x10000000}, 0x4, r2}}]}, {0x90, 0x6, "050aa4291291d47d510bb60aaf0c24253002b361efe0b7eaa1560032b7369d9fa82221aabf1d356fddfef5a5499510892e9f2735930927d2ce99205d4f8391a488e09b533239df9ee5bb13ca76ecf5e3798cf55f6d2d79d9317896276973c312e6be74ff7606178bed161ff6bc358fa38c5fdeee9a44e9d68a6f0f4ae32ea3cde280fb492a3e506fae6c2369"}, {0xfffffffffffffdb7, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_connmark={0x1114, 0x1, 0x0, 0x0, {{0xd}, {0xe4, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x0, 0x0, 0x0, 0x5}, 0xfe00}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x0, 0x6, 0x9}, 0xff}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{}, 0x6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x0, 0xffffffffffffffff, 0x40000000, 0x8001}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x71, 0x1}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x2, 0x3, 0x7, 0x80000}, 0xc6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7ff, 0x1, 0x7, 0x9}}}, @TCA_CONNMARK_PARMS={0x1c}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ife={0x1ac, 0x3, 0x0, 0x0, {{0x8}, {0x88, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6}, @TCA_IFE_SMAC={0xa, 0x4, @broadcast}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x7fff, 0x2, 0x20000000, 0x5, 0x2}}}, @TCA_IFE_METALST={0x38, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0xfff}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x8}, @IFE_META_PRIO={0x8, 0x3, @val=0x101}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x6b}, @IFE_META_SKBMARK={0x8}, @IFE_META_PRIO={0x8, 0x3, @val=0x80000000}, @IFE_META_TCINDEX={0x4, 0x5, @void}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0xfffffffa, 0x3, 0x2}}}]}, {0x100, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_gact={0x64, 0x0, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}]}, {0x1f, 0x6, "e3ed391d16eb1c97c12d3b085f6df4d7c83efaa0b00ae7c25c0e49"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}, @TCA_FW_INDEV={0x14, 0x3, 'ip_vti0\x00'}, @TCA_FW_CLASSID={0x8, 0x1, {0x9}}, @TCA_FW_ACT={0x130, 0x4, [@m_tunnel_key={0x12c, 0x1b, 0x0, 0x0, {{0xf}, {0x70, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @multicast2}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @private=0xa010100}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xe000000, 0x1, 0x0, 0x0, 0x2}}}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @local}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @private}}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e21}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @private=0xa010102}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @mcast1}]}, {0x90, 0x6, "afd95464e95d47e5a69cc41b034acd1d48cf7d976f7eae17ade112f38a4236345171808d6e1862d54cf2721170806a6fee00cbc275e2e9410be243e3ea8798c0194f9295b9fb7f366303357debb6d82aa26bb5ca968165529c76fe0551ea4771999e6ff302f3b975e480f244e373ace5bf6701db2994bcc4f20e03331f4e62b703a289df8b1c9bfe4bae83d7"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}]}, @TCA_FW_CLASSID={0x8, 0x1, {0xd}}]}}]}, 0x1c78}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 522.755527ms ago: executing program 3 (id=1094): mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000005800)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='kfree\x00'}, 0x10) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = creat(&(0x7f0000000340)='./file0/file0\x00', 0x0) lsetxattr(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000040)=@random={'security.', '-\x00'}, &(0x7f0000000100)='\x00', 0x1, 0x0) chdir(&(0x7f0000000140)='./bus\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000005840)) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x4c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x1c, 0x2, [@TCA_CAKE_AUTORATE={0x8, 0x9, 0xb1ff}, @TCA_CAKE_TARGET={0x8, 0x8, 0x6}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x5}]}}]}, 0x4c}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'geneve0\x00', 0x0}) recvfrom$inet_nvme(r0, &(0x7f0000000680)=""/235, 0xeb, 0x40000000, &(0x7f0000000280)=@qipcrtr={0x2a, 0xffffffffffffffff, 0x1}, 0x80) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000140)=0x3, 0x4) sendto$packet(r5, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000540)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) 459.075568ms ago: executing program 1 (id=1095): syz_emit_vhci(0x0, 0x22) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) syz_emit_vhci(0x0, 0xd) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="04090003c800000000f8ffffffffffffff000002"], 0x14) write$binfmt_script(r0, &(0x7f00000005c0)={'#! ', '', [], 0xa, "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"}, 0x248) ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, &(0x7f00000002c0)={0x0, &(0x7f0000000340)=""/121, 0x79}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) r2 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x100000, @loopback, 0x2}, 0x1c) r3 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r3, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r3, 0x10d, 0x3, &(0x7f0000000000), &(0x7f0000000200)=0x4) r4 = socket(0x1, 0x2, 0x1) syz_io_uring_setup(0x3ccf, &(0x7f0000000340)={0x0, 0x2ce8, 0x0, 0xffffffff, 0x319, 0x0, r1}, 0x0, 0x0) syz_open_dev$swradio(&(0x7f00000046c0), 0x1, 0x2) readv(r3, &(0x7f0000000100)=[{&(0x7f0000000500)=""/126, 0x7e}], 0x1) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_perm_addr={0x33}}) socket$xdp(0x2c, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000f80)={0x2c, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000440), 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r5, 0x40505330, &(0x7f0000000700)) 432.95163ms ago: executing program 0 (id=1096): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000080)={0xb, 0x4}) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000180)="f4", 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r3, &(0x7f0000000280), r2, 0x0, 0x800, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000640)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r4, &(0x7f0000000240), 0x0, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x8, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x90) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="04040a004000"], 0xd) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}}}, 0x14) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="04f3fa419d5281014f52d2164a3755e94d00000100000000"], 0xe) setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) read$FUSE(r5, &(0x7f0000003680)={0x2020}, 0x2020) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) unlink(&(0x7f0000000440)='./file0/file1/file0\x00') socket(0x1, 0x802, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='task\x00') fchdir(r6) r7 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r7, &(0x7f0000000500)=""/45, 0x2d) getdents64(r7, 0x0, 0x18) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000300)) 431.967633ms ago: executing program 4 (id=1097): r0 = socket$inet6(0xa, 0x2, 0x401004) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5}]}, 0x34}}, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='rose0\x00', 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan0\x00'}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket(0x0, 0x0, 0x0) listen(r2, 0x8) unshare(0x0) socket(0x0, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) rseq(&(0x7f0000000040), 0xfffffffffffffe82, 0x0, 0x0) socket(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f000000d380)) r3 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x400000000c0201, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000100)=0x6) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000040)) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000500)={0xa00, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) syz_usb_connect$hid(0x6, 0x0, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x655e, 0x4) dup2(0xffffffffffffffff, 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004840)={0x3c, 0x0, 0x731, 0x0, 0x0, {0x38}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x2}}}]}, 0x3c}, 0x1, 0x2}, 0x0) 260.561651ms ago: executing program 3 (id=1098): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffed}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="06000000efca579f602fcd58e17e03c5ba4f5113ac65ec3ce84ac355934d6e3cf0f84ddf012706e56ce5f69c8a3ba3bc5a50c3ae4344584cf4649a16765bf946c79d0c463fc5ed67384fb9873294bf707414e8e21c6b9f5aaa140d44ad61b2b375625240e238ad3da89002", @ANYRES16=0x0, @ANYBLOB="00082abd7000fbdbdf2509000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) r3 = syz_open_procfs(r2, &(0x7f0000000600)='fd/4\x00') ioctl$EXT4_IOC_GROUP_EXTEND(r3, 0x40305829, &(0x7f0000000240)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) mkdirat(r3, &(0x7f00000001c0)='./file0\x00', 0x89) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000040)=0x1df67, 0x4) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) chdir(&(0x7f0000002340)='./bus\x00') 0s ago: executing program 0 (id=1099): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000002200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000cc0)={0x2c, r0, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4, 0xa}, @NL80211_KEY_IDX={0x5, 0x2, 0x6}]}]}, 0x2c}}, 0x0) kernel console output (not intermixed with test programs): g attributes in process `syz.3.260'. [ 151.020369][ T6359] Bluetooth: hci3: invalid length 0, exp 2 for type 8 [ 151.389654][ T8] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 151.418860][ T6362] tipc: Enabling of bearer rejected, already enabled [ 151.581037][ T8] usb 1-1: Using ep0 maxpacket: 32 [ 151.625724][ T8] usb 1-1: New USB device found, idVendor=07c4, idProduct=a103, bcdDevice=21.23 [ 151.649573][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.658715][ T8] usb 1-1: Product: syz [ 151.663749][ T8] usb 1-1: Manufacturer: syz [ 151.742250][ T8] usb 1-1: SerialNumber: syz [ 151.775690][ T8] usb 1-1: config 0 descriptor?? [ 151.836786][ T8] ums-sddr55 1-1:0.0: USB Mass Storage device detected [ 151.874509][ T8] ums-sddr55 1-1:0.0: Quirks match for vid 07c4 pid a103: 8 [ 153.398833][ T6397] netdevsim netdevsim4: Direct firmware load for ng failed with error -2 [ 153.409379][ T6397] netdevsim netdevsim4: Falling back to sysfs fallback for: ng [ 154.413144][ T6401] bond_slave_0: entered promiscuous mode [ 154.419087][ T6401] bond_slave_1: entered promiscuous mode [ 154.472596][ T6399] bond_slave_0: left promiscuous mode [ 154.478166][ T6399] bond_slave_1: left promiscuous mode [ 154.723242][ T6412] bond_slave_0: entered promiscuous mode [ 154.728999][ T6412] bond_slave_1: entered promiscuous mode [ 154.796534][ T6411] bond_slave_0: left promiscuous mode [ 154.802121][ T6411] bond_slave_1: left promiscuous mode [ 155.196949][ T6431] FAULT_INJECTION: forcing a failure. [ 155.196949][ T6431] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 155.224999][ T6431] CPU: 0 PID: 6431 Comm: syz.4.280 Not tainted 6.10.0-syzkaller-11323-g7846b618e0a4 #0 [ 155.234691][ T6431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 155.244771][ T6431] Call Trace: [ 155.248068][ T6431] [ 155.251013][ T6431] dump_stack_lvl+0x241/0x360 [ 155.255713][ T6431] ? __pfx_dump_stack_lvl+0x10/0x10 [ 155.260941][ T6431] ? __pfx__printk+0x10/0x10 [ 155.265579][ T6431] ? __pfx_lock_release+0x10/0x10 [ 155.270635][ T6431] ? vfs_write+0x7c4/0xc90 [ 155.275085][ T6431] should_fail_ex+0x3b0/0x4e0 [ 155.279800][ T6431] _copy_from_user+0x2f/0xe0 [ 155.284429][ T6431] __sys_bpf+0x1a4/0x810 [ 155.288703][ T6431] ? __pfx___sys_bpf+0x10/0x10 [ 155.293510][ T6431] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 155.299526][ T6431] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 155.305906][ T6431] ? do_syscall_64+0x100/0x230 [ 155.310710][ T6431] __x64_sys_bpf+0x7c/0x90 [ 155.315184][ T6431] do_syscall_64+0xf3/0x230 [ 155.319687][ T6431] ? clear_bhb_loop+0x35/0x90 [ 155.324452][ T6431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.330533][ T6431] RIP: 0033:0x7fa693575b59 [ 155.334947][ T6431] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 155.354555][ T6431] RSP: 002b:00007fa694425048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 155.362966][ T6431] RAX: ffffffffffffffda RBX: 00007fa693705f60 RCX: 00007fa693575b59 [ 155.370931][ T6431] RDX: 0000000000000090 RSI: 0000000020000400 RDI: 0000000000000005 [ 155.378902][ T6431] RBP: 00007fa6944250a0 R08: 0000000000000000 R09: 0000000000000000 [ 155.386871][ T6431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 155.394841][ T6431] R13: 000000000000000b R14: 00007fa693705f60 R15: 00007ffd07b43bf8 [ 155.402814][ T6431] [ 156.577335][ T5141] usb 1-1: USB disconnect, device number 5 [ 156.684180][ T6440] netlink: 4 bytes leftover after parsing attributes in process `syz.2.283'. [ 156.721374][ T6440] Bluetooth: hci3: invalid length 0, exp 2 for type 8 [ 156.845300][ T6446] process 'syz.4.286' launched './file1' with NULL argv: empty string added [ 157.303048][ T6453] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 157.690240][ T6454] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 157.862925][ T6457] bond_slave_0: entered promiscuous mode [ 157.868724][ T6457] bond_slave_1: entered promiscuous mode [ 157.908560][ T6456] bond_slave_0: left promiscuous mode [ 157.914081][ T6456] bond_slave_1: left promiscuous mode [ 157.930054][ T6466] FAULT_INJECTION: forcing a failure. [ 157.930054][ T6466] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 157.964936][ T6466] CPU: 1 PID: 6466 Comm: syz.4.290 Not tainted 6.10.0-syzkaller-11323-g7846b618e0a4 #0 [ 157.974613][ T6466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 157.984658][ T6466] Call Trace: [ 157.987932][ T6466] [ 157.990846][ T6466] dump_stack_lvl+0x241/0x360 [ 157.995515][ T6466] ? __pfx_dump_stack_lvl+0x10/0x10 [ 158.000712][ T6466] ? __pfx__printk+0x10/0x10 [ 158.005291][ T6466] ? __pfx_lock_release+0x10/0x10 [ 158.010316][ T6466] ? vfs_write+0x7c4/0xc90 [ 158.014751][ T6466] should_fail_ex+0x3b0/0x4e0 [ 158.019464][ T6466] _copy_from_user+0x2f/0xe0 [ 158.024089][ T6466] __sys_bpf+0x1a4/0x810 [ 158.028356][ T6466] ? __pfx___sys_bpf+0x10/0x10 [ 158.033120][ T6466] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 158.039110][ T6466] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 158.045440][ T6466] ? do_syscall_64+0x100/0x230 [ 158.050198][ T6466] __x64_sys_bpf+0x7c/0x90 [ 158.054616][ T6466] do_syscall_64+0xf3/0x230 [ 158.059106][ T6466] ? clear_bhb_loop+0x35/0x90 [ 158.063927][ T6466] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.069831][ T6466] RIP: 0033:0x7fa693575b59 [ 158.074255][ T6466] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 158.093886][ T6466] RSP: 002b:00007fa694425048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 158.102327][ T6466] RAX: ffffffffffffffda RBX: 00007fa693705f60 RCX: 00007fa693575b59 [ 158.110305][ T6466] RDX: 0000000000000090 RSI: 00000000200000c0 RDI: 0000000000000005 [ 158.118272][ T6466] RBP: 00007fa6944250a0 R08: 0000000000000000 R09: 0000000000000000 [ 158.126237][ T6466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 158.134200][ T6466] R13: 000000000000000b R14: 00007fa693705f60 R15: 00007ffd07b43bf8 [ 158.142181][ T6466] [ 158.423047][ T6469] netlink: 276 bytes leftover after parsing attributes in process `syz.2.293'. [ 158.602891][ T6475] 9pnet_fd: Insufficient options for proto=fd [ 158.722301][ T6471] FAULT_INJECTION: forcing a failure. [ 158.722301][ T6471] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 158.787119][ T6471] CPU: 1 PID: 6471 Comm: syz.4.292 Not tainted 6.10.0-syzkaller-11323-g7846b618e0a4 #0 [ 158.796808][ T6471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 158.806885][ T6471] Call Trace: [ 158.810179][ T6471] [ 158.813124][ T6471] dump_stack_lvl+0x241/0x360 [ 158.817886][ T6471] ? __pfx_dump_stack_lvl+0x10/0x10 [ 158.823098][ T6471] ? __pfx__printk+0x10/0x10 [ 158.827718][ T6471] ? snprintf+0xda/0x120 [ 158.832167][ T6471] should_fail_ex+0x3b0/0x4e0 [ 158.836877][ T6471] _copy_to_user+0x2f/0xb0 [ 158.841329][ T6471] simple_read_from_buffer+0xca/0x150 [ 158.846817][ T6471] proc_fail_nth_read+0x1e9/0x250 [ 158.851873][ T6471] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 158.857533][ T6471] ? rw_verify_area+0x520/0x6b0 [ 158.862412][ T6471] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 158.867982][ T6471] vfs_read+0x204/0xbc0 [ 158.872161][ T6471] ? __pfx_lock_release+0x10/0x10 [ 158.877215][ T6471] ? __pfx_vfs_read+0x10/0x10 [ 158.881918][ T6471] ? __fget_files+0x29/0x470 [ 158.886534][ T6471] ? __fget_files+0x3f6/0x470 [ 158.891248][ T6471] ksys_read+0x1a0/0x2c0 [ 158.895528][ T6471] ? __pfx_ksys_read+0x10/0x10 [ 158.900319][ T6471] ? do_syscall_64+0x100/0x230 [ 158.905110][ T6471] ? do_syscall_64+0xb6/0x230 [ 158.909806][ T6471] do_syscall_64+0xf3/0x230 [ 158.914327][ T6471] ? clear_bhb_loop+0x35/0x90 [ 158.919052][ T6471] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.924969][ T6471] RIP: 0033:0x7fa69357463c [ 158.929409][ T6471] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 158.949046][ T6471] RSP: 002b:00007fa694425040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 158.957490][ T6471] RAX: ffffffffffffffda RBX: 00007fa693705f60 RCX: 00007fa69357463c [ 158.965489][ T6471] RDX: 000000000000000f RSI: 00007fa6944250b0 RDI: 0000000000000004 [ 158.973578][ T6471] RBP: 00007fa6944250a0 R08: 0000000000000000 R09: 0000000000000000 [ 158.981576][ T6471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 158.989581][ T6471] R13: 000000000000000b R14: 00007fa693705f60 R15: 00007ffd07b43bf8 [ 158.997615][ T6471] [ 159.149707][ C1] eth0: bad gso: type: 1, size: 1408 [ 159.414881][ T6488] netlink: 4 bytes leftover after parsing attributes in process `syz.1.299'. [ 159.457203][ T6488] Bluetooth: hci3: invalid length 0, exp 2 for type 8 [ 159.712874][ T6486] bond_slave_0: entered promiscuous mode [ 159.718684][ T6486] bond_slave_1: entered promiscuous mode [ 159.731081][ T6482] bond_slave_0: left promiscuous mode [ 159.736560][ T6482] bond_slave_1: left promiscuous mode [ 161.191731][ T6505] bond_slave_0: entered promiscuous mode [ 161.197493][ T6505] bond_slave_1: entered promiscuous mode [ 161.211885][ T6503] bond_slave_0: left promiscuous mode [ 161.217378][ T6503] bond_slave_1: left promiscuous mode [ 161.278982][ T6513] bond_slave_0: entered promiscuous mode [ 161.284712][ T6513] bond_slave_1: entered promiscuous mode [ 161.296243][ T6510] bond_slave_0: left promiscuous mode [ 161.303062][ T6510] bond_slave_1: left promiscuous mode [ 161.379232][ T6519] netdevsim netdevsim1: Direct firmware load for ng failed with error -2 [ 161.426408][ T6519] netdevsim netdevsim1: Falling back to sysfs fallback for: ng [ 161.459768][ T6524] overlayfs: missing 'lowerdir' [ 161.508778][ T6530] FAULT_INJECTION: forcing a failure. [ 161.508778][ T6530] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 161.532898][ T6530] CPU: 0 PID: 6530 Comm: syz.4.307 Not tainted 6.10.0-syzkaller-11323-g7846b618e0a4 #0 [ 161.542589][ T6530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 161.552662][ T6530] Call Trace: [ 161.555968][ T6530] [ 161.558923][ T6530] dump_stack_lvl+0x241/0x360 [ 161.563651][ T6530] ? __pfx_dump_stack_lvl+0x10/0x10 [ 161.568879][ T6530] ? __pfx__printk+0x10/0x10 [ 161.573500][ T6530] ? __pfx_lock_release+0x10/0x10 [ 161.578532][ T6530] should_fail_ex+0x3b0/0x4e0 [ 161.583209][ T6530] _copy_from_user+0x2f/0xe0 [ 161.587976][ T6530] copy_msghdr_from_user+0xae/0x680 [ 161.593170][ T6530] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 161.598980][ T6530] __sys_sendmsg+0x23d/0x3a0 [ 161.603572][ T6530] ? __pfx___sys_sendmsg+0x10/0x10 [ 161.608717][ T6530] ? vfs_write+0x7c4/0xc90 [ 161.613203][ T6530] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 161.619558][ T6530] ? do_syscall_64+0x100/0x230 [ 161.624340][ T6530] ? do_syscall_64+0xb6/0x230 [ 161.629023][ T6530] do_syscall_64+0xf3/0x230 [ 161.633552][ T6530] ? clear_bhb_loop+0x35/0x90 [ 161.638262][ T6530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.644156][ T6530] RIP: 0033:0x7fa693575b59 [ 161.648572][ T6530] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 161.668187][ T6530] RSP: 002b:00007fa6943e3048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 161.676635][ T6530] RAX: ffffffffffffffda RBX: 00007fa693706110 RCX: 00007fa693575b59 [ 161.684612][ T6530] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000003 [ 161.692677][ T6530] RBP: 00007fa6943e30a0 R08: 0000000000000000 R09: 0000000000000000 [ 161.700759][ T6530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 161.708726][ T6530] R13: 000000000000006e R14: 00007fa693706110 R15: 00007ffd07b43bf8 [ 161.716710][ T6530] [ 161.773151][ T6532] netlink: 8 bytes leftover after parsing attributes in process `syz.3.308'. [ 163.904906][ T5089] Bluetooth: hci0: command tx timeout [ 164.298850][ T6556] bond_slave_0: entered promiscuous mode [ 164.304584][ T6556] bond_slave_1: entered promiscuous mode [ 164.471379][ T6543] bond_slave_0: left promiscuous mode [ 164.476900][ T6543] bond_slave_1: left promiscuous mode [ 164.958016][ T6576] bond_slave_0: entered promiscuous mode [ 164.963859][ T6576] bond_slave_1: entered promiscuous mode [ 165.062215][ T6578] bond_slave_0: entered promiscuous mode [ 165.067964][ T6578] bond_slave_1: entered promiscuous mode [ 165.373776][ T6559] bond_slave_0: left promiscuous mode [ 165.379440][ T6559] bond_slave_1: left promiscuous mode [ 165.439307][ T6568] bond_slave_0: left promiscuous mode [ 165.444767][ T6568] bond_slave_1: left promiscuous mode [ 165.775238][ T6595] tunl0: entered promiscuous mode [ 165.789741][ T6595] netlink: 'syz.1.325': attribute type 1 has an invalid length. [ 165.831450][ T6595] netlink: 9 bytes leftover after parsing attributes in process `syz.1.325'. [ 165.998648][ T59] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 166.165111][ T6609] bond_slave_0: entered promiscuous mode [ 166.171087][ T6609] bond_slave_1: entered promiscuous mode [ 166.189925][ T59] usb 3-1: config 0 has an invalid interface descriptor of length 2, skipping [ 166.203718][ T59] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 166.216340][ T59] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 166.234620][ T59] usb 3-1: New USB device found, idVendor=0403, idProduct=ff00, bcdDevice=5c.04 [ 166.244261][ T59] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.255915][ T59] usb 3-1: config 0 descriptor?? [ 166.264680][ T59] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 166.268115][ T5141] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 166.273330][ T59] ftdi_sio ttyUSB0: unknown device type: 0x5c04 [ 166.512455][ T59] usb 3-1: USB disconnect, device number 4 [ 166.523359][ T59] ftdi_sio 3-1:0.0: device disconnected [ 166.549722][ T5141] usb 2-1: config 0 has an invalid interface descriptor of length 2, skipping [ 166.574590][ T5141] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 166.596141][ T5141] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 166.619241][ T5141] usb 2-1: New USB device found, idVendor=0403, idProduct=ff00, bcdDevice=5c.04 [ 166.632707][ T5141] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.645228][ T5141] usb 2-1: config 0 descriptor?? [ 166.660004][ T5141] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 166.669789][ T5141] ftdi_sio ttyUSB0: unknown device type: 0x5c04 [ 166.768336][ T25] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 166.787148][ T6628] bond_slave_0: entered promiscuous mode [ 166.792887][ T6628] bond_slave_1: entered promiscuous mode [ 166.849881][ T6603] bond_slave_0: left promiscuous mode [ 166.855383][ T6603] bond_slave_1: left promiscuous mode [ 166.877378][ T6622] bond_slave_0: left promiscuous mode [ 166.882916][ T6622] bond_slave_1: left promiscuous mode [ 166.959530][ T25] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 166.976242][ T25] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 167.028206][ T25] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 167.046360][ T8] usb 2-1: USB disconnect, device number 7 [ 167.069228][ T8] ftdi_sio 2-1:0.0: device disconnected [ 167.094075][ T25] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 167.114778][ T25] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 167.127237][ T25] usb 4-1: Manufacturer: syz [ 167.137360][ T25] usb 4-1: config 0 descriptor?? [ 167.210395][ T25] igorplugusb 4-1:0.0: incorrect number of endpoints [ 167.831858][ T6639] FAULT_INJECTION: forcing a failure. [ 167.831858][ T6639] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 167.845280][ T6639] CPU: 0 PID: 6639 Comm: syz.4.338 Not tainted 6.10.0-syzkaller-11323-g7846b618e0a4 #0 [ 167.855023][ T6639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 167.865106][ T6639] Call Trace: [ 167.868418][ T6639] [ 167.871456][ T6639] dump_stack_lvl+0x241/0x360 [ 167.876179][ T6639] ? __pfx_dump_stack_lvl+0x10/0x10 [ 167.881414][ T6639] ? __pfx__printk+0x10/0x10 [ 167.886042][ T6639] ? __pfx_lock_release+0x10/0x10 [ 167.891092][ T6639] should_fail_ex+0x3b0/0x4e0 [ 167.895770][ T6639] _copy_from_user+0x2f/0xe0 [ 167.900370][ T6639] copy_msghdr_from_user+0xae/0x680 [ 167.905578][ T6639] ? _parse_integer_limit+0x1b5/0x200 [ 167.910942][ T6639] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 167.916770][ T6639] __sys_sendmmsg+0x374/0x740 [ 167.921455][ T6639] ? __pfx___sys_sendmmsg+0x10/0x10 [ 167.926679][ T6639] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 167.932583][ T6639] ? ksys_write+0x23e/0x2c0 [ 167.937084][ T6639] ? __pfx_lock_release+0x10/0x10 [ 167.942140][ T6639] ? vfs_write+0x7c4/0xc90 [ 167.946556][ T6639] ? __mutex_unlock_slowpath+0x21d/0x750 [ 167.952186][ T6639] ? __pfx_vfs_write+0x10/0x10 [ 167.956961][ T6639] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 167.963025][ T6639] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 167.969353][ T6639] ? do_syscall_64+0x100/0x230 [ 167.974218][ T6639] __x64_sys_sendmmsg+0xa0/0xb0 [ 167.979083][ T6639] do_syscall_64+0xf3/0x230 [ 167.983578][ T6639] ? clear_bhb_loop+0x35/0x90 [ 167.988292][ T6639] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.994204][ T6639] RIP: 0033:0x7fa693575b59 [ 167.998640][ T6639] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 168.018444][ T6639] RSP: 002b:00007fa694425048 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 168.026861][ T6639] RAX: ffffffffffffffda RBX: 00007fa693705f60 RCX: 00007fa693575b59 [ 168.034824][ T6639] RDX: 0000000000000001 RSI: 000000002000cf00 RDI: 0000000000000003 [ 168.042791][ T6639] RBP: 00007fa6944250a0 R08: 0000000000000000 R09: 0000000000000000 [ 168.050758][ T6639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 168.058720][ T6639] R13: 000000000000000b R14: 00007fa693705f60 R15: 00007ffd07b43bf8 [ 168.066781][ T6639] [ 168.093114][ T59] usb 4-1: USB disconnect, device number 11 [ 168.129608][ T6642] Illegal XDP return value 585169739 on prog (id 31) dev N/A, expect packet loss! [ 168.159241][ T25] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 168.231779][ T6647] netlink: 8 bytes leftover after parsing attributes in process `syz.4.341'. [ 168.351314][ T6649] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 168.376251][ T6649] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 168.401004][ T25] usb 3-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 168.426405][ T25] usb 3-1: config 9 has 0 interfaces, different from the descriptor's value: 1 [ 168.436270][ T25] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 168.446132][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.551340][ T6661] bond_slave_0: entered promiscuous mode [ 168.557235][ T6661] bond_slave_1: entered promiscuous mode [ 168.591474][ T6663] kvm: vcpu 0: requested 32 ns lapic timer period limited to 200000 ns [ 168.770460][ T6663] kvm: pic: non byte write [ 168.836885][ T29] audit: type=1326 audit(1721625278.604:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6665 comm="syz.3.345" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1161775b59 code=0x0 [ 168.878891][ T6635] x_tables: ip6_tables: NFQUEUE.2 target: invalid size 8 (kernel) != (user) 0 [ 168.912715][ T25] usb 3-1: USB disconnect, device number 5 [ 168.933772][ T6667] dummy0: entered promiscuous mode [ 168.961335][ T6667] team0: entered promiscuous mode [ 169.018163][ T6667] team_slave_0: entered promiscuous mode [ 169.034651][ T6667] team_slave_1: entered promiscuous mode [ 169.205082][ T6652] bond_slave_0: left promiscuous mode [ 169.210589][ T6652] bond_slave_1: left promiscuous mode [ 169.560560][ T6669] netlink: 28 bytes leftover after parsing attributes in process `syz.1.346'. [ 171.247986][ T8] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 171.311118][ T6706] kvm: vcpu 0: requested 32 ns lapic timer period limited to 200000 ns [ 171.344408][ T6706] kvm: pic: non byte write [ 171.458383][ T8] usb 1-1: Using ep0 maxpacket: 32 [ 171.479354][ T8] usb 1-1: New USB device found, idVendor=07c4, idProduct=a103, bcdDevice=21.23 [ 171.489208][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.497228][ T8] usb 1-1: Product: syz [ 171.504087][ T8] usb 1-1: Manufacturer: syz [ 171.521070][ T8] usb 1-1: SerialNumber: syz [ 171.534605][ T8] usb 1-1: config 0 descriptor?? [ 171.552659][ T8] ums-sddr55 1-1:0.0: USB Mass Storage device detected [ 171.575499][ T6714] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 171.587772][ T8] ums-sddr55 1-1:0.0: Quirks match for vid 07c4 pid a103: 8 [ 171.600569][ T6714] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 171.652529][ T6718] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 171.681207][ T6718] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 172.368005][ T25] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 172.575479][ T25] usb 5-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 172.588144][ T25] usb 5-1: config 9 has 0 interfaces, different from the descriptor's value: 1 [ 172.597259][ T25] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 172.606872][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.688412][ T6729] tipc: Enabled bearer , priority 0 [ 173.061913][ T6727] x_tables: ip6_tables: NFQUEUE.2 target: invalid size 8 (kernel) != (user) 0 [ 173.127321][ T25] usb 5-1: USB disconnect, device number 7 [ 173.990123][ T5087] usb 1-1: USB disconnect, device number 6 [ 174.498061][ T5087] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 174.536678][ T6768] FAULT_INJECTION: forcing a failure. [ 174.536678][ T6768] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 174.550521][ T6768] CPU: 0 PID: 6768 Comm: syz.4.374 Not tainted 6.10.0-syzkaller-11323-g7846b618e0a4 #0 [ 174.551265][ T6767] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 174.560206][ T6768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 174.560223][ T6768] Call Trace: [ 174.560234][ T6768] [ 174.560243][ T6768] dump_stack_lvl+0x241/0x360 [ 174.560272][ T6768] ? __pfx_dump_stack_lvl+0x10/0x10 [ 174.560289][ T6768] ? __pfx__printk+0x10/0x10 [ 174.560314][ T6768] ? __pfx_lock_release+0x10/0x10 [ 174.560337][ T6768] ? vfs_write+0x7c4/0xc90 [ 174.560361][ T6768] should_fail_ex+0x3b0/0x4e0 [ 174.560386][ T6768] _copy_from_user+0x2f/0xe0 [ 174.560412][ T6768] __sys_bpf+0x1a4/0x810 [ 174.624397][ T6768] ? __pfx___sys_bpf+0x10/0x10 [ 174.629198][ T6768] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 174.635189][ T6768] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 174.641666][ T6768] ? do_syscall_64+0x100/0x230 [ 174.646432][ T6768] __x64_sys_bpf+0x7c/0x90 [ 174.650856][ T6768] do_syscall_64+0xf3/0x230 [ 174.655368][ T6768] ? clear_bhb_loop+0x35/0x90 [ 174.660040][ T6768] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.665931][ T6768] RIP: 0033:0x7fa693575b59 [ 174.670345][ T6768] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 174.689962][ T6768] RSP: 002b:00007fa694425048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 174.698373][ T6768] RAX: ffffffffffffffda RBX: 00007fa693705f60 RCX: 00007fa693575b59 [ 174.706333][ T6768] RDX: 0000000000000050 RSI: 0000000020000b80 RDI: 000000000000000a [ 174.714295][ T6768] RBP: 00007fa6944250a0 R08: 0000000000000000 R09: 0000000000000000 [ 174.722253][ T6768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 174.730214][ T6768] R13: 000000000000000b R14: 00007fa693705f60 R15: 00007ffd07b43bf8 [ 174.738201][ T6768] [ 174.907571][ T5087] usb 1-1: Using ep0 maxpacket: 8 [ 175.359796][ T5087] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 175.416005][ T5087] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 175.467993][ T5087] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 175.497919][ T5087] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 175.545260][ T5087] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 175.556641][ T5087] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.626983][ T6779] dvmrp0: entered allmulticast mode [ 175.656196][ T6783] dvmrp0: left allmulticast mode [ 175.934120][ T5087] usb 1-1: usb_control_msg returned -71 [ 175.957689][ T5087] usbtmc 1-1:16.0: can't read capabilities [ 175.968561][ T5183] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 176.071694][ T5087] usb 1-1: USB disconnect, device number 7 [ 176.144753][ T6773] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 176.191732][ T5183] usb 3-1: Using ep0 maxpacket: 32 [ 176.234987][ T5183] usb 3-1: New USB device found, idVendor=07c4, idProduct=a103, bcdDevice=21.23 [ 176.274105][ T5183] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.300776][ T5183] usb 3-1: Product: syz [ 176.305005][ T5183] usb 3-1: Manufacturer: syz [ 176.314110][ T5183] usb 3-1: SerialNumber: syz [ 176.334324][ T5183] usb 3-1: config 0 descriptor?? [ 176.352008][ T5183] ums-sddr55 3-1:0.0: USB Mass Storage device detected [ 176.373515][ T5183] ums-sddr55 3-1:0.0: Quirks match for vid 07c4 pid a103: 8 [ 176.554005][ T59] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 176.628054][ T25] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 176.828044][ T59] usb 5-1: Using ep0 maxpacket: 8 [ 176.834564][ T5089] Bluetooth: hci0: link tx timeout [ 176.840160][ T5089] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 176.856561][ T59] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 176.869122][ T59] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 176.883130][ T59] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 176.911973][ T59] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 176.924049][ T25] usb 4-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 176.941264][ T25] usb 4-1: config 9 has 0 interfaces, different from the descriptor's value: 1 [ 176.954589][ T59] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 176.968479][ T25] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 176.978575][ T59] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 176.988574][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.996582][ T59] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.032925][ T6801] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 177.057099][ T5183] IPVS: starting estimator thread 0... [ 177.087680][ T6801] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 177.148092][ T5102] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 177.158466][ T6802] IPVS: using max 18 ests per chain, 43200 per kthread [ 177.226688][ T59] usb 5-1: GET_CAPABILITIES returned 0 [ 177.232840][ T59] usbtmc 5-1:16.0: can't read capabilities [ 177.360715][ T5102] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 177.380270][ T5102] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 177.403518][ T5102] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.40 [ 177.413003][ T5087] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 177.424733][ T5102] usb 2-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0 [ 177.443330][ T6792] x_tables: ip6_tables: NFQUEUE.2 target: invalid size 8 (kernel) != (user) 0 [ 177.445991][ T59] usb 5-1: USB disconnect, device number 8 [ 177.459673][ T5102] usb 2-1: Manufacturer: syz [ 177.491214][ T25] usb 4-1: USB disconnect, device number 12 [ 177.504836][ T5102] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 177.616479][ T5087] usb 1-1: config 1 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 41487, setting to 1024 [ 177.628601][ T5087] usb 1-1: config 1 interface 0 has no altsetting 0 [ 177.643972][ T5087] usb 1-1: New USB device found, idVendor=046d, idProduct=c08d, bcdDevice= 0.40 [ 177.658362][ T5087] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.666525][ T5087] usb 1-1: Product: syz [ 177.671004][ T5087] usb 1-1: Manufacturer: 悝쐿ꖒ볦峝㏡뒂잢ｮ엤锰㈤鑪展潱ꗙ뺏㏡먡湗ס鎜툆蓈巢阌섦阓૶욁撘⩀⤤章ஐ瀕ᴭꮥ霗곽ⲿ镡⑲쒓л跙ͺ뇁췽 [ 177.690013][ T5087] usb 1-1: SerialNumber: syz [ 177.955975][ T6787] ucma_write: process 248 (syz.1.381) changed security contexts after opening file descriptor, this is not allowed. [ 178.054097][ T59] usb 2-1: USB disconnect, device number 8 [ 178.138611][ T5087] usbhid 1-1:1.0: can't add hid device: -71 [ 178.162551][ T5087] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 178.195524][ T5087] usb 1-1: USB disconnect, device number 8 [ 178.672097][ T6816] netlink: 8 bytes leftover after parsing attributes in process `syz.4.389'. [ 178.710737][ T5183] usb 3-1: USB disconnect, device number 7 [ 178.889625][ T5089] Bluetooth: hci0: command 0x0406 tx timeout [ 179.907198][ T6828] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 179.931747][ T5101] Bluetooth: hci0: unexpected event 0x09 length: 17 > 3 [ 179.937301][ T6834] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 179.977303][ T5101] Bluetooth: hci2: unexpected event 0x09 length: 17 > 3 [ 180.137695][ T6842] netdevsim netdevsim2: Direct firmware load for ng failed with error -2 [ 180.176259][ T6842] netdevsim netdevsim2: Falling back to sysfs fallback for: ng [ 180.677970][ T5087] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 180.882799][ T5087] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 180.898759][ T5087] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 180.909426][ T5087] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 180.919848][ T5087] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.937570][ T6853] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 181.498011][ T5101] Bluetooth: hci0: command 0x0406 tx timeout [ 181.504582][ T5101] Bluetooth: hci3: command 0x0406 tx timeout [ 181.514416][ T5101] Bluetooth: hci2: command 0x0406 tx timeout [ 183.082468][ T5183] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 183.086665][ T6873] FAULT_INJECTION: forcing a failure. [ 183.086665][ T6873] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 183.104539][ T6873] CPU: 1 PID: 6873 Comm: syz.3.403 Not tainted 6.10.0-syzkaller-11323-g7846b618e0a4 #0 [ 183.114292][ T6873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 183.124377][ T6873] Call Trace: [ 183.127661][ T6873] [ 183.130585][ T6873] dump_stack_lvl+0x241/0x360 [ 183.135264][ T6873] ? __pfx_dump_stack_lvl+0x10/0x10 [ 183.140446][ T6873] ? __pfx__printk+0x10/0x10 [ 183.145036][ T6873] ? __pfx_lock_release+0x10/0x10 [ 183.150144][ T6873] ? vfs_write+0x7c4/0xc90 [ 183.154556][ T6873] should_fail_ex+0x3b0/0x4e0 [ 183.159314][ T6873] _copy_from_user+0x2f/0xe0 [ 183.163914][ T6873] __sys_bpf+0x1a4/0x810 [ 183.168159][ T6873] ? __pfx___sys_bpf+0x10/0x10 [ 183.172932][ T6873] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 183.179000][ T6873] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 183.185326][ T6873] ? do_syscall_64+0x100/0x230 [ 183.190083][ T6873] __x64_sys_bpf+0x7c/0x90 [ 183.194495][ T6873] do_syscall_64+0xf3/0x230 [ 183.199422][ T6873] ? clear_bhb_loop+0x35/0x90 [ 183.204086][ T6873] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.209972][ T6873] RIP: 0033:0x7f1161775b59 [ 183.214467][ T6873] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 183.234069][ T6873] RSP: 002b:00007f1162533048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 183.242624][ T6873] RAX: ffffffffffffffda RBX: 00007f1161905f60 RCX: 00007f1161775b59 [ 183.250581][ T6873] RDX: 0000000000000010 RSI: 0000000020000200 RDI: 0000000000000008 [ 183.258538][ T6873] RBP: 00007f11625330a0 R08: 0000000000000000 R09: 0000000000000000 [ 183.266495][ T6873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 183.274453][ T6873] R13: 000000000000000b R14: 00007f1161905f60 R15: 00007ffc91698a38 [ 183.282429][ T6873] [ 183.336267][ T6874] netlink: 8 bytes leftover after parsing attributes in process `syz.4.402'. [ 183.490008][ T29] audit: type=1326 audit(1721625293.254:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6875 comm="syz.3.405" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1161775b59 code=0x0 [ 183.514908][ T5141] usb 1-1: USB disconnect, device number 9 [ 183.521913][ T5183] usb 3-1: Using ep0 maxpacket: 8 [ 183.553915][ T5183] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 183.588506][ T5183] usb 3-1: config 0 has no interface number 0 [ 183.617799][ T5183] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 183.665807][ T5183] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 183.689668][ T5183] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.714452][ T5183] usb 3-1: config 0 descriptor?? [ 183.734840][ T29] audit: type=1326 audit(1721625293.504:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6884 comm="syz.1.406" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7041575b59 code=0x0 [ 183.762990][ T5183] iowarrior 3-1:0.1: no interrupt-in endpoint found [ 183.928352][ T6889] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 184.128109][ T5087] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 184.338054][ T5087] usb 2-1: Using ep0 maxpacket: 16 [ 184.344236][ T5183] usb 3-1: USB disconnect, device number 8 [ 184.357582][ T5087] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 184.357696][ T5087] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.357774][ T5087] usb 2-1: Product: syz [ 184.358091][ T5087] usb 2-1: Manufacturer: syz [ 184.358136][ T5087] usb 2-1: SerialNumber: syz [ 184.363654][ T5087] usb 2-1: config 0 descriptor?? [ 184.546176][ T5103] Bluetooth: hci5: unexpected event 0x09 length: 17 > 3 [ 184.876427][ T6887] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.896927][ T6887] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.962749][ T6887] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.998774][ T6887] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.139197][ T5087] dvb_usb_dtv5100 2-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -110 [ 185.152542][ T6900] netdevsim netdevsim0: Direct firmware load for ng failed with error -2 [ 185.169401][ T6900] netdevsim netdevsim0: Falling back to sysfs fallback for: ng [ 185.297224][ T6897] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 185.681765][ T6915] netlink: 20 bytes leftover after parsing attributes in process `syz.3.414'. [ 187.437525][ T5168] usb 2-1: USB disconnect, device number 9 [ 187.445854][ T6929] syz.2.417: attempt to access beyond end of device [ 187.445854][ T6929] loop2: rw=0, sector=2, nr_sectors = 2 limit=0 [ 187.487084][ T6929] syz.2.417: attempt to access beyond end of device [ 187.487084][ T6929] loop2: rw=0, sector=0, nr_sectors = 2 limit=0 [ 187.500049][ T6929] syz.2.417: attempt to access beyond end of device [ 187.500049][ T6929] loop2: rw=0, sector=0, nr_sectors = 2 limit=0 [ 187.540280][ T6929] syz.2.417: attempt to access beyond end of device [ 187.540280][ T6929] loop2: rw=0, sector=18, nr_sectors = 2 limit=0 [ 187.559487][ T6929] syz.2.417: attempt to access beyond end of device [ 187.559487][ T6929] loop2: rw=0, sector=30, nr_sectors = 2 limit=0 [ 187.575641][ T6929] syz.2.417: attempt to access beyond end of device [ 187.575641][ T6929] loop2: rw=0, sector=36, nr_sectors = 2 limit=0 [ 187.589650][ T6929] VFS: unable to find oldfs superblock on device loop2 [ 187.751609][ T6940] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 189.164750][ T5103] Bluetooth: hci2: unexpected event 0x09 length: 17 > 3 [ 189.240226][ T6960] netlink: 4 bytes leftover after parsing attributes in process `syz.4.429'. [ 189.294007][ T6960] Bluetooth: hci3: invalid length 0, exp 2 for type 8 [ 189.463838][ T6961] netdevsim netdevsim2: Direct firmware load for ng failed with error -2 [ 189.472605][ T6961] netdevsim netdevsim2: Falling back to sysfs fallback for: ng [ 189.876063][ T6948] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 189.917488][ T6930] FAULT_INJECTION: forcing a failure. [ 189.917488][ T6930] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 189.998336][ T6930] CPU: 0 PID: 6930 Comm: syz.0.418 Not tainted 6.10.0-syzkaller-11323-g7846b618e0a4 #0 [ 190.008013][ T6930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 190.018079][ T6930] Call Trace: [ 190.021344][ T6930] [ 190.024263][ T6930] dump_stack_lvl+0x241/0x360 [ 190.028934][ T6930] ? __pfx_dump_stack_lvl+0x10/0x10 [ 190.034120][ T6930] ? __pfx__printk+0x10/0x10 [ 190.038787][ T6930] ? check_stack_object+0x62/0x90 [ 190.043795][ T6930] should_fail_ex+0x3b0/0x4e0 [ 190.048462][ T6930] _copy_to_user+0x2f/0xb0 [ 190.052867][ T6930] simple_read_from_buffer+0xca/0x150 [ 190.058227][ T6930] proc_fail_nth_read+0x1e9/0x250 [ 190.063239][ T6930] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 190.068771][ T6930] ? rw_verify_area+0x520/0x6b0 [ 190.073604][ T6930] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 190.079140][ T6930] vfs_read+0x204/0xbc0 [ 190.083279][ T6930] ? __pfx_lock_release+0x10/0x10 [ 190.088308][ T6930] ? __pfx_vfs_read+0x10/0x10 [ 190.092994][ T6930] ? __fget_files+0x29/0x470 [ 190.097662][ T6930] ? __fget_files+0x3f6/0x470 [ 190.102342][ T6930] ksys_read+0x1a0/0x2c0 [ 190.106602][ T6930] ? irqentry_exit+0x63/0x90 [ 190.111173][ T6930] ? lockdep_hardirqs_on+0x99/0x150 [ 190.116366][ T6930] ? __pfx_ksys_read+0x10/0x10 [ 190.121124][ T6930] ? arch_syscall_is_vdso_sigreturn+0x125/0x1a0 [ 190.127367][ T6930] ? syscall_user_dispatch+0x4e/0x90 [ 190.132645][ T6930] do_syscall_64+0xf3/0x230 [ 190.137141][ T6930] ? clear_bhb_loop+0x35/0x90 [ 190.141813][ T6930] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.147700][ T6930] RIP: 0033:0x7ffb0257463c [ 190.152105][ T6930] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 190.171716][ T6930] RSP: 002b:00007ffb03300040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 190.180221][ T6930] RAX: ffffffffffffffda RBX: 00007ffb02705f60 RCX: 00007ffb0257463c [ 190.188184][ T6930] RDX: 000000000000000f RSI: 00007ffb033000b0 RDI: 0000000000000003 [ 190.196145][ T6930] RBP: 00007ffb033000a0 R08: 0000000000000000 R09: 0000000000000000 [ 190.204109][ T6930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 190.212076][ T6930] R13: 000000000000000b R14: 00007ffb02705f60 R15: 00007ffcdbb07518 [ 190.220056][ T6930] [ 190.281021][ T6972] sctp: [Deprecated]: syz.4.432 (pid 6972) Use of struct sctp_assoc_value in delayed_ack socket option. [ 190.281021][ T6972] Use struct sctp_sack_info instead [ 192.624964][ T7010] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 192.697756][ T7012] netlink: 56 bytes leftover after parsing attributes in process `syz.0.442'. [ 192.768178][ T7016] netlink: 108 bytes leftover after parsing attributes in process `syz.4.443'. [ 192.907275][ T7024] FAULT_INJECTION: forcing a failure. [ 192.907275][ T7024] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 192.920509][ T7024] CPU: 0 PID: 7024 Comm: syz.1.445 Not tainted 6.10.0-syzkaller-11323-g7846b618e0a4 #0 [ 192.930159][ T7024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 192.940204][ T7024] Call Trace: [ 192.943474][ T7024] [ 192.946398][ T7024] dump_stack_lvl+0x241/0x360 [ 192.951075][ T7024] ? __pfx_dump_stack_lvl+0x10/0x10 [ 192.956271][ T7024] ? __pfx__printk+0x10/0x10 [ 192.960864][ T7024] ? __pfx_lock_release+0x10/0x10 [ 192.965891][ T7024] should_fail_ex+0x3b0/0x4e0 [ 192.970656][ T7024] _copy_from_user+0x2f/0xe0 [ 192.975247][ T7024] ucma_write+0x183/0x430 [ 192.979577][ T7024] ? __pfx_ucma_write+0x10/0x10 [ 192.984416][ T7024] ? bpf_lsm_file_permission+0x9/0x10 [ 192.989789][ T7024] ? rw_verify_area+0x1d2/0x6b0 [ 192.994651][ T7024] ? __pfx_ucma_write+0x10/0x10 [ 192.999506][ T7024] vfs_write+0x2a2/0xc90 [ 193.003838][ T7024] ? __pfx_vfs_write+0x10/0x10 [ 193.008596][ T7024] ? __fget_files+0x29/0x470 [ 193.013196][ T7024] ? __fget_files+0x3f6/0x470 [ 193.017869][ T7024] ? __fget_files+0x29/0x470 [ 193.022461][ T7024] ksys_write+0x1a0/0x2c0 [ 193.026794][ T7024] ? __pfx_ksys_write+0x10/0x10 [ 193.031641][ T7024] ? do_syscall_64+0x100/0x230 [ 193.036403][ T7024] ? do_syscall_64+0xb6/0x230 [ 193.041069][ T7024] do_syscall_64+0xf3/0x230 [ 193.045559][ T7024] ? clear_bhb_loop+0x35/0x90 [ 193.050230][ T7024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.056116][ T7024] RIP: 0033:0x7f7041575b59 [ 193.060534][ T7024] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 193.080151][ T7024] RSP: 002b:00007f704232c048 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 193.088570][ T7024] RAX: ffffffffffffffda RBX: 00007f7041706110 RCX: 00007f7041575b59 [ 193.096537][ T7024] RDX: 0000000000000038 RSI: 0000000020000300 RDI: 0000000000000005 [ 193.104503][ T7024] RBP: 00007f704232c0a0 R08: 0000000000000000 R09: 0000000000000000 [ 193.112514][ T7024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 193.120604][ T7024] R13: 000000000000006e R14: 00007f7041706110 R15: 00007ffed08c5268 [ 193.128586][ T7024] [ 194.567984][ T5103] Bluetooth: hci0: command 0x0406 tx timeout [ 194.661136][ T1245] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.718225][ T1245] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.863185][ T5103] Bluetooth: hci0: unexpected event 0x09 length: 17 > 3 [ 194.872090][ T7034] netlink: 8 bytes leftover after parsing attributes in process `syz.3.447'. [ 194.889138][ T7008] delete_channel: no stack [ 195.159224][ T7022] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 195.391373][ T7044] netdevsim netdevsim1: Direct firmware load for ng failed with error -2 [ 195.520570][ T7044] netdevsim netdevsim1: Falling back to sysfs fallback for: ng [ 196.385721][ T7063] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 196.463479][ T7063] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 196.632443][ T7071] netlink: 276 bytes leftover after parsing attributes in process `syz.3.456'. [ 198.258860][ T7084] capability: warning: `syz.3.459' uses deprecated v2 capabilities in a way that may be insecure [ 198.366597][ T7088] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 198.814591][ T7096] FAULT_INJECTION: forcing a failure. [ 198.814591][ T7096] name failslab, interval 1, probability 0, space 0, times 0 [ 198.832961][ T7096] CPU: 0 PID: 7096 Comm: syz.4.462 Not tainted 6.10.0-syzkaller-11323-g7846b618e0a4 #0 [ 198.842614][ T7096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 198.852713][ T7096] Call Trace: [ 198.855989][ T7096] [ 198.858910][ T7096] dump_stack_lvl+0x241/0x360 [ 198.863581][ T7096] ? __pfx_dump_stack_lvl+0x10/0x10 [ 198.868933][ T7096] ? __pfx__printk+0x10/0x10 [ 198.873527][ T7096] ? __pfx___might_resched+0x10/0x10 [ 198.878803][ T7096] should_fail_ex+0x3b0/0x4e0 [ 198.883475][ T7096] should_failslab+0x9/0x20 [ 198.887970][ T7096] __kmalloc_node_noprof+0xdf/0x440 [ 198.893170][ T7096] ? __kvmalloc_node_noprof+0x72/0x190 [ 198.898621][ T7096] ? seq_lseek+0x55/0x240 [ 198.902949][ T7096] __kvmalloc_node_noprof+0x72/0x190 [ 198.908310][ T7096] traverse+0xd6/0x550 [ 198.912370][ T7096] ? debugfs_file_get+0x4cc/0x630 [ 198.917401][ T7096] ? __pfx_debugfs_file_get+0x10/0x10 [ 198.922763][ T7096] seq_lseek+0x129/0x240 [ 198.926995][ T7096] full_proxy_llseek+0x10b/0x1c0 [ 198.931937][ T7096] __x64_sys_lseek+0x153/0x1e0 [ 198.936722][ T7096] do_syscall_64+0xf3/0x230 [ 198.941247][ T7096] ? clear_bhb_loop+0x35/0x90 [ 198.945930][ T7096] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.951811][ T7096] RIP: 0033:0x7fa693575b59 [ 198.956306][ T7096] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 198.976169][ T7096] RSP: 002b:00007fa694425048 EFLAGS: 00000246 ORIG_RAX: 0000000000000008 [ 198.984579][ T7096] RAX: ffffffffffffffda RBX: 00007fa693705f60 RCX: 00007fa693575b59 [ 198.992551][ T7096] RDX: 0000000000000000 RSI: 0000000000000851 RDI: 0000000000000007 [ 199.000620][ T7096] RBP: 00007fa6944250a0 R08: 0000000000000000 R09: 0000000000000000 [ 199.008678][ T7096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 199.016650][ T7096] R13: 000000000000000b R14: 00007fa693705f60 R15: 00007ffd07b43bf8 [ 199.024630][ T7096] [ 199.042099][ T7095] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 199.259291][ T7100] 9pnet_fd: Insufficient options for proto=fd [ 199.391754][ T5103] Bluetooth: hci0: unexpected event 0x09 length: 17 > 3 [ 199.668280][ T7116] netdevsim netdevsim1: Direct firmware load for ng failed with error -2 [ 199.714646][ T7116] netdevsim netdevsim1: Falling back to sysfs fallback for: ng [ 200.176476][ T7091] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 201.478155][ T5168] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 201.695561][ T7130] rtc_cmos 00:00: Alarms can be up to one day in the future [ 201.710136][ T7136] netlink: 276 bytes leftover after parsing attributes in process `syz.1.474'. [ 201.768063][ T5168] usb 5-1: Using ep0 maxpacket: 32 [ 201.778946][ T5168] usb 5-1: New USB device found, idVendor=07c4, idProduct=a103, bcdDevice=21.23 [ 201.798197][ T5168] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.806320][ T5168] usb 5-1: Product: syz [ 201.848182][ T5168] usb 5-1: Manufacturer: syz [ 201.852823][ T5168] usb 5-1: SerialNumber: syz [ 201.908977][ T5168] usb 5-1: config 0 descriptor?? [ 201.947260][ T5168] ums-sddr55 5-1:0.0: USB Mass Storage device detected [ 202.036512][ T5168] ums-sddr55 5-1:0.0: Quirks match for vid 07c4 pid a103: 8 [ 202.063387][ T7144] 9pnet_fd: Insufficient options for proto=fd [ 202.206879][ T8] rtc_cmos 00:00: Alarms can be up to one day in the future [ 202.250949][ T8] rtc_cmos 00:00: Alarms can be up to one day in the future [ 202.416685][ T8] rtc_cmos 00:00: Alarms can be up to one day in the future [ 202.538231][ T8] rtc_cmos 00:00: Alarms can be up to one day in the future [ 202.545692][ T8] rtc rtc0: __rtc_set_alarm: err=-22 [ 202.919710][ T7156] netdevsim netdevsim3: Direct firmware load for ng failed with error -2 [ 202.940165][ T7156] netdevsim netdevsim3: Falling back to sysfs fallback for: ng [ 203.877311][ T5103] Bluetooth: hci0: unexpected event 0x09 length: 17 > 3 [ 204.064608][ T5102] usb 5-1: USB disconnect, device number 9 [ 204.194975][ T7186] netdevsim netdevsim1: Direct firmware load for ng failed with error -2 [ 204.207769][ T7186] netdevsim netdevsim1: Falling back to sysfs fallback for: ng [ 204.634580][ T7190] rtc_cmos 00:00: Alarms can be up to one day in the future [ 204.757640][ T7188] rtc_cmos 00:00: Alarms can be up to one day in the future [ 204.867986][ T5102] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 205.257931][ T5102] usb 5-1: Using ep0 maxpacket: 16 [ 205.260051][ T5168] rtc_cmos 00:00: Alarms can be up to one day in the future [ 205.267126][ T5102] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 205.287442][ T5102] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.297566][ T5102] usb 5-1: Product: syz [ 205.308061][ T5102] usb 5-1: Manufacturer: syz [ 205.315059][ T5102] usb 5-1: SerialNumber: syz [ 205.463648][ T5102] r8152-cfgselector 5-1: Unknown version 0x0000 [ 205.474948][ T5102] r8152-cfgselector 5-1: config 0 descriptor?? [ 205.570531][ T5168] rtc_cmos 00:00: Alarms can be up to one day in the future [ 205.605368][ T5168] rtc_cmos 00:00: Alarms can be up to one day in the future [ 205.656795][ T5168] rtc_cmos 00:00: Alarms can be up to one day in the future [ 205.724109][ T5168] rtc rtc0: __rtc_set_alarm: err=-22 [ 205.734331][ T7200] netlink: 28 bytes leftover after parsing attributes in process `syz.1.492'. [ 205.768634][ T7184] netlink: 'syz.4.488': attribute type 25 has an invalid length. [ 205.788124][ T7184] netlink: 'syz.4.488': attribute type 7 has an invalid length. [ 205.858641][ T5102] r8152-cfgselector 5-1: Unknown version 0x0000 [ 205.893279][ T5102] r8152-cfgselector 5-1: bad CDC descriptors [ 205.962680][ T5102] r8152-cfgselector 5-1: USB disconnect, device number 10 [ 207.115699][ T7226] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 207.213969][ T7226] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 207.298659][ T5168] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 207.416963][ T5103] Bluetooth: hci5: unexpected event 0x09 length: 17 > 3 [ 207.497910][ T5168] usb 3-1: Using ep0 maxpacket: 32 [ 207.543342][ T5168] usb 3-1: New USB device found, idVendor=07c4, idProduct=a103, bcdDevice=21.23 [ 207.567398][ T5168] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.579128][ T5168] usb 3-1: Product: syz [ 207.585089][ T5168] usb 3-1: Manufacturer: syz [ 207.602299][ T7238] netdevsim netdevsim0: Direct firmware load for ng failed with error -2 [ 207.602869][ T5168] usb 3-1: SerialNumber: syz [ 207.616511][ T7238] netdevsim netdevsim0: Falling back to sysfs fallback for: ng [ 207.633375][ T5168] usb 3-1: config 0 descriptor?? [ 207.646968][ T5168] ums-sddr55 3-1:0.0: USB Mass Storage device detected [ 207.661563][ T5168] ums-sddr55 3-1:0.0: Quirks match for vid 07c4 pid a103: 8 [ 208.632949][ T7248] mmap: syz.1.504 (7248) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 209.018968][ T7251] rtc_cmos 00:00: Alarms can be up to one day in the future [ 209.046946][ T7254] netlink: 28 bytes leftover after parsing attributes in process `syz.0.506'. [ 209.058151][ T5103] Bluetooth: hci5: command tx timeout [ 209.081720][ T7250] rtc_cmos 00:00: Alarms can be up to one day in the future [ 209.159791][ T5168] rtc_cmos 00:00: Alarms can be up to one day in the future [ 209.195879][ T5168] rtc_cmos 00:00: Alarms can be up to one day in the future [ 209.208599][ T5168] rtc_cmos 00:00: Alarms can be up to one day in the future [ 209.216671][ T5168] rtc_cmos 00:00: Alarms can be up to one day in the future [ 209.226567][ T5168] rtc rtc0: __rtc_set_alarm: err=-22 [ 210.107760][ T7266] netlink: 4 bytes leftover after parsing attributes in process `syz.3.511'. [ 210.141347][ T5102] usb 3-1: USB disconnect, device number 9 [ 210.161330][ T7266] Bluetooth: hci3: invalid length 0, exp 2 for type 8 [ 210.563129][ C1] eth0: bad gso: type: 1, size: 1408 [ 210.597195][ T5103] Bluetooth: hci5: unexpected event 0x09 length: 17 > 3 [ 210.688150][ T5102] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 210.726609][ T7286] netdevsim netdevsim0: Direct firmware load for ng failed with error -2 [ 210.746846][ T7286] netdevsim netdevsim0: Falling back to sysfs fallback for: ng [ 210.897931][ T5102] usb 3-1: Using ep0 maxpacket: 16 [ 210.916241][ T5102] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 210.955858][ T5102] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.964918][ T5102] usb 3-1: Product: syz [ 210.970489][ T5102] usb 3-1: Manufacturer: syz [ 210.975205][ T5102] usb 3-1: SerialNumber: syz [ 210.985196][ T5102] r8152-cfgselector 3-1: Unknown version 0x0000 [ 210.992195][ T5102] r8152-cfgselector 3-1: config 0 descriptor?? [ 211.037951][ T5087] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 211.267062][ T7272] netlink: 'syz.2.512': attribute type 25 has an invalid length. [ 211.288422][ T7272] netlink: 'syz.2.512': attribute type 7 has an invalid length. [ 211.338635][ T5087] usb 5-1: device descriptor read/64, error -71 [ 211.405571][ T5102] r8152-cfgselector 3-1: Unknown version 0x0000 [ 211.416935][ T5102] r8152-cfgselector 3-1: bad CDC descriptors [ 211.429222][ T5102] r8152-cfgselector 3-1: USB disconnect, device number 10 [ 211.668265][ T5087] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 211.730916][ T7298] FAULT_INJECTION: forcing a failure. [ 211.730916][ T7298] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 211.752797][ T7298] CPU: 1 PID: 7298 Comm: syz.3.521 Not tainted 6.10.0-syzkaller-11323-g7846b618e0a4 #0 [ 211.762457][ T7298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 211.772534][ T7298] Call Trace: [ 211.775832][ T7298] [ 211.778775][ T7298] dump_stack_lvl+0x241/0x360 [ 211.783484][ T7298] ? __pfx_dump_stack_lvl+0x10/0x10 [ 211.788708][ T7298] ? __pfx__printk+0x10/0x10 [ 211.793333][ T7298] ? __pfx_lock_release+0x10/0x10 [ 211.798385][ T7298] should_fail_ex+0x3b0/0x4e0 [ 211.803084][ T7298] _copy_from_user+0x2f/0xe0 [ 211.807692][ T7298] copy_msghdr_from_user+0xae/0x680 [ 211.812915][ T7298] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 211.818745][ T7298] __sys_sendmsg+0x23d/0x3a0 [ 211.823338][ T7298] ? __pfx___sys_sendmsg+0x10/0x10 [ 211.828444][ T7298] ? vfs_write+0x7c4/0xc90 [ 211.832972][ T7298] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 211.839301][ T7298] ? do_syscall_64+0x100/0x230 [ 211.844056][ T7298] ? do_syscall_64+0xb6/0x230 [ 211.848726][ T7298] do_syscall_64+0xf3/0x230 [ 211.853306][ T7298] ? clear_bhb_loop+0x35/0x90 [ 211.857987][ T7298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.863886][ T7298] RIP: 0033:0x7f1161775b59 [ 211.868298][ T7298] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 211.887893][ T7298] RSP: 002b:00007f1162533048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 211.896304][ T7298] RAX: ffffffffffffffda RBX: 00007f1161905f60 RCX: 00007f1161775b59 [ 211.904266][ T7298] RDX: 0000000000000000 RSI: 0000000020000580 RDI: 0000000000000004 [ 211.912233][ T7298] RBP: 00007f11625330a0 R08: 0000000000000000 R09: 0000000000000000 [ 211.920197][ T7298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 211.928157][ T7298] R13: 000000000000000b R14: 00007f1161905f60 R15: 00007ffc91698a38 [ 211.936156][ T7298] [ 212.008035][ T5087] usb 5-1: device descriptor read/64, error -71 [ 212.090814][ T7303] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 212.129643][ T5087] usb usb5-port1: attempt power cycle [ 212.161480][ T7303] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 212.528027][ T25] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 212.568021][ T5087] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 212.609412][ T5087] usb 5-1: device descriptor read/8, error -71 [ 212.621077][ T5183] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 212.635001][ T7315] netlink: 8 bytes leftover after parsing attributes in process `syz.0.527'. [ 212.726950][ T25] usb 2-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 212.748367][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.757107][ T25] usb 2-1: Product: syz [ 212.762616][ T25] usb 2-1: Manufacturer: syz [ 212.768600][ T25] usb 2-1: SerialNumber: syz [ 212.778330][ T25] usb 2-1: config 0 descriptor?? [ 212.798248][ T5103] Bluetooth: hci6: urb ffff88801c2b6b00 submission failed (2) [ 212.858493][ T5183] usb 3-1: Using ep0 maxpacket: 32 [ 212.877625][ T5183] usb 3-1: New USB device found, idVendor=07c4, idProduct=a103, bcdDevice=21.23 [ 212.888793][ T5183] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.891282][ T5087] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 212.900875][ T5183] usb 3-1: Product: syz [ 212.912961][ T5183] usb 3-1: Manufacturer: syz [ 212.932796][ T5183] usb 3-1: SerialNumber: syz [ 212.960228][ T5087] usb 5-1: device descriptor read/8, error -71 [ 212.972996][ T5183] usb 3-1: config 0 descriptor?? [ 212.989686][ T5183] ums-sddr55 3-1:0.0: USB Mass Storage device detected [ 213.012231][ T5183] ums-sddr55 3-1:0.0: Quirks match for vid 07c4 pid a103: 8 [ 213.078683][ T5087] usb usb5-port1: unable to enumerate USB device [ 213.632786][ T7323] netlink: 276 bytes leftover after parsing attributes in process `syz.3.529'. [ 214.134339][ T7327] 9pnet_fd: Insufficient options for proto=fd [ 214.444298][ T7332] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 214.521045][ T7332] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 214.987325][ T5103] Bluetooth: hci5: unexpected event 0x09 length: 17 > 3 [ 215.173379][ T5087] usb 2-1: USB disconnect, device number 10 [ 215.262205][ T7349] netdevsim netdevsim0: Direct firmware load for ng failed with error -2 [ 215.274312][ T7349] netdevsim netdevsim0: Falling back to sysfs fallback for: ng [ 215.339815][ T5168] usb 3-1: USB disconnect, device number 11 [ 216.319795][ T5183] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 216.545565][ T5183] usb 3-1: Using ep0 maxpacket: 32 [ 216.678312][ T5183] usb 3-1: New USB device found, idVendor=07c4, idProduct=a103, bcdDevice=21.23 [ 216.705945][ T5183] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.721309][ T5103] Bluetooth: hci5: unexpected event 0x09 length: 17 > 3 [ 216.740968][ T5183] usb 3-1: Product: syz [ 216.763993][ T5183] usb 3-1: Manufacturer: syz [ 216.774553][ T5183] usb 3-1: SerialNumber: syz [ 216.798767][ T5183] usb 3-1: config 0 descriptor?? [ 216.805844][ T5183] ums-sddr55 3-1:0.0: USB Mass Storage device detected [ 216.826325][ T5183] ums-sddr55 3-1:0.0: Quirks match for vid 07c4 pid a103: 8 [ 217.041551][ T7376] 9pnet_fd: Insufficient options for proto=fd [ 217.106860][ T7377] netdevsim netdevsim0: Direct firmware load for ng failed with error -2 [ 217.131899][ T7377] netdevsim netdevsim0: Falling back to sysfs fallback for: ng [ 218.161790][ T7393] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 218.198997][ T7393] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 218.795655][ T5103] Bluetooth: hci5: command tx timeout [ 218.925039][ T7395] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 218.940337][ T7395] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 219.337957][ T25] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 219.600829][ T25] usb 2-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 219.627976][ T25] usb 2-1: config 9 has 0 interfaces, different from the descriptor's value: 1 [ 219.666500][ T25] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 219.690518][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.948375][ T7401] usb usb9: usbfs: process 7401 (syz.1.549) did not claim interface 0 before use [ 220.192155][ T7401] x_tables: ip6_tables: NFQUEUE.2 target: invalid size 8 (kernel) != (user) 0 [ 220.233221][ T5103] Bluetooth: hci5: unexpected event 0x09 length: 17 > 3 [ 220.440351][ T7414] 9pnet_fd: Insufficient options for proto=fd [ 220.550804][ T7418] netdevsim netdevsim0: Direct firmware load for ng failed with error -2 [ 220.561054][ T7418] netdevsim netdevsim0: Falling back to sysfs fallback for: ng [ 223.553272][ T25] usb 2-1: USB disconnect, device number 11 [ 223.574268][ T59] usb 3-1: USB disconnect, device number 12 [ 225.205351][ T7435] netlink: 4 bytes leftover after parsing attributes in process `syz.3.560'. [ 225.439066][ T7435] Bluetooth: hci3: invalid length 0, exp 2 for type 8 [ 225.539501][ T7443] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 225.553613][ T7443] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 225.641049][ T7445] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 225.693968][ T7445] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 227.077555][ T7475] netlink: 276 bytes leftover after parsing attributes in process `syz.0.569'. [ 227.289817][ T5103] Bluetooth: hci5: unexpected event 0x09 length: 17 > 3 [ 227.300798][ T59] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 227.501106][ T59] usb 5-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 227.567087][ T59] usb 5-1: config 9 has 0 interfaces, different from the descriptor's value: 1 [ 227.587331][ T7486] netdevsim netdevsim0: Direct firmware load for ng failed with error -2 [ 227.596036][ T7486] netdevsim netdevsim0: Falling back to sysfs fallback for: ng [ 227.607754][ T59] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 227.618664][ T59] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.894514][ T7471] usb usb9: usbfs: process 7471 (syz.4.568) did not claim interface 0 before use [ 228.136041][ T7471] x_tables: ip6_tables: NFQUEUE.2 target: invalid size 8 (kernel) != (user) 0 [ 229.601084][ C1] eth0: bad gso: type: 1, size: 1408 [ 230.464802][ T59] usb 5-1: USB disconnect, device number 15 [ 230.687024][ T7514] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 230.708124][ T7513] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 230.735684][ T7513] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 230.978407][ T7514] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 231.010339][ T7521] netlink: 276 bytes leftover after parsing attributes in process `syz.2.581'. [ 231.430152][ T7531] netlink: 8 bytes leftover after parsing attributes in process `syz.2.585'. [ 232.578972][ T5103] Bluetooth: hci0: unexpected event 0x09 length: 17 > 3 [ 232.878601][ T7552] netdevsim netdevsim1: Direct firmware load for ng failed with error -2 [ 232.924219][ T7552] netdevsim netdevsim1: Falling back to sysfs fallback for: ng [ 233.157961][ T59] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 233.340002][ T59] usb 4-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 233.397999][ T59] usb 4-1: config 9 has 0 interfaces, different from the descriptor's value: 1 [ 233.410662][ T59] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 233.420769][ T59] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.666780][ T7551] usb usb9: usbfs: process 7551 (syz.3.590) did not claim interface 0 before use [ 233.814637][ T7568] netlink: 276 bytes leftover after parsing attributes in process `syz.1.593'. [ 233.918538][ T7551] x_tables: ip6_tables: NFQUEUE.2 target: invalid size 8 (kernel) != (user) 0 [ 233.953745][ T59] usb 4-1: USB disconnect, device number 13 [ 234.726456][ T7582] netlink: 8 bytes leftover after parsing attributes in process `syz.3.598'. [ 234.818011][ T5183] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 234.955729][ T7586] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 234.977990][ T5183] usb 1-1: device descriptor read/64, error -71 [ 234.994230][ T7586] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 235.022374][ T7587] netlink: 8 bytes leftover after parsing attributes in process `syz.1.599'. [ 235.128004][ T5103] Bluetooth: hci5: command tx timeout [ 235.258177][ T5183] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 235.448213][ T5183] usb 1-1: device descriptor read/64, error -71 [ 235.598329][ T5183] usb usb1-port1: attempt power cycle [ 235.627009][ T7593] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 235.686390][ T7593] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 235.829773][ T928] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 235.854969][ T5103] Bluetooth: hci0: unexpected event 0x09 length: 17 > 3 [ 236.018013][ T928] usb 5-1: Using ep0 maxpacket: 32 [ 236.033076][ T5183] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 236.066970][ T928] usb 5-1: New USB device found, idVendor=07c4, idProduct=a103, bcdDevice=21.23 [ 236.093962][ T5183] usb 1-1: device descriptor read/8, error -71 [ 236.101897][ T928] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.121025][ T7600] netdevsim netdevsim1: Direct firmware load for ng failed with error -2 [ 236.135036][ T7600] netdevsim netdevsim1: Falling back to sysfs fallback for: ng [ 236.135987][ T928] usb 5-1: Product: syz [ 236.153486][ T928] usb 5-1: Manufacturer: syz [ 236.164404][ T928] usb 5-1: SerialNumber: syz [ 236.210258][ T928] usb 5-1: config 0 descriptor?? [ 236.243045][ T928] ums-sddr55 5-1:0.0: USB Mass Storage device detected [ 236.283364][ T928] ums-sddr55 5-1:0.0: Quirks match for vid 07c4 pid a103: 8 [ 236.418150][ T5183] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 236.497604][ T5183] usb 1-1: device descriptor read/8, error -71 [ 236.649691][ T5183] usb usb1-port1: unable to enumerate USB device [ 237.648704][ T59] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 237.691159][ T5103] Bluetooth: hci5: unexpected event 0x09 length: 17 > 3 [ 237.809018][ T59] usb 2-1: device descriptor read/64, error -71 [ 237.965124][ T7621] netdevsim netdevsim0: Direct firmware load for ng failed with error -2 [ 238.013032][ T7621] netdevsim netdevsim0: Falling back to sysfs fallback for: ng [ 238.098289][ T59] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 238.297951][ T59] usb 2-1: device descriptor read/64, error -71 [ 238.428360][ T59] usb usb2-port1: attempt power cycle [ 238.571583][ T5183] usb 5-1: USB disconnect, device number 16 [ 238.804897][ T7636] netlink: 8 bytes leftover after parsing attributes in process `syz.4.612'. [ 238.871905][ T59] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 238.930265][ T59] usb 2-1: device descriptor read/8, error -71 [ 239.107353][ T7643] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 239.135419][ T7643] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 239.198303][ T59] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 239.215694][ T7646] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 239.231215][ T7646] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 239.252194][ T59] usb 2-1: device descriptor read/8, error -71 [ 239.388476][ T59] usb usb2-port1: unable to enumerate USB device [ 239.768208][ T5103] Bluetooth: hci5: command tx timeout [ 239.871860][ T7656] netdevsim netdevsim4: Direct firmware load for ng failed with error -2 [ 239.890423][ T7656] netdevsim netdevsim4: Falling back to sysfs fallback for: ng [ 240.575887][ T5103] Bluetooth: hci0: unexpected event 0x09 length: 17 > 3 [ 240.997902][ T8] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 241.208212][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 241.218129][ T8] usb 4-1: New USB device found, idVendor=07c4, idProduct=a103, bcdDevice=21.23 [ 241.237521][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.246023][ T8] usb 4-1: Product: syz [ 241.267336][ T8] usb 4-1: Manufacturer: syz [ 241.282702][ T8] usb 4-1: SerialNumber: syz [ 241.325436][ T8] usb 4-1: config 0 descriptor?? [ 241.349549][ T8] ums-sddr55 4-1:0.0: USB Mass Storage device detected [ 241.410189][ T5103] Bluetooth: hci2: unexpected event 0x09 length: 17 > 3 [ 241.418794][ T8] ums-sddr55 4-1:0.0: Quirks match for vid 07c4 pid a103: 8 [ 241.551312][ T7683] netdevsim netdevsim2: Direct firmware load for ng failed with error -2 [ 241.593788][ T7683] netdevsim netdevsim2: Falling back to sysfs fallback for: ng [ 242.390304][ T7696] netlink: 8 bytes leftover after parsing attributes in process `syz.1.627'. [ 242.652604][ T5103] Bluetooth: hci0: command 0x0406 tx timeout [ 243.210741][ T7708] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 243.252878][ T7708] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 243.268949][ T5103] Bluetooth: hci0: unexpected event 0x09 length: 17 > 3 [ 243.317967][ T59] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 243.451484][ T5103] Bluetooth: hci2: command 0x0406 tx timeout [ 243.469231][ T7716] netdevsim netdevsim1: Direct firmware load for ng failed with error -2 [ 243.478875][ T7716] netdevsim netdevsim1: Falling back to sysfs fallback for: ng [ 243.508087][ T59] usb 5-1: device descriptor read/64, error -71 [ 243.777957][ T59] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 243.960005][ T59] usb 5-1: device descriptor read/64, error -71 [ 244.090042][ T59] usb usb5-port1: attempt power cycle [ 244.446197][ T5168] usb 4-1: USB disconnect, device number 14 [ 244.527041][ T59] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 244.599712][ T59] usb 5-1: device descriptor read/8, error -71 [ 244.908271][ T59] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 244.949074][ T7736] netdevsim netdevsim3: Direct firmware load for ng failed with error -2 [ 244.961439][ T7736] netdevsim netdevsim3: Falling back to sysfs fallback for: ng [ 244.978372][ T59] usb 5-1: device descriptor read/8, error -71 [ 245.118648][ T59] usb usb5-port1: unable to enumerate USB device [ 245.599550][ T59] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 245.708519][ T7743] netlink: 8 bytes leftover after parsing attributes in process `syz.0.642'. [ 245.789906][ T59] usb 3-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 245.801903][ T59] usb 3-1: config 9 has 0 interfaces, different from the descriptor's value: 1 [ 245.824186][ T59] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 245.839093][ T59] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.092779][ T7740] usb usb9: usbfs: process 7740 (syz.2.641) did not claim interface 0 before use [ 246.322414][ T7740] x_tables: ip6_tables: NFQUEUE.2 target: invalid size 8 (kernel) != (user) 0 [ 246.342263][ T59] usb 3-1: USB disconnect, device number 13 [ 246.557499][ T7756] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 246.588565][ T7756] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 247.097458][ T7762] netdevsim netdevsim3: Direct firmware load for ng failed with error -2 [ 247.118794][ T7762] netdevsim netdevsim3: Falling back to sysfs fallback for: ng [ 247.937380][ T5103] Bluetooth: hci5: command 0x0406 tx timeout [ 248.203773][ T5089] Bluetooth: hci0: unexpected event 0x09 length: 17 > 3 [ 248.458818][ T7787] netdevsim netdevsim1: Direct firmware load for ng failed with error -2 [ 248.483542][ T7787] netdevsim netdevsim1: Falling back to sysfs fallback for: ng [ 248.573756][ T7790] netlink: 8 bytes leftover after parsing attributes in process `syz.2.657'. [ 249.607996][ T5137] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 249.749314][ T7804] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 249.802872][ T5137] usb 4-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 249.818791][ T7804] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 249.823671][ T5137] usb 4-1: config 9 has 0 interfaces, different from the descriptor's value: 1 [ 249.842263][ T5137] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 250.021425][ T5137] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.168513][ T5089] Bluetooth: hci2: unexpected event 0x09 length: 17 > 3 [ 250.248947][ T5089] Bluetooth: hci5: command 0x0406 tx timeout [ 250.248955][ T5103] Bluetooth: hci0: command 0x0406 tx timeout [ 250.321014][ T7797] usb usb9: usbfs: process 7797 (syz.3.661) did not claim interface 0 before use [ 250.345926][ T7813] netdevsim netdevsim2: Direct firmware load for ng failed with error -2 [ 250.357648][ T7813] netdevsim netdevsim2: Falling back to sysfs fallback for: ng [ 250.567671][ T7797] x_tables: ip6_tables: NFQUEUE.2 target: invalid size 8 (kernel) != (user) 0 [ 250.583566][ T5137] usb 4-1: USB disconnect, device number 15 [ 251.163941][ T7804] syz.1.664 (7804) used greatest stack depth: 17816 bytes left [ 253.112833][ T7861] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 253.130695][ T7861] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 253.444079][ T5089] Bluetooth: hci5: unexpected event 0x09 length: 17 > 3 [ 253.783515][ T7877] netdevsim netdevsim0: Direct firmware load for ng failed with error -2 [ 253.802402][ T5137] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 253.910321][ T7877] netdevsim netdevsim0: Falling back to sysfs fallback for: ng [ 254.030220][ T5137] usb 3-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 254.051641][ T5137] usb 3-1: config 9 has 0 interfaces, different from the descriptor's value: 1 [ 254.077943][ T5137] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 254.103278][ T5137] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.383776][ T7873] usb usb9: usbfs: process 7873 (syz.2.683) did not claim interface 0 before use [ 254.648030][ T7873] x_tables: ip6_tables: NFQUEUE.2 target: invalid size 8 (kernel) != (user) 0 [ 254.897567][ T5137] usb 3-1: USB disconnect, device number 14 [ 254.975216][ T7894] bond_slave_0: entered promiscuous mode [ 254.980977][ T7894] bond_slave_1: entered promiscuous mode [ 254.991416][ T7892] bond_slave_0: left promiscuous mode [ 254.996820][ T7892] bond_slave_1: left promiscuous mode [ 255.172618][ T7905] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 255.288224][ T5089] Bluetooth: hci2: command 0x0406 tx timeout [ 255.339402][ T7907] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 256.014870][ T7922] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.091281][ T1245] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.097992][ T1245] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.305922][ T7927] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 256.321767][ T7927] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 256.337928][ T5087] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 256.527912][ T5087] usb 5-1: Using ep0 maxpacket: 16 [ 256.541861][ T5087] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 256.557163][ T5087] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.565723][ T5087] usb 5-1: Product: syz [ 256.575971][ T5087] usb 5-1: Manufacturer: syz [ 256.580762][ T5087] usb 5-1: SerialNumber: syz [ 256.599151][ T5087] r8152-cfgselector 5-1: Unknown version 0x0000 [ 256.608155][ T5087] r8152-cfgselector 5-1: config 0 descriptor?? [ 256.704428][ T5089] Bluetooth: hci0: unexpected event 0x09 length: 17 > 3 [ 256.838069][ T7922] netlink: 'syz.4.698': attribute type 25 has an invalid length. [ 256.888101][ T7922] netlink: 'syz.4.698': attribute type 7 has an invalid length. [ 256.942101][ T7939] netdevsim netdevsim1: Direct firmware load for ng failed with error -2 [ 256.955936][ T7939] netdevsim netdevsim1: Falling back to sysfs fallback for: ng [ 256.978764][ T5087] r8152-cfgselector 5-1: Unknown version 0x0000 [ 257.006801][ T5087] r8152-cfgselector 5-1: bad CDC descriptors [ 257.043856][ T5087] r8152-cfgselector 5-1: USB disconnect, device number 21 [ 257.688265][ T7945] bond_slave_0: entered promiscuous mode [ 257.694014][ T7945] bond_slave_1: entered promiscuous mode [ 257.771061][ T7944] bond_slave_0: left promiscuous mode [ 257.776520][ T7944] bond_slave_1: left promiscuous mode [ 258.116577][ T7961] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 258.138038][ T8] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 258.176165][ T7961] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 258.341605][ T8] usb 5-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 258.354707][ T8] usb 5-1: config 9 has 0 interfaces, different from the descriptor's value: 1 [ 258.370109][ T8] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 258.383657][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.878074][ T5168] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 258.906251][ T7955] x_tables: ip6_tables: NFQUEUE.2 target: invalid size 8 (kernel) != (user) 0 [ 258.935857][ T8] usb 5-1: USB disconnect, device number 22 [ 258.969759][ T5089] Bluetooth: hci2: unexpected event 0x09 length: 17 > 3 [ 259.073472][ T5168] usb 2-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 259.104733][ T5168] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.110627][ T7975] netdevsim netdevsim2: Direct firmware load for ng failed with error -2 [ 259.127141][ T5168] usb 2-1: Product: syz [ 259.128126][ T7975] netdevsim netdevsim2: Falling back to sysfs fallback for: ng [ 259.132353][ T5168] usb 2-1: Manufacturer: syz [ 259.143778][ T5168] usb 2-1: SerialNumber: syz [ 259.163055][ T5168] usb 2-1: config 0 descriptor?? [ 259.201333][ T5089] Bluetooth: hci6: urb ffff8880249ce300 submission failed (2) [ 260.664563][ T7994] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 260.725756][ T7994] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 260.968359][ T5089] Bluetooth: hci2: command 0x0406 tx timeout [ 261.691364][ T5137] usb 2-1: USB disconnect, device number 16 [ 262.026522][ T8012] netdevsim netdevsim4: Direct firmware load for ng failed with error -2 [ 262.035237][ T8012] netdevsim netdevsim4: Falling back to sysfs fallback for: ng [ 262.197437][ T8016] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 262.256141][ T8016] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 262.398207][ T8020] netlink: 8 bytes leftover after parsing attributes in process `syz.2.723'. [ 262.804821][ T8026] netdevsim netdevsim3: Direct firmware load for ng failed with error -2 [ 262.818444][ T8026] netdevsim netdevsim3: Falling back to sysfs fallback for: ng [ 265.342510][ T59] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 265.448741][ T8065] netdevsim netdevsim3: Direct firmware load for ng failed with error -2 [ 265.463137][ T8065] netdevsim netdevsim3: Falling back to sysfs fallback for: ng [ 265.568809][ T59] usb 1-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 265.591928][ T59] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.617123][ T59] usb 1-1: Product: syz [ 265.637972][ T59] usb 1-1: Manufacturer: syz [ 265.663040][ T59] usb 1-1: SerialNumber: syz [ 265.690318][ T59] usb 1-1: config 0 descriptor?? [ 265.763567][ T5089] Bluetooth: hci6: urb ffff888029c60000 submission failed (2) [ 265.932685][ T8079] netlink: 8 bytes leftover after parsing attributes in process `syz.4.739'. [ 266.484531][ T8081] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 266.525049][ T8081] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 266.852447][ T8087] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.956659][ T8090] netdevsim netdevsim3: Direct firmware load for ng failed with error -2 [ 266.966215][ T8090] netdevsim netdevsim3: Falling back to sysfs fallback for: ng [ 267.147984][ T8] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 267.360014][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 267.396745][ T8] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 267.424176][ T59] usb 1-1: USB disconnect, device number 14 [ 267.441735][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.467349][ T8] usb 3-1: Product: syz [ 267.495325][ T8] usb 3-1: Manufacturer: syz [ 267.540396][ T8] usb 3-1: SerialNumber: syz [ 267.593439][ T8] r8152-cfgselector 3-1: Unknown version 0x0000 [ 267.636932][ T8] r8152-cfgselector 3-1: config 0 descriptor?? [ 268.763248][ T8] r8152-cfgselector 3-1: Unknown version 0x0000 [ 268.780105][ T8] r8152-cfgselector 3-1: bad CDC descriptors [ 268.797491][ T8] r8152-cfgselector 3-1: USB disconnect, device number 15 [ 270.136203][ C1] eth0: bad gso: type: 1, size: 1408 [ 270.155408][ C1] eth0: bad gso: type: 1, size: 1408 [ 270.329454][ T8122] netlink: 8 bytes leftover after parsing attributes in process `syz.2.754'. [ 271.042628][ T5089] Bluetooth: hci5: unexpected event 0x09 length: 17 > 3 [ 271.166110][ T8135] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 271.208746][ T8135] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 271.293294][ T5137] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 271.321425][ T8138] netdevsim netdevsim0: Direct firmware load for ng failed with error -2 [ 271.330429][ T8138] netdevsim netdevsim0: Falling back to sysfs fallback for: ng [ 271.490818][ T5137] usb 5-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 271.504566][ T5137] usb 5-1: config 9 has 0 interfaces, different from the descriptor's value: 1 [ 271.554567][ T5137] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 271.565452][ T5137] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.690021][ T5168] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 271.898123][ T5168] usb 2-1: Using ep0 maxpacket: 8 [ 271.923472][ T5168] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 271.936406][ T5168] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 271.954641][ T5168] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 271.965966][ T5168] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 272.017328][ T5168] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 272.019584][ T8129] x_tables: ip6_tables: NFQUEUE.2 target: invalid size 8 (kernel) != (user) 0 [ 272.053968][ T5168] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.338918][ T5168] usb 2-1: usb_control_msg returned -71 [ 272.364893][ T5168] usbtmc 2-1:16.0: can't read capabilities [ 272.415131][ T5168] usb 2-1: USB disconnect, device number 17 [ 273.138217][ T5137] usb 5-1: USB disconnect, device number 23 [ 273.665957][ T8161] netdevsim netdevsim3: Direct firmware load for ng failed with error -2 [ 273.674834][ T8161] netdevsim netdevsim3: Falling back to sysfs fallback for: ng [ 273.689792][ C1] eth0: bad gso: type: 1, size: 1408 [ 275.328034][ T8181] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 275.345588][ T8181] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 275.612009][ T8189] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 275.628907][ T8189] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 276.008701][ T8194] netlink: 4 bytes leftover after parsing attributes in process `syz.3.772'. [ 276.079184][ T8194] Bluetooth: hci3: invalid length 0, exp 2 for type 8 [ 276.718867][ T5168] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 277.042189][ T5168] usb 5-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 277.055624][ T5168] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.066328][ T8218] netdevsim netdevsim3: Direct firmware load for ng failed with error -2 [ 277.066405][ T5168] usb 5-1: Product: syz [ 277.079597][ T8218] netdevsim netdevsim3: Falling back to sysfs fallback for: ng [ 277.082349][ T5168] usb 5-1: Manufacturer: syz [ 277.094676][ T5168] usb 5-1: SerialNumber: syz [ 277.108926][ T5168] usb 5-1: config 0 descriptor?? [ 277.317354][ T5089] Bluetooth: hci6: urb ffff88802da47500 submission failed (2) [ 278.081085][ T5137] usb 5-1: USB disconnect, device number 24 [ 278.641435][ T5089] Bluetooth: hci5: unexpected event 0x09 length: 17 > 3 [ 278.885523][ T8235] netlink: 4 bytes leftover after parsing attributes in process `syz.1.784'. [ 278.914153][ T8235] Bluetooth: hci3: invalid length 0, exp 2 for type 8 [ 279.045624][ T8241] netdevsim netdevsim0: Direct firmware load for ng failed with error -2 [ 279.088436][ T8241] netdevsim netdevsim0: Falling back to sysfs fallback for: ng [ 279.253783][ T8249] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 279.323363][ T8249] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 281.475995][ T8276] netlink: 4 bytes leftover after parsing attributes in process `syz.1.798'. [ 281.738230][ T5183] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 281.821636][ T8276] Bluetooth: hci3: invalid length 0, exp 2 for type 8 [ 282.132566][ T5183] usb 1-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 282.167591][ T5183] usb 1-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 282.178777][ T5183] usb 1-1: config 0 interface 0 has no altsetting 0 [ 282.185704][ T5183] usb 1-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00 [ 282.202526][ T5183] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.278482][ T5183] usb 1-1: config 0 descriptor?? [ 282.699357][ T5183] usbhid 1-1:0.0: can't add hid device: -71 [ 282.707929][ T5183] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 282.718843][ T5183] usb 1-1: USB disconnect, device number 15 [ 283.470506][ T8307] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 283.506472][ T8307] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 283.868601][ T8314] tipc: Enabling of bearer rejected, failed to enable media [ 284.486971][ T8321] netdevsim netdevsim4: Direct firmware load for ng failed with error -2 [ 284.496809][ T8321] netdevsim netdevsim4: Falling back to sysfs fallback for: ng [ 285.678023][ T5102] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 286.195770][ T5102] usb 2-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 286.216279][ T5102] usb 2-1: config 9 has 0 interfaces, different from the descriptor's value: 1 [ 286.226893][ T5102] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 286.237925][ T5102] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.568041][ T8334] x_tables: ip6_tables: NFQUEUE.2 target: invalid size 8 (kernel) != (user) 0 [ 287.652508][ T8362] tipc: Enabling of bearer rejected, failed to enable media [ 287.661593][ T5102] usb 2-1: USB disconnect, device number 18 [ 288.034689][ T8370] netlink: 8 bytes leftover after parsing attributes in process `syz.4.824'. [ 288.087952][ T5087] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 288.277946][ T5087] usb 1-1: Using ep0 maxpacket: 16 [ 288.321968][ T5087] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 288.334165][ T5087] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.349104][ T5087] usb 1-1: Product: syz [ 288.356391][ T5087] usb 1-1: Manufacturer: syz [ 288.367743][ T5087] usb 1-1: SerialNumber: syz [ 288.404946][ T5087] r8152-cfgselector 1-1: Unknown version 0x0000 [ 288.412800][ T5087] r8152-cfgselector 1-1: config 0 descriptor?? [ 288.683746][ T8366] netlink: 'syz.0.823': attribute type 25 has an invalid length. [ 288.692327][ T8366] netlink: 'syz.0.823': attribute type 7 has an invalid length. [ 288.769896][ T5087] r8152-cfgselector 1-1: Unknown version 0x0000 [ 288.797101][ T5087] r8152-cfgselector 1-1: bad CDC descriptors [ 288.834744][ T5087] r8152-cfgselector 1-1: USB disconnect, device number 16 [ 289.878019][ T8383] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 289.914153][ T8383] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 289.967611][ T5089] Bluetooth: hci0: unexpected event 0x09 length: 17 > 3 [ 290.050916][ T8391] netdevsim netdevsim1: Direct firmware load for ng failed with error -2 [ 290.080924][ T8391] netdevsim netdevsim1: Falling back to sysfs fallback for: ng [ 290.098333][ T5089] Bluetooth: hci2: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 290.227991][ T8] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 290.775045][ T8] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 290.828582][ T8] usb 4-1: can't read configurations, error -61 [ 290.998106][ T8] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 291.217524][ T8404] tipc: Enabling of bearer rejected, already enabled [ 291.250801][ T8] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 291.271257][ T8] usb 4-1: can't read configurations, error -61 [ 291.286475][ T8] usb usb4-port1: attempt power cycle [ 292.389377][ T8] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 292.390765][ T5103] Bluetooth: hci2: command 0x0406 tx timeout [ 292.414679][ T5089] Bluetooth: hci0: command 0x0406 tx timeout [ 292.480664][ T8] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 292.539278][ T8] usb 4-1: can't read configurations, error -61 [ 292.581328][ T8419] netlink: 8 bytes leftover after parsing attributes in process `syz.1.838'. [ 292.758698][ T8] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 293.002190][ T8] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 293.022019][ T8] usb 4-1: can't read configurations, error -71 [ 293.037188][ T8] usb usb4-port1: unable to enumerate USB device [ 293.166608][ T8430] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 293.216023][ T8430] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 293.754146][ T8442] netlink: 276 bytes leftover after parsing attributes in process `syz.0.845'. [ 293.767419][ T8444] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 293.825932][ T8444] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 294.594226][ T5089] Bluetooth: hci0: unexpected event 0x09 length: 17 > 3 [ 294.797745][ T8458] netdevsim netdevsim1: Direct firmware load for ng failed with error -2 [ 294.953315][ T8458] netdevsim netdevsim1: Falling back to sysfs fallback for: ng [ 296.508093][ T928] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 296.648224][ T5089] Bluetooth: hci0: command 0x0406 tx timeout [ 296.740863][ T928] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 296.754345][ T928] usb 4-1: can't read configurations, error -61 [ 296.889853][ T8486] netlink: 276 bytes leftover after parsing attributes in process `syz.0.857'. [ 296.947945][ T928] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 296.952098][ T5102] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 297.141323][ T928] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 297.149661][ T5102] usb 3-1: config 0 has an invalid interface descriptor of length 2, skipping [ 297.163911][ T928] usb 4-1: can't read configurations, error -61 [ 297.174693][ T5102] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 297.174970][ T928] usb usb4-port1: attempt power cycle [ 297.202528][ T5102] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 297.222937][ T5102] usb 3-1: New USB device found, idVendor=0403, idProduct=ff00, bcdDevice=5c.04 [ 297.234285][ T5102] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.255034][ T5102] usb 3-1: config 0 descriptor?? [ 297.265077][ T5102] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 297.287421][ T5102] ftdi_sio ttyUSB0: unknown device type: 0x5c04 [ 297.499837][ T5102] usb 3-1: USB disconnect, device number 16 [ 297.521784][ T5102] ftdi_sio 3-1:0.0: device disconnected [ 297.536113][ T5089] Bluetooth: hci0: unexpected event 0x09 length: 17 > 3 [ 297.617948][ T928] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 297.672558][ T928] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 297.682336][ T928] usb 4-1: can't read configurations, error -61 [ 297.721448][ T8496] netdevsim netdevsim1: Direct firmware load for ng failed with error -2 [ 297.730736][ T8496] netdevsim netdevsim1: Falling back to sysfs fallback for: ng [ 297.863778][ T928] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 297.923254][ T928] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 297.953752][ T928] usb 4-1: can't read configurations, error -61 [ 297.980641][ T928] usb usb4-port1: unable to enumerate USB device [ 299.530623][ T8515] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 299.568693][ T8515] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 299.960167][ T5089] Bluetooth: hci0: command 0x0406 tx timeout [ 300.806171][ T8524] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 300.846694][ T8524] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 301.937935][ T928] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 302.937969][ T928] usb 4-1: config 0 has an invalid interface descriptor of length 2, skipping [ 303.128855][ T928] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 303.363988][ T928] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 303.564046][ T928] usb 4-1: New USB device found, idVendor=0403, idProduct=ff00, bcdDevice=5c.04 [ 303.627463][ T8565] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 303.643719][ T8565] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 304.289958][ T928] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.308244][ T8567] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 304.322451][ T8567] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 304.340227][ T928] usb 4-1: config 0 descriptor?? [ 304.358170][ T928] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 304.367659][ T928] ftdi_sio ttyUSB0: unknown device type: 0x5c04 [ 304.650218][ T928] usb 4-1: USB disconnect, device number 24 [ 304.662177][ T928] ftdi_sio 4-1:0.0: device disconnected [ 305.407993][ T928] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 305.643937][ T928] usb 1-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 305.702049][ T928] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.724329][ T928] usb 1-1: Product: syz [ 305.759315][ T928] usb 1-1: Manufacturer: syz [ 305.767385][ T928] usb 1-1: SerialNumber: syz [ 305.802300][ T928] usb 1-1: config 0 descriptor?? [ 305.976182][ T5089] Bluetooth: hci6: urb ffff88802c210a00 submission failed (2) [ 307.138314][ T8] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 307.267914][ T59] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 307.328615][ T8] usb 5-1: Using ep0 maxpacket: 16 [ 307.345625][ T8] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 307.366262][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.388780][ T8] usb 5-1: Product: syz [ 307.392989][ T8] usb 5-1: Manufacturer: syz [ 307.397585][ T8] usb 5-1: SerialNumber: syz [ 307.413572][ T8] r8152-cfgselector 5-1: Unknown version 0x0000 [ 307.420363][ T8] r8152-cfgselector 5-1: config 0 descriptor?? [ 307.459871][ T59] usb 3-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 307.485743][ T59] usb 3-1: config 9 has 0 interfaces, different from the descriptor's value: 1 [ 307.512679][ T59] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 307.524281][ T59] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.637275][ T8604] netlink: 'syz.4.891': attribute type 25 has an invalid length. [ 307.666447][ T8604] netlink: 'syz.4.891': attribute type 7 has an invalid length. [ 307.690280][ T8] r8152-cfgselector 5-1: Unknown version 0x0000 [ 307.696718][ T8] r8152-cfgselector 5-1: bad CDC descriptors [ 307.728046][ T8] r8152-cfgselector 5-1: USB disconnect, device number 25 [ 308.003593][ T8609] x_tables: ip6_tables: NFQUEUE.2 target: invalid size 8 (kernel) != (user) 0 [ 308.078196][ T8] usb 1-1: USB disconnect, device number 17 [ 308.194853][ T8621] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 308.210953][ T8621] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 309.954026][ T59] usb 3-1: USB disconnect, device number 17 [ 310.159771][ T8650] netlink: 4 bytes leftover after parsing attributes in process `syz.3.908'. [ 310.175937][ T8650] Bluetooth: hci3: invalid length 0, exp 2 for type 8 [ 310.337896][ T5168] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 310.471520][ T8655] netlink: 8 bytes leftover after parsing attributes in process `syz.0.910'. [ 310.549219][ T5168] usb 5-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 310.577909][ T59] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 310.592247][ T5168] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.605007][ T5168] usb 5-1: Product: syz [ 310.610137][ T5168] usb 5-1: Manufacturer: syz [ 310.615528][ T5168] usb 5-1: SerialNumber: syz [ 310.624678][ T5168] usb 5-1: config 0 descriptor?? [ 310.641568][ T5089] Bluetooth: hci6: urb ffff8880157de500 submission failed (2) [ 310.768026][ T59] usb 4-1: Using ep0 maxpacket: 16 [ 310.786920][ T59] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 310.799610][ T59] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.808151][ T59] usb 4-1: Product: syz [ 310.812340][ T59] usb 4-1: Manufacturer: syz [ 310.818966][ T59] usb 4-1: SerialNumber: syz [ 310.829714][ T59] r8152-cfgselector 4-1: Unknown version 0x0000 [ 310.836982][ T59] r8152-cfgselector 4-1: config 0 descriptor?? [ 310.876832][ T25] usb 5-1: USB disconnect, device number 26 [ 311.055019][ T8652] netlink: 'syz.3.909': attribute type 25 has an invalid length. [ 311.072089][ T8652] netlink: 'syz.3.909': attribute type 7 has an invalid length. [ 311.093753][ T59] r8152-cfgselector 4-1: Unknown version 0x0000 [ 311.109743][ T59] r8152-cfgselector 4-1: bad CDC descriptors [ 311.148034][ T59] r8152-cfgselector 4-1: USB disconnect, device number 25 [ 311.932472][ T5089] Bluetooth: hci2: unexpected event 0x09 length: 17 > 3 [ 313.243180][ T8684] netdevsim netdevsim2: Direct firmware load for ng failed with error -2 [ 313.260916][ T8684] netdevsim netdevsim2: Falling back to sysfs fallback for: ng [ 313.995296][ T5183] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 314.254431][ T5183] usb 1-1: config 0 has an invalid interface descriptor of length 2, skipping [ 314.273788][ T5183] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 314.323616][ T5183] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 314.361815][ T5183] usb 1-1: New USB device found, idVendor=0403, idProduct=ff00, bcdDevice=5c.04 [ 314.391894][ T5183] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.440849][ T5183] usb 1-1: config 0 descriptor?? [ 314.453227][ T5183] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 314.474915][ T5183] ftdi_sio ttyUSB0: unknown device type: 0x5c04 [ 314.476307][ T8710] netlink: 8 bytes leftover after parsing attributes in process `syz.4.927'. [ 314.798828][ T5183] usb 1-1: USB disconnect, device number 18 [ 314.833262][ T5183] ftdi_sio 1-1:0.0: device disconnected [ 315.739664][ T8723] netlink: 8 bytes leftover after parsing attributes in process `syz.2.929'. [ 315.757232][ T8726] netlink: 4 bytes leftover after parsing attributes in process `syz.1.934'. [ 315.772773][ T8726] Bluetooth: hci3: invalid length 0, exp 2 for type 8 [ 315.843483][ T8728] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 315.891813][ T8728] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 315.978054][ T59] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 316.178252][ T59] usb 4-1: Using ep0 maxpacket: 16 [ 316.196133][ T59] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 316.213007][ T59] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.221763][ T59] usb 4-1: Product: syz [ 316.227192][ T59] usb 4-1: Manufacturer: syz [ 316.237632][ T59] usb 4-1: SerialNumber: syz [ 316.263498][ T59] r8152-cfgselector 4-1: Unknown version 0x0000 [ 316.280356][ T59] r8152-cfgselector 4-1: config 0 descriptor?? [ 316.492268][ T8722] netlink: 'syz.3.931': attribute type 25 has an invalid length. [ 316.516126][ T8722] netlink: 'syz.3.931': attribute type 7 has an invalid length. [ 316.536494][ T59] r8152-cfgselector 4-1: Unknown version 0x0000 [ 316.565912][ T59] r8152-cfgselector 4-1: bad CDC descriptors [ 316.606025][ T59] r8152-cfgselector 4-1: USB disconnect, device number 26 [ 317.540166][ T1245] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.546827][ T1245] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.761921][ T8760] netdevsim netdevsim4: Direct firmware load for ng failed with error -2 [ 317.772354][ T8760] netdevsim netdevsim4: Falling back to sysfs fallback for: ng [ 317.824909][ T8759] netlink: 8 bytes leftover after parsing attributes in process `syz.2.942'. [ 318.870133][ T8775] netlink: 4 bytes leftover after parsing attributes in process `syz.2.946'. [ 318.925482][ T8775] Bluetooth: hci3: invalid length 0, exp 2 for type 8 [ 318.956695][ T8776] netlink: 8 bytes leftover after parsing attributes in process `syz.4.948'. [ 319.128244][ T5087] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 319.493039][ T5087] usb 2-1: config 0 has an invalid interface descriptor of length 2, skipping [ 319.502608][ T5087] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 319.533260][ T5087] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 319.564849][ T5087] usb 2-1: New USB device found, idVendor=0403, idProduct=ff00, bcdDevice=5c.04 [ 319.577365][ T5087] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.666421][ T5087] usb 2-1: config 0 descriptor?? [ 319.778149][ T5087] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 319.821412][ T5087] ftdi_sio ttyUSB0: unknown device type: 0x5c04 [ 320.315344][ T8794] netlink: 4 bytes leftover after parsing attributes in process `syz.3.953'. [ 320.329409][ T5087] usb 2-1: USB disconnect, device number 19 [ 320.336458][ T5087] ftdi_sio 2-1:0.0: device disconnected [ 320.343085][ T8794] Bluetooth: hci3: invalid length 0, exp 2 for type 8 [ 320.655916][ T8799] netdevsim netdevsim4: Direct firmware load for ng failed with error -2 [ 321.380219][ T8799] netdevsim netdevsim4: Falling back to sysfs fallback for: ng [ 321.607256][ T5089] Bluetooth: hci2: unexpected event 0x09 length: 17 > 3 [ 322.591775][ T8826] netlink: 8 bytes leftover after parsing attributes in process `syz.3.964'. [ 323.124032][ T5089] Bluetooth: hci2: unexpected event 0x09 length: 17 > 3 [ 323.374451][ T8844] netdevsim netdevsim2: Direct firmware load for ng failed with error -2 [ 323.399766][ T8844] netdevsim netdevsim2: Falling back to sysfs fallback for: ng [ 323.608046][ T5089] Bluetooth: hci2: command 0x0406 tx timeout [ 324.838240][ T8858] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 324.878502][ T8858] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 325.371638][ T8868] netdevsim netdevsim4: Direct firmware load for ng failed with error -2 [ 325.391043][ T8868] netdevsim netdevsim4: Falling back to sysfs fallback for: ng [ 325.568418][ T8873] netlink: 4 bytes leftover after parsing attributes in process `syz.1.977'. [ 325.620869][ T8873] Bluetooth: hci3: invalid length 0, exp 2 for type 8 [ 325.690000][ T5089] Bluetooth: hci2: command 0x0406 tx timeout [ 326.639879][ T8885] netlink: 8 bytes leftover after parsing attributes in process `syz.2.979'. [ 327.800280][ T8895] bond_slave_0: entered promiscuous mode [ 327.806015][ T8895] bond_slave_1: entered promiscuous mode [ 327.911553][ T5089] Bluetooth: hci0: unexpected event 0x09 length: 17 > 3 [ 327.967276][ T8886] bond_slave_0: left promiscuous mode [ 327.979947][ T8886] bond_slave_1: left promiscuous mode [ 328.122512][ T8907] netdevsim netdevsim1: Direct firmware load for ng failed with error -2 [ 328.172910][ T8907] netdevsim netdevsim1: Falling back to sysfs fallback for: ng [ 328.208367][ T928] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 328.411273][ T928] usb 5-1: config 0 has an invalid interface descriptor of length 2, skipping [ 328.436260][ T928] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 328.513277][ T928] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 328.528703][ T928] usb 5-1: New USB device found, idVendor=0403, idProduct=ff00, bcdDevice=5c.04 [ 328.538899][ T928] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.576648][ T928] usb 5-1: config 0 descriptor?? [ 328.648823][ T928] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 328.664899][ T928] ftdi_sio ttyUSB0: unknown device type: 0x5c04 [ 328.927142][ T928] usb 5-1: USB disconnect, device number 27 [ 328.944631][ T928] ftdi_sio 5-1:0.0: device disconnected [ 329.404645][ T8926] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 329.414727][ T8928] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 329.439131][ T8928] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 329.464759][ T8926] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 329.928053][ T5089] Bluetooth: hci0: command 0x0406 tx timeout [ 332.925962][ T8952] bond_slave_0: entered promiscuous mode [ 332.931747][ T8952] bond_slave_1: entered promiscuous mode [ 332.970291][ T8950] bond_slave_0: left promiscuous mode [ 332.975773][ T8950] bond_slave_1: left promiscuous mode [ 333.412598][ T8976] netdevsim netdevsim4: Direct firmware load for ng failed with error -2 [ 333.426158][ T8976] netdevsim netdevsim4: Falling back to sysfs fallback for: ng [ 333.688248][ T5183] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 333.909821][ T5183] usb 1-1: config 0 has an invalid interface descriptor of length 2, skipping [ 333.969101][ T5183] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 333.985004][ T5183] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 334.000850][ T5183] usb 1-1: New USB device found, idVendor=0403, idProduct=ff00, bcdDevice=5c.04 [ 334.034988][ T5183] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.113191][ T5183] usb 1-1: config 0 descriptor?? [ 334.129976][ T5183] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 334.141534][ T5183] ftdi_sio ttyUSB0: unknown device type: 0x5c04 [ 334.169144][ T8985] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 334.222373][ T8985] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 334.259910][ T8987] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 334.294979][ T8987] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 334.349888][ T8990] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1006'. [ 334.371397][ T8990] Bluetooth: hci3: invalid length 0, exp 2 for type 8 [ 334.604592][ T59] usb 1-1: USB disconnect, device number 19 [ 334.622881][ T59] ftdi_sio 1-1:0.0: device disconnected [ 334.805153][ T29] audit: type=1326 audit(1721625444.574:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9000 comm="syz.4.1008" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa693575b59 code=0x0 [ 335.817065][ T9015] bond_slave_0: entered promiscuous mode [ 335.822980][ T9015] bond_slave_1: entered promiscuous mode [ 335.860930][ T9012] bond_slave_0: left promiscuous mode [ 335.866462][ T9012] bond_slave_1: left promiscuous mode [ 336.028261][ T59] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 336.387382][ T59] usb 3-1: config 0 has an invalid interface descriptor of length 2, skipping [ 336.668357][ T59] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 336.685034][ T59] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 336.698789][ T59] usb 3-1: New USB device found, idVendor=0403, idProduct=ff00, bcdDevice=5c.04 [ 336.708580][ T59] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.720698][ T59] usb 3-1: config 0 descriptor?? [ 336.729984][ T59] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 336.739053][ T59] ftdi_sio ttyUSB0: unknown device type: 0x5c04 [ 336.878355][ T9031] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1014'. [ 336.982296][ T5183] usb 3-1: USB disconnect, device number 18 [ 336.997013][ T5183] ftdi_sio 3-1:0.0: device disconnected [ 337.867017][ T5089] Bluetooth: hci2: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 338.067594][ T9049] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 338.078259][ T59] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 338.082509][ T9049] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 338.267977][ T59] usb 4-1: Using ep0 maxpacket: 16 [ 338.288677][ T59] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 338.298337][ T59] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.306917][ T59] usb 4-1: Product: syz [ 338.311922][ T59] usb 4-1: Manufacturer: syz [ 338.317065][ T59] usb 4-1: SerialNumber: syz [ 338.341741][ T9058] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1023'. [ 338.354874][ T59] r8152-cfgselector 4-1: Unknown version 0x0000 [ 338.357170][ T9058] bond_slave_0: entered promiscuous mode [ 338.366877][ T9058] bond_slave_1: entered promiscuous mode [ 338.372987][ T59] r8152-cfgselector 4-1: config 0 descriptor?? [ 338.589872][ T9045] netlink: 'syz.3.1021': attribute type 25 has an invalid length. [ 338.599019][ T9045] netlink: 'syz.3.1021': attribute type 7 has an invalid length. [ 338.609834][ T59] r8152-cfgselector 4-1: Unknown version 0x0000 [ 338.619326][ T59] r8152-cfgselector 4-1: bad CDC descriptors [ 338.647521][ T59] r8152-cfgselector 4-1: USB disconnect, device number 27 [ 338.974980][ T9050] bond_slave_0: left promiscuous mode [ 338.980599][ T9050] bond_slave_1: left promiscuous mode [ 339.904276][ T5183] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 339.931246][ T5089] Bluetooth: hci2: command 0x0406 tx timeout [ 340.081987][ T9084] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1029'. [ 340.121878][ T5183] usb 2-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 340.138284][ T5183] usb 2-1: config 9 has 0 interfaces, different from the descriptor's value: 1 [ 340.148790][ T5183] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 340.158443][ T5183] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.611204][ T9067] x_tables: ip6_tables: NFQUEUE.2 target: invalid size 8 (kernel) != (user) 0 [ 340.672294][ T5183] usb 2-1: USB disconnect, device number 20 [ 340.941833][ T9097] netlink: 292 bytes leftover after parsing attributes in process `syz.2.1035'. [ 341.101844][ T9103] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1036'. [ 341.142101][ T9103] bond_slave_0: entered promiscuous mode [ 341.147900][ T9103] bond_slave_1: entered promiscuous mode [ 341.747527][ T9095] bond_slave_0: left promiscuous mode [ 341.753034][ T9095] bond_slave_1: left promiscuous mode [ 342.010259][ T9111] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 343.417842][ T5168] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 343.524856][ T9157] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1051'. [ 343.544222][ T9157] bond_slave_0: entered promiscuous mode [ 343.550037][ T9157] bond_slave_1: entered promiscuous mode [ 343.623448][ T5168] usb 5-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 343.656039][ T5168] usb 5-1: config 9 has 0 interfaces, different from the descriptor's value: 1 [ 343.676370][ T5168] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 343.689158][ T5168] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.167302][ T9146] x_tables: ip6_tables: NFQUEUE.2 target: invalid size 8 (kernel) != (user) 0 [ 344.185231][ T9151] bond_slave_0: left promiscuous mode [ 344.191236][ T9151] bond_slave_1: left promiscuous mode [ 344.209993][ T5168] usb 5-1: USB disconnect, device number 28 [ 344.371191][ T5089] Bluetooth: hci5: unexpected event 0x09 length: 17 > 3 [ 344.601017][ T9181] netdevsim netdevsim0: Direct firmware load for ng failed with error -2 [ 344.619819][ T9181] netdevsim netdevsim0: Falling back to sysfs fallback for: ng [ 344.701588][ T9185] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 344.722487][ T9185] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 346.078533][ T9208] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1065'. [ 346.124544][ T9208] bond_slave_0: entered promiscuous mode [ 346.130408][ T9208] bond_slave_1: entered promiscuous mode [ 346.408077][ T5089] Bluetooth: hci5: command 0x0406 tx timeout [ 346.698967][ T9200] bond_slave_0: left promiscuous mode [ 346.704445][ T9200] bond_slave_1: left promiscuous mode [ 346.848720][ T9221] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 346.926183][ T5086] bridge0: port 3(syz_tun) entered disabled state [ 346.996962][ T5086] syz_tun (unregistering): left allmulticast mode [ 347.028398][ T5086] syz_tun (unregistering): left promiscuous mode [ 347.034881][ T5086] bridge0: port 3(syz_tun) entered disabled state [ 347.074637][ T5103] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 347.084426][ T5103] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 347.094580][ T5103] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 347.104842][ T5103] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 347.115736][ T5103] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 347.127263][ T5103] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 347.288258][ T928] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 347.366912][ T9233] netdevsim netdevsim3: Direct firmware load for ng failed with error -2 [ 347.388779][ T9233] netdevsim netdevsim3: Falling back to sysfs fallback for: ng [ 347.503778][ T928] usb 1-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 347.516940][ T9240] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 347.538625][ T928] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.546684][ T928] usb 1-1: Product: syz [ 347.556753][ T928] usb 1-1: Manufacturer: syz [ 347.580611][ T928] usb 1-1: SerialNumber: syz [ 347.585823][ T9240] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 347.614828][ T928] usb 1-1: config 0 descriptor?? [ 347.669493][ T5089] Bluetooth: hci6: urb ffff88806875be00 submission failed (2) [ 347.704437][ T9229] chnl_net:caif_netlink_parms(): no params data found [ 347.999072][ T6164] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.156349][ T6164] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.336154][ T9229] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.375062][ T9229] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.386835][ T9229] bridge_slave_0: entered allmulticast mode [ 348.404380][ T9229] bridge_slave_0: entered promiscuous mode [ 348.444638][ T9229] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.479834][ T9229] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.516462][ T9229] bridge_slave_1: entered allmulticast mode [ 348.546114][ T9229] bridge_slave_1: entered promiscuous mode [ 348.736750][ T6164] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.912057][ T9229] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 348.957564][ T6164] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.004743][ T9229] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 349.100200][ T9229] team0: Port device team_slave_0 added [ 349.196040][ T9229] team0: Port device team_slave_1 added [ 349.208660][ T5089] Bluetooth: hci2: command tx timeout [ 349.367430][ T9229] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 349.396297][ T9229] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 349.428490][ T9229] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 349.446342][ T9267] netdevsim netdevsim3: Direct firmware load for ng failed with error -2 [ 349.459962][ T9229] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 349.473531][ T9267] netdevsim netdevsim3: Falling back to sysfs fallback for: ng [ 349.481653][ T9229] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 349.515233][ T9229] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 349.611828][ T6164] bridge_slave_1: left allmulticast mode [ 349.635963][ T6164] bridge_slave_1: left promiscuous mode [ 349.650523][ T6164] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.670452][ T6164] bridge_slave_0: left allmulticast mode [ 349.676420][ T6164] bridge_slave_0: left promiscuous mode [ 349.701151][ T6164] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.931063][ T5168] usb 1-1: USB disconnect, device number 20 [ 350.353995][ T9275] Bluetooth: hci3: invalid length 0, exp 2 for type 8 [ 350.678300][ T6164] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 350.704740][ T6164] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 350.718974][ T6164] bond0 (unregistering): Released all slaves [ 350.739381][ T9274] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1085'. [ 350.850410][ T9229] hsr_slave_0: entered promiscuous mode [ 350.868577][ T5183] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 350.876707][ T9229] hsr_slave_1: entered promiscuous mode [ 350.891483][ T9229] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 350.904994][ T9229] Cannot create hsr debugfs directory [ 350.946047][ T6164] tipc: Disabling bearer [ 350.971689][ T6164] tipc: Left network mode [ 351.067232][ T5183] usb 4-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 351.077058][ T5183] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.086020][ T5183] usb 4-1: Product: syz [ 351.090388][ T5183] usb 4-1: Manufacturer: syz [ 351.095003][ T5183] usb 4-1: SerialNumber: syz [ 351.103758][ T5183] usb 4-1: config 0 descriptor?? [ 351.122707][ T5089] Bluetooth: hci6: urb ffff888022bb4e00 submission failed (2) [ 351.288193][ T5089] Bluetooth: hci2: command tx timeout [ 351.372050][ T5102] usb 4-1: USB disconnect, device number 28 [ 351.569755][ T6164] hsr_slave_0: left promiscuous mode [ 351.600735][ T6164] hsr_slave_1: left promiscuous mode [ 351.632410][ T6164] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 351.654960][ T6164] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 351.892737][ T6164] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 351.901379][ T6164] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 351.994657][ T5089] Bluetooth: hci5: unexpected event 0x09 length: 17 > 3 [ 352.203017][ T6164] veth0_macvtap: left promiscuous mode [ 352.344903][ T9307] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 352.347272][ T6164] veth1_vlan: left promiscuous mode [ 352.370306][ T6164] veth0_vlan: left promiscuous mode [ 352.414963][ T9307] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 353.379086][ T5089] Bluetooth: hci2: command tx timeout [ 353.606060][ T6164] team0 (unregistering): Port device team_slave_1 removed [ 353.715155][ T6164] team0 (unregistering): Port device team_slave_0 removed [ 354.007931][ T5089] Bluetooth: hci5: command 0x0406 tx timeout [ 354.293990][ T9310] netdevsim netdevsim0: Direct firmware load for ng failed with error -2 [ 354.312602][ T9310] netdevsim netdevsim0: Falling back to sysfs fallback for: ng [ 354.435116][ T5089] Bluetooth: hci0: unexpected event 0x09 length: 17 > 3 [ 354.461413][ T5089] Bluetooth: hci5: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 354.823082][ T9332] netdevsim netdevsim1: Direct firmware load for ng failed with error -2 [ 354.853027][ T9332] netdevsim netdevsim1: Falling back to sysfs fallback for: ng [ 354.885177][ C1] ------------[ cut here ]------------ [ 354.891033][ C1] WARNING: CPU: 1 PID: 9229 at net/sched/sch_cake.c:2094 cake_dequeue+0x2af1/0x4690 [ 354.900482][ C1] Modules linked in: [ 354.904387][ C1] CPU: 1 PID: 9229 Comm: syz-executor Not tainted 6.10.0-syzkaller-11323-g7846b618e0a4 #0 [ 354.914302][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 354.924430][ C1] RIP: 0010:cake_dequeue+0x2af1/0x4690 [ 354.929995][ C1] Code: 74 08 4c 89 f7 e8 af d7 6b f8 4d 89 26 eb 05 e8 75 e1 08 f8 45 31 f6 4c 8b a4 24 08 01 00 00 e9 d4 de ff ff e8 60 e1 08 f8 90 <0f> 0b 90 48 8b 94 24 f0 00 00 00 48 89 d0 48 c1 e8 03 42 0f b6 04 [ 354.949746][ C1] RSP: 0018:ffffc90000a189c0 EFLAGS: 00010246 [ 354.955827][ C1] RAX: ffffffff898a6160 RBX: 000000000000ffff RCX: ffff88801ffc0000 [ 354.963865][ C1] RDX: 0000000080000102 RSI: 000000000000ffff RDI: 0000000000000400 [ 354.971886][ C1] RBP: ffffc90000a18c28 R08: ffffffff898a5f7c R09: ffffffff898a69e5 [ 354.979908][ C1] R10: 0000000000000003 R11: ffff88801ffc0000 R12: ffff88805b400010 [ 354.988010][ C1] R13: dffffc0000000000 R14: 000000000000ffff R15: ffff88805b400000 [ 354.996020][ C1] FS: 0000555558fef500(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 [ 355.005021][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 355.011653][ C1] CR2: 00007fba477e0d58 CR3: 000000002df26000 CR4: 00000000003506f0 [ 355.019688][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 355.028264][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 355.036264][ C1] Call Trace: [ 355.039630][ C1] [ 355.042502][ C1] ? __warn+0x163/0x4e0 [ 355.046707][ C1] ? cake_dequeue+0x2af1/0x4690 [ 355.051630][ C1] ? report_bug+0x2b3/0x500 [ 355.056169][ C1] ? cake_dequeue+0x2af1/0x4690 [ 355.061103][ C1] ? handle_bug+0x3e/0x70 [ 355.065451][ C1] ? exc_invalid_op+0x1a/0x50 [ 355.070187][ C1] ? asm_exc_invalid_op+0x1a/0x20 [ 355.075319][ C1] ? cake_dequeue+0x3375/0x4690 [ 355.080195][ C1] ? cake_dequeue+0x290c/0x4690 [ 355.085043][ C1] ? cake_dequeue+0x2af0/0x4690 [ 355.089922][ C1] ? cake_dequeue+0x2af1/0x4690 [ 355.094779][ C1] ? mark_lock+0x9a/0x350 [ 355.099158][ C1] ? __pfx_cake_dequeue+0x10/0x10 [ 355.104183][ C1] __qdisc_run+0x272/0x2170 [ 355.108805][ C1] qdisc_run+0xda/0x270 [ 355.112970][ C1] net_tx_action+0x89c/0xa50 [ 355.117550][ C1] ? net_tx_action+0x708/0xa50 [ 355.122348][ C1] ? __pfx_net_tx_action+0x10/0x10 [ 355.127445][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 355.133785][ C1] handle_softirqs+0x2c4/0x970 [ 355.138565][ C1] ? __irq_exit_rcu+0xf4/0x1c0 [ 355.143315][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 355.148636][ C1] ? irqtime_account_irq+0xd4/0x1e0 [ 355.153825][ C1] __irq_exit_rcu+0xf4/0x1c0 [ 355.158440][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 355.163639][ C1] irq_exit_rcu+0x9/0x30 [ 355.167899][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 355.173520][ C1] [ 355.176434][ C1] [ 355.179373][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 355.185337][ C1] RIP: 0010:lock_acquire+0x264/0x550 [ 355.190631][ C1] Code: 2b 00 74 08 4c 89 f7 e8 1a cb 86 00 f6 44 24 61 02 0f 85 85 01 00 00 41 f7 c7 00 02 00 00 74 01 fb 48 c7 44 24 40 0e 36 e0 45 <4b> c7 44 25 00 00 00 00 00 43 c7 44 25 09 00 00 00 00 43 c7 44 25 [ 355.210253][ C1] RSP: 0018:ffffc9000cf5f5c0 EFLAGS: 00000206 [ 355.216394][ C1] RAX: 0000000000000001 RBX: 1ffff920019ebec4 RCX: 3a1d87b7368b3500 [ 355.224463][ C1] RDX: dffffc0000000000 RSI: ffffffff8bcadea0 RDI: ffffffff8c1fa440 [ 355.232448][ C1] RBP: ffffc9000cf5f710 R08: ffffffff92fd0617 R09: 1ffffffff25fa0c2 [ 355.240433][ C1] R10: dffffc0000000000 R11: fffffbfff25fa0c3 R12: 1ffff920019ebec0 [ 355.248409][ C1] R13: dffffc0000000000 R14: ffffc9000cf5f620 R15: 0000000000000246 [ 355.256389][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 355.261440][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 355.266656][ C1] ? d_walk+0x4f/0x710 [ 355.270768][ C1] ? read_seqbegin+0x1ea/0x250 [ 355.275532][ C1] ? __pfx_read_seqbegin+0x10/0x10 [ 355.280663][ C1] ? shrink_dcache_parent+0x365/0x3b0 [ 355.286030][ C1] _raw_spin_lock+0x2e/0x40 [ 355.290575][ C1] ? d_walk+0x76/0x710 [ 355.294638][ C1] d_walk+0x76/0x710 [ 355.298558][ C1] ? __pfx_find_submount+0x10/0x10 [ 355.303661][ C1] d_invalidate+0x14d/0x2d0 [ 355.308178][ C1] ? __pfx_d_invalidate+0x10/0x10 [ 355.313195][ C1] simple_recursive_removal+0x3a7/0x8f0 [ 355.318765][ C1] ? __pfx_remove_one+0x10/0x10 [ 355.323606][ C1] debugfs_remove+0x49/0x70 [ 355.328118][ C1] __nsim_dev_port_del+0x171/0x1b0 [ 355.333831][ C1] nsim_dev_reload_destroy+0x28a/0x490 [ 355.339299][ C1] ? __pfx_nsim_bus_remove+0x10/0x10 [ 355.344573][ C1] nsim_drv_remove+0x58/0x160 [ 355.349261][ C1] device_release_driver_internal+0x4a9/0x7c0 [ 355.355318][ C1] bus_remove_device+0x34f/0x420 [ 355.360283][ C1] device_del+0x57a/0x9b0 [ 355.364612][ C1] ? __pfx_device_del+0x10/0x10 [ 355.369483][ C1] device_unregister+0x20/0xc0 [ 355.374231][ C1] del_device_store+0x363/0x480 [ 355.379128][ C1] ? __pfx_del_device_store+0x10/0x10 [ 355.384492][ C1] ? sysfs_kf_write+0x182/0x2a0 [ 355.389350][ C1] ? bus_attr_store+0x4f/0xa0 [ 355.394017][ C1] ? __pfx_sysfs_kf_write+0x10/0x10 [ 355.399222][ C1] kernfs_fop_write_iter+0x3a1/0x500 [ 355.404584][ C1] vfs_write+0xa72/0xc90 [ 355.408845][ C1] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 355.414646][ C1] ? __pfx_vfs_write+0x10/0x10 [ 355.419429][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 355.424615][ C1] ? blkcg_maybe_throttle_current+0x1ab/0xb80 [ 355.430688][ C1] ksys_write+0x1a0/0x2c0 [ 355.435006][ C1] ? __pfx_ksys_write+0x10/0x10 [ 355.439865][ C1] ? do_syscall_64+0x100/0x230 [ 355.444614][ C1] ? do_syscall_64+0xb6/0x230 [ 355.449300][ C1] do_syscall_64+0xf3/0x230 [ 355.453784][ C1] ? clear_bhb_loop+0x35/0x90 [ 355.457932][ T5089] Bluetooth: hci2: command tx timeout [ 355.458474][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.469733][ C1] RIP: 0033:0x7fc2c31746df [ 355.474137][ C1] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 29 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 7c 8c 02 00 48 [ 355.493759][ C1] RSP: 002b:00007ffe3c6d3f50 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 355.502191][ C1] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007fc2c31746df [ 355.510172][ C1] RDX: 0000000000000001 RSI: 00007ffe3c6d3fa0 RDI: 0000000000000005 [ 355.518150][ C1] RBP: 00007fc2c31e45b2 R08: 0000000000000000 R09: 00007ffe3c6d3da7 [ 355.526103][ C1] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 355.534079][ C1] R13: 00007ffe3c6d3fa0 R14: 00007fc2c3e34620 R15: 0000000000000003 [ 355.542069][ C1] [ 355.545082][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 355.552363][ C1] CPU: 1 PID: 9229 Comm: syz-executor Not tainted 6.10.0-syzkaller-11323-g7846b618e0a4 #0 [ 355.562228][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 355.572270][ C1] Call Trace: [ 355.575531][ C1] [ 355.578357][ C1] dump_stack_lvl+0x241/0x360 [ 355.583019][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 355.588198][ C1] ? __pfx__printk+0x10/0x10 [ 355.592777][ C1] ? vscnprintf+0x5d/0x90 [ 355.597092][ C1] panic+0x349/0x860 [ 355.600981][ C1] ? __warn+0x172/0x4e0 [ 355.605119][ C1] ? __pfx_panic+0x10/0x10 [ 355.609536][ C1] __warn+0x346/0x4e0 [ 355.613496][ C1] ? cake_dequeue+0x2af1/0x4690 [ 355.618329][ C1] report_bug+0x2b3/0x500 [ 355.622641][ C1] ? cake_dequeue+0x2af1/0x4690 [ 355.627474][ C1] handle_bug+0x3e/0x70 [ 355.631788][ C1] exc_invalid_op+0x1a/0x50 [ 355.636274][ C1] asm_exc_invalid_op+0x1a/0x20 [ 355.641110][ C1] RIP: 0010:cake_dequeue+0x2af1/0x4690 [ 355.646550][ C1] Code: 74 08 4c 89 f7 e8 af d7 6b f8 4d 89 26 eb 05 e8 75 e1 08 f8 45 31 f6 4c 8b a4 24 08 01 00 00 e9 d4 de ff ff e8 60 e1 08 f8 90 <0f> 0b 90 48 8b 94 24 f0 00 00 00 48 89 d0 48 c1 e8 03 42 0f b6 04 [ 355.666152][ C1] RSP: 0018:ffffc90000a189c0 EFLAGS: 00010246 [ 355.672223][ C1] RAX: ffffffff898a6160 RBX: 000000000000ffff RCX: ffff88801ffc0000 [ 355.680184][ C1] RDX: 0000000080000102 RSI: 000000000000ffff RDI: 0000000000000400 [ 355.688139][ C1] RBP: ffffc90000a18c28 R08: ffffffff898a5f7c R09: ffffffff898a69e5 [ 355.696094][ C1] R10: 0000000000000003 R11: ffff88801ffc0000 R12: ffff88805b400010 [ 355.704052][ C1] R13: dffffc0000000000 R14: 000000000000ffff R15: ffff88805b400000 [ 355.712016][ C1] ? cake_dequeue+0x3375/0x4690 [ 355.716858][ C1] ? cake_dequeue+0x290c/0x4690 [ 355.721689][ C1] ? cake_dequeue+0x2af0/0x4690 [ 355.726559][ C1] ? mark_lock+0x9a/0x350 [ 355.730931][ C1] ? __pfx_cake_dequeue+0x10/0x10 [ 355.735949][ C1] __qdisc_run+0x272/0x2170 [ 355.740448][ C1] qdisc_run+0xda/0x270 [ 355.744622][ C1] net_tx_action+0x89c/0xa50 [ 355.749201][ C1] ? net_tx_action+0x708/0xa50 [ 355.753962][ C1] ? __pfx_net_tx_action+0x10/0x10 [ 355.759061][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 355.765380][ C1] handle_softirqs+0x2c4/0x970 [ 355.770144][ C1] ? __irq_exit_rcu+0xf4/0x1c0 [ 355.774903][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 355.780184][ C1] ? irqtime_account_irq+0xd4/0x1e0 [ 355.785460][ C1] __irq_exit_rcu+0xf4/0x1c0 [ 355.790048][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 355.795243][ C1] irq_exit_rcu+0x9/0x30 [ 355.799493][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 355.805131][ C1] [ 355.808057][ C1] [ 355.810978][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 355.816955][ C1] RIP: 0010:lock_acquire+0x264/0x550 [ 355.822237][ C1] Code: 2b 00 74 08 4c 89 f7 e8 1a cb 86 00 f6 44 24 61 02 0f 85 85 01 00 00 41 f7 c7 00 02 00 00 74 01 fb 48 c7 44 24 40 0e 36 e0 45 <4b> c7 44 25 00 00 00 00 00 43 c7 44 25 09 00 00 00 00 43 c7 44 25 [ 355.841839][ C1] RSP: 0018:ffffc9000cf5f5c0 EFLAGS: 00000206 [ 355.847901][ C1] RAX: 0000000000000001 RBX: 1ffff920019ebec4 RCX: 3a1d87b7368b3500 [ 355.855865][ C1] RDX: dffffc0000000000 RSI: ffffffff8bcadea0 RDI: ffffffff8c1fa440 [ 355.863821][ C1] RBP: ffffc9000cf5f710 R08: ffffffff92fd0617 R09: 1ffffffff25fa0c2 [ 355.871867][ C1] R10: dffffc0000000000 R11: fffffbfff25fa0c3 R12: 1ffff920019ebec0 [ 355.879830][ C1] R13: dffffc0000000000 R14: ffffc9000cf5f620 R15: 0000000000000246 [ 355.887811][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 355.892833][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 355.898110][ C1] ? d_walk+0x4f/0x710 [ 355.902162][ C1] ? read_seqbegin+0x1ea/0x250 [ 355.906910][ C1] ? __pfx_read_seqbegin+0x10/0x10 [ 355.912005][ C1] ? shrink_dcache_parent+0x365/0x3b0 [ 355.917375][ C1] _raw_spin_lock+0x2e/0x40 [ 355.921862][ C1] ? d_walk+0x76/0x710 [ 355.925912][ C1] d_walk+0x76/0x710 [ 355.929795][ C1] ? __pfx_find_submount+0x10/0x10 [ 355.934889][ C1] d_invalidate+0x14d/0x2d0 [ 355.939377][ C1] ? __pfx_d_invalidate+0x10/0x10 [ 355.944385][ C1] simple_recursive_removal+0x3a7/0x8f0 [ 355.949924][ C1] ? __pfx_remove_one+0x10/0x10 [ 355.954761][ C1] debugfs_remove+0x49/0x70 [ 355.959250][ C1] __nsim_dev_port_del+0x171/0x1b0 [ 355.964343][ C1] nsim_dev_reload_destroy+0x28a/0x490 [ 355.969789][ C1] ? __pfx_nsim_bus_remove+0x10/0x10 [ 355.975076][ C1] nsim_drv_remove+0x58/0x160 [ 355.979742][ C1] device_release_driver_internal+0x4a9/0x7c0 [ 355.985800][ C1] bus_remove_device+0x34f/0x420 [ 355.990748][ C1] device_del+0x57a/0x9b0 [ 355.995063][ C1] ? __pfx_device_del+0x10/0x10 [ 355.999901][ C1] device_unregister+0x20/0xc0 [ 356.004647][ C1] del_device_store+0x363/0x480 [ 356.009485][ C1] ? __pfx_del_device_store+0x10/0x10 [ 356.014930][ C1] ? sysfs_kf_write+0x182/0x2a0 [ 356.019775][ C1] ? bus_attr_store+0x4f/0xa0 [ 356.024435][ C1] ? __pfx_sysfs_kf_write+0x10/0x10 [ 356.029611][ C1] kernfs_fop_write_iter+0x3a1/0x500 [ 356.034887][ C1] vfs_write+0xa72/0xc90 [ 356.039116][ C1] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 356.044926][ C1] ? __pfx_vfs_write+0x10/0x10 [ 356.049684][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 356.054864][ C1] ? blkcg_maybe_throttle_current+0x1ab/0xb80 [ 356.060917][ C1] ksys_write+0x1a0/0x2c0 [ 356.065239][ C1] ? __pfx_ksys_write+0x10/0x10 [ 356.070074][ C1] ? do_syscall_64+0x100/0x230 [ 356.074823][ C1] ? do_syscall_64+0xb6/0x230 [ 356.079487][ C1] do_syscall_64+0xf3/0x230 [ 356.083973][ C1] ? clear_bhb_loop+0x35/0x90 [ 356.088676][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.094550][ C1] RIP: 0033:0x7fc2c31746df [ 356.098951][ C1] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 29 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 7c 8c 02 00 48 [ 356.118542][ C1] RSP: 002b:00007ffe3c6d3f50 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 356.126937][ C1] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007fc2c31746df [ 356.134897][ C1] RDX: 0000000000000001 RSI: 00007ffe3c6d3fa0 RDI: 0000000000000005 [ 356.142852][ C1] RBP: 00007fc2c31e45b2 R08: 0000000000000000 R09: 00007ffe3c6d3da7 [ 356.150814][ C1] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 356.158771][ C1] R13: 00007ffe3c6d3fa0 R14: 00007fc2c3e34620 R15: 0000000000000003 [ 356.166739][ C1] [ 356.169971][ C1] Kernel Offset: disabled [ 356.174401][ C1] Rebooting in 86400 seconds..