last executing test programs: 33m27.269077881s ago: executing program 32 (id=498): r0 = epoll_create1(0x0) r1 = timerfd_create(0x0, 0x0) timerfd_settime(r1, 0x0, &(0x7f0000000200)={{}, {0x0, 0x989680}}, 0x0) epoll_pwait(r0, &(0x7f0000000080)=[{}, {}], 0x2, 0x80000002, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000040)={0x80002003}) 30m34.092750864s ago: executing program 33 (id=935): socket(0x26, 0x2, 0x38) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) r3 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x4, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {0x0, 0xfffffffffffffffc}, 0x0, 0x6e6bb9, 0x1}, {{@in=@broadcast, 0xfffffffc, 0x32}, 0x0, @in=@empty, 0x0, 0x0, 0x2, 0x7, 0x200}}, 0xe8) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) 30m29.003052626s ago: executing program 34 (id=940): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000140000e5b7030000000700008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'veth0\x00', &(0x7f0000000340)=@ethtool_perm_addr={0x20, 0x6, "fd1c24cc63e4"}}) 30m27.522022975s ago: executing program 35 (id=943): socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, 0x0, 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0xb0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) 28m26.82649016s ago: executing program 36 (id=1331): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r3, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) syz_emit_ethernet(0x32, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x100, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x1, 0x0, 0xc0, 0x100}}}}}}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6(0xa, 0x3, 0xff) syz_open_dev$evdev(0x0, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c) r5 = dup(r4) r6 = open(&(0x7f00000000c0)='./file0\x00', 0x1298c2, 0x0) ftruncate(r6, 0x200004) sendfile(r5, r6, 0x0, 0x80001d00c0d1) 27m34.465228105s ago: executing program 7 (id=1573): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)}}], 0x1, 0x810) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) sendmmsg(0xffffffffffffffff, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000340)=[{0x0}, {&(0x7f0000000700)="ec76b3", 0x3}], 0x2}}], 0x1, 0x404c041) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 27m32.948016041s ago: executing program 7 (id=1578): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x1, 0x1, r3}, 0x50) 27m31.477636421s ago: executing program 7 (id=1580): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009e173610ef171e7206de010203010902"], 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f00000001c0)={0x8000042, 0x3}, 0x10) socket$tipc(0x1e, 0x2, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000e6ff00206d0425c200ecffffff0009022400010000a00309040060ecc2bb990101030000000921270b0001220600090581030002000000"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x18) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x20048810) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0x38}}, 0x2000018c) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) sendmmsg(r6, &(0x7f0000000180), 0x3ef, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 27m28.294585028s ago: executing program 7 (id=1584): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d4e, 0x103) open(0x0, 0x60840, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prlimit64(0x0, 0x9, &(0x7f0000000d80)={0x3, 0x7fff}, 0x0) io_setup(0xffff, &(0x7f0000001080)) 27m19.895037579s ago: executing program 7 (id=1602): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000340)=ANY=[@ANYBLOB="f0000000100013070000000000000000fc020000000000000000000000000000fe8000000000000000000000000000100004000000000000000000202c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe"], 0xf0}, 0x1, 0xe}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @void}, 0x10) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, 0x0) ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x0) 27m18.858049221s ago: executing program 7 (id=1605): openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x82202, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000004c0)=[{0x0}, {0x0, 0x3b}], 0x1000000000000077, 0x0, 0xd) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_IOC_ASKUMOUNT(r1, 0x80049370, &(0x7f0000000100)) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd050007008800000006000540"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 27m6.533505794s ago: executing program 8 (id=1626): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) symlinkat(0x0, 0xffffffffffffff9c, 0x0) r3 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) 27m4.913311173s ago: executing program 8 (id=1627): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) setregid(0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x2f, 0x9}) 27m3.750572575s ago: executing program 8 (id=1628): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000300)=""/102392, 0x18ff8) add_key$user(&(0x7f00000003c0), 0x0, 0x0, 0x0, 0xfffffffffffffffd) write$vhost_msg_v2(r0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_misc(r0, &(0x7f0000000040), 0xe09) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='qnx6\x00', 0x2000802, 0x0) 27m3.548941931s ago: executing program 37 (id=1605): openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x82202, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000004c0)=[{0x0}, {0x0, 0x3b}], 0x1000000000000077, 0x0, 0xd) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_IOC_ASKUMOUNT(r1, 0x80049370, &(0x7f0000000100)) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd050007008800000006000540"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 27m2.746532182s ago: executing program 8 (id=1630): r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$UHID_INPUT(r0, &(0x7f0000000d00)={0x8, {"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", 0x1000}}, 0x1006) 27m1.202266211s ago: executing program 8 (id=1632): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = semget$private(0x0, 0x7, 0x4b8) semtimedop(r4, 0x0, 0x0, 0x0) semtimedop(r4, &(0x7f0000000380)=[{0x0, 0x5, 0x1800}], 0x1, 0x0) 26m59.564634906s ago: executing program 8 (id=1634): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r3, &(0x7f0000000040)=0x1c8, 0x12) 26m44.224409489s ago: executing program 38 (id=1634): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r3, &(0x7f0000000040)=0x1c8, 0x12) 26m23.866651299s ago: executing program 9 (id=1677): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8004}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r2, 0x6, &(0x7f00000001c0)={0x2}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f00000001c0)) 26m22.834600969s ago: executing program 9 (id=1679): socket$inet_sctp(0x2, 0x1, 0x84) inotify_init() socket$inet_sctp(0x2, 0x1, 0x84) socket$unix(0x1, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) socket(0x2a, 0x2, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) socket$pppl2tp(0x18, 0x1, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xa, 0x3, &(0x7f0000000180)=ANY=[@ANYRES32=r0], 0x0, 0x9, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0xd33638f234726102, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180)) 26m21.50538813s ago: executing program 9 (id=1681): getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000040)={{{@in6=@empty, @in6=@mcast1}}, {{@in6=@remote}, 0x0, @in6=@mcast1}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x200, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x15, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9c, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x24008011) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) fsopen(0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$alg(0x26, 0x5, 0x0) syz_io_uring_setup(0x1fc7, &(0x7f0000000380)={0x0, 0xbcb5, 0x3f00, 0x4, 0x2e9}, &(0x7f0000000340), 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @none, 0x4, 0x2}, 0xe) r4 = syz_open_dev$usbmon(&(0x7f0000000000), 0x2, 0x141840) ioctl$MON_IOCX_MFETCH(r4, 0xc00c9207, 0x0) 26m19.873641873s ago: executing program 9 (id=1684): socket$nl_audit(0x10, 0x3, 0x9) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_emit_ethernet(0x0, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x200, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4ac2d78a}}, 0x0, 0x0, 0x3f, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000600)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e22, 0x7, 0x8}}}}}, 0x0) 26m16.671497802s ago: executing program 9 (id=1686): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1b, 0x1, 0x0, 0x8000, 0x2000, 0xffffffffffffffff, 0xfffffffc}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000200), 0x81, r3}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0xb) sendmsg$tipc(r5, &(0x7f00000002c0)={&(0x7f00000000c0)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x480c0}, 0x0) 26m10.362341814s ago: executing program 9 (id=1692): r0 = socket$inet_udplite(0x2, 0x2, 0x88) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000002640)=0x1, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$inet(r0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0), 0xc7) prctl$PR_SET_PDEATHSIG(0x1, 0x41) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'tunl0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x14, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x40}}, 0x0) 25m54.98001528s ago: executing program 39 (id=1692): r0 = socket$inet_udplite(0x2, 0x2, 0x88) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000002640)=0x1, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$inet(r0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0), 0xc7) prctl$PR_SET_PDEATHSIG(0x1, 0x41) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'tunl0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x14, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x40}}, 0x0) 19m7.310419658s ago: executing program 0 (id=2533): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f02feff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008004f0fffeffe809005300fff5dd000000100001000a0c10000000000000000000", 0x58}], 0x1) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x1e8629867d7bdaee, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r6, 0x0, 0x10, &(0x7f0000000080)="170000000200020000ffbe8c5ee17688a2003c000303000afdff02a257fc5ad90200bb6a880000d6c9db0000db00000200df01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50ce5af9b1c568302ffff02ff0331dd3bab0840024f0298e9e90539062a80e605007f71174ab498a30b3e5a1b47b63a6323ded2aa084cd36276a3af", 0xb7) sendto$inet(r6, 0x0, 0x0, 0x2406c014, 0x0, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000080)={0x0, 0x2, 0x1, 0x9}) 19m0.599761334s ago: executing program 0 (id=2547): r0 = syz_usb_connect(0x2, 0x73, &(0x7f0000000400)=ANY=[@ANYRES64], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) 18m54.606595092s ago: executing program 0 (id=2560): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002078316e00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b70300000000000085000000060000008500000005000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80800) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0xa, 0x20002f7}) 18m52.81037229s ago: executing program 0 (id=2566): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f0000000580)={{}, {0x1, 0x2}, [{}, {0x2, 0x2}, {0x2, 0x4}, {0x2, 0x4}, {0x2, 0x2}, {0x2, 0x2}], {0x4, 0x2}, [{0x8, 0x3}, {}, {0x8, 0x6}, {0x8, 0x4, r3}]}, 0x74, 0x3) 18m52.701585847s ago: executing program 0 (id=2567): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[], 0x0, 0x3e}, 0x28) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 18m51.693391517s ago: executing program 0 (id=2572): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r0, 0x1) recvmmsg(r0, &(0x7f0000000180), 0x3db66e6159adff3, 0x10100, 0x0) 18m36.096604263s ago: executing program 40 (id=2572): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r0, 0x1) recvmmsg(r0, &(0x7f0000000180), 0x3db66e6159adff3, 0x10100, 0x0) 8m35.467708256s ago: executing program 1 (id=5831): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) add_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x5c399000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000000), 0x4) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r1, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x600, 0x1}}, 0x20) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 8m34.217490686s ago: executing program 1 (id=5838): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) fanotify_mark(0xffffffffffffffff, 0x1, 0x4800003e, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xe0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r1}, 0x10) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)={0x10000001}) landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3, 0x1}, 0x18, 0x2) 8m34.094138353s ago: executing program 1 (id=5839): sched_setattr(0x0, 0x0, 0x0) close(0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x1c, 0x2e, 0x1, 0xf0bd26, 0x25dfdbfc, {0x4}, [@typed={0x8, 0xc, 0x0, 0x0, @uid}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000004c00)=@newchain={0x24, 0x64, 0x4, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0x2}, {0x2, 0x10}, {0xe, 0x9}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x4}]}}]}, 0x3c}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca01c44}, 0x4008840) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 8m31.908284784s ago: executing program 1 (id=5845): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() landlock_restrict_self(0xffffffffffffffff, 0x4) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) timer_settime(0x0, 0x1, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r4 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x7a22, 0xc000, 0x7, 0x337}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x3}, {0x0, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0xc1) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='9', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80800) 8m30.967645148s ago: executing program 1 (id=5848): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) fanotify_mark(0xffffffffffffffff, 0x1, 0x4800003e, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xe0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r1}, 0x10) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)={0x10000001}) landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3, 0x1}, 0x18, 0x2) 8m30.805978654s ago: executing program 1 (id=5850): syz_emit_ethernet(0x32, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @random="5a05f3c2d135", @val={@val={0x88a8, 0x0, 0x0, 0x3}, {0x8100, 0x0, 0x0, 0x2}}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @local, @remote, @remote, @broadcast}}}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) r1 = syz_open_dev$sg(0x0, 0x0, 0x20000) ioctl$SG_GET_RESERVED_SIZE(r1, 0x2272, &(0x7f0000000040)) bpf$TOKEN_CREATE(0x24, &(0x7f0000000f00)={0x0, r0}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000f40)={0x3, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000fdffffff000000000900000085b0000017000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001000000850000007b00000095"], &(0x7f0000000040)='syzkaller\x00', 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x526}, @TCA_SAMPLE_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x70}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@newtaction={0x48, 0x31, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x48}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="13010000bd460e10490d1070900c010203010902120001000000000904000000d2", @ANYRES16=r5], 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x64, 0x10, 0x437, 0x3, 0xffffffff, {0x0, 0x0, 0x0, r2, 0x51b0b}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x34, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_LOCAL={0x14, 0x6, @remote}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) sendmmsg$alg(r0, &(0x7f00000008c0)=[{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000040)="a4318c435d5fb7df820ade0572eb702970c54d54e0ba0d55a156045d114afb3c14a26943633f4e1cf84f7401f75f97e20bf72ebe275a52ccad3ae177b96167fbb60be5a56c436cde7216391a7c5e22c6114ec5f2cdc805d1361040c98a176dbb0e87dc995696be0d8e9dc37cdd3f3c3b14cfa1a324ef64484ee876eeb660766de0d32f8351ff5f8c89d61bf464f0399504e438ab078345e13d38266ac9c51c4219e16a7ca51163f3106545e01eb24cd7a5309ada53fc75b448ddb25825f9e8d962329912c4e5e1c2bf0bb101bdee0804ca0a11054a1e19b7a563e3bc492245dcaf1b1ebb2702caf8ec246ec829260a0de9ac4a886f3c", 0xf6}, {&(0x7f0000000140)="826fd5ed2c2f1f8c354f8af81b170ce98b431829718a17910124720196e925013822c0e9ff522367cc65eae3675de5e19de6683830c8a7f5a2e0350ae8d8d758f32102931b58", 0x46}, {&(0x7f00000001c0)="772ab5b5a6d366a2a06e2e90f9cfdde665bac3b4bdde0def331da64917d2053d816ef10473adf9df822b06d2d6770e7716d8f9d52c78583b60169af6fc4510ec0f09b5df2160a5c3c74c1d92ed28edc4d3cc3bad751699d0bef15008f7447fa74215ada3628cc78a934e9a48513a14d76d634a50f1a13d85b5e410bfd4453540848920e4b5bd10fec1668b973cfd3e8f74e4eca89111bff86ba5bcddbc9b30dabed757d0a025dc830e33ecb86c7eaacbdbd48282dad72339738177987b7423ac4e16671cfca3644ee463de337d565859c686142430fcda2e3ba63803e27c756c9479ca8308f87c1d6d5de44f52482d0101066d4abb61", 0xf6}, {&(0x7f00000002c0)="9bcf33630bddf05b1afc0150418372fc6318b5db305c4f276745cbebf943cb74e4d4bf879e006a29c21a7b943fe9ebf5a6091672889853926129fe5a1503fd3c9476010eeb1977bb7a1848f224c7cd3c587532d9083d3faa376408accf9a863a81ae848da333d26a4010a78ce72cd3eb3b4f72ce0893459a0fdeb275999c08531d6507035fc1f070c4f9085e7f3f000293244cfae814d7e3a979852d03a687ed78c602051cd06d13c6e44b341be8", 0xae}, {&(0x7f0000000380)="95f673c17f6985c65b9db1de5e02edd8f809fb865f154881e5e575eb3d69199134c47021a5bd87a113dcd0458017a7095dc60cdf89f16c8a6bf6e7f0078c2ff8954008ad868772df98e43aad5c5fdab6802a2b01634cbd29083843a786cbefd8c2da404cb72779cb56a08b96c3f347ea9048d46766acd920835cd7d58487e39d565fd6189f25dc2b5903a095770babdfa55b3ada54fd3d76c987e33bb2ea6575c53fa8048df9adc662f01f4a18e9cfd073ce3463ffb46a60ed0bdc12713bf56811a7546b89998d2ef5cd8699d760f1", 0xcf}], 0x5, &(0x7f0000000500)=[@iv={0x60, 0x117, 0x2, 0x46, "14b38b14515f6e781f3459ef3c7f12d7d8c96a992681b7bb9f169c8921920bd524e099889be6d3c66dd40a0ab32af2e1a43a4e735a62ceeba7cc3dd78c3af268c17e3369be29"}, @op={0x18}, @iv={0x58, 0x117, 0x2, 0x43, "0f5ecc7892d1d787b371f24d29500809a5612a46a886c89ae043427d32a099c34b6ffdd65933fd08a6e97331ecd651dc3887455fc9b0390a16306a93c76feca8d6cd3e"}], 0xd0, 0x801}, {0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000600)="f9063ee1e75343f0e5a757251d0d9e2dc12c32ee44b359b203c02e1ba138dc4c85349ea7ae61fc1cb3e569902ef8a467db5504abc084e84063618635a8284a85f4e813aac7b232a3bd154ce8854eff91b3261baf2bd9041fdee51fc928994655d5b35b", 0x63}, {&(0x7f0000000680)="0c6f84cc06faa8f7efdc26d876dd896f66636bb5b4ab5bfd27988a9352e2b28b4a4884f8f78cce622acf4b805b45a2346a815901ee828e97565ec54be54af600418fa1d6e21bafa695cd3702d15ce5de58c582bc0fb69024aa0500ce90729b2f57c6b3738572764bf11e7d45d3c02db4cb406730ba4335a6b594b982c4bba56819f181d642c7e34913", 0x89}], 0x2, &(0x7f0000000780)=[@iv={0x80, 0x117, 0x2, 0x66, "621768191e438cd06a7308eb16bf062521ce4ccffb8a812ce15ff42080a751bdb798c4078cb0b4ec2aed281f2db79ee42ca4603e33b8c35ca9e562d3f714378be80e587b8e9be9ba5afa08b4987f0ce3042b6e0c5239480fe87502ad6eb36a4a5349f59704ff"}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x8}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x2}], 0xe0, 0x40}], 0x2, 0x1cf1ce672d510cc6) r7 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r7, 0x11b, 0x7, &(0x7f0000000080), &(0x7f0000000000)=0x2d) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000940)) syz_usb_ep_read(r6, 0x2, 0xba, &(0x7f0000001000)=""/186) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7) newfstatat(0xffffffffffffff9c, &(0x7f0000000980)='./file0\x00', &(0x7f00000009c0), 0x6000) sendmsg$nl_generic(r0, &(0x7f0000000ec0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x10000000}, 0xa, &(0x7f0000000e80)={&(0x7f0000003240)={0x14, 0x1b, 0x200, 0x70bd2c, 0x25dfdbfd, {0xc}}, 0x14}, 0x1, 0x0, 0x0, 0x24000004}, 0x20000081) 8m15.569608298s ago: executing program 41 (id=5850): syz_emit_ethernet(0x32, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @random="5a05f3c2d135", @val={@val={0x88a8, 0x0, 0x0, 0x3}, {0x8100, 0x0, 0x0, 0x2}}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @local, @remote, @remote, @broadcast}}}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) r1 = syz_open_dev$sg(0x0, 0x0, 0x20000) ioctl$SG_GET_RESERVED_SIZE(r1, 0x2272, &(0x7f0000000040)) bpf$TOKEN_CREATE(0x24, &(0x7f0000000f00)={0x0, r0}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000f40)={0x3, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000fdffffff000000000900000085b0000017000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001000000850000007b00000095"], &(0x7f0000000040)='syzkaller\x00', 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x526}, @TCA_SAMPLE_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x70}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@newtaction={0x48, 0x31, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x48}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="13010000bd460e10490d1070900c010203010902120001000000000904000000d2", @ANYRES16=r5], 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x64, 0x10, 0x437, 0x3, 0xffffffff, {0x0, 0x0, 0x0, r2, 0x51b0b}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x34, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_LOCAL={0x14, 0x6, @remote}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) sendmmsg$alg(r0, &(0x7f00000008c0)=[{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000040)="a4318c435d5fb7df820ade0572eb702970c54d54e0ba0d55a156045d114afb3c14a26943633f4e1cf84f7401f75f97e20bf72ebe275a52ccad3ae177b96167fbb60be5a56c436cde7216391a7c5e22c6114ec5f2cdc805d1361040c98a176dbb0e87dc995696be0d8e9dc37cdd3f3c3b14cfa1a324ef64484ee876eeb660766de0d32f8351ff5f8c89d61bf464f0399504e438ab078345e13d38266ac9c51c4219e16a7ca51163f3106545e01eb24cd7a5309ada53fc75b448ddb25825f9e8d962329912c4e5e1c2bf0bb101bdee0804ca0a11054a1e19b7a563e3bc492245dcaf1b1ebb2702caf8ec246ec829260a0de9ac4a886f3c", 0xf6}, {&(0x7f0000000140)="826fd5ed2c2f1f8c354f8af81b170ce98b431829718a17910124720196e925013822c0e9ff522367cc65eae3675de5e19de6683830c8a7f5a2e0350ae8d8d758f32102931b58", 0x46}, {&(0x7f00000001c0)="772ab5b5a6d366a2a06e2e90f9cfdde665bac3b4bdde0def331da64917d2053d816ef10473adf9df822b06d2d6770e7716d8f9d52c78583b60169af6fc4510ec0f09b5df2160a5c3c74c1d92ed28edc4d3cc3bad751699d0bef15008f7447fa74215ada3628cc78a934e9a48513a14d76d634a50f1a13d85b5e410bfd4453540848920e4b5bd10fec1668b973cfd3e8f74e4eca89111bff86ba5bcddbc9b30dabed757d0a025dc830e33ecb86c7eaacbdbd48282dad72339738177987b7423ac4e16671cfca3644ee463de337d565859c686142430fcda2e3ba63803e27c756c9479ca8308f87c1d6d5de44f52482d0101066d4abb61", 0xf6}, {&(0x7f00000002c0)="9bcf33630bddf05b1afc0150418372fc6318b5db305c4f276745cbebf943cb74e4d4bf879e006a29c21a7b943fe9ebf5a6091672889853926129fe5a1503fd3c9476010eeb1977bb7a1848f224c7cd3c587532d9083d3faa376408accf9a863a81ae848da333d26a4010a78ce72cd3eb3b4f72ce0893459a0fdeb275999c08531d6507035fc1f070c4f9085e7f3f000293244cfae814d7e3a979852d03a687ed78c602051cd06d13c6e44b341be8", 0xae}, {&(0x7f0000000380)="95f673c17f6985c65b9db1de5e02edd8f809fb865f154881e5e575eb3d69199134c47021a5bd87a113dcd0458017a7095dc60cdf89f16c8a6bf6e7f0078c2ff8954008ad868772df98e43aad5c5fdab6802a2b01634cbd29083843a786cbefd8c2da404cb72779cb56a08b96c3f347ea9048d46766acd920835cd7d58487e39d565fd6189f25dc2b5903a095770babdfa55b3ada54fd3d76c987e33bb2ea6575c53fa8048df9adc662f01f4a18e9cfd073ce3463ffb46a60ed0bdc12713bf56811a7546b89998d2ef5cd8699d760f1", 0xcf}], 0x5, &(0x7f0000000500)=[@iv={0x60, 0x117, 0x2, 0x46, "14b38b14515f6e781f3459ef3c7f12d7d8c96a992681b7bb9f169c8921920bd524e099889be6d3c66dd40a0ab32af2e1a43a4e735a62ceeba7cc3dd78c3af268c17e3369be29"}, @op={0x18}, @iv={0x58, 0x117, 0x2, 0x43, "0f5ecc7892d1d787b371f24d29500809a5612a46a886c89ae043427d32a099c34b6ffdd65933fd08a6e97331ecd651dc3887455fc9b0390a16306a93c76feca8d6cd3e"}], 0xd0, 0x801}, {0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000600)="f9063ee1e75343f0e5a757251d0d9e2dc12c32ee44b359b203c02e1ba138dc4c85349ea7ae61fc1cb3e569902ef8a467db5504abc084e84063618635a8284a85f4e813aac7b232a3bd154ce8854eff91b3261baf2bd9041fdee51fc928994655d5b35b", 0x63}, {&(0x7f0000000680)="0c6f84cc06faa8f7efdc26d876dd896f66636bb5b4ab5bfd27988a9352e2b28b4a4884f8f78cce622acf4b805b45a2346a815901ee828e97565ec54be54af600418fa1d6e21bafa695cd3702d15ce5de58c582bc0fb69024aa0500ce90729b2f57c6b3738572764bf11e7d45d3c02db4cb406730ba4335a6b594b982c4bba56819f181d642c7e34913", 0x89}], 0x2, &(0x7f0000000780)=[@iv={0x80, 0x117, 0x2, 0x66, "621768191e438cd06a7308eb16bf062521ce4ccffb8a812ce15ff42080a751bdb798c4078cb0b4ec2aed281f2db79ee42ca4603e33b8c35ca9e562d3f714378be80e587b8e9be9ba5afa08b4987f0ce3042b6e0c5239480fe87502ad6eb36a4a5349f59704ff"}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x8}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x2}], 0xe0, 0x40}], 0x2, 0x1cf1ce672d510cc6) r7 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r7, 0x11b, 0x7, &(0x7f0000000080), &(0x7f0000000000)=0x2d) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000940)) syz_usb_ep_read(r6, 0x2, 0xba, &(0x7f0000001000)=""/186) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7) newfstatat(0xffffffffffffff9c, &(0x7f0000000980)='./file0\x00', &(0x7f00000009c0), 0x6000) sendmsg$nl_generic(r0, &(0x7f0000000ec0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x10000000}, 0xa, &(0x7f0000000e80)={&(0x7f0000003240)={0x14, 0x1b, 0x200, 0x70bd2c, 0x25dfdbfd, {0xc}}, 0x14}, 0x1, 0x0, 0x0, 0x24000004}, 0x20000081) 4m19.806561137s ago: executing program 5 (id=6415): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0xfea7) r2 = socket$kcm(0x21, 0x2, 0x2) close(r2) write$P9_RSTATFS(0xffffffffffffffff, 0x0, 0x0) 4m19.728531391s ago: executing program 5 (id=6416): ioctl$IOMMU_TEST_OP_ACCESS_RW(0xffffffffffffffff, 0x3ba0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[], 0xc4}}, 0x0) syz_fuse_handle_req(r0, 0x0, 0x0, 0x0) io_setup(0x5, 0x0) syz_fuse_handle_req(r0, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x2, @loopback, 0xcac2d78a}}, 0x0, 0x0, 0x3f, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b9312921af651a8de213eb94cd46e19d9c65a018444a131f4da58ae3380500000000000007462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000040)) r3 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_DQEVENT(r3, 0x80885659, 0x0) 4m16.649177887s ago: executing program 5 (id=6426): r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) readv(r0, &(0x7f0000001500), 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x20800001, 0x4) listen(0xffffffffffffffff, 0xb7) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@ipv6_newnexthop={0x30, 0x68, 0x1, 0x70bd25, 0xfffffffe, {}, [@NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x87, 0x0, 0x4, 0x0, 0x10, 0x48, 0xf5a2}}}}}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000}, 0x40040d0) pipe2(&(0x7f0000000000), 0x4000) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000040), 0x84000) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfe, {{@in6=@private0, @in=@loopback, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffffd}, {0xfffffffffffffffe}, 0x9, 0x0, 0x0, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e0001"], 0xb8}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0xb8}}, 0x0) 4m16.470826246s ago: executing program 5 (id=6429): r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x95da, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000860629c98500000015000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xe1000, 0x280000b, 0x28011, r0, 0x20000000) socket$rds(0x15, 0x5, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x30, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 4m16.318423986s ago: executing program 5 (id=6430): r0 = syz_io_uring_setup(0x10c, &(0x7f00000000c0)={0x0, 0x3eac, 0x400, 0x0, 0x105}, &(0x7f0000000400)=0x0, &(0x7f0000000240)=0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000feb400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) madvise(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x17) r3 = socket$inet6(0x10, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x4c, 0x0, r3, 0x0, 0x0, 0x0, 0x40010000}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) close(0xffffffffffffffff) io_uring_enter(r0, 0x8aa, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x11, {0x27fffffffffffff, 0x8}, 0x54}, 0x1) 4m16.051989738s ago: executing program 5 (id=6431): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x44b, 0x70bd2c, 0x25dfdbfc, {0x7a, 0x0, 0x0, 0x0, 0x1000, 0x100}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_FWD_MASK={0x6, 0x9, 0xf}, @IFLA_BR_PRIORITY={0x6, 0x6, 0x1000}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x800) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x602104) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4c, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0x3}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8}, @TCA_FQ_FLOW_PLIMIT={0x8}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8}, @TCA_FQ_QUANTUM={0x8, 0xf}]}}]}, 0x78}}, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001440)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x6, [@decl_tag={0xe, 0x0, 0x0, 0x11, 0x2, 0x1}]}, {0x0, [0x30, 0x61, 0x5f, 0x61]}}, &(0x7f0000000440)=""/4096, 0x2e, 0x1000, 0x0, 0x88a, 0x10000}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000000)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x9, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x77, &(0x7f00000002c0), 0x0, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0x23, 0x8, 0x8, &(0x7f0000000100)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x10, 0x1a, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}, {}, {}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @jmp={0x5, 0x1, 0xb, 0x4, 0x8, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000001c0)='GPL\x00', 0x8000, 0x0, 0x0, 0x41000, 0x24, '\x00', r5, @sk_msg=0x7, r6, 0x8, &(0x7f0000001480)={0xa, 0x4}, 0x8, 0x10, 0x0, 0x0, r7, 0xffffffffffffffff, 0x7, 0x0, &(0x7f00000014c0)=[{0x1, 0x1, 0xc, 0x7}, {0x0, 0x3, 0x1, 0x8}, {0x3, 0x3, 0x6a7, 0x9}, {0x0, 0x1, 0xb, 0x8}, {0x1, 0x1, 0x9, 0xb}, {0x2, 0x5, 0x8, 0x7}, {0x3, 0x3, 0xc, 0xa}], 0x10, 0x9510}, 0x94) r8 = socket$vsock_stream(0x28, 0x1, 0x0) listen(0xffffffffffffffff, 0x803) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0xff, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0xc2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '@\x00', 0x14, 0x6, 0x1, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x7, 0x0, 0x0, 0xf}}}}}}}, 0x0) connect$vsock_stream(r8, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) syz_usb_connect(0x1, 0x36, &(0x7f0000001d80)={{0x12, 0x1, 0x201, 0xe4, 0xe7, 0x6, 0x8, 0x13b1, 0x42, 0x1d74, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x2, 0x90, 0x4e, [{{0x9, 0x4, 0xb5, 0x1, 0x2, 0xa4, 0xb2, 0xeb, 0x9, [], [{{0x9, 0x5, 0xe, 0x0, 0x40, 0x9, 0x2, 0x81}}, {{0x9, 0x5, 0x7, 0x10, 0x8, 0xc0, 0x9, 0x8}}]}}]}}]}}, &(0x7f00000023c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 3m50.846949146s ago: executing program 3 (id=6494): openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000c00)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100feffffff000000000c000000100003800400040008000200fd7f0000180001801400020076657468305f746f5f626f6e64"], 0x3c}}, 0x8084) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r2 = memfd_create(&(0x7f00000004c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x2) ftruncate(r2, 0xffff) close(0x3) fcntl$addseals(r2, 0x409, 0x7) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) epoll_create(0xc) 3m49.737543837s ago: executing program 3 (id=6495): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x11, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1ff}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) add_key(&(0x7f0000000000)='id_legacy\x00', 0x0, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x5c399000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000000), 0x4) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r1, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x600, 0x1}}, 0x20) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 3m48.3528778s ago: executing program 3 (id=6497): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={&(0x7f0000000240)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4) r1 = socket$netlink(0x10, 0x3, 0x4) write(r1, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) sigaltstack(&(0x7f0000001040)={&(0x7f00000020c0)=""/4113, 0x0, 0xae0b9951e676bac7}, 0x0) sigaltstack(0x0, &(0x7f00000000c0)={0x0}) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000050}, 0x4010) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c59850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 3m47.518612973s ago: executing program 3 (id=6502): socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_buf(r0, 0x1, 0x0, &(0x7f0000000000)=""/92, &(0x7f0000000080)=0x5c) setsockopt$inet_udp_encap(r1, 0x11, 0x64, 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x1298c2, 0x0) getsockopt$inet6_mptcp_buf(r2, 0x11c, 0x2, &(0x7f0000000100)=""/210, &(0x7f0000000200)=0xd2) 3m47.185294925s ago: executing program 3 (id=6506): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x11, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1ff}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) add_key(&(0x7f0000000000)='id_legacy\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x5c399000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000000), 0x4) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r1, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x600, 0x1}}, 0x20) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 3m45.450418305s ago: executing program 3 (id=6508): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x44b, 0x70bd2c, 0x25dfdbfc, {0x7a, 0x0, 0x0, 0x0, 0x1000, 0x100}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_FWD_MASK={0x6, 0x9, 0xf}, @IFLA_BR_PRIORITY={0x6, 0x6, 0x1000}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x800) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x602104) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4c, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0x3}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8}, @TCA_FQ_FLOW_PLIMIT={0x8}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8}, @TCA_FQ_QUANTUM={0x8, 0xf}]}}]}, 0x78}}, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001440)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x6, [@decl_tag={0xe, 0x0, 0x0, 0x11, 0x2, 0x1}]}, {0x0, [0x30, 0x61, 0x5f, 0x61]}}, &(0x7f0000000440)=""/4096, 0x2e, 0x1000, 0x0, 0x88a, 0x10000}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000000)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x9, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x77, &(0x7f00000002c0), 0x0, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0x23, 0x8, 0x8, &(0x7f0000000100)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x10, 0x1a, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}, {}, {}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @jmp={0x5, 0x1, 0xb, 0x4, 0x8, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000001c0)='GPL\x00', 0x8000, 0x0, 0x0, 0x41000, 0x24, '\x00', r5, @sk_msg=0x7, r6, 0x8, &(0x7f0000001480)={0xa, 0x4}, 0x8, 0x10, 0x0, 0x0, r7, 0xffffffffffffffff, 0x7, 0x0, &(0x7f00000014c0)=[{0x1, 0x1, 0xc, 0x7}, {0x0, 0x3, 0x1, 0x8}, {0x3, 0x3, 0x6a7, 0x9}, {0x0, 0x1, 0xb, 0x8}, {0x1, 0x1, 0x9, 0xb}, {0x2, 0x5, 0x8, 0x7}, {0x3, 0x3, 0xc, 0xa}], 0x10, 0x9510}, 0x94) r8 = socket$vsock_stream(0x28, 0x1, 0x0) listen(0xffffffffffffffff, 0x803) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0xff, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0xc2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '@\x00', 0x14, 0x6, 0x1, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x7, 0x0, 0x0, 0xf}}}}}}}, 0x0) connect$vsock_stream(r8, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) syz_usb_connect(0x1, 0x36, &(0x7f0000001d80)={{0x12, 0x1, 0x201, 0xe4, 0xe7, 0x6, 0x8, 0x13b1, 0x42, 0x1d74, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x2, 0x90, 0x4e, [{{0x9, 0x4, 0xb5, 0x1, 0x2, 0xa4, 0xb2, 0xeb, 0x9, [], [{{0x9, 0x5, 0xe, 0x0, 0x40, 0x9, 0x2, 0x81}}, {{0x9, 0x5, 0x7, 0x10, 0x8, 0xc0, 0x9, 0x8}}]}}]}}]}}, &(0x7f00000023c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 3m30.258453901s ago: executing program 42 (id=6508): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x44b, 0x70bd2c, 0x25dfdbfc, {0x7a, 0x0, 0x0, 0x0, 0x1000, 0x100}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_FWD_MASK={0x6, 0x9, 0xf}, @IFLA_BR_PRIORITY={0x6, 0x6, 0x1000}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x800) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x602104) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4c, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0x3}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8}, @TCA_FQ_FLOW_PLIMIT={0x8}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8}, @TCA_FQ_QUANTUM={0x8, 0xf}]}}]}, 0x78}}, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001440)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x6, [@decl_tag={0xe, 0x0, 0x0, 0x11, 0x2, 0x1}]}, {0x0, [0x30, 0x61, 0x5f, 0x61]}}, &(0x7f0000000440)=""/4096, 0x2e, 0x1000, 0x0, 0x88a, 0x10000}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000000)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x9, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x77, &(0x7f00000002c0), 0x0, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0x23, 0x8, 0x8, &(0x7f0000000100)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x10, 0x1a, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}, {}, {}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @jmp={0x5, 0x1, 0xb, 0x4, 0x8, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000001c0)='GPL\x00', 0x8000, 0x0, 0x0, 0x41000, 0x24, '\x00', r5, @sk_msg=0x7, r6, 0x8, &(0x7f0000001480)={0xa, 0x4}, 0x8, 0x10, 0x0, 0x0, r7, 0xffffffffffffffff, 0x7, 0x0, &(0x7f00000014c0)=[{0x1, 0x1, 0xc, 0x7}, {0x0, 0x3, 0x1, 0x8}, {0x3, 0x3, 0x6a7, 0x9}, {0x0, 0x1, 0xb, 0x8}, {0x1, 0x1, 0x9, 0xb}, {0x2, 0x5, 0x8, 0x7}, {0x3, 0x3, 0xc, 0xa}], 0x10, 0x9510}, 0x94) r8 = socket$vsock_stream(0x28, 0x1, 0x0) listen(0xffffffffffffffff, 0x803) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0xff, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0xc2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '@\x00', 0x14, 0x6, 0x1, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x7, 0x0, 0x0, 0xf}}}}}}}, 0x0) connect$vsock_stream(r8, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) syz_usb_connect(0x1, 0x36, &(0x7f0000001d80)={{0x12, 0x1, 0x201, 0xe4, 0xe7, 0x6, 0x8, 0x13b1, 0x42, 0x1d74, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x2, 0x90, 0x4e, [{{0x9, 0x4, 0xb5, 0x1, 0x2, 0xa4, 0xb2, 0xeb, 0x9, [], [{{0x9, 0x5, 0xe, 0x0, 0x40, 0x9, 0x2, 0x81}}, {{0x9, 0x5, 0x7, 0x10, 0x8, 0xc0, 0x9, 0x8}}]}}]}}]}}, &(0x7f00000023c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 2m15.92086056s ago: executing program 4 (id=6680): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f00000000c0)={0x0, 0x1, 0x3, 0xff02, 0x402, 0x24d}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x3c}, 0x1, 0x0, 0x0, 0x4000080}, 0xe040) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) 2m15.757347617s ago: executing program 4 (id=6681): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, 0x0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) socket$packet(0x11, 0x2, 0x300) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000ce34000000000000000000850000002e00000095"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x1e8629867d7bdaee, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m13.713403677s ago: executing program 4 (id=6683): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a37055437", 0x1f) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x104}, 0x1, 0x0, 0x0, 0x91}, 0x24008000) recvmmsg$unix(r1, &(0x7f0000004ac0)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)=""/121, 0x79}, {&(0x7f00000003c0)=""/67, 0x43}, {&(0x7f0000000440)=""/128, 0x80}], 0x3}}], 0x1, 0x2124, 0x0) 2m13.653022005s ago: executing program 4 (id=6685): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000040)="1a000000020000", 0x7) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000200)={0x0, 0x4, 0x2, 0x9, 0x0, 0x0, 0x0, 0xfd, 0x5}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000002300)=[@in={0x2, 0x4e22, @remote}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f00000002c0)={r2}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000240)={r3, 0xfffd}, 0x8) 2m13.581491767s ago: executing program 4 (id=6686): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000240)=0x3) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, 0x0) read$dsp(r0, &(0x7f0000000380)=""/70, 0x46) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000100)=0x7) 2m13.474346957s ago: executing program 4 (id=6687): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000019080)=@hopopts={0x5c, 0x4, '\x00', [@hao={0xc9, 0x10, @loopback}, @pad1, @hao={0xc9, 0x10, @local}]}, 0x30) sendto$inet6(r0, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x2, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) acct(0x0) chroot(&(0x7f0000000040)='./file0\x00') pread64(r2, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) setsockopt$packet_int(r2, 0x107, 0x11, &(0x7f0000000000)=0xf, 0x4) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000280)={{}, 'syz1\x00', 0x10}) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x51) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) futex(&(0x7f0000000040)=0x2, 0xb, 0x2, 0x0, &(0x7f0000000100)=0x1, 0x2) futex(&(0x7f0000000040)=0x1, 0xd, 0x2, 0x0, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001000ffff26bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="320a050023000000240000000000010062726964676500001400028008001a000a00000008001b00250d0000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x4048000) 1m58.410791754s ago: executing program 43 (id=6687): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000019080)=@hopopts={0x5c, 0x4, '\x00', [@hao={0xc9, 0x10, @loopback}, @pad1, @hao={0xc9, 0x10, @local}]}, 0x30) sendto$inet6(r0, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x2, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) acct(0x0) chroot(&(0x7f0000000040)='./file0\x00') pread64(r2, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) setsockopt$packet_int(r2, 0x107, 0x11, &(0x7f0000000000)=0xf, 0x4) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000280)={{}, 'syz1\x00', 0x10}) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x51) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) futex(&(0x7f0000000040)=0x2, 0xb, 0x2, 0x0, &(0x7f0000000100)=0x1, 0x2) futex(&(0x7f0000000040)=0x1, 0xd, 0x2, 0x0, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001000ffff26bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="320a050023000000240000000000010062726964676500001400028008001a000a00000008001b00250d0000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x4048000) 5.158409196s ago: executing program 2 (id=6877): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110c230000) ioctl$TUNSETOFFLOAD(r0, 0x80047441, 0xf0ff1f00000000) 4.814933902s ago: executing program 2 (id=6879): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0xfffffffffffffe8e, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0xffff, 0x4db35bcef3aceb82}, {0x5}}, [@TCA_STAB={0x0, 0x8, 0x0, 0x1, [{{0x0, 0x1, {0x8, 0xfa, 0x9, 0x4, 0x1, 0x10000, 0x9}}, {0x0, 0x2, [0x8, 0x3]}}, {{0x0, 0x1, {0xff, 0xc1, 0x1, 0x8, 0x1, 0x7, 0x5}}, {0x0, 0x2, [0x7f, 0xffff, 0x3ff, 0xa]}}, {{0x0, 0x1, {0x2, 0xf, 0x5, 0xfffffff5, 0x2, 0xfff, 0x2}}, {0x0, 0x2, [0xa3, 0x9, 0x17d, 0x4, 0x3, 0x101]}}, {{0x0, 0x1, {0x2, 0x61, 0x7, 0x2, 0x1, 0x4, 0x8}}, {0x0, 0x2, [0x800, 0x0, 0x8000, 0x5]}}, {{0x0, 0x1, {0x7, 0x1, 0xe, 0x2, 0x2, 0x1, 0x7}}, {0x0, 0x2, [0xc46, 0x6, 0xd557]}}]}, @TCA_INGRESS_BLOCK={0x0, 0xd, 0x6}, @TCA_RATE={0x0, 0x5, {0x80, 0x6}}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000002600), 0x0) getsockname$packet(r1, &(0x7f0000002640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000002680)=0x14) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0xd, 0x10, &(0x7f0000000000)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x8, 0xff9, &(0x7f00000014c0)=""/4089, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000080)=@req3={0x54c, 0x4, 0x3, 0x3, 0xc, 0x6, 0x7}, 0x1c) r5 = memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\x14\x16\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ', 0x3) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, r5, 0x0) recvfrom(r4, &(0x7f0000000040)=""/18, 0x12, 0x6667b9fa4a4ed82, 0x0, 0x0) r6 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r3, &(0x7f0000002500)="87eea7f7a6cbf06fd842827e9cfbb0b5cd75dc390322ac13a2e87c93fadaf6e66c33cb7cd015331ca876e9993195d7fdc9dadb2384aa62657e2142f488725a794467ef1c80adbbcad639140dbc317fc55fa5f4463450041f89f51ac78fa0db79ad3d250f0343371d1f661905bd345bf4cd5d4474414bd6d94d4cc72bd605fb7a5affc8a2c543102cbb932a5adf36"}, 0x20) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r7, @ANYBLOB="440002804000010024002c006c625f686173685f737461747300050000000000000000000000000000000000050003000b000000080004000800000008"], 0x60}, 0x1, 0x0, 0x0, 0x4000084}, 0x44084) r8 = syz_usb_connect(0x3, 0x2d, &(0x7f00000004c0)=ANY=[@ANYBLOB="1201100311395b40d8050c815f180902030109021b00010601f1080904c808017ff8ac4c090501030002"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x155551fa}) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x89e1, &(0x7f00000025c0)={r0}) syz_usb_ep_read(r8, 0x1, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x0) 4.006357189s ago: executing program 2 (id=6882): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='cpuacct.stat\x00', 0x275a, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0) getsockname$packet(r1, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000200)=@fd={0x7, 0x9, 0x4, 0x800, 0x1, {}, {0x5, 0xc, 0x3, 0x0, 0xf, 0xdb, "ce6cfaea"}, 0x1, 0x4, {}, 0xe, 0x0, r1}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="340000001c0001fc28bd7000fcdbdf2507000000", @ANYRES32=r3, @ANYBLOB="8000260b0a0002000180c200000c00000c000e80050001"], 0x34}, 0x1, 0x0, 0x0, 0x2004c830}, 0x20040010) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) sendto$packet(r5, &(0x7f00000002c0)="48357e0287af48ffa745b497a54e0eec1bf2c69011f35b48339d15afaef1bd7efe075ff441b16e244b8b05fe09e29583ad142567826dfa5cbc6f979b050015bde8c4441cd0fa6be03213181bfe84743015ec12ced8b1aa8f44e5c30afac6f9fd2ab1303be0d1b2c02533bcc97cce7da9b507b053b11821323590d379e9e350a3291fbedb6382de878b7a56e4e38c7f746d0424029f5d49b04697a4", 0xfffffffffffffe20, 0x0, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000040)={'erspan0\x00', &(0x7f00000000c0)={'sit0\x00', r3, 0x1, 0x10, 0x7fff, 0x7, {{0x29, 0x4, 0x1, 0x32, 0xa4, 0x68, 0x0, 0x1, 0x2f, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0xf, 0xeb, [@empty, @dev={0xac, 0x14, 0x14, 0xb}, @private=0xa010100]}, @lsrr={0x83, 0x7, 0xaf, [@multicast2]}, @timestamp_prespec={0x44, 0x2c, 0x65, 0x3, 0x8, [{@multicast2, 0xd}, {@rand_addr=0x64010101, 0x68b5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xc}, {@empty, 0x1}, {@private=0xa010100, 0x4}]}, @timestamp_prespec={0x44, 0x4c, 0xd6, 0x3, 0x3, [{@multicast1, 0x3}, {@local, 0x7fff}, {@rand_addr=0x64010101, 0x7}, {@rand_addr=0x64010102, 0x7}, {@multicast1, 0x8}, {@rand_addr=0x64010102, 0x1}, {@rand_addr=0x64010100, 0xf}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xd8}, {@private=0xa010101, 0x4}]}]}}}}}) 3.64813373s ago: executing program 2 (id=6883): r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000600)={&(0x7f0000000080)={0xa, 0x4e3d, 0x280000, @mcast1, 0xffffffff}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1400000000000000010000000c0000002b0000000000000718"], 0x30}, 0x4000010) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000300)={0x0, 0x6}, &(0x7f0000000340)=0x8) prlimit64(0x0, 0xe, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x30) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) io_uring_setup(0x71c7, &(0x7f0000000080)={0x0, 0x9b95, 0x2, 0x9, 0x154}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) 2.636572401s ago: executing program 6 (id=6884): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000023b7007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$l2tp6(0xa, 0x2, 0x73) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r2 = socket(0x14, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x61d0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYRES64=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20040824}, 0x8040) 1.734875679s ago: executing program 6 (id=6885): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x50}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="7c000000090601020000000000000000030000000900020073797a3100000000050001000700000054000780060004404e1f0000180014801400024000000000000000000000000000000000050007003a000000050015000600000008000840000000021800018014000240"], 0x7c}, 0x1, 0x0, 0x0, 0x10040003}, 0x4000) 1.598151237s ago: executing program 6 (id=6886): syz_open_dev$dri(0x0, 0xb3a, 0x402901) r0 = socket(0x10, 0x803, 0x0) syz_open_dev$dri(0x0, 0x2, 0x40400) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) close(0x3) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_IDLE(r2, 0x103, 0x7, &(0x7f0000000000)=0x8, 0x4) bind$netrom(r2, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) listen(r2, 0x80) accept$netrom(r2, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 1.59722877s ago: executing program 2 (id=6887): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') r0 = socket$l2tp6(0xa, 0x2, 0x73) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r1 = socket(0x14, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x61d0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYRES64=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20040824}, 0x8040) 1.23432942s ago: executing program 6 (id=6888): ioctl$IOMMU_HWPT_ALLOC$TEST(0xffffffffffffffff, 0x3b89, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) read$FUSE(r0, &(0x7f000000e280)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) lsetxattr$security_capability(&(0x7f0000000140)='./file0/../file0/file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000001440)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x7005302, 0x3, 0x0, 0x0, 0x61b7, 0x0, 0x0, 0x2}}, 0x50) lstat(&(0x7f0000000ac0)='./file0/../file0/file0\x00', &(0x7f0000000b00)) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={0x90, 0x0, 0x40100000003, {0x3, 0x3, 0x716, 0x81, 0x2, 0x2c7, {0x1, 0x38000, 0x8, 0x8, 0x1a24, 0x9, 0x5e7, 0x7e, 0x9, 0x6000, 0x3, 0x0, r2, 0xf, 0x10000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file3\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x88580, 0x0) 1.029688015s ago: executing program 2 (id=6889): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='bridge0\x00', 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000006800e97802000000000000000a0000000000000008000500", @ANYRES32=r3], 0x20}, 0x1, 0x0, 0x0, 0x20000081}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) sendmmsg$inet(r0, &(0x7f0000002240)=[{{&(0x7f0000000000)={0x2, 0x4e21, @loopback}, 0x10, 0x0}}], 0x1, 0x4000850) 275.440074ms ago: executing program 6 (id=6890): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) sendmsg$IEEE802154_LLSEC_ADD_DEV(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="4d7e00000000000000002a00000008002f000000000005003600000000000c0005000000000200000000050037000000000008000200", @ANYRES32=r0, @ANYBLOB="06000600fe000000060004"], 0x50}, 0x4, 0x700000000000000, 0x0, 0x4}, 0x4040084) 0s ago: executing program 6 (id=6891): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448cb, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e0402030c"], 0x7) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) connect$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): length: 249 > 2 [ 1887.405338][ C0] vkms_vblank_simulate: vblank timer overrun [ 1887.767653][ C0] vkms_vblank_simulate: vblank timer overrun [ 1887.960822][ C0] vkms_vblank_simulate: vblank timer overrun [ 1888.582293][ C0] vkms_vblank_simulate: vblank timer overrun [ 1889.383795][T21682] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 1889.383868][T11525] Bluetooth: hci3: command tx timeout [ 1889.466575][T11525] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 1889.574453][T24519] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6305'. [ 1889.574471][T24519] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6305'. [ 1889.774161][T24519] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6305'. [ 1889.774186][T24519] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6305'. [ 1889.822504][ T7272] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1889.834863][T24497] chnl_net:caif_netlink_parms(): no params data found [ 1889.841805][ T7272] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1889.845714][ T7272] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1890.384601][ C0] vkms_vblank_simulate: vblank timer overrun [ 1890.511306][T24189] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1890.556737][T24189] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1890.598843][T24523] orangefs_mount: mount request failed with -4 [ 1890.711583][T24189] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1890.876834][T24189] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1890.925884][T24497] bridge0: port 1(bridge_slave_0) entered blocking state [ 1890.926694][T24497] bridge0: port 1(bridge_slave_0) entered disabled state [ 1890.927037][T24497] bridge_slave_0: entered allmulticast mode [ 1890.935664][T24497] bridge_slave_0: entered promiscuous mode [ 1890.960153][T24497] bridge0: port 2(bridge_slave_1) entered blocking state [ 1890.960310][T24497] bridge0: port 2(bridge_slave_1) entered disabled state [ 1890.960621][T24497] bridge_slave_1: entered allmulticast mode [ 1890.972154][T24497] bridge_slave_1: entered promiscuous mode [ 1891.330271][T24497] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1891.362279][T24497] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1891.453757][T11525] Bluetooth: hci3: command tx timeout [ 1891.727344][T24497] team0: Port device team_slave_0 added [ 1891.738984][T24497] team0: Port device team_slave_1 added [ 1891.857537][T22198] bridge_slave_1: left allmulticast mode [ 1891.857569][T22198] bridge_slave_1: left promiscuous mode [ 1891.857828][T22198] bridge0: port 2(bridge_slave_1) entered disabled state [ 1891.925884][T22198] bridge_slave_0: left allmulticast mode [ 1891.925916][T22198] bridge_slave_0: left promiscuous mode [ 1891.926218][T22198] bridge0: port 1(bridge_slave_0) entered disabled state [ 1892.181056][ C0] vkms_vblank_simulate: vblank timer overrun [ 1892.668436][T24547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1892.668915][T24547] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1893.402022][T24560] netlink: 'syz.2.6315': attribute type 7 has an invalid length. [ 1893.422955][T24560] affs: No valid root block on device nullb0 [ 1893.484697][T22198] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1893.534314][T11525] Bluetooth: hci3: command tx timeout [ 1893.804423][T22198] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1894.691218][T22198] bond0 (unregistering): Released all slaves [ 1896.177355][T21682] Bluetooth: hci3: command tx timeout [ 1896.324681][T24497] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1896.324696][T24497] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1896.324717][T24497] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1896.448018][T24567] orangefs_mount: mount request failed with -4 [ 1896.476253][T24497] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1896.476272][T24497] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1896.476314][T24497] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1896.724269][T22198] hsr_slave_0: left promiscuous mode [ 1896.777063][T22198] hsr_slave_1: left promiscuous mode [ 1896.778215][T22198] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1896.816393][T22198] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1896.929418][T24586] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 1896.936754][T24586] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 1896.955570][T24586] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 1896.960881][T24586] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 1896.976030][T24586] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 1896.981155][T24586] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 1896.993451][T24586] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 1896.995046][T24586] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 1896.995101][T24586] UDF-fs: warning (device nbd5): udf_fill_super: No partition found (1) [ 1898.083323][T24593] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 1898.085973][T24593] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 1898.104903][T24593] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 1898.106580][T24593] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 1898.121971][T24593] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 1898.123965][T24593] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 1898.129962][T24593] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 1898.131071][T24593] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 1898.131124][T24593] UDF-fs: warning (device nbd5): udf_fill_super: No partition found (1) [ 1900.204614][T22198] team0 (unregistering): Port device team_slave_1 removed [ 1900.694689][T22198] team0 (unregistering): Port device team_slave_0 removed [ 1902.547563][T24619] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING [ 1903.836080][T24497] hsr_slave_0: entered promiscuous mode [ 1903.837169][T24497] hsr_slave_1: entered promiscuous mode [ 1903.838070][T24497] debugfs: 'hsr0' already exists in 'hsr' [ 1903.838091][T24497] Cannot create hsr debugfs directory [ 1906.041923][T24640] FAULT_INJECTION: forcing a failure. [ 1906.041923][T24640] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1906.041990][T24640] CPU: 1 UID: 0 PID: 24640 Comm: syz.5.6339 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1906.042018][T24640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1906.042033][T24640] Call Trace: [ 1906.042043][T24640] [ 1906.042054][T24640] dump_stack_lvl+0x189/0x250 [ 1906.042095][T24640] ? __pfx____ratelimit+0x10/0x10 [ 1906.042128][T24640] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1906.042162][T24640] ? __pfx__printk+0x10/0x10 [ 1906.042190][T24640] ? __might_fault+0xb0/0x130 [ 1906.042235][T24640] should_fail_ex+0x46c/0x600 [ 1906.042273][T24640] _copy_from_user+0x2d/0xb0 [ 1906.042299][T24640] ___sys_sendmsg+0x158/0x2a0 [ 1906.042333][T24640] ? __pfx____sys_sendmsg+0x10/0x10 [ 1906.042401][T24640] ? __fget_files+0x2a/0x420 [ 1906.042433][T24640] ? __fget_files+0x3a6/0x420 [ 1906.042476][T24640] __x64_sys_sendmsg+0x1a1/0x260 [ 1906.042508][T24640] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1906.042581][T24640] ? do_syscall_64+0xbe/0xfa0 [ 1906.042619][T24640] do_syscall_64+0xfa/0xfa0 [ 1906.042658][T24640] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1906.042680][T24640] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1906.042702][T24640] ? clear_bhb_loop+0x60/0xb0 [ 1906.042730][T24640] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1906.042753][T24640] RIP: 0033:0x7fa7d68af749 [ 1906.042772][T24640] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1906.042792][T24640] RSP: 002b:00007fa7d4ad4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1906.042817][T24640] RAX: ffffffffffffffda RBX: 00007fa7d6b06180 RCX: 00007fa7d68af749 [ 1906.042834][T24640] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000009 [ 1906.042849][T24640] RBP: 00007fa7d4ad4090 R08: 0000000000000000 R09: 0000000000000000 [ 1906.042863][T24640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1906.042877][T24640] R13: 00007fa7d6b06218 R14: 00007fa7d6b06180 R15: 00007ffc380d1fd8 [ 1906.042913][T24640] [ 1908.181159][T11525] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1908.207972][T11525] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1908.209984][T11525] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1908.221004][T11525] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1908.221962][T11525] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1910.099671][T24671] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 1910.102206][T24671] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 1910.115293][T24671] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 1910.119999][T24671] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 1910.127727][T24671] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 1910.129432][T24671] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 1910.138797][T24671] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 1910.139930][T24671] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 1910.139991][T24671] UDF-fs: warning (device nbd5): udf_fill_super: No partition found (1) [ 1910.337893][T11525] Bluetooth: hci0: command tx timeout [ 1912.413744][T11525] Bluetooth: hci0: command tx timeout [ 1913.150067][ C0] vkms_vblank_simulate: vblank timer overrun [ 1913.279151][ C0] vkms_vblank_simulate: vblank timer overrun [ 1913.395449][ C0] vkms_vblank_simulate: vblank timer overrun [ 1913.911236][T24694] netlink: 'syz.4.6355': attribute type 15 has an invalid length. [ 1914.039875][T24651] chnl_net:caif_netlink_parms(): no params data found [ 1914.066115][T24497] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1914.116994][T24497] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1914.252224][T24497] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1914.398794][T24497] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1914.460504][T24700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1914.460972][T24700] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1914.493880][T11525] Bluetooth: hci0: command tx timeout [ 1914.745401][ C0] vkms_vblank_simulate: vblank timer overrun [ 1915.705566][ C0] vkms_vblank_simulate: vblank timer overrun [ 1915.982813][T24720] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1915.983273][T24720] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1916.166100][ C0] vkms_vblank_simulate: vblank timer overrun [ 1916.267221][T24651] bridge0: port 1(bridge_slave_0) entered blocking state [ 1916.267528][T24651] bridge0: port 1(bridge_slave_0) entered disabled state [ 1916.267737][T24651] bridge_slave_0: entered allmulticast mode [ 1916.270063][T24651] bridge_slave_0: entered promiscuous mode [ 1916.275131][T24651] bridge0: port 2(bridge_slave_1) entered blocking state [ 1916.275339][T24651] bridge0: port 2(bridge_slave_1) entered disabled state [ 1916.275565][T24651] bridge_slave_1: entered allmulticast mode [ 1916.279463][T24651] bridge_slave_1: entered promiscuous mode [ 1916.359337][T22198] bridge_slave_1: left allmulticast mode [ 1916.359371][T22198] bridge_slave_1: left promiscuous mode [ 1916.359728][T22198] bridge0: port 2(bridge_slave_1) entered disabled state [ 1916.415557][T22198] bridge_slave_0: left allmulticast mode [ 1916.415583][T22198] bridge_slave_0: left promiscuous mode [ 1916.415899][T22198] bridge0: port 1(bridge_slave_0) entered disabled state [ 1916.583848][T11525] Bluetooth: hci0: command tx timeout [ 1916.666815][ C0] vkms_vblank_simulate: vblank timer overrun [ 1916.766363][ C0] vkms_vblank_simulate: vblank timer overrun [ 1916.853578][ C0] vkms_vblank_simulate: vblank timer overrun [ 1916.951661][ C0] vkms_vblank_simulate: vblank timer overrun [ 1917.260828][ C0] vkms_vblank_simulate: vblank timer overrun [ 1917.593443][ C0] vkms_vblank_simulate: vblank timer overrun [ 1917.810661][ C0] vkms_vblank_simulate: vblank timer overrun [ 1917.980719][ C0] vkms_vblank_simulate: vblank timer overrun [ 1918.090503][ C0] vkms_vblank_simulate: vblank timer overrun [ 1918.544424][T22198] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1918.624475][T22198] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1918.696110][T22198] bond0 (unregistering): Released all slaves [ 1918.816432][ C0] vkms_vblank_simulate: vblank timer overrun [ 1918.882830][ C0] vkms_vblank_simulate: vblank timer overrun [ 1918.952814][ C0] vkms_vblank_simulate: vblank timer overrun [ 1919.023036][ C0] vkms_vblank_simulate: vblank timer overrun [ 1919.129977][T24740] netlink: 'syz.4.6366': attribute type 15 has an invalid length. [ 1919.156059][T24651] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1919.173300][T24651] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1919.383757][T22198] hsr_slave_0: left promiscuous mode [ 1919.423739][T22198] hsr_slave_1: left promiscuous mode [ 1919.424605][T22198] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1919.455086][T22198] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1919.808530][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1919.808648][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1919.810008][ C0] vkms_vblank_simulate: vblank timer overrun [ 1919.893979][ C0] vkms_vblank_simulate: vblank timer overrun [ 1920.146905][ C0] vkms_vblank_simulate: vblank timer overrun [ 1920.275737][ C0] vkms_vblank_simulate: vblank timer overrun [ 1920.416501][T22198] team0 (unregistering): Port device team_slave_1 removed [ 1920.471339][ C0] vkms_vblank_simulate: vblank timer overrun [ 1920.606546][T22198] team0 (unregistering): Port device team_slave_0 removed [ 1920.892665][ C0] vkms_vblank_simulate: vblank timer overrun [ 1921.092486][ C0] vkms_vblank_simulate: vblank timer overrun [ 1921.268605][ C0] vkms_vblank_simulate: vblank timer overrun [ 1921.584206][ C0] vkms_vblank_simulate: vblank timer overrun [ 1921.809660][ C0] vkms_vblank_simulate: vblank timer overrun [ 1922.209819][ C0] vkms_vblank_simulate: vblank timer overrun [ 1922.486173][T24651] team0: Port device team_slave_0 added [ 1922.558599][T24651] team0: Port device team_slave_1 added [ 1922.657612][ C0] vkms_vblank_simulate: vblank timer overrun [ 1922.970026][ C0] vkms_vblank_simulate: vblank timer overrun [ 1923.022237][T24651] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1923.034533][T24651] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1923.034571][T24651] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1923.044806][T24651] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1923.044830][T24651] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1923.044866][T24651] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1923.660165][ C0] vkms_vblank_simulate: vblank timer overrun [ 1923.721444][ C0] vkms_vblank_simulate: vblank timer overrun [ 1923.845442][ C0] vkms_vblank_simulate: vblank timer overrun [ 1923.971088][T24651] hsr_slave_0: entered promiscuous mode [ 1923.984584][T24651] hsr_slave_1: entered promiscuous mode [ 1923.990491][T24651] debugfs: 'hsr0' already exists in 'hsr' [ 1923.990524][T24651] Cannot create hsr debugfs directory [ 1924.052955][ C0] vkms_vblank_simulate: vblank timer overrun [ 1924.497812][ C0] vkms_vblank_simulate: vblank timer overrun [ 1925.124590][ C0] vkms_vblank_simulate: vblank timer overrun [ 1925.376066][ C0] vkms_vblank_simulate: vblank timer overrun [ 1925.403068][T24781] orangefs_mount: mount request failed with -4 [ 1925.412133][ T3600] kworker/u8:11 (3600) used greatest stack depth: 12056 bytes left [ 1925.670181][T24793] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 1925.672733][T24793] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 1925.678944][T24793] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 1925.680530][T24793] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 1925.694647][T24793] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 1925.696204][T24793] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 1925.698910][T24793] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 1925.699324][T24793] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 1925.699353][T24793] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 1926.300134][T24794] netlink: 80 bytes leftover after parsing attributes in process `syz.4.6382'. [ 1927.539891][T11525] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 1931.821769][T24497] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1933.862486][T24497] 8021q: adding VLAN 0 to HW filter on device team0 [ 1933.872640][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 1933.872757][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1934.165075][ C0] vkms_vblank_simulate: vblank timer overrun [ 1934.245952][ C0] vkms_vblank_simulate: vblank timer overrun [ 1934.285028][ C0] vkms_vblank_simulate: vblank timer overrun [ 1934.427600][ T1475] bridge0: port 2(bridge_slave_1) entered blocking state [ 1934.427714][ T1475] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1934.563304][ C0] vkms_vblank_simulate: vblank timer overrun [ 1934.652688][ C0] vkms_vblank_simulate: vblank timer overrun [ 1934.772470][T24837] orangefs_mount: mount request failed with -4 [ 1935.341770][T11525] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 1936.306195][T24651] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1936.340271][T24651] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1936.402074][T24651] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1936.551678][ C0] vkms_vblank_simulate: vblank timer overrun [ 1936.724727][ C0] vkms_vblank_simulate: vblank timer overrun [ 1936.863251][T24651] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1936.864445][ C0] vkms_vblank_simulate: vblank timer overrun [ 1937.081874][ C0] vkms_vblank_simulate: vblank timer overrun [ 1937.190469][ C0] vkms_vblank_simulate: vblank timer overrun [ 1937.288628][ C0] vkms_vblank_simulate: vblank timer overrun [ 1937.397451][T24497] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1937.416269][T24862] orangefs_mount: mount request failed with -4 [ 1937.748817][T24497] veth0_vlan: entered promiscuous mode [ 1937.822003][T24497] veth1_vlan: entered promiscuous mode [ 1938.063031][T24497] veth0_macvtap: entered promiscuous mode [ 1938.087855][T24651] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1938.089168][T24497] veth1_macvtap: entered promiscuous mode [ 1938.173032][T24651] 8021q: adding VLAN 0 to HW filter on device team0 [ 1938.229491][T24497] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1938.235799][ T7272] bridge0: port 1(bridge_slave_0) entered blocking state [ 1938.235968][ T7272] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1938.298305][T10933] bridge0: port 2(bridge_slave_1) entered blocking state [ 1938.298458][T10933] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1938.329174][T24497] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1938.378420][T22198] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1938.387401][T22198] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1938.389205][T22198] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1938.390645][T22198] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1939.686864][T24896] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1939.687167][T24896] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1940.255688][ C1] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 1940.406268][ T1475] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1940.406293][ T1475] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1940.534879][T10933] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1940.534903][T10933] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1940.939899][T24651] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1941.061867][T24922] netlink: 'syz.3.6417': attribute type 7 has an invalid length. [ 1941.077808][T24922] affs: No valid root block on device nullb0 [ 1942.861850][T24651] veth0_vlan: entered promiscuous mode [ 1942.871477][T24651] veth1_vlan: entered promiscuous mode [ 1942.911120][T24651] veth0_macvtap: entered promiscuous mode [ 1942.947500][T24651] veth1_macvtap: entered promiscuous mode [ 1942.990235][T24651] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1943.023916][T24651] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1943.211609][T24942] input: syz1 as /devices/virtual/input/input30 [ 1943.754123][ T7272] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1943.888649][ T7272] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1944.149947][ T38] audit: type=1326 audit(1763992582.839:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24958 comm="syz.3.6427" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1e91f6f749 code=0x0 [ 1944.292493][ T7272] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1944.306038][T24950] netlink: 'syz.2.6424': attribute type 15 has an invalid length. [ 1944.325757][ T7272] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1944.737317][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1944.737339][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1945.025556][T24976] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1945.026029][T24976] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1945.516635][T24974] netlink: 'syz.5.6431': attribute type 15 has an invalid length. [ 1946.653257][ T1475] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1946.653282][ T1475] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1946.836276][T24980] orangefs_mount: mount request failed with -4 [ 1947.826997][T25001] input: syz1 as /devices/virtual/input/input31 [ 1950.054024][ T5887] usb 6-1: USB disconnect, device number 60 [ 1950.253647][ T38] audit: type=1326 audit(1763992588.939:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25017 comm="syz.2.6442" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f912ca9f749 code=0x0 [ 1950.274027][T11525] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 1951.672630][T25024] orangefs_mount: mount request failed with -4 [ 1952.139213][T25029] orangefs_mount: mount request failed with -4 [ 1952.225528][T21682] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1952.233293][T21682] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1952.241955][T21682] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1952.264062][T21682] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1952.276824][T21682] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1952.879113][T11525] Bluetooth: hci5: unexpected cc 0x203d length: 65 > 1 [ 1952.879312][T11525] Bluetooth: hci5: unexpected event for opcode 0x203d [ 1954.000312][T25031] orangefs_mount: mount request failed with -4 [ 1954.438810][T11525] Bluetooth: hci4: command tx timeout [ 1956.500161][T11525] Bluetooth: hci4: command tx timeout [ 1957.556401][T25073] orangefs_mount: mount request failed with -4 [ 1957.714050][T11525] Bluetooth: hci5: unexpected cc 0x203d length: 65 > 1 [ 1957.714315][T11525] Bluetooth: hci5: unexpected event for opcode 0x203d [ 1958.571018][T25065] orangefs_mount: mount request failed with -4 [ 1958.574491][T11525] Bluetooth: hci4: command tx timeout [ 1958.712131][T25088] netlink: 'syz.4.6464': attribute type 7 has an invalid length. [ 1958.751993][T25088] affs: No valid root block on device nullb0 [ 1958.973167][T11525] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 1959.104564][T25101] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 1959.110628][T25101] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 1959.123926][T25101] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 1959.125611][T25101] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 1959.132346][T25101] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 1959.133883][T25101] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 1959.139760][T25101] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 1959.141002][T25101] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 1959.141065][T25101] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1) [ 1960.054697][T25106] netlink: 'syz.2.6469': attribute type 4 has an invalid length. [ 1960.130371][ T1116] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1960.183684][T25006] usb 7-1: new low-speed USB device number 101 using dummy_hcd [ 1960.234257][T25099] netlink: 'syz.6.6470': attribute type 15 has an invalid length. [ 1960.353285][T25006] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1960.357817][T25006] usb 7-1: config 1 has an invalid interface number: 181 but max is 0 [ 1960.357852][T25006] usb 7-1: config 1 has no interface number 0 [ 1960.357909][T25006] usb 7-1: config 1 interface 181 altsetting 1 endpoint 0xE has invalid maxpacket 64, setting to 8 [ 1960.357945][T25006] usb 7-1: config 1 interface 181 has no altsetting 0 [ 1960.362387][T25006] usb 7-1: string descriptor 0 read error: -22 [ 1960.362566][T25006] usb 7-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=1d.74 [ 1960.362596][T25006] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1960.494936][T16940] usb 4-1: new low-speed USB device number 22 using dummy_hcd [ 1960.512908][T25006] usb 7-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1960.618087][T24863] usb 7-1: Failed to submit usb control message: -71 [ 1960.621611][T24863] usb 7-1: unable to send the bmi data to the device: -71 [ 1960.621991][T24863] usb 7-1: unable to get target info from device [ 1960.622801][T24863] usb 7-1: could not get target info (-71) [ 1960.622925][T24863] usb 7-1: could not probe fw (-71) [ 1960.638926][T25006] usb 7-1: USB disconnect, device number 101 [ 1960.656366][T11525] Bluetooth: hci4: command tx timeout [ 1960.687443][T25114] netlink: 'syz.3.6471': attribute type 15 has an invalid length. [ 1960.786750][T16940] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1960.788551][T16940] usb 4-1: config 1 has an invalid interface number: 181 but max is 0 [ 1960.788581][T16940] usb 4-1: config 1 has no interface number 0 [ 1960.788633][T16940] usb 4-1: config 1 interface 181 altsetting 1 endpoint 0xE has invalid maxpacket 64, setting to 8 [ 1960.788664][T16940] usb 4-1: config 1 interface 181 has no altsetting 0 [ 1960.805225][T16940] usb 4-1: string descriptor 0 read error: -22 [ 1960.805609][T16940] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=1d.74 [ 1960.805639][T16940] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1961.027925][T16940] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1961.197434][T24863] usb 4-1: Failed to submit usb control message: -71 [ 1961.197478][T24863] usb 4-1: unable to send the bmi data to the device: -71 [ 1961.197500][T24863] usb 4-1: unable to get target info from device [ 1961.197518][T24863] usb 4-1: could not get target info (-71) [ 1961.197539][T24863] usb 4-1: could not probe fw (-71) [ 1961.198277][ T5900] usb 4-1: USB disconnect, device number 22 [ 1961.397022][ T1116] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1961.514807][T25040] chnl_net:caif_netlink_parms(): no params data found [ 1961.567853][T25127] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6474'. [ 1961.848776][ T1116] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1962.459678][T25138] netlink: 'syz.3.6479': attribute type 7 has an invalid length. [ 1962.566407][T25138] affs: No valid root block on device nullb0 [ 1962.573922][T12356] usb 7-1: new high-speed USB device number 102 using dummy_hcd [ 1962.733814][T12356] usb 7-1: Using ep0 maxpacket: 8 [ 1962.737303][T12356] usb 7-1: config 0 has no interfaces? [ 1962.757445][T12356] usb 7-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 1962.757481][T12356] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1962.757502][T12356] usb 7-1: Product: syz [ 1962.757518][T12356] usb 7-1: Manufacturer: syz [ 1962.757534][T12356] usb 7-1: SerialNumber: syz [ 1962.758512][T25136] orangefs_mount: mount request failed with -4 [ 1962.851561][T12356] usb 7-1: config 0 descriptor?? [ 1963.286381][T25150] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 1963.286778][T25150] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 1963.288182][T25150] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 1963.288468][T25150] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 1963.289523][T25150] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 1963.289783][T25150] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 1963.290716][T25150] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 1963.290941][T25150] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 1963.290971][T25150] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1) [ 1965.947100][T25006] usb 7-1: USB disconnect, device number 102 [ 1966.062165][ T1116] bond0: (slave netdevsim0): Releasing backup interface [ 1966.137794][ T1116] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1966.441924][T11525] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 1968.468218][T12356] usb 7-1: new full-speed USB device number 103 using dummy_hcd [ 1968.631465][T12356] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1968.631497][T12356] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1968.670254][T12356] usb 7-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 1968.670288][T12356] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1968.670311][T12356] usb 7-1: Product: syz [ 1968.670325][T12356] usb 7-1: Manufacturer: syz [ 1968.670340][T12356] usb 7-1: SerialNumber: syz [ 1968.735289][T25040] bridge0: port 1(bridge_slave_0) entered blocking state [ 1968.735826][T12356] usb 7-1: config 0 descriptor?? [ 1968.746932][T25040] bridge0: port 1(bridge_slave_0) entered disabled state [ 1968.747272][T25040] bridge_slave_0: entered allmulticast mode [ 1968.768864][T25040] bridge_slave_0: entered promiscuous mode [ 1968.780683][T25040] bridge0: port 2(bridge_slave_1) entered blocking state [ 1968.781646][T25040] bridge0: port 2(bridge_slave_1) entered disabled state [ 1968.781930][T25040] bridge_slave_1: entered allmulticast mode [ 1968.809025][T25040] bridge_slave_1: entered promiscuous mode [ 1968.809498][T12356] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1968.884852][T12356] snd-usb-audio 7-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 1969.580260][T25040] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1969.620465][T25040] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1969.672742][ T9451] usb 7-1: USB disconnect, device number 103 [ 1970.952880][ T38] audit: type=1326 audit(1763992609.639:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25201 comm="syz.4.6496" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f67b56cf749 code=0x0 [ 1972.155909][T25040] team0: Port device team_slave_0 added [ 1972.212654][T25040] team0: Port device team_slave_1 added [ 1972.408456][T11525] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 1973.092440][T25040] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1973.092460][T25040] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1973.092491][T25040] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1973.159611][T25040] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1973.159741][T25040] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1973.159773][T25040] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1973.233900][T25212] orangefs_mount: mount request failed with -4 [ 1975.744993][ T1116] bridge_slave_1: left allmulticast mode [ 1975.745027][ T1116] bridge_slave_1: left promiscuous mode [ 1975.745283][ T1116] bridge0: port 2(bridge_slave_1) entered disabled state [ 1976.023754][ T5900] usb 4-1: new low-speed USB device number 23 using dummy_hcd [ 1976.145281][ T1116] bridge_slave_0: left allmulticast mode [ 1976.145315][ T1116] bridge_slave_0: left promiscuous mode [ 1976.145602][ T1116] bridge0: port 1(bridge_slave_0) entered disabled state [ 1976.896496][ T5900] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1976.898067][ T5900] usb 4-1: config 1 has an invalid interface number: 181 but max is 0 [ 1976.898094][ T5900] usb 4-1: config 1 has no interface number 0 [ 1976.898146][ T5900] usb 4-1: config 1 interface 181 altsetting 1 endpoint 0xE has invalid maxpacket 64, setting to 8 [ 1976.898178][ T5900] usb 4-1: config 1 interface 181 has no altsetting 0 [ 1976.902627][ T5900] usb 4-1: string descriptor 0 read error: -22 [ 1976.902825][ T5900] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=1d.74 [ 1976.902850][ T5900] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1977.499126][ T5900] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1979.023143][T24834] usb 7-1: new full-speed USB device number 104 using dummy_hcd [ 1979.699301][T16957] usb 4-1: Failed to submit usb control message: -110 [ 1979.699341][T16957] usb 4-1: unable to send the bmi data to the device: -110 [ 1979.699404][T16957] usb 4-1: unable to get target info from device [ 1979.699426][T16957] usb 4-1: could not get target info (-110) [ 1979.699451][T16957] usb 4-1: could not probe fw (-110) [ 1980.035874][T24834] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1980.035903][T24834] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1980.039234][T24834] usb 7-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 1980.039262][T24834] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1980.039277][T24834] usb 7-1: Product: syz [ 1980.039287][T24834] usb 7-1: Manufacturer: syz [ 1980.039299][T24834] usb 7-1: SerialNumber: syz [ 1980.089485][T24834] usb 7-1: config 0 descriptor?? [ 1980.146858][T24834] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1980.255301][T24834] snd-usb-audio 7-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 1980.281259][T24834] usb 7-1: USB disconnect, device number 104 [ 1980.689178][T11525] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 1980.773613][T24834] usb 7-1: new high-speed USB device number 105 using dummy_hcd [ 1980.933614][T24834] usb 7-1: Using ep0 maxpacket: 32 [ 1980.937432][T24834] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1980.937467][T24834] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1980.937510][T24834] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1980.937544][T24834] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1980.943193][T24834] usb 7-1: config 0 descriptor?? [ 1980.947897][T24834] hub 7-1:0.0: USB hub found [ 1981.148221][T24834] hub 7-1:0.0: 1 port detected [ 1981.212975][T24834] hub 7-1:0.0: hub_hub_status failed (err = -71) [ 1981.212998][T24834] hub 7-1:0.0: config failed, can't get hub status (err -71) [ 1981.237036][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1981.237089][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1981.275205][T24834] usbhid 7-1:0.0: can't add hid device: -71 [ 1981.275317][T24834] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1981.305080][T24834] usb 7-1: USB disconnect, device number 105 [ 1981.677097][T25279] orangefs_mount: mount request failed with -4 [ 1983.852462][T11525] Bluetooth: hci0: unexpected cc 0x203d length: 65 > 1 [ 1985.099597][ T5880] usb 7-1: new full-speed USB device number 106 using dummy_hcd [ 1985.339770][ T5880] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1985.339947][ T5880] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1985.440976][ T5880] usb 7-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 1985.441101][ T5880] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1985.441165][ T5880] usb 7-1: Product: syz [ 1985.441362][ T5880] usb 7-1: Manufacturer: syz [ 1985.441536][ T5880] usb 7-1: SerialNumber: syz [ 1985.791915][ T5880] usb 7-1: config 0 descriptor?? [ 1986.070981][ T5880] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1986.226527][ T5880] snd-usb-audio 7-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 1986.383190][T25306] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 1986.386005][T25306] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 1986.400741][T25306] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 1986.402923][T25306] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 1986.413144][T25306] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 1986.418669][T25306] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 1986.433211][T25306] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 1986.434866][T25306] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 1986.434929][T25306] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 1987.422865][T24834] usb 7-1: USB disconnect, device number 106 [ 1988.774424][ T1116] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1988.854455][ T1116] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1988.906608][ T1116] bond0 (unregistering): Released all slaves [ 1990.082552][T25322] netlink: 'syz.2.6530': attribute type 7 has an invalid length. [ 1990.088958][T25322] affs: No valid root block on device nullb0 [ 1990.727021][ T1116] bond1 (unregistering): Released all slaves [ 1990.809883][T21682] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1990.840789][T21682] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1990.851057][T21682] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1990.977983][T21682] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1990.978876][T21682] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1991.263883][T25243] netlink: 'syz.3.6508': attribute type 15 has an invalid length. [ 1993.433562][T21682] Bluetooth: hci1: command tx timeout [ 1995.321545][T25340] orangefs_mount: mount request failed with -4 [ 1995.323150][T25260] usb 4-1: USB disconnect, device number 23 [ 1995.457393][T21682] Bluetooth: hci1: command tx timeout [ 1995.479540][T25040] hsr_slave_0: entered promiscuous mode [ 1995.481461][T25040] hsr_slave_1: entered promiscuous mode [ 1995.482537][T25040] debugfs: 'hsr0' already exists in 'hsr' [ 1995.482564][T25040] Cannot create hsr debugfs directory [ 1995.662789][T25356] netlink: 'syz.6.6540': attribute type 7 has an invalid length. [ 1997.397644][T25370] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 1997.400306][T25370] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 1997.409977][T25370] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 1997.411482][T25370] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 1997.418504][T25370] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 1997.419673][T25370] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 1997.425877][T25370] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 1997.427072][T25370] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 1997.427128][T25370] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 1997.707554][T21682] Bluetooth: hci1: command tx timeout [ 1998.408130][T25373] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 1998.408592][T25373] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 1998.410074][T25373] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 1998.410405][T25373] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 1998.411435][T25373] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 1998.411665][T25373] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 1998.412573][T25373] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 1998.412773][T25373] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 1998.412796][T25373] UDF-fs: warning (device nbd6): udf_fill_super: No partition found (1) [ 1999.855191][T21682] Bluetooth: hci1: command tx timeout [ 2000.585613][T25386] netlink: 'syz.2.6549': attribute type 7 has an invalid length. [ 2000.648928][T25386] affs: No valid root block on device nullb0 [ 2000.686247][T25383] orangefs_mount: mount request failed with -4 [ 2002.263764][T21682] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 2002.488261][T21682] Bluetooth: hci0: unexpected subevent 0x10 length: 5 > 2 [ 2003.757082][T25414] FAULT_INJECTION: forcing a failure. [ 2003.757082][T25414] name failslab, interval 1, probability 0, space 0, times 0 [ 2003.757121][T25414] CPU: 1 UID: 0 PID: 25414 Comm: syz.4.6558 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 2003.757148][T25414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2003.757163][T25414] Call Trace: [ 2003.757172][T25414] [ 2003.757183][T25414] dump_stack_lvl+0x189/0x250 [ 2003.757223][T25414] ? __pfx____ratelimit+0x10/0x10 [ 2003.757255][T25414] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2003.757290][T25414] ? __pfx__printk+0x10/0x10 [ 2003.757314][T25414] ? netlink_sendmsg+0x805/0xb30 [ 2003.757342][T25414] ? __x64_sys_sendmsg+0x1a1/0x260 [ 2003.757370][T25414] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2003.757404][T25414] should_fail_ex+0x46c/0x600 [ 2003.757440][T25414] ? skb_clone+0x212/0x3a0 [ 2003.757468][T25414] should_failslab+0xa8/0x100 [ 2003.757503][T25414] ? skb_clone+0x212/0x3a0 [ 2003.757529][T25414] kmem_cache_alloc_noprof+0x6f/0x6b0 [ 2003.757567][T25414] skb_clone+0x212/0x3a0 [ 2003.757600][T25414] __netlink_deliver_tap+0x404/0x850 [ 2003.757641][T25414] ? netlink_deliver_tap+0x2e/0x1b0 [ 2003.757669][T25414] netlink_deliver_tap+0x19c/0x1b0 [ 2003.757696][T25414] netlink_sendskb+0x68/0x140 [ 2003.757745][T25414] netlink_unicast+0x3b6/0xa10 [ 2003.757764][T25414] ? __asan_memcpy+0x40/0x70 [ 2003.757800][T25414] ? __pfx_netlink_unicast+0x10/0x10 [ 2003.757834][T25414] netlink_rcv_skb+0x28c/0x470 [ 2003.757860][T25414] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 2003.757898][T25414] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2003.757941][T25414] ? mutex_lock_nested+0x154/0x1d0 [ 2003.757967][T25414] ? xfrm_netlink_rcv+0x6a/0x90 [ 2003.758004][T25414] xfrm_netlink_rcv+0x79/0x90 [ 2003.758038][T25414] netlink_unicast+0x846/0xa10 [ 2003.758069][T25414] ? __pfx_netlink_unicast+0x10/0x10 [ 2003.758094][T25414] ? netlink_sendmsg+0x642/0xb30 [ 2003.758117][T25414] ? skb_put+0x11b/0x210 [ 2003.758147][T25414] netlink_sendmsg+0x805/0xb30 [ 2003.758170][T25414] ? is_bpf_text_address+0x26/0x2b0 [ 2003.758216][T25414] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2003.758252][T25414] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2003.758285][T25414] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2003.758311][T25414] __sock_sendmsg+0x21c/0x270 [ 2003.758348][T25414] ____sys_sendmsg+0x508/0x820 [ 2003.758384][T25414] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2003.758423][T25414] ? import_iovec+0x74/0xa0 [ 2003.758459][T25414] ___sys_sendmsg+0x21f/0x2a0 [ 2003.758490][T25414] ? __pfx____sys_sendmsg+0x10/0x10 [ 2003.758564][T25414] ? __fget_files+0x2a/0x420 [ 2003.758597][T25414] ? __fget_files+0x3a6/0x420 [ 2003.758641][T25414] __x64_sys_sendmsg+0x1a1/0x260 [ 2003.758674][T25414] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2003.758720][T25414] ? __pfx_ksys_write+0x10/0x10 [ 2003.758754][T25414] ? do_syscall_64+0xbe/0xfa0 [ 2003.758792][T25414] do_syscall_64+0xfa/0xfa0 [ 2003.758824][T25414] ? lockdep_hardirqs_on+0x9c/0x150 [ 2003.758858][T25414] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2003.758881][T25414] ? clear_bhb_loop+0x60/0xb0 [ 2003.758910][T25414] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2003.758933][T25414] RIP: 0033:0x7f67b56cf749 [ 2003.758953][T25414] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2003.758974][T25414] RSP: 002b:00007f67b3936038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2003.759000][T25414] RAX: ffffffffffffffda RBX: 00007f67b5925fa0 RCX: 00007f67b56cf749 [ 2003.759018][T25414] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 2003.759033][T25414] RBP: 00007f67b3936090 R08: 0000000000000000 R09: 0000000000000000 [ 2003.759047][T25414] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2003.759062][T25414] R13: 00007f67b5926038 R14: 00007f67b5925fa0 R15: 00007ffda8e7fac8 [ 2003.759100][T25414] [ 2004.414267][T25260] usb 7-1: new full-speed USB device number 107 using dummy_hcd [ 2004.576133][T25260] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2004.576163][T25260] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 2004.580709][T25260] usb 7-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 2004.580742][T25260] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2004.580765][T25260] usb 7-1: Product: syz [ 2004.580782][T25260] usb 7-1: Manufacturer: syz [ 2004.580797][T25260] usb 7-1: SerialNumber: syz [ 2004.587487][T25260] usb 7-1: config 0 descriptor?? [ 2004.666598][T25260] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 2004.721994][T25260] snd-usb-audio 7-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 2004.762452][T25418] orangefs_mount: mount request failed with -4 [ 2004.776719][T25419] orangefs_mount: mount request failed with -4 [ 2005.350204][ T5880] usb 7-1: USB disconnect, device number 107 [ 2005.383751][ T1116] hsr_slave_0: left promiscuous mode [ 2005.404142][ T1116] hsr_slave_1: left promiscuous mode [ 2005.405536][ T1116] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2005.405558][ T1116] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2006.365142][ T1116] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2006.365175][ T1116] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2006.516706][ T1116] veth1_macvtap: left promiscuous mode [ 2006.516823][ T1116] veth0_macvtap: left promiscuous mode [ 2006.517018][ T1116] veth1_vlan: left promiscuous mode [ 2006.517272][ T1116] veth0_vlan: left promiscuous mode [ 2008.000271][T21682] Bluetooth: hci0: unexpected subevent 0x10 length: 5 > 2 [ 2008.447893][T25450] netlink: 536 bytes leftover after parsing attributes in process `syz.2.6569'. [ 2011.241861][T25460] orangefs_mount: mount request failed with -4 [ 2011.371975][T25471] netlink: 'syz.6.6574': attribute type 7 has an invalid length. [ 2011.551234][T11525] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2011.570195][T11525] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2011.579708][T11525] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2011.588751][T11525] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2011.596100][T11525] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2012.446403][ T1116] team0 (unregistering): Port device team_slave_1 removed [ 2012.814436][ T1116] team0 (unregistering): Port device team_slave_0 removed [ 2013.028714][ T5880] usb 7-1: new full-speed USB device number 108 using dummy_hcd [ 2013.249770][ T5880] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2013.249802][ T5880] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 2013.255560][ T5880] usb 7-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 2013.255599][ T5880] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2013.255623][ T5880] usb 7-1: Product: syz [ 2013.255641][ T5880] usb 7-1: Manufacturer: syz [ 2013.255660][ T5880] usb 7-1: SerialNumber: syz [ 2013.266444][ T5880] usb 7-1: config 0 descriptor?? [ 2013.275079][ T5880] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 2013.302521][ T5880] snd-usb-audio 7-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 2013.717745][T11525] Bluetooth: hci3: command tx timeout [ 2015.796843][T11525] Bluetooth: hci3: command tx timeout [ 2016.204351][T25450] netlink: 52 bytes leftover after parsing attributes in process `syz.2.6569'. [ 2016.231800][ T9451] usb 7-1: USB disconnect, device number 108 [ 2016.309585][T25486] netlink: 'syz.6.6578': attribute type 7 has an invalid length. [ 2016.537463][T11525] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 2017.932907][T11525] Bluetooth: hci3: command tx timeout [ 2018.111867][T25326] chnl_net:caif_netlink_parms(): no params data found [ 2019.933706][T11525] Bluetooth: hci3: command tx timeout [ 2021.461539][T25533] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6591'. [ 2021.623039][T25472] chnl_net:caif_netlink_parms(): no params data found [ 2022.742490][T25326] bridge0: port 1(bridge_slave_0) entered blocking state [ 2022.742616][T25326] bridge0: port 1(bridge_slave_0) entered disabled state [ 2022.742884][T25326] bridge_slave_0: entered allmulticast mode [ 2022.746015][T25326] bridge_slave_0: entered promiscuous mode [ 2022.994423][ T9451] usb 7-1: new full-speed USB device number 109 using dummy_hcd [ 2023.595503][ T9451] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2023.595536][ T9451] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 2023.630620][ T9451] usb 7-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 2023.630655][ T9451] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2023.630678][ T9451] usb 7-1: Product: syz [ 2023.630694][ T9451] usb 7-1: Manufacturer: syz [ 2023.630711][ T9451] usb 7-1: SerialNumber: syz [ 2023.677058][ T9451] usb 7-1: config 0 descriptor?? [ 2023.695042][ T9451] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 2023.733167][ T9451] snd-usb-audio 7-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 2024.065184][T25326] bridge0: port 2(bridge_slave_1) entered blocking state [ 2024.065407][T25326] bridge0: port 2(bridge_slave_1) entered disabled state [ 2024.065645][T25326] bridge_slave_1: entered allmulticast mode [ 2024.068613][T25326] bridge_slave_1: entered promiscuous mode [ 2024.918235][ T9451] usb 7-1: USB disconnect, device number 109 [ 2025.480390][T25326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2026.381203][T25326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2026.576822][T25472] bridge0: port 1(bridge_slave_0) entered blocking state [ 2026.577055][T25472] bridge0: port 1(bridge_slave_0) entered disabled state [ 2026.577328][T25472] bridge_slave_0: entered allmulticast mode [ 2026.580908][T25472] bridge_slave_0: entered promiscuous mode [ 2026.808152][T25589] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 2026.808561][T25589] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 2026.809986][T25589] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 2026.810284][T25589] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 2026.811675][T25589] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 2026.812038][T25589] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 2026.813013][T25589] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 2026.813217][T25589] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 2026.813239][T25589] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 2026.964042][T25472] bridge0: port 2(bridge_slave_1) entered blocking state [ 2026.964251][T25472] bridge0: port 2(bridge_slave_1) entered disabled state [ 2026.964547][T25472] bridge_slave_1: entered allmulticast mode [ 2026.968430][T25472] bridge_slave_1: entered promiscuous mode [ 2026.971249][T25583] netlink: 'syz.4.6605': attribute type 15 has an invalid length. [ 2027.237432][T25326] team0: Port device team_slave_0 added [ 2027.399797][T25326] team0: Port device team_slave_1 added [ 2027.714828][T25472] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2029.096765][T25472] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2030.023856][T25598] orangefs_mount: mount request failed with -4 [ 2031.291868][ T1116] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2031.351317][T25326] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2031.351334][T25326] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2031.351359][T25326] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2031.440278][T25326] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2031.440294][T25326] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2031.440318][T25326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2031.446484][T25472] team0: Port device team_slave_0 added [ 2031.464120][T25472] team0: Port device team_slave_1 added [ 2031.606607][ T1116] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2031.980577][ T1116] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2032.085301][T25472] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2032.085315][T25472] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2032.085336][T25472] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2033.365973][T21682] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 2033.366132][T21682] Bluetooth: hci5: unexpected event for opcode 0x0401 [ 2033.615143][T21682] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 2033.676353][ T1116] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2034.754893][T25472] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2034.754914][T25472] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2034.754947][T25472] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2034.764925][T25326] hsr_slave_0: entered promiscuous mode [ 2034.766500][T25326] hsr_slave_1: entered promiscuous mode [ 2035.439327][T21682] Bluetooth: hci0: command 0x0406 tx timeout [ 2035.876999][T25655] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6626'. [ 2037.275899][T11525] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 2037.276058][T11525] Bluetooth: hci0: unexpected event for opcode 0x0401 [ 2038.322774][T25472] hsr_slave_0: entered promiscuous mode [ 2038.330467][T25472] hsr_slave_1: entered promiscuous mode [ 2038.331757][T25472] debugfs: 'hsr0' already exists in 'hsr' [ 2038.331787][T25472] Cannot create hsr debugfs directory [ 2039.023198][T11525] Bluetooth: hci2: unexpected cc 0x203d length: 65 > 1 [ 2039.023348][T11525] Bluetooth: hci2: unexpected event for opcode 0x203d [ 2042.192442][T25695] Bluetooth: MGMT ver 1.23 [ 2042.192484][T25695] Bluetooth: hci0: invalid length 0, exp 2 for type 21 [ 2043.334731][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 2043.334810][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 2044.829215][ T1116] bridge_slave_1: left allmulticast mode [ 2044.829245][ T1116] bridge_slave_1: left promiscuous mode [ 2044.831259][ T1116] bridge0: port 2(bridge_slave_1) entered disabled state [ 2044.900640][ T1116] bridge_slave_0: left allmulticast mode [ 2044.900674][ T1116] bridge_slave_0: left promiscuous mode [ 2044.901039][ T1116] bridge0: port 1(bridge_slave_0) entered disabled state [ 2044.901849][T25724] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 2044.902394][T25724] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 2044.930329][T25724] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 2044.930727][T25724] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 2044.931977][T25724] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 2044.932234][T25724] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 2044.933206][T25724] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 2044.960175][T25724] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 2044.960216][T25724] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 2045.051968][ T1116] bridge_slave_1: left allmulticast mode [ 2045.052007][ T1116] bridge_slave_1: left promiscuous mode [ 2045.052296][ T1116] bridge0: port 2(bridge_slave_1) entered disabled state [ 2045.136078][ T1116] bridge_slave_0: left allmulticast mode [ 2045.136118][ T1116] bridge_slave_0: left promiscuous mode [ 2045.136443][ T1116] bridge0: port 1(bridge_slave_0) entered disabled state [ 2047.534712][ T1116] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2047.624600][ T1116] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2047.633747][T25260] usb 7-1: new low-speed USB device number 110 using dummy_hcd [ 2047.721482][ T1116] bond0 (unregistering): Released all slaves [ 2047.816731][T25260] usb 7-1: unable to get BOS descriptor or descriptor too short [ 2047.818488][T25260] usb 7-1: config 1 has an invalid interface number: 181 but max is 0 [ 2047.818515][T25260] usb 7-1: config 1 has no interface number 0 [ 2047.818567][T25260] usb 7-1: config 1 interface 181 altsetting 1 endpoint 0xE has invalid maxpacket 64, setting to 8 [ 2047.818598][T25260] usb 7-1: config 1 interface 181 has no altsetting 0 [ 2047.866661][T25260] usb 7-1: string descriptor 0 read error: -22 [ 2047.866825][T25260] usb 7-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=1d.74 [ 2047.866850][T25260] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2048.698711][T25260] usb 7-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 2049.342038][T25747] input: syz1 as /devices/virtual/input/input32 [ 2050.333408][ T7272] usb 7-1: Failed to submit usb control message: -110 [ 2050.334084][ T7272] usb 7-1: unable to send the bmi data to the device: -110 [ 2050.334108][ T7272] usb 7-1: unable to get target info from device [ 2050.334127][ T7272] usb 7-1: could not get target info (-110) [ 2050.334147][ T7272] usb 7-1: could not probe fw (-110) [ 2050.941639][T21682] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2051.019074][T21682] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2051.020652][T21682] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2051.022070][T21682] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2051.027605][T21682] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2052.374431][ T1116] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2052.435585][ T1116] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2052.456620][ T1116] bond0 (unregistering): Released all slaves [ 2053.133587][T21682] Bluetooth: hci4: command tx timeout [ 2053.139964][T25732] netlink: 'syz.6.6650': attribute type 15 has an invalid length. [ 2053.237930][ T9451] usb 7-1: USB disconnect, device number 110 [ 2053.523721][T21682] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 2053.524302][T21682] Bluetooth: hci0: unexpected event for opcode 0x0401 [ 2053.820829][T25764] netlink: 'syz.4.6658': attribute type 7 has an invalid length. [ 2053.842214][T25764] affs: No valid root block on device nullb0 [ 2053.917351][T25765] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6659'. [ 2057.141750][T21682] Bluetooth: hci4: command tx timeout [ 2059.213565][T11525] Bluetooth: hci4: command tx timeout [ 2059.624615][ T5900] usb 7-1: new high-speed USB device number 111 using dummy_hcd [ 2060.614342][T25802] netlink: 80 bytes leftover after parsing attributes in process `syz.4.6669'. [ 2060.645628][T11525] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 2060.645782][T11525] Bluetooth: hci2: unexpected event for opcode 0x0401 [ 2061.097327][ T5900] usb 7-1: device descriptor read/64, error -71 [ 2061.307074][T11525] Bluetooth: hci4: command tx timeout [ 2061.765476][ T5900] usb 7-1: new high-speed USB device number 112 using dummy_hcd [ 2062.040491][ T5900] usb 7-1: device descriptor read/64, error -71 [ 2062.153470][ T5900] usb usb7-port1: attempt power cycle [ 2062.817531][ T5900] usb 7-1: new high-speed USB device number 113 using dummy_hcd [ 2063.025528][ T5900] usb 7-1: device not accepting address 113, error -71 [ 2064.413692][ T5900] usb 7-1: new full-speed USB device number 114 using dummy_hcd [ 2064.436700][ T5900] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2064.439725][ T5900] usb 7-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 2064.439758][ T5900] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2064.439780][ T5900] usb 7-1: Product: syz [ 2064.439797][ T5900] usb 7-1: Manufacturer: syz [ 2064.439814][ T5900] usb 7-1: SerialNumber: syz [ 2064.491105][ T5900] usb 7-1: config 0 descriptor?? [ 2064.799840][ T5880] usb 7-1: USB disconnect, device number 114 [ 2065.353818][ T1116] hsr_slave_0: left promiscuous mode [ 2065.394428][ T1116] hsr_slave_1: left promiscuous mode [ 2065.395536][ T1116] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2065.644672][ T1116] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2067.033655][ T1116] hsr_slave_0: left promiscuous mode [ 2067.073882][ T1116] hsr_slave_1: left promiscuous mode [ 2067.074723][ T1116] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2067.074744][ T1116] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2067.124713][ T1116] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2067.124746][ T1116] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2067.384345][ T5880] usb 7-1: new full-speed USB device number 115 using dummy_hcd [ 2068.266978][ T1116] veth1_macvtap: left promiscuous mode [ 2068.268549][ T1116] veth0_macvtap: left promiscuous mode [ 2068.268843][ T1116] veth1_vlan: left promiscuous mode [ 2068.269035][ T1116] veth0_vlan: left promiscuous mode [ 2068.276387][ T5880] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2068.276413][ T5880] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 2068.280971][ T5880] usb 7-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 2068.280999][ T5880] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2068.281017][ T5880] usb 7-1: Product: syz [ 2068.281030][ T5880] usb 7-1: Manufacturer: syz [ 2068.281043][ T5880] usb 7-1: SerialNumber: syz [ 2068.289154][ T5880] usb 7-1: config 0 descriptor?? [ 2068.306820][ T5880] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 2068.370430][ T5880] snd-usb-audio 7-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 2069.671595][ T1116] team0 (unregistering): Port device team_slave_1 removed [ 2070.048450][ T1116] team0 (unregistering): Port device team_slave_0 removed [ 2071.537572][ T38] audit: type=1326 audit(1763992710.229:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25875 comm="syz.2.6691" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f912ca9f749 code=0x0 [ 2072.861434][T21682] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2072.931089][T21682] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2072.948663][T21682] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2072.951261][T21682] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2072.952154][T21682] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2073.531548][ T5900] usb 7-1: USB disconnect, device number 115 [ 2075.064722][T11525] Bluetooth: hci1: command tx timeout [ 2075.333251][T11525] Bluetooth: hci2: unexpected event 0x03 length: 23 > 11 [ 2076.714076][T25894] orangefs_mount: mount request failed with -4 [ 2077.189057][T11525] Bluetooth: hci1: command tx timeout [ 2077.304352][ T1116] team0 (unregistering): Port device team_slave_1 removed [ 2077.634208][ T1116] team0 (unregistering): Port device team_slave_0 removed [ 2079.213748][T11525] Bluetooth: hci1: command tx timeout [ 2081.293982][T11525] Bluetooth: hci1: command tx timeout [ 2082.679620][T25941] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 2082.687470][T25941] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 2082.691586][T25941] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 2082.693928][T25941] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 2082.694797][T25941] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 2084.260777][T25951] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6714'. [ 2084.499090][T25753] chnl_net:caif_netlink_parms(): no params data found [ 2084.825890][T25941] Bluetooth: hci6: command tx timeout [ 2086.292553][T25965] netlink: 80 bytes leftover after parsing attributes in process `syz.6.6717'. [ 2087.304932][T25941] Bluetooth: hci6: command tx timeout [ 2087.316009][T25968] fuse: Bad value for 'group_id' [ 2087.316033][T25968] fuse: Bad value for 'group_id' [ 2088.062165][T25977] random: crng reseeded on system resumption [ 2089.701559][T25941] Bluetooth: hci6: command tx timeout [ 2090.133896][T25753] bridge0: port 1(bridge_slave_0) entered blocking state [ 2090.134046][T25753] bridge0: port 1(bridge_slave_0) entered disabled state [ 2090.134358][T25753] bridge_slave_0: entered allmulticast mode [ 2090.137598][T25753] bridge_slave_0: entered promiscuous mode [ 2090.206259][T25753] bridge0: port 2(bridge_slave_1) entered blocking state [ 2090.206401][T25753] bridge0: port 2(bridge_slave_1) entered disabled state [ 2090.206635][T25753] bridge_slave_1: entered allmulticast mode [ 2090.209736][T25753] bridge_slave_1: entered promiscuous mode [ 2090.769135][T25753] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2090.788609][T25753] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2090.805400][T25879] chnl_net:caif_netlink_parms(): no params data found [ 2091.073205][T25753] team0: Port device team_slave_0 added [ 2091.155114][T25939] chnl_net:caif_netlink_parms(): no params data found [ 2091.184988][T25753] team0: Port device team_slave_1 added [ 2091.776224][T25753] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2091.776242][T25753] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2091.776265][T25753] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2091.783845][T25941] Bluetooth: hci6: command tx timeout [ 2091.894469][T25753] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2091.894488][T25753] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2091.894514][T25753] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2092.014931][T25879] bridge0: port 1(bridge_slave_0) entered blocking state [ 2092.015153][T25879] bridge0: port 1(bridge_slave_0) entered disabled state [ 2092.015436][T25879] bridge_slave_0: entered allmulticast mode [ 2092.017539][T25879] bridge_slave_0: entered promiscuous mode [ 2092.044009][T25879] bridge0: port 2(bridge_slave_1) entered blocking state [ 2092.044192][T25879] bridge0: port 2(bridge_slave_1) entered disabled state [ 2092.044463][T25879] bridge_slave_1: entered allmulticast mode [ 2092.048384][T25879] bridge_slave_1: entered promiscuous mode [ 2093.833751][T12263] usb 7-1: new high-speed USB device number 116 using dummy_hcd [ 2093.856873][T25939] bridge0: port 1(bridge_slave_0) entered blocking state [ 2093.856968][T25939] bridge0: port 1(bridge_slave_0) entered disabled state [ 2093.857142][T25939] bridge_slave_0: entered allmulticast mode [ 2093.859376][T25939] bridge_slave_0: entered promiscuous mode [ 2093.984754][T12263] usb 7-1: Using ep0 maxpacket: 32 [ 2094.000059][T12263] usb 7-1: unable to get BOS descriptor or descriptor too short [ 2094.011311][T12263] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2094.011332][T12263] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2094.011375][T12263] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2094.047197][T12263] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2094.047224][T12263] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2094.047239][T12263] usb 7-1: Product: syz [ 2094.047250][T12263] usb 7-1: Manufacturer: syz [ 2094.047261][T12263] usb 7-1: SerialNumber: syz [ 2094.132650][T25879] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2094.135411][T25939] bridge0: port 2(bridge_slave_1) entered blocking state [ 2094.135688][T25939] bridge0: port 2(bridge_slave_1) entered disabled state [ 2094.135971][T25939] bridge_slave_1: entered allmulticast mode [ 2094.139397][T25939] bridge_slave_1: entered promiscuous mode [ 2094.158411][T25753] hsr_slave_0: entered promiscuous mode [ 2094.160148][T25753] hsr_slave_1: entered promiscuous mode [ 2094.161369][T25753] debugfs: 'hsr0' already exists in 'hsr' [ 2094.161401][T25753] Cannot create hsr debugfs directory [ 2094.167446][T25879] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2094.317246][T26016] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2094.317696][T26016] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2094.558156][ T1116] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2094.558198][ T1116] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2094.910542][T25939] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2095.097418][ T1116] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2095.097457][ T1116] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2095.313902][T25879] team0: Port device team_slave_0 added [ 2095.319080][T25939] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2095.341768][T25879] team0: Port device team_slave_1 added [ 2095.649838][ T1116] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2095.649892][ T1116] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2096.307058][T25939] team0: Port device team_slave_0 added [ 2096.322022][T25879] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2096.322041][T25879] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2096.322072][T25879] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2096.386957][T25939] team0: Port device team_slave_1 added [ 2096.404278][T25879] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2096.404307][T25879] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2096.404396][T25879] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2096.676423][T12263] cdc_ncm 7-1:1.0: skipping garbage [ 2096.676446][T12263] cdc_ncm 7-1:1.0: CDC Union missing and no IAD found [ 2096.676491][T12263] cdc_ncm 7-1:1.0: bind() failure [ 2096.711601][T12263] usb 7-1: USB disconnect, device number 116 [ 2096.769471][T25939] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2096.769491][T25939] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2096.769520][T25939] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2096.769883][T25941] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 2096.813170][T25939] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2096.813194][T25939] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2096.813232][T25939] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2098.319619][T25879] hsr_slave_0: entered promiscuous mode [ 2098.321350][T25879] hsr_slave_1: entered promiscuous mode [ 2098.322468][T25879] debugfs: 'hsr0' already exists in 'hsr' [ 2098.322497][T25879] Cannot create hsr debugfs directory [ 2098.703764][T25939] hsr_slave_0: entered promiscuous mode [ 2098.705147][T25939] hsr_slave_1: entered promiscuous mode [ 2098.705924][T25939] debugfs: 'hsr0' already exists in 'hsr' [ 2098.705944][T25939] Cannot create hsr debugfs directory [ 2098.941619][ T38] audit: type=1326 audit(1763992737.629:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26029 comm="syz.6.6732" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb94037f749 code=0x0 [ 2099.405188][ T1116] bridge_slave_1: left allmulticast mode [ 2099.405212][ T1116] bridge_slave_1: left promiscuous mode [ 2099.405406][ T1116] bridge0: port 2(bridge_slave_1) entered disabled state [ 2099.455250][ T1116] bridge_slave_0: left allmulticast mode [ 2099.455275][ T1116] bridge_slave_0: left promiscuous mode [ 2099.455487][ T1116] bridge0: port 1(bridge_slave_0) entered disabled state [ 2099.517748][ T1116] bridge_slave_1: left allmulticast mode [ 2099.517774][ T1116] bridge_slave_1: left promiscuous mode [ 2099.518002][ T1116] bridge0: port 2(bridge_slave_1) entered disabled state [ 2099.574867][ T1116] bridge_slave_0: left allmulticast mode [ 2099.574892][ T1116] bridge_slave_0: left promiscuous mode [ 2099.575097][ T1116] bridge0: port 1(bridge_slave_0) entered disabled state [ 2099.639618][ T1116] bridge_slave_1: left allmulticast mode [ 2099.639653][ T1116] bridge_slave_1: left promiscuous mode [ 2099.639918][ T1116] bridge0: port 2(bridge_slave_1) entered disabled state [ 2099.687774][T26035] netlink: 'syz.2.6733': attribute type 7 has an invalid length. [ 2099.691735][T26035] affs: No valid root block on device nullb0 [ 2099.710867][ T1116] bridge_slave_0: left allmulticast mode [ 2099.710901][ T1116] bridge_slave_0: left promiscuous mode [ 2099.711159][ T1116] bridge0: port 1(bridge_slave_0) entered disabled state [ 2100.684838][ T1116] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2100.922313][ T1116] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2100.977258][ T1116] bond0 (unregistering): Released all slaves [ 2103.465040][T26053] autofs4:pid:26053:validate_dev_ioctl: invalid path supplied for cmd(0xc018937a) [ 2104.337505][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 2104.337579][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 2104.518951][ T38] audit: type=1326 audit(1763992743.209:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26054 comm="syz.2.6740" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f912ca9f749 code=0x0 [ 2104.984249][ T1116] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2105.044446][ T1116] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2105.067105][ T1116] bond0 (unregistering): Released all slaves [ 2105.314450][ T1116] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2105.445065][ T1116] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2105.529487][ T1116] bond0 (unregistering): Released all slaves [ 2106.210402][T25753] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 2106.368520][T25753] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 2106.905320][T25753] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 2107.058573][T25753] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 2107.698009][T26072] random: crng reseeded on system resumption [ 2108.908594][T25941] Bluetooth: hci0: unexpected cc 0x203d length: 65 > 1 [ 2108.908739][T25941] Bluetooth: hci0: unexpected event for opcode 0x203d [ 2110.414197][ T5880] usb 7-1: new full-speed USB device number 117 using dummy_hcd [ 2110.588369][ T5880] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2110.588399][ T5880] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 2110.593341][ T5880] usb 7-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 2110.593373][ T5880] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2110.593573][ T5880] usb 7-1: Product: syz [ 2110.593593][ T5880] usb 7-1: Manufacturer: syz [ 2110.593610][ T5880] usb 7-1: SerialNumber: syz [ 2110.654703][ T5880] usb 7-1: config 0 descriptor?? [ 2110.660947][ T5880] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 2110.743210][ T5880] snd-usb-audio 7-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 2110.899505][T25879] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 2111.579786][ T5880] usb 7-1: USB disconnect, device number 117 [ 2111.660037][T25879] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 2111.703196][T26106] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6756'. [ 2111.998354][T25879] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 2112.226393][T11525] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2112.258270][T11525] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2112.260522][T11525] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2112.261901][T11525] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2112.262851][T11525] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2112.452166][T25941] Bluetooth: hci2: unexpected cc 0x203d length: 65 > 1 [ 2112.452262][T25941] Bluetooth: hci2: unexpected event for opcode 0x203d [ 2113.161256][T25879] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 2113.573677][ T1116] hsr_slave_0: left promiscuous mode [ 2113.593591][ T1116] hsr_slave_1: left promiscuous mode [ 2113.594523][ T1116] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2113.636266][ T1116] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2113.773741][ T1116] hsr_slave_0: left promiscuous mode [ 2113.793610][ T1116] hsr_slave_1: left promiscuous mode [ 2113.795736][ T1116] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2113.795760][ T1116] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2113.844929][ T1116] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2113.844962][ T1116] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2114.003715][ T1116] hsr_slave_0: left promiscuous mode [ 2114.024572][ T1116] hsr_slave_1: left promiscuous mode [ 2114.025647][ T1116] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2114.064645][ T1116] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2114.159835][ T1116] veth1_macvtap: left promiscuous mode [ 2114.159914][ T1116] veth0_macvtap: left promiscuous mode [ 2114.160203][ T1116] veth1_vlan: left promiscuous mode [ 2114.160331][ T1116] veth0_vlan: left promiscuous mode [ 2114.333774][T25941] Bluetooth: hci3: command tx timeout [ 2114.819782][T25941] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 2115.438242][T25941] Bluetooth: hci0: unexpected cc 0x203d length: 65 > 1 [ 2115.438384][T25941] Bluetooth: hci0: unexpected event for opcode 0x203d [ 2116.413800][T25941] Bluetooth: hci3: command tx timeout [ 2116.454452][ T1116] team0 (unregistering): Port device team_slave_1 removed [ 2116.624380][ T1116] team0 (unregistering): Port device team_slave_0 removed [ 2118.493714][T25941] Bluetooth: hci3: command tx timeout [ 2120.174297][ T1116] team0 (unregistering): Port device team_slave_1 removed [ 2120.514401][ T1116] team0 (unregistering): Port device team_slave_0 removed [ 2120.573660][T25941] Bluetooth: hci3: command tx timeout [ 2124.715578][ T1116] team0 (unregistering): Port device team_slave_1 removed [ 2124.904759][ T1116] team0 (unregistering): Port device team_slave_0 removed [ 2126.912427][T26151] FAULT_INJECTION: forcing a failure. [ 2126.912427][T26151] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2126.912466][T26151] CPU: 0 UID: 0 PID: 26151 Comm: syz.6.6769 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 2126.912492][T26151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2126.912506][T26151] Call Trace: [ 2126.912516][T26151] [ 2126.912526][T26151] dump_stack_lvl+0x189/0x250 [ 2126.912566][T26151] ? __pfx____ratelimit+0x10/0x10 [ 2126.912672][T26151] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2126.912706][T26151] ? __pfx__printk+0x10/0x10 [ 2126.912750][T26151] should_fail_ex+0x46c/0x600 [ 2126.912786][T26151] _copy_to_user+0x31/0xb0 [ 2126.912815][T26151] simple_read_from_buffer+0xe1/0x170 [ 2126.912850][T26151] proc_fail_nth_read+0x1b6/0x220 [ 2126.912879][T26151] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2126.912906][T26151] ? rw_verify_area+0x2ac/0x4e0 [ 2126.912932][T26151] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2126.912958][T26151] vfs_read+0x206/0xa30 [ 2126.912993][T26151] ? __pfx_vfs_read+0x10/0x10 [ 2126.913019][T26151] ? do_sys_openat2+0x154/0x1c0 [ 2126.913045][T26151] ? fdget+0x140/0x1f0 [ 2126.913077][T26151] ? __x64_sys_sendmsg+0x1cf/0x260 [ 2126.913116][T26151] ksys_read+0x14b/0x260 [ 2126.913148][T26151] ? __pfx_ksys_read+0x10/0x10 [ 2126.913178][T26151] ? do_syscall_64+0xbe/0xfa0 [ 2126.913215][T26151] do_syscall_64+0xfa/0xfa0 [ 2126.913244][T26151] ? lockdep_hardirqs_on+0x9c/0x150 [ 2126.913275][T26151] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2126.913297][T26151] ? clear_bhb_loop+0x60/0xb0 [ 2126.913325][T26151] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2126.913346][T26151] RIP: 0033:0x7fb94037e15c [ 2126.913366][T26151] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 2126.913388][T26151] RSP: 002b:00007fb93e5e6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2126.913416][T26151] RAX: ffffffffffffffda RBX: 00007fb9405d5fa0 RCX: 00007fb94037e15c [ 2126.913432][T26151] RDX: 000000000000000f RSI: 00007fb93e5e60a0 RDI: 0000000000000004 [ 2126.913446][T26151] RBP: 00007fb93e5e6090 R08: 0000000000000000 R09: 0000000000000000 [ 2126.913460][T26151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2126.913472][T26151] R13: 00007fb9405d6038 R14: 00007fb9405d5fa0 R15: 00007fffcc1e5368 [ 2126.913507][T26151] [ 2127.464371][T25879] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2127.563716][T26109] chnl_net:caif_netlink_parms(): no params data found [ 2127.567065][T16940] usb 7-1: new high-speed USB device number 118 using dummy_hcd [ 2127.601770][T25939] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 2127.641408][T25939] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 2127.695469][T16940] usb 7-1: device descriptor read/64, error -71 [ 2127.876480][T25939] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 2127.926977][T25939] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 2127.963686][T16940] usb 7-1: new high-speed USB device number 119 using dummy_hcd [ 2127.984246][T25879] 8021q: adding VLAN 0 to HW filter on device team0 [ 2128.108325][T16940] usb 7-1: device descriptor read/64, error -71 [ 2128.217388][T16940] usb usb7-port1: attempt power cycle [ 2128.282969][T26109] bridge0: port 1(bridge_slave_0) entered blocking state [ 2128.283186][T26109] bridge0: port 1(bridge_slave_0) entered disabled state [ 2128.284078][T26109] bridge_slave_0: entered allmulticast mode [ 2128.287593][T26109] bridge_slave_0: entered promiscuous mode [ 2128.296384][T25009] bridge0: port 1(bridge_slave_0) entered blocking state [ 2128.296554][T25009] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2128.315028][T26109] bridge0: port 2(bridge_slave_1) entered blocking state [ 2128.315187][T26109] bridge0: port 2(bridge_slave_1) entered disabled state [ 2128.315479][T26109] bridge_slave_1: entered allmulticast mode [ 2128.318963][T26109] bridge_slave_1: entered promiscuous mode [ 2128.449585][T25009] bridge0: port 2(bridge_slave_1) entered blocking state [ 2128.449752][T25009] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2128.574616][T26109] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2128.583226][T26109] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2128.632917][T16940] usb 7-1: new high-speed USB device number 120 using dummy_hcd [ 2128.656681][T16940] usb 7-1: device descriptor read/8, error -71 [ 2128.913862][T16940] usb 7-1: new high-speed USB device number 121 using dummy_hcd [ 2128.973950][T16940] usb 7-1: device descriptor read/8, error -71 [ 2128.978794][T26109] team0: Port device team_slave_0 added [ 2129.035498][T26172] netlink: 'syz.2.6772': attribute type 7 has an invalid length. [ 2129.081287][T26109] team0: Port device team_slave_1 added [ 2129.090197][T26172] affs: No valid root block on device nullb0 [ 2129.097028][T16940] usb usb7-port1: unable to enumerate USB device [ 2129.455683][T26176] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 2129.461938][T26176] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 2129.491230][T26176] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 2129.493380][T26176] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 2129.504094][T26176] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 2129.505444][T26176] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 2129.511651][T26176] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 2129.512838][T26176] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 2129.512901][T26176] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 2130.472556][T26109] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2130.472576][T26109] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2130.472607][T26109] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2130.552916][T26109] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2130.552935][T26109] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2130.552968][T26109] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2131.019445][T26109] hsr_slave_0: entered promiscuous mode [ 2131.034063][T26109] hsr_slave_1: entered promiscuous mode [ 2132.365755][T11525] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2132.391767][T11525] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2132.779055][T11525] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2133.049091][T11525] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2133.050092][T11525] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2133.623737][T24834] usb 7-1: new high-speed USB device number 122 using dummy_hcd [ 2133.753828][T24834] usb 7-1: device descriptor read/64, error -71 [ 2133.814339][T25939] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2133.993860][T24834] usb 7-1: new high-speed USB device number 123 using dummy_hcd [ 2134.123793][T24834] usb 7-1: device descriptor read/64, error -71 [ 2134.245014][T24834] usb usb7-port1: attempt power cycle [ 2134.432678][T25939] 8021q: adding VLAN 0 to HW filter on device team0 [ 2134.462648][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 2134.463196][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2134.507625][ T1175] bridge0: port 2(bridge_slave_1) entered blocking state [ 2134.507802][ T1175] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2134.593660][T24834] usb 7-1: new high-speed USB device number 124 using dummy_hcd [ 2134.627329][T24834] usb 7-1: device descriptor read/8, error -71 [ 2134.887982][T26217] random: crng reseeded on system resumption [ 2135.137518][T11525] Bluetooth: hci4: command tx timeout [ 2135.811499][T24834] usb 7-1: new high-speed USB device number 125 using dummy_hcd [ 2135.824345][T24834] usb 7-1: device descriptor read/8, error -71 [ 2135.933898][T24834] usb usb7-port1: unable to enumerate USB device [ 2136.013588][T26199] chnl_net:caif_netlink_parms(): no params data found [ 2136.524164][T26199] bridge0: port 1(bridge_slave_0) entered blocking state [ 2136.525035][T26199] bridge0: port 1(bridge_slave_0) entered disabled state [ 2136.525342][T26199] bridge_slave_0: entered allmulticast mode [ 2136.539292][T26199] bridge_slave_0: entered promiscuous mode [ 2136.565159][T26233] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6787'. [ 2136.605928][T26199] bridge0: port 2(bridge_slave_1) entered blocking state [ 2136.606098][T26199] bridge0: port 2(bridge_slave_1) entered disabled state [ 2136.606391][T26199] bridge_slave_1: entered allmulticast mode [ 2136.611217][T26199] bridge_slave_1: entered promiscuous mode [ 2136.679443][T26234] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6787'. [ 2137.214079][T11525] Bluetooth: hci4: command tx timeout [ 2138.214777][T26234] hsr_slave_1 (unregistering): left promiscuous mode [ 2138.374026][T26199] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2138.386991][T26199] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2138.616012][ T1116] bridge_slave_1: left allmulticast mode [ 2138.616046][ T1116] bridge_slave_1: left promiscuous mode [ 2138.616309][ T1116] bridge0: port 2(bridge_slave_1) entered disabled state [ 2138.674722][ T1116] bridge_slave_0: left allmulticast mode [ 2138.674756][ T1116] bridge_slave_0: left promiscuous mode [ 2138.675021][ T1116] bridge0: port 1(bridge_slave_0) entered disabled state [ 2139.114440][ T1116] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2139.196172][ T1116] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2139.256121][ T1116] bond0 (unregistering): Released all slaves [ 2139.294301][T11525] Bluetooth: hci4: command tx timeout [ 2139.635237][ T5880] usb 7-1: new high-speed USB device number 126 using dummy_hcd [ 2139.642326][T26199] team0: Port device team_slave_0 added [ 2139.648284][T25939] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2139.656607][T26199] team0: Port device team_slave_1 added [ 2139.763955][ T5880] usb 7-1: device descriptor read/64, error -71 [ 2140.003654][ T5880] usb 7-1: new high-speed USB device number 127 using dummy_hcd [ 2140.008906][ T1116] hsr_slave_0: left promiscuous mode [ 2140.043685][ T1116] hsr_slave_1: left promiscuous mode [ 2140.044700][ T1116] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2140.068085][ T1116] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2140.133797][ T5880] usb 7-1: device descriptor read/64, error -71 [ 2140.244016][ T5880] usb usb7-port1: attempt power cycle [ 2140.623898][ T5880] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 2140.663521][ T5880] usb 7-1: device descriptor read/8, error -71 [ 2140.854569][ T1116] team0 (unregistering): Port device team_slave_1 removed [ 2140.923687][ T5880] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 2140.944491][ T5880] usb 7-1: device descriptor read/8, error -71 [ 2141.063321][ T5880] usb usb7-port1: unable to enumerate USB device [ 2141.064373][ T1116] team0 (unregistering): Port device team_slave_0 removed [ 2141.474218][T11525] Bluetooth: hci4: command tx timeout [ 2141.838880][T26261] random: crng reseeded on system resumption [ 2142.620907][T26263] Bluetooth: hci0: invalid length 0, exp 2 for type 21 [ 2143.079728][T25941] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2143.095282][T25941] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2143.096960][T25941] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2143.098948][T25941] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2143.099794][T25941] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2143.415016][T26199] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2143.415035][T26199] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2143.415066][T26199] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2143.422723][T26199] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2143.422740][T26199] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2143.422782][T26199] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2144.181531][T26199] hsr_slave_0: entered promiscuous mode [ 2144.183118][T26199] hsr_slave_1: entered promiscuous mode [ 2144.186237][T26199] debugfs: 'hsr0' already exists in 'hsr' [ 2144.186281][T26199] Cannot create hsr debugfs directory [ 2145.214414][T11525] Bluetooth: hci1: command tx timeout [ 2145.784415][T26282] netlink: 'syz.6.6801': attribute type 7 has an invalid length. [ 2146.691436][T26109] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 2146.745167][T26109] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 2147.301314][T11525] Bluetooth: hci1: command tx timeout [ 2148.168982][T26109] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 2148.394196][T26109] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 2148.483658][T24834] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 2148.633633][T24834] usb 7-1: Using ep0 maxpacket: 32 [ 2148.637393][T24834] usb 7-1: unable to get BOS descriptor or descriptor too short [ 2148.643752][T24834] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2148.643780][T24834] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2148.643850][T24834] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2148.648478][T24834] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2148.648514][T24834] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2148.648540][T24834] usb 7-1: Product: syz [ 2148.648558][T24834] usb 7-1: Manufacturer: syz [ 2148.648576][T24834] usb 7-1: SerialNumber: syz [ 2148.941869][T26311] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2148.942313][T26311] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2149.373513][T11525] Bluetooth: hci1: command tx timeout [ 2149.481169][T26268] chnl_net:caif_netlink_parms(): no params data found [ 2149.521871][T26315] netlink: 'syz.2.6810': attribute type 7 has an invalid length. [ 2149.538962][T26315] affs: No valid root block on device nullb0 [ 2150.171315][T26319] random: crng reseeded on system resumption [ 2151.341104][T24834] cdc_ncm 7-1:1.0: skipping garbage [ 2151.341131][T24834] cdc_ncm 7-1:1.0: CDC Union missing and no IAD found [ 2151.341175][T24834] cdc_ncm 7-1:1.0: bind() failure [ 2151.365622][T24834] usb 7-1: USB disconnect, device number 4 [ 2151.453614][T11525] Bluetooth: hci1: command tx timeout [ 2151.471888][T26331] netlink: 'syz.6.6814': attribute type 7 has an invalid length. [ 2153.392621][T26344] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 2153.933074][T26268] bridge0: port 1(bridge_slave_0) entered blocking state [ 2153.933194][T26268] bridge0: port 1(bridge_slave_0) entered disabled state [ 2153.961823][T26268] bridge_slave_0: entered allmulticast mode [ 2153.969996][T26268] bridge_slave_0: entered promiscuous mode [ 2154.113511][T26357] random: crng reseeded on system resumption [ 2154.717413][T26268] bridge0: port 2(bridge_slave_1) entered blocking state [ 2154.717563][T26268] bridge0: port 2(bridge_slave_1) entered disabled state [ 2154.717853][T26268] bridge_slave_1: entered allmulticast mode [ 2154.720937][T26268] bridge_slave_1: entered promiscuous mode [ 2154.764403][T25260] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 2154.923658][T25260] usb 7-1: Using ep0 maxpacket: 32 [ 2154.927881][T25260] usb 7-1: unable to get BOS descriptor or descriptor too short [ 2154.929432][T25260] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2154.929463][T25260] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2154.929518][T25260] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2154.932366][T25260] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2154.932388][T25260] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2154.932402][T25260] usb 7-1: Product: syz [ 2154.932413][T25260] usb 7-1: Manufacturer: syz [ 2154.932424][T25260] usb 7-1: SerialNumber: syz [ 2155.160774][T26268] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2155.191066][T26268] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2155.305054][T26361] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2155.305513][T26361] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2155.526845][T26268] team0: Port device team_slave_0 added [ 2155.590038][T26268] team0: Port device team_slave_1 added [ 2155.686644][T26199] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 2155.797912][T26199] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 2155.880034][T26268] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2155.880053][T26268] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2155.880085][T26268] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2155.929337][T26199] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 2155.985645][T26268] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2155.985665][T26268] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2155.985696][T26268] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2155.988237][T26199] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 2156.074767][ T1116] bridge_slave_1: left allmulticast mode [ 2156.074800][ T1116] bridge_slave_1: left promiscuous mode [ 2156.075097][ T1116] bridge0: port 2(bridge_slave_1) entered disabled state [ 2156.145873][ T1116] bridge_slave_0: left allmulticast mode [ 2156.145907][ T1116] bridge_slave_0: left promiscuous mode [ 2156.146175][ T1116] bridge0: port 1(bridge_slave_0) entered disabled state [ 2156.219432][ T1116] bridge_slave_1: left allmulticast mode [ 2156.219464][ T1116] bridge_slave_1: left promiscuous mode [ 2156.219714][ T1116] bridge0: port 2(bridge_slave_1) entered disabled state [ 2156.305148][ T1116] bridge_slave_0: left allmulticast mode [ 2156.305173][ T1116] bridge_slave_0: left promiscuous mode [ 2156.305442][ T1116] bridge0: port 1(bridge_slave_0) entered disabled state [ 2157.077729][T25260] cdc_ncm 7-1:1.0: skipping garbage [ 2157.077754][T25260] cdc_ncm 7-1:1.0: CDC Union missing and no IAD found [ 2157.077796][T25260] cdc_ncm 7-1:1.0: bind() failure [ 2157.106772][T25260] usb 7-1: USB disconnect, device number 5 [ 2157.653658][T25260] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 2157.836367][T25260] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2157.836396][T25260] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 2157.838896][T25260] usb 7-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 2157.838929][T25260] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2157.838952][T25260] usb 7-1: Product: syz [ 2157.838963][T25260] usb 7-1: Manufacturer: syz [ 2157.838974][T25260] usb 7-1: SerialNumber: syz [ 2157.842750][T25260] usb 7-1: config 0 descriptor?? [ 2157.905486][T25260] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 2157.982428][T25260] snd-usb-audio 7-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 2158.874678][ T1116] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2158.924562][ T1116] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2158.946608][ T1116] bond0 (unregistering): Released all slaves [ 2160.568105][T26375] orangefs_mount: mount request failed with -4 [ 2161.514429][ T1116] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2161.574509][ T1116] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2161.597622][ T1116] bond0 (unregistering): Released all slaves [ 2161.681696][ T5900] usb 7-1: USB disconnect, device number 6 [ 2161.859131][T26383] FAULT_INJECTION: forcing a failure. [ 2161.859131][T26383] name failslab, interval 1, probability 0, space 0, times 0 [ 2161.859170][T26383] CPU: 1 UID: 0 PID: 26383 Comm: syz.2.6828 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 2161.859195][T26383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2161.859209][T26383] Call Trace: [ 2161.859219][T26383] [ 2161.859230][T26383] dump_stack_lvl+0x189/0x250 [ 2161.859268][T26383] ? __pfx____ratelimit+0x10/0x10 [ 2161.859300][T26383] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2161.859333][T26383] ? __pfx__printk+0x10/0x10 [ 2161.859367][T26383] ? __pfx___might_resched+0x10/0x10 [ 2161.859393][T26383] ? fs_reclaim_acquire+0x7d/0x100 [ 2161.859431][T26383] should_fail_ex+0x46c/0x600 [ 2161.859466][T26383] ? __alloc_skb+0x112/0x2d0 [ 2161.859489][T26383] should_failslab+0xa8/0x100 [ 2161.859523][T26383] ? __alloc_skb+0x112/0x2d0 [ 2161.859544][T26383] kmem_cache_alloc_node_noprof+0x78/0x6e0 [ 2161.859575][T26383] ? netlink_autobind+0xdb/0x300 [ 2161.859607][T26383] __alloc_skb+0x112/0x2d0 [ 2161.859636][T26383] netlink_sendmsg+0x5c6/0xb30 [ 2161.859660][T26383] ? is_bpf_text_address+0x26/0x2b0 [ 2161.859705][T26383] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2161.859739][T26383] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2161.859771][T26383] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2161.859807][T26383] __sock_sendmsg+0x21c/0x270 [ 2161.859845][T26383] ____sys_sendmsg+0x508/0x820 [ 2161.859879][T26383] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2161.859917][T26383] ? import_iovec+0x74/0xa0 [ 2161.859946][T26383] ___sys_sendmsg+0x21f/0x2a0 [ 2161.859975][T26383] ? __pfx____sys_sendmsg+0x10/0x10 [ 2161.860039][T26383] ? __fget_files+0x2a/0x420 [ 2161.860069][T26383] ? __fget_files+0x3a6/0x420 [ 2161.860111][T26383] __x64_sys_sendmsg+0x1a1/0x260 [ 2161.860142][T26383] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2161.860181][T26383] ? __pfx_ksys_write+0x10/0x10 [ 2161.860214][T26383] ? do_syscall_64+0xbe/0xfa0 [ 2161.860251][T26383] do_syscall_64+0xfa/0xfa0 [ 2161.860283][T26383] ? lockdep_hardirqs_on+0x9c/0x150 [ 2161.860315][T26383] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2161.860338][T26383] ? clear_bhb_loop+0x60/0xb0 [ 2161.860366][T26383] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2161.860388][T26383] RIP: 0033:0x7f912ca9f749 [ 2161.860409][T26383] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2161.860429][T26383] RSP: 002b:00007f912ad06038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2161.860452][T26383] RAX: ffffffffffffffda RBX: 00007f912ccf5fa0 RCX: 00007f912ca9f749 [ 2161.860469][T26383] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 2161.860483][T26383] RBP: 00007f912ad06090 R08: 0000000000000000 R09: 0000000000000000 [ 2161.860496][T26383] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2161.860509][T26383] R13: 00007f912ccf6038 R14: 00007f912ccf5fa0 R15: 00007fff80c59368 [ 2161.860544][T26383] [ 2162.635497][T26268] hsr_slave_0: entered promiscuous mode [ 2162.636755][T26268] hsr_slave_1: entered promiscuous mode [ 2162.637488][T26268] debugfs: 'hsr0' already exists in 'hsr' [ 2162.637535][T26268] Cannot create hsr debugfs directory [ 2163.013544][ T1116] hsr_slave_0: left promiscuous mode [ 2163.033818][ T1116] hsr_slave_1: left promiscuous mode [ 2163.034641][ T1116] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2163.075040][ T1116] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2163.113746][T16940] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 2163.233813][ T1116] hsr_slave_0: left promiscuous mode [ 2163.253864][ T1116] hsr_slave_1: left promiscuous mode [ 2163.255471][ T1116] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2163.263900][T16940] usb 7-1: Using ep0 maxpacket: 32 [ 2163.266918][T16940] usb 7-1: unable to get BOS descriptor or descriptor too short [ 2163.269259][T16940] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2163.269288][T16940] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2163.269354][T16940] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2163.273820][T16940] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2163.273858][T16940] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2163.273883][T16940] usb 7-1: Product: syz [ 2163.273902][T16940] usb 7-1: Manufacturer: syz [ 2163.273920][T16940] usb 7-1: SerialNumber: syz [ 2163.320131][ T1116] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2163.558038][T26395] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2163.558821][T26395] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2164.994699][ T1116] team0 (unregistering): Port device team_slave_1 removed [ 2165.404695][ T1116] team0 (unregistering): Port device team_slave_0 removed [ 2165.575751][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 2165.576060][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 2165.944168][T16940] cdc_ncm 7-1:1.0: skipping garbage [ 2165.944192][T16940] cdc_ncm 7-1:1.0: CDC Union missing and no IAD found [ 2165.944235][T16940] cdc_ncm 7-1:1.0: bind() failure [ 2165.975964][T16940] usb 7-1: USB disconnect, device number 7 [ 2166.715237][ T5789] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 2166.853590][ T5789] usb 7-1: device descriptor read/64, error -71 [ 2167.143939][ T5789] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 2167.295885][ T5789] usb 7-1: device descriptor read/64, error -71 [ 2167.408069][ T5789] usb usb7-port1: attempt power cycle [ 2167.753738][ T5789] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 2167.774708][ T5789] usb 7-1: device descriptor read/8, error -71 [ 2168.023724][ T5789] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 2168.075331][ T5789] usb 7-1: device descriptor read/8, error -71 [ 2168.197295][ T5789] usb usb7-port1: unable to enumerate USB device [ 2170.175987][ T1116] team0 (unregistering): Port device team_slave_1 removed [ 2170.604156][ T1116] team0 (unregistering): Port device team_slave_0 removed [ 2171.725382][T26409] orangefs_mount: mount request failed with -4 [ 2171.897230][T25941] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2171.928409][T25941] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2171.985229][T25941] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2171.986422][T25941] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2171.988011][T25941] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2172.229553][T16940] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 2172.393596][T16940] usb 7-1: Using ep0 maxpacket: 32 [ 2172.397387][T16940] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2172.397439][T16940] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2172.397492][T16940] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2172.397518][T16940] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2172.464564][T16940] usb 7-1: config 0 descriptor?? [ 2172.467650][T16940] hub 7-1:0.0: USB hub found [ 2172.679090][T16940] hub 7-1:0.0: 1 port detected [ 2173.734846][T16940] hub 7-1:0.0: activate --> -90 [ 2174.093618][T25941] Bluetooth: hci5: command tx timeout [ 2175.370410][T24834] usb 7-1: USB disconnect, device number 12 [ 2175.458033][ T38] audit: type=1804 audit(1763992814.149:778): pid=26422 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.6.6839" name="/newroot/159/file0" dev="tmpfs" ino=895 res=1 errno=0 [ 2175.470145][T26423] ipvlan2: entered promiscuous mode [ 2175.470177][T26423] ipvlan2: entered allmulticast mode [ 2175.470195][T26423] geneve1: entered allmulticast mode [ 2175.881993][T26199] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2175.920709][T26199] 8021q: adding VLAN 0 to HW filter on device team0 [ 2175.930615][T24863] bridge0: port 1(bridge_slave_0) entered blocking state [ 2175.930933][T24863] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2176.139810][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 2176.139930][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2176.178968][T26412] chnl_net:caif_netlink_parms(): no params data found [ 2176.215072][T25941] Bluetooth: hci5: command tx timeout [ 2176.356903][T26427] netlink: 'syz.6.6840': attribute type 7 has an invalid length. [ 2176.842629][T26412] bridge0: port 1(bridge_slave_0) entered blocking state [ 2176.847003][T26412] bridge0: port 1(bridge_slave_0) entered disabled state [ 2176.847258][T26412] bridge_slave_0: entered allmulticast mode [ 2176.849750][T26412] bridge_slave_0: entered promiscuous mode [ 2176.864031][T26412] bridge0: port 2(bridge_slave_1) entered blocking state [ 2176.864192][T26412] bridge0: port 2(bridge_slave_1) entered disabled state [ 2176.864453][T26412] bridge_slave_1: entered allmulticast mode [ 2176.867765][T26412] bridge_slave_1: entered promiscuous mode [ 2177.043702][ T5900] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 2177.129480][T26412] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2177.167173][T26412] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2177.173610][ T5900] usb 7-1: device descriptor read/64, error -71 [ 2177.423717][ T5900] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 2177.553727][ T5900] usb 7-1: device descriptor read/64, error -71 [ 2177.665761][ T5900] usb usb7-port1: attempt power cycle [ 2177.710885][T26412] team0: Port device team_slave_0 added [ 2177.724125][T26268] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 2177.782315][T26412] team0: Port device team_slave_1 added [ 2177.792353][T26268] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 2178.006491][T26268] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 2178.020344][ T5900] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 2178.034417][ T5900] usb 7-1: device descriptor read/8, error -71 [ 2178.170589][T26268] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 2178.214122][T26412] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2178.214143][T26412] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2178.214175][T26412] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2178.221574][T26412] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2178.221592][T26412] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2178.221626][T26412] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2178.253825][T25941] Bluetooth: hci5: command tx timeout [ 2178.273553][ T5900] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 2178.363515][ T5900] usb 7-1: device descriptor read/8, error -71 [ 2178.473933][ T5900] usb usb7-port1: unable to enumerate USB device [ 2179.315047][ C0] vkms_vblank_simulate: vblank timer overrun [ 2179.717595][ C0] vkms_vblank_simulate: vblank timer overrun [ 2180.018582][ C0] vkms_vblank_simulate: vblank timer overrun [ 2180.333858][T25941] Bluetooth: hci5: command tx timeout [ 2180.341379][ C0] vkms_vblank_simulate: vblank timer overrun [ 2180.462820][ C0] vkms_vblank_simulate: vblank timer overrun [ 2180.815966][ C0] vkms_vblank_simulate: vblank timer overrun [ 2181.304718][ C0] vkms_vblank_simulate: vblank timer overrun [ 2181.307264][T26412] hsr_slave_0: entered promiscuous mode [ 2181.312906][T26412] hsr_slave_1: entered promiscuous mode [ 2181.316188][T26412] debugfs: 'hsr0' already exists in 'hsr' [ 2181.316222][T26412] Cannot create hsr debugfs directory [ 2181.494163][ C0] vkms_vblank_simulate: vblank timer overrun [ 2181.596779][T26464] netlink: 'syz.6.6848': attribute type 7 has an invalid length. [ 2181.683765][ C0] vkms_vblank_simulate: vblank timer overrun [ 2181.744644][ C0] vkms_vblank_simulate: vblank timer overrun [ 2182.791217][ C0] vkms_vblank_simulate: vblank timer overrun [ 2182.823745][ C0] vkms_vblank_simulate: vblank timer overrun [ 2183.120932][ C0] vkms_vblank_simulate: vblank timer overrun [ 2183.443585][ C0] vkms_vblank_simulate: vblank timer overrun [ 2183.514092][ C0] vkms_vblank_simulate: vblank timer overrun [ 2183.721165][ C0] vkms_vblank_simulate: vblank timer overrun [ 2183.809422][ C0] vkms_vblank_simulate: vblank timer overrun [ 2183.914819][ C0] vkms_vblank_simulate: vblank timer overrun [ 2183.978559][T26474] orangefs_mount: mount request failed with -4 [ 2184.327658][T26199] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2184.531536][ C0] vkms_vblank_simulate: vblank timer overrun [ 2185.147201][T26493] netlink: 'syz.6.6856': attribute type 7 has an invalid length. [ 2185.269495][T26495] bond1: option arp_all_targets: invalid value (3) [ 2185.300451][T26495] bond1 (unregistering): Released all slaves [ 2185.363348][ T1116] bridge_slave_1: left allmulticast mode [ 2185.363825][ T1116] bridge_slave_1: left promiscuous mode [ 2185.364162][ T1116] bridge0: port 2(bridge_slave_1) entered disabled state [ 2185.494730][ T1116] bridge_slave_0: left allmulticast mode [ 2185.494756][ T1116] bridge_slave_0: left promiscuous mode [ 2185.494986][ T1116] bridge0: port 1(bridge_slave_0) entered disabled state [ 2186.452586][T26501] orangefs_mount: mount request failed with -4 [ 2187.866050][T26511] random: crng reseeded on system resumption [ 2188.914395][ T1116] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2189.058008][ T1116] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2189.149274][ T1116] bond0 (unregistering): Released all slaves [ 2190.178244][ T1116] hsr_slave_0: left promiscuous mode [ 2190.863688][ T1116] hsr_slave_1: left promiscuous mode [ 2190.864782][ T1116] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2190.918028][ T1116] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2191.754945][ T1116] team0 (unregistering): Port device team_slave_1 removed [ 2191.954350][ T1116] team0 (unregistering): Port device team_slave_0 removed [ 2192.985724][T26268] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2193.149254][T26268] 8021q: adding VLAN 0 to HW filter on device team0 [ 2194.050717][T25009] bridge0: port 1(bridge_slave_0) entered blocking state [ 2194.050867][T25009] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2194.077510][T26547] orangefs_mount: mount request failed with -4 [ 2194.198138][T24863] bridge0: port 2(bridge_slave_1) entered blocking state [ 2194.200708][T24863] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2194.430661][T11525] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2194.478940][T11525] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2194.482017][T11525] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2194.509232][T11525] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2194.618240][T11525] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2195.712803][T26412] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 2195.811075][T26412] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 2195.856855][T26572] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6879'. [ 2195.856893][T26572] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6879'. [ 2195.891815][T26412] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 2195.950540][T26412] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 2196.306151][ C0] vkms_vblank_simulate: vblank timer overrun [ 2196.363645][ T5789] usb 7-1: new full-speed USB device number 17 using dummy_hcd [ 2196.437607][T26268] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2196.540639][ T5789] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2196.540672][ T5789] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 2196.563557][ T5789] usb 7-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 2196.563590][ T5789] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2196.563612][ T5789] usb 7-1: Product: syz [ 2196.563628][ T5789] usb 7-1: Manufacturer: syz [ 2196.563644][ T5789] usb 7-1: SerialNumber: syz [ 2196.605609][ T5789] usb 7-1: config 0 descriptor?? [ 2196.628491][ T5789] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 2196.661604][ T5789] snd-usb-audio 7-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 2196.813880][T11525] Bluetooth: hci3: command tx timeout [ 2197.333292][T25260] usb 7-1: USB disconnect, device number 17 [ 2197.573956][T26550] chnl_net:caif_netlink_parms(): no params data found [ 2197.790617][ C0] vkms_vblank_simulate: vblank timer overrun [ 2198.590155][T26615] lec0: mtu less than device minimum [ 2198.590192][T26615] lec:lec_atm_send: lec0: change_mtu to 0 failed [ 2198.620809][T26606] lec:lec_atm_close: lec0: Shut down! [ 2198.810410][T26550] bridge0: port 1(bridge_slave_0) entered blocking state [ 2198.810631][T26550] bridge0: port 1(bridge_slave_0) entered disabled state [ 2198.810910][T26550] bridge_slave_0: entered allmulticast mode [ 2198.815969][T26550] bridge_slave_0: entered promiscuous mode [ 2198.854851][T26550] bridge0: port 2(bridge_slave_1) entered blocking state [ 2198.854992][T26550] bridge0: port 2(bridge_slave_1) entered disabled state [ 2198.855262][T26550] bridge_slave_1: entered allmulticast mode [ 2198.858226][T26550] bridge_slave_1: entered promiscuous mode [ 2198.898436][T11525] Bluetooth: hci3: command tx timeout [ 2199.162230][T26550] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2199.226066][T26550] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2199.535092][T26550] team0: Port device team_slave_0 added [ 2199.665285][T26550] team0: Port device team_slave_1 added [ 2199.665941][ T1116] bridge_slave_1: left allmulticast mode [ 2199.665967][ T1116] bridge_slave_1: left promiscuous mode [ 2199.666174][ T1116] bridge0: port 2(bridge_slave_1) entered disabled state [ 2199.734993][ T1116] bridge_slave_0: left allmulticast mode [ 2199.735064][ T1116] bridge_slave_0: left promiscuous mode [ 2199.735289][ T1116] bridge0: port 1(bridge_slave_0) entered disabled state [ 2200.056150][ C0] vkms_vblank_simulate: vblank timer overrun [ 2200.127020][ C0] vkms_vblank_simulate: vblank timer overrun [ 2200.374868][ C0] vkms_vblank_simulate: vblank timer overrun [ 2200.462279][ C0] vkms_vblank_simulate: vblank timer overrun [ 2200.571870][ C0] vkms_vblank_simulate: vblank timer overrun [ 2200.663728][T26638] ------------[ cut here ]------------ [ 2200.663743][T26638] workqueue: cannot queue hci_rx_work on wq hci0 [ 2200.663858][T26638] WARNING: CPU: 0 PID: 26638 at kernel/workqueue.c:2258 __queue_work+0x2e5/0x1010 [ 2200.663893][T26638] Modules linked in: [ 2200.663911][T26638] CPU: 0 UID: 0 PID: 26638 Comm: syz.6.6891 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 2200.663944][T26638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2200.663957][T26638] RIP: 0010:__queue_work+0x2e5/0x1010 [ 2200.663983][T26638] Code: 42 80 3c 28 00 74 08 48 89 ef e8 c6 a8 96 00 48 8b 75 00 49 81 c6 68 01 00 00 48 c7 c7 20 f4 e9 8a 4c 89 f2 e8 2c 31 f9 ff 90 <0f> 0b 90 90 e9 f2 fe ff ff e8 fd e9 34 00 eb 2e e8 f6 e9 34 00 e9 [ 2200.663999][T26638] RSP: 0018:ffffc900042ffa68 EFLAGS: 00010046 [ 2200.664016][T26638] RAX: 31051ea13817a700 RBX: 0000000000000000 RCX: 0000000000080000 [ 2200.664032][T26638] RDX: ffffc90011841000 RSI: 0000000000000497 RDI: 0000000000000498 [ 2200.664047][T26638] RBP: ffff888057a70af0 R08: 0000000000000000 R09: 0000000000000000 [ 2200.664061][T26638] R10: dffffc0000000000 R11: ffffed101710487b R12: dffffc0000000000 [ 2200.664078][T26638] R13: dffffc0000000000 R14: ffff888034ba6168 R15: ffff88803374da2c [ 2200.664096][T26638] FS: 00007fb93e5c56c0(0000) GS:ffff888126df6000(0000) knlGS:0000000000000000 [ 2200.664116][T26638] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2200.664131][T26638] CR2: 00007fb93e5c4f98 CR3: 000000002f7a4000 CR4: 00000000003526f0 [ 2200.664152][T26638] Call Trace: [ 2200.664159][T26638] [ 2200.664177][T26638] ? rcu_is_watching+0x15/0xb0 [ 2200.664202][T26638] queue_work_on+0x181/0x270 [ 2200.664231][T26638] ? rt_spin_lock+0x1c1/0x3e0 [ 2200.664264][T26638] ? __pfx_queue_work_on+0x10/0x10 [ 2200.664296][T26638] ? rt_spin_unlock+0x161/0x200 [ 2200.664320][T26638] hci_recv_frame+0x625/0x7c0 [ 2200.664340][T26638] ? skb_pull+0xc1/0x1d0 [ 2200.664367][T26638] vhci_write+0x35a/0x4a0 [ 2200.664394][T26638] vfs_write+0x5d5/0xb40 [ 2200.664428][T26638] ? __pfx_vhci_write+0x10/0x10 [ 2200.664453][T26638] ? __pfx_vfs_write+0x10/0x10 [ 2200.664488][T26638] ? __fget_files+0x2a/0x420 [ 2200.664523][T26638] ksys_write+0x14b/0x260 [ 2200.664548][T26638] ? __pfx_ksys_write+0x10/0x10 [ 2200.664573][T26638] ? do_syscall_64+0xbe/0xfa0 [ 2200.664603][T26638] do_syscall_64+0xfa/0xfa0 [ 2200.664629][T26638] ? lockdep_hardirqs_on+0x9c/0x150 [ 2200.664659][T26638] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2200.664680][T26638] ? clear_bhb_loop+0x60/0xb0 [ 2200.664704][T26638] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2200.664722][T26638] RIP: 0033:0x7fb94037e1ff [ 2200.664740][T26638] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 2200.664758][T26638] RSP: 002b:00007fb93e5c5000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 2200.664776][T26638] RAX: ffffffffffffffda RBX: 00007fb9405d6090 RCX: 00007fb94037e1ff [ 2200.664791][T26638] RDX: 0000000000000007 RSI: 0000200000000000 RDI: 00000000000000ca [ 2200.664805][T26638] RBP: 00007fb940403f91 R08: 0000000000000000 R09: 0000000000000000 [ 2200.664819][T26638] R10: 0000200000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2200.664832][T26638] R13: 00007fb9405d6128 R14: 00007fb9405d6090 R15: 00007fffcc1e5368 [ 2200.664864][T26638] [ 2200.664885][T26638] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 2200.664899][T26638] CPU: 0 UID: 0 PID: 26638 Comm: syz.6.6891 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 2200.664920][T26638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2200.664931][T26638] Call Trace: [ 2200.664948][T26638] [ 2200.664958][T26638] dump_stack_lvl+0x99/0x250 [ 2200.664989][T26638] ? __asan_memcpy+0x40/0x70 [ 2200.665009][T26638] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2200.665036][T26638] ? __pfx__printk+0x10/0x10 [ 2200.665067][T26638] vpanic+0x237/0x6d0 [ 2200.665084][T26638] ? __pfx_vpanic+0x10/0x10 [ 2200.665109][T26638] panic+0xb9/0xc0 [ 2200.665125][T26638] ? __pfx_panic+0x10/0x10 [ 2200.665154][T26638] __warn+0x31b/0x4b0 [ 2200.665171][T26638] ? __queue_work+0x2e5/0x1010 [ 2200.665196][T26638] ? __queue_work+0x2e5/0x1010 [ 2200.665218][T26638] report_bug+0x2be/0x4f0 [ 2200.665244][T26638] ? __queue_work+0x2e5/0x1010 [ 2200.665267][T26638] ? __queue_work+0x2e5/0x1010 [ 2200.665291][T26638] ? __queue_work+0x2e7/0x1010 [ 2200.665313][T26638] handle_bug+0x84/0x160 [ 2200.665331][T26638] exc_invalid_op+0x1a/0x50 [ 2200.665350][T26638] asm_exc_invalid_op+0x1a/0x20 [ 2200.665369][T26638] RIP: 0010:__queue_work+0x2e5/0x1010 [ 2200.665393][T26638] Code: 42 80 3c 28 00 74 08 48 89 ef e8 c6 a8 96 00 48 8b 75 00 49 81 c6 68 01 00 00 48 c7 c7 20 f4 e9 8a 4c 89 f2 e8 2c 31 f9 ff 90 <0f> 0b 90 90 e9 f2 fe ff ff e8 fd e9 34 00 eb 2e e8 f6 e9 34 00 e9 [ 2200.665410][T26638] RSP: 0018:ffffc900042ffa68 EFLAGS: 00010046 [ 2200.665427][T26638] RAX: 31051ea13817a700 RBX: 0000000000000000 RCX: 0000000000080000 [ 2200.665441][T26638] RDX: ffffc90011841000 RSI: 0000000000000497 RDI: 0000000000000498 [ 2200.665455][T26638] RBP: ffff888057a70af0 R08: 0000000000000000 R09: 0000000000000000 [ 2200.665469][T26638] R10: dffffc0000000000 R11: ffffed101710487b R12: dffffc0000000000 [ 2200.665485][T26638] R13: dffffc0000000000 R14: ffff888034ba6168 R15: ffff88803374da2c [ 2200.665515][T26638] ? __queue_work+0x2e4/0x1010 [ 2200.665544][T26638] ? rcu_is_watching+0x15/0xb0 [ 2200.665565][T26638] queue_work_on+0x181/0x270 [ 2200.665589][T26638] ? rt_spin_lock+0x1c1/0x3e0 [ 2200.665615][T26638] ? __pfx_queue_work_on+0x10/0x10 [ 2200.665647][T26638] ? rt_spin_unlock+0x161/0x200 [ 2200.665672][T26638] hci_recv_frame+0x625/0x7c0 [ 2200.665698][T26638] ? skb_pull+0xc1/0x1d0 [ 2200.665728][T26638] vhci_write+0x35a/0x4a0 [ 2200.665753][T26638] vfs_write+0x5d5/0xb40 [ 2200.665780][T26638] ? __pfx_vhci_write+0x10/0x10 [ 2200.665802][T26638] ? __pfx_vfs_write+0x10/0x10 [ 2200.665833][T26638] ? __fget_files+0x2a/0x420 [ 2200.665871][T26638] ksys_write+0x14b/0x260 [ 2200.665896][T26638] ? __pfx_ksys_write+0x10/0x10 [ 2200.665924][T26638] ? do_syscall_64+0xbe/0xfa0 [ 2200.665963][T26638] do_syscall_64+0xfa/0xfa0 [ 2200.665990][T26638] ? lockdep_hardirqs_on+0x9c/0x150 [ 2200.666017][T26638] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2200.666037][T26638] ? clear_bhb_loop+0x60/0xb0 [ 2200.666061][T26638] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2200.666080][T26638] RIP: 0033:0x7fb94037e1ff [ 2200.666096][T26638] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 2200.666113][T26638] RSP: 002b:00007fb93e5c5000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 2200.666133][T26638] RAX: ffffffffffffffda RBX: 00007fb9405d6090 RCX: 00007fb94037e1ff [ 2200.666148][T26638] RDX: 0000000000000007 RSI: 0000200000000000 RDI: 00000000000000ca [ 2200.666161][T26638] RBP: 00007fb940403f91 R08: 0000000000000000 R09: 0000000000000000 [ 2200.666174][T26638] R10: 0000200000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2200.666187][T26638] R13: 00007fb9405d6128 R14: 00007fb9405d6090 R15: 00007fffcc1e5368 [ 2200.666218][T26638] [ 2200.668381][T26638] Kernel Offset: disabled