last executing test programs: 16.594043993s ago: executing program 1 (id=406): r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='VOLUME\nSYNTH \'Synth Capture\' 004'], 0x32) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x280, 0x0) dup3(r1, r0, 0x2000000000000000) 16.383287921s ago: executing program 1 (id=410): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000101c1b021b00000000000109022400010000400009040000010300400009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$kcm_KCM_RECV_DISABLE(r1, 0x6, 0x5, 0x0, 0x74efdfe049b861ab) (async) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x0, "78e99e15"}]}}, 0x0}, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="00f505000000526ac71fdb"], 0x0, 0x0, 0x0, 0x0}) 15.540249019s ago: executing program 0 (id=413): socket$inet(0x10, 0x3, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='limits\x00') socket$netlink(0x10, 0x3, 0x2) pread64(r0, &(0x7f0000000180)=""/43, 0xfd8a, 0x3c) socket$pppoe(0x18, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0xa) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r8, 0x3a9, 0x0, 0x0, {{}, {@val={0x8, 0x140}, @void}}}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r6, 0x300, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20044080}, 0x4000000) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c010000", @ANYRES16, @ANYBLOB="2d01620000000900509072fb60cb08000300"], 0x2c}}, 0x0) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) r10 = dup(r9) write$UHID_INPUT(r10, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r6, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r3], 0x4}}, 0x0) sendfile(r5, r4, 0x0, 0x100000002) 14.998574851s ago: executing program 0 (id=416): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f0000000200)={0x79, 0x0, 0x400000000000000}) 14.766807414s ago: executing program 0 (id=419): socket$nl_xfrm(0x10, 0x3, 0x6) syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="120100004ec2b52024040575a8320000000109021200010000000009e7ffffff6fcefb004e3e90f02ce11639681e77671fc7b989f37aad99a8a28b2c034e31f69b9b322e7694ef7b"], 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume_offset', 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket(0x11, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000005c0)={'gre0\x00'}) sendmsg$netlink(r2, &(0x7f0000002ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) r6 = syz_io_uring_setup(0x239, &(0x7f0000000300)={0x0, 0x200000, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r6, 0x2def, 0x4000, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) pselect6(0x2a, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000700)=ANY=[@ANYRESOCT=r0, @ANYRESHEX], 0xfe35) fsmount(r1, 0x1, 0x80) r9 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') signalfd(r4, &(0x7f0000000280), 0x8) preadv(r9, &(0x7f0000000400)=[{&(0x7f0000000500)=""/180, 0xfffffe47}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r9, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x20044800) preadv(r9, &(0x7f0000000180)=[{&(0x7f0000000040)=""/125, 0x7d}], 0x1, 0x2, 0x0) r10 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') openat$binfmt(0xffffffffffffff9c, r10, 0x42, 0x1ff) execveat$binfmt(0xffffffffffffff9c, r10, 0x0, &(0x7f0000000200)={[&(0x7f0000000100)='\xe5=P\xecAN\x16\x16\x05\xe1\x97\r\x86\xd4\xa4W\xc3\x00\x00\x00']}, 0x1000) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="b80000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) socket$inet6(0xa, 0x3, 0x7) 14.602779243s ago: executing program 1 (id=422): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000003580)={0x2, 0x0, @dev}, 0x10) bind$inet(r0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @empty=0xff91}, 0x10) 14.318349247s ago: executing program 1 (id=423): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}], 0x1, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6(0xa, 0x80002, 0x0) syz_emit_ethernet(0x2a, 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) read$FUSE(r1, &(0x7f00000103c0)={0x2020, 0x0, 0x0}, 0x2020) syz_usb_connect$cdc_ncm(0x5, 0x0, 0x0, 0x0) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x80101, 0x21) write$tcp_congestion(r3, &(0x7f00000000c0)='lp\x00', 0xfffffdef) 12.788513389s ago: executing program 2 (id=429): socket$nl_generic(0x10, 0x3, 0x10) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000c40), 0xffffffffffffffff) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) sched_setaffinity(0x0, 0x0, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) (async) syz_open_procfs(0x0, 0x0) (async) futex_waitv(0x0, 0x0, 0x2, 0x0, 0x0) (async) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0x80111500, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x1f, 0x800000000004, @thr={&(0x7f0000000380)="b1d46ee548f147b7cc9d39b617d504762d591b8a8488e1c99a2abeddf48f2fd97a771aa287846538bf1f0511395fafdf7c2c6b99ce3cb240f5b19a59259fa739ee2eb2311288a87006c3a903c316cccf21cc4d3117a872a79f97939d086b74129b2ac6156f463fee8540f21985d694709572241548e8ff21093620a2d5873164070d82d85a699cd8d1ec0894389b02832131af15ffb1018494d5334b7caa0b685bb2202f1eff5aecb742c21ff5705c716bece13a67e399fc5f5e009977ff7a457a0ee76d3d1fc8bc531b1255a89fa608774dfc7da3e1a6fcefb5abbfbe1740a6ec7cb88415f3dd881e56d6a9abd8f188bbb7e05b", &(0x7f0000000280)="bc9117ed8d56bf19582037e60d0ff54508157464ec6c705109a766ab525c0c0d507a6e6ab0030e103db90e971d2643453aafdcde259b70bbb99c8f772b1d5600634bb0d8ece00effde779e51a33e820e703b41bed97ac62cc162918ea76fbf4278681f800290b70af329e60c645557f22be07ffc5eea2f2641fad18139e1d37796c2ad80da54c349872cb3ebbbbc8bc8b7b9cd5e97106ee17c2510906fa53bb1db"}}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) r3 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x30, 0x0, &(0x7f0000000040)=0xb3) (async) futex(&(0x7f000000cffc)=0x4000001, 0x6, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f0000000080)=0x1, 0x80, 0xfffffd, 0x0, 0x0, 0xfffffffc) (async) shutdown(0xffffffffffffffff, 0x3) (async) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) (async) r4 = fsopen(&(0x7f0000000100)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000000)='source', &(0x7f0000000740)='//\xf2b\x06\b\xba\xdfXo\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b/Q9\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce\x14/8\\//\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff}, './file0\x00'}) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000180)={0x3, 0x0, &(0x7f0000ffe000/0x1000)=nil}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) writev(r2, &(0x7f0000000a40)=[{&(0x7f00000007c0)='G', 0x1}], 0x1) pipe2(&(0x7f00000000c0), 0x0) r3 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r3, &(0x7f0000000040), 0xc) r4 = socket$qrtr(0x2a, 0x2, 0x0) recvmmsg(r3, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) connect$qrtr(r4, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) ioctl$sock_qrtr_TIOCINQ(r3, 0x8918, 0x0) writev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='~', 0x1}], 0x1) 11.930891398s ago: executing program 1 (id=433): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000003180)={0x8, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {}, [], {{0x7, 0x1, 0x3, 0x8, 0x9, 0x8004}, {0x4, 0x0, 0x4, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fdinfo\x00') syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x1, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x2, 0x10, 0x40, [{{0x9, 0x4, 0x0, 0x7, 0x1, 0x7, 0x1, 0x3, 0x1, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0x1, 0x0, 0x2}}, [{{0x9, 0x5, 0x82, 0x2, 0x40, 0x2, 0x1, 0x6}}]}}}]}}]}}, &(0x7f0000003100)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x200, 0x2, 0x11, 0x0, 0xff}, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="05ffffffff"], 0x4, [{0x7e, &(0x7f00000001c0)=ANY=[@ANYBLOB="7e036c557ccdcb974198afcc7db03cdf0eeff8f2059da4fb91aa4856d7ef2f2db0ab49176e6fd85f82acd0a91f9b21995ff1d3066caa341a5ed97ed9a0acb08643e2530491aee3f5835907551972d618594d35990a6996d4378b6ce0d9f7093b94c7fc2d6f5803641d4c0029b9a31b7b33189a7a463627d854a460912fae"]}, {0x4, &(0x7f0000003040)=@string={0x0, 0x3, "e4a477f3d191119dfa44923c74e751a3da1dc8806a4af0e6de57bbfc2e67c8a869184c80406acaadc70073216f66f5d3d43d631530377c6e47dec5fd187b314d28ad97b24161b21fd869216307cc46e04d84cde35e534b19353508299539160cfbb4119d15dce2d2b51aefba217c63eaee5effc6bbd2ee438ffc665bd82b1f909101afa414694921219ab212c685df951bcbd991"}}, {0x15, &(0x7f0000000280)=@lang_id={0x0, 0x3, 0x42a}}, {0x66, &(0x7f00000002c0)=@string={0x66, 0x3, "b9b7071a6553f3cc64226011e7599f426ec0a2269e8cca4720696828c7a198345d749a018c7d0678935a6da66d5e03d7e68e48839ff252a20a9cf2434bde67c4a96e6d16b2df1e48d79bfebf899c3bdda6bd4cd739fbf41709bc71b10c13d352ec88dd82"}}, {0x20, &(0x7f0000000340)=ANY=[@ANYBLOB="20036c3ab24b3363d5ca2779ebd335008e1442c857b3487632cc6bcb00000000"]}]}) getdents(r1, &(0x7f0000000040)=""/104, 0x68) mkdirat(r1, &(0x7f00000010c0)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r3 = gettid() tkill(r3, 0x7) getresuid(&(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000000280)={0xb7c, 0x87, {r3}, {r5}, 0x1, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000100), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000006, 0x28011, r9, 0x0) syz_fuse_handle_req(r2, &(0x7f0000000300)="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", 0x2000, &(0x7f0000002fc0)={&(0x7f0000002300)={0x50, 0x0, 0x4ad7, {0x7, 0x28, 0xf7, 0x90080, 0x8, 0x1, 0x3, 0x56e224bd}}, 0x0, &(0x7f00000023c0)={0x18, 0x0, 0x7f, {0x10}}, &(0x7f0000002400)={0x18, 0x0, 0x6, {0x21}}, &(0x7f0000002440)={0x18, 0xfffffffffffffffe, 0x0, {0x6f}}, &(0x7f0000002480)={0x28, 0x0, 0xffc, {{0x2000000000, 0x7, 0x0, r7}}}, &(0x7f00000024c0)={0x60, 0xfffffffffffffffe, 0x1, {{0x7, 0x5, 0x8, 0x8, 0x0, 0x4, 0x3, 0x8}}}, &(0x7f0000002540)={0x18, 0xfffffffffffffff5, 0x0, {0x5}}, &(0x7f0000002580)={0x12, 0x0, 0x9, {'{\x00'}}, &(0x7f00000025c0)={0x20, 0x0, 0x1, {0x0, 0xd}}, &(0x7f0000002600)={0x78, 0x0, 0x7, {0x8000000000000001, 0x0, 0x0, {0x4, 0x1, 0x7, 0x10001, 0x3, 0x6, 0x2, 0x0, 0x4, 0x7000, 0x4, 0x0, 0xee00, 0x81, 0x8}}}, &(0x7f0000002680)={0x90, 0x0, 0x447, {0x2, 0x1, 0x9, 0x0, 0x8001, 0x6, {0x2, 0x3, 0x400, 0x34fdc0, 0x7000000000000, 0xb, 0x100, 0x3ff, 0x5, 0x7000, 0x8, 0x0, 0x0, 0x9, 0x7}}}, &(0x7f0000002740)=ANY=[@ANYBLOB="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"/264], &(0x7f0000002ac0)={0x3e0, 0xfffffffffffffff5, 0x7ff, [{{0x4, 0x3, 0x4, 0x8000, 0x1ff, 0x0, {0x2, 0x2, 0x0, 0x8f49, 0x20000000007, 0x4, 0x3, 0x3, 0x4, 0xa000, 0x7ff, r5, 0x0, 0x2, 0xffff}}, {0x2, 0x1, 0x0, 0x6}}, {{0x1, 0x2, 0x8000000000000001, 0x8, 0x6, 0xe30, {0x2, 0x7, 0x7f, 0x7, 0x610, 0x7, 0x1, 0x3, 0x6, 0xc000, 0x9, r6, 0x0, 0x7, 0x6}}, {0x1, 0x4, 0xa, 0x7f, '/dev/ptmx\x00'}}, {{0x2, 0x0, 0xffffffffffffffff, 0x4, 0x8, 0xc, {0x5, 0x7, 0x1, 0x2, 0x10, 0x2, 0x7, 0x1, 0x7442fc61, 0x8000, 0x4, r5, 0x0, 0xffffff07, 0x8}}, {0x6, 0x0, 0x11, 0x400, 'f}+)]-/*&@:^)\\.*!'}}, {{0x0, 0x1, 0x3, 0x2c000000000000, 0x2, 0x1, {0x3, 0x7f, 0x8000000000000000, 0x3e0a, 0x4f59, 0x3, 0x1ff, 0x7, 0x8, 0xa000, 0x7, 0x0, 0xffffffffffffffff, 0x6, 0x12}}, {0x0, 0x200, 0x9, 0x7ff, 'mptcp_pm\x00'}}, {{0x2, 0x1, 0x1000, 0x7fff, 0x7fff, 0x1000, {0x1, 0x7, 0x4, 0x2, 0x8, 0xfffffffffffffffa, 0x2, 0x2, 0x8000, 0x0, 0x4b81, r4, 0x0, 0x5, 0x1}}, {0x2, 0x2, 0x7, 0x1000100, '[-.],\xc3\''}}, {{0x3, 0x1, 0x2, 0x5, 0x6, 0x100, {0x5, 0x0, 0x4, 0x81, 0x0, 0x7f4374d, 0xb5c, 0x40, 0x101, 0xa000, 0x4, r8, 0x0, 0x8000, 0xff}}, {0x2, 0x2, 0x0, 0xd10}}]}, &(0x7f0000002ec0)={0xa0, 0x0, 0x1, {{0x5, 0x0, 0x64, 0x0, 0xd, 0x7f, {0x3, 0x2, 0xcc88, 0x4, 0x80, 0x1ff, 0x3, 0x7, 0x25b, 0x1000, 0x3, r4, 0x0, 0x5, 0x8}}, {0x0, 0x1c}}}, &(0x7f0000002f80)={0x20, 0x0, 0x0, {0x0, 0x4, 0x9, 0x8}}}) 11.550246285s ago: executing program 0 (id=435): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000380)={0xaa, 0x4a8}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={r1, 0x58, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000480)=""/235, 0x8e, 0xeb, 0x0, 0x2, 0x10000, @value}, 0x28) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = syz_clone3(&(0x7f0000000d00)={0xf214381abe2e1591, &(0x7f0000000a80), &(0x7f0000000ac0), &(0x7f0000000b00), {0xe}, &(0x7f0000000b40)=""/244, 0xf4, &(0x7f0000000c40)=""/87, &(0x7f0000000cc0)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0xa}, 0x58) r6 = syz_clone(0x88200, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r6, 0x0) sendmsg$nl_generic(r4, &(0x7f0000001480)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001440)={&(0x7f0000000d80)={0x69c, 0x32, 0x1, 0x621969ad, 0x25dfdbfe, {0xb7}, [@generic="1139cd61360cef6ae1f71a0f6cbb7600aebdbb742e28c080c53780e76ea7cc3a150083a2bb4b27bf63a4b265954289d51f40fda562eb331b693196666d50f34f2c97dcb9b347bb135a76a1afb642cf94b1158ec1ac0e7d2dffabab768e8528e0e5024fceb8041355258e7f265e5617b7fa4785825e0b5551479f9ca7f3c986081069efb9c62a1306d695cbb844ed09c547954f5b33a123578b1c9dafe43d9b35e46f560ab862c272bf85fa67b4564fd21513ccbd7d3647c926ccfd417638ed6e7ce162590254be8d6c4db20df2ecc02b43dd5a34254b6c7b920d879ede82d1c57b9f90c58bc4b258bffba50559ef54e9f651", @generic="d0381927183fcc9f97d2d1c515737d6acb68d219e5256e9c47def44644dc0e42ae7a671d50f2c108a13da2bfa2a82f7d22d1ba71f3d06d4f7f5bf8c20898fcc2f7ea569989792595d52b9d7f81acf140aeca56e5799642b58b84908456d008", @nested={0x24e, 0xa8, 0x0, 0x1, [@generic="1f0fbd4e3ace160f2d835b526ce89bfa56293a2453fb3cdd5e3af9e4485a2c6d20af0ff0d90dd665c89188271d8485b3fbc03ed5e0e9e05833d0f0c1c639dac1c0735a48aab9b8a33bfe993fc9ed5efa5013e9c86424eead8ddcabcb12c1ae79a73be7183b2df009ef433c8beec6a51495a9575d67c0a711100a76c9f76c1220558286c34ce3c3807d0bd6e0360393b92238105912896622f56021a9eb672ae7de2acaf2067b90ab9c574e77e599b6c8a3d5e404a9e5b9ba1fd5f3795391439af4a4bdffb3583da824e5e663bed302eb8e6177a0a394bf3b1e8a3bf1cce3ec293602174503c9f8f9376fd6", @typed={0x14, 0x6b, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @generic="8cc969cda61fd986b463637ea7943ee50fba944e", @typed={0x14, 0x13c, 0x0, 0x0, @ipv6=@mcast2}, @typed={0x8, 0x18, 0x0, 0x0, @pid=r5}, @typed={0x8, 0xd4, 0x0, 0x0, @fd=r1}, @typed={0x8, 0x93, 0x0, 0x0, @str='GPL\x00'}, @typed={0xd9, 0xd8, 0x0, 0x0, @binary="20f529c9096b2eeb4b2fc3c46834844ea17b53ed3b53fb53bbe124e42a46b5da3d9eee62e77d1cf11138030f6d9128511848258d2f4fbf9845cb6bab741e4dc4daa760fab48ff4e7babf67277ac356230526d61260b7ca2c871ffd64715e176907347abbdb6fa2ace95ab459a5670c9dfb185c07c0c47ad9f09d3fe58a5cabf006ed9753d30d668053c4c420e9e852460afe0dd15a38dce6e6e7aa04fa0703a4298983431ee91896a8b72698835d0f37dca50e1a730044f23e212ebe548a97aad2cf42244f6b52c5ca0dcd8a159dac7e741bcaf960"}, @typed={0x8, 0x9f, 0x0, 0x0, @u32=0x10000}, @generic="2739a73823799bb3e32f2ad9919fe468bc4e0a69ac40825b3efa6a486211e3f7bf4b4c9f2aa37b"]}, @nested={0x20f, 0x62, 0x0, 0x1, [@generic="d98cad00c5b91e491c02cdd091719cb86769e169630dc78d68877bf50748f0f5ed2c293715097ab81bbee4fe0562e8b87e645fae0dcd9c0ba0a6cae64dc542b1679d76b5f477064a125aef30554a409f094cbfbfa5689be4583074b0316be1441e7b43f3402420d6ffca7f3e08f27642bf", @generic="9d773326739d4ad54d4bd0ed9f3cf3e115cc2a76fcd9ad23a1069f21226e098f3249f9266c866207a1d77ba2a2b7083e68774cee6d1f06d9c13ab4398744c8b444afa9bead93011c6f889ccef73b33be379a03975b6cd6d464d53baf57e2e7d10ee2875f8a03cb0af0f49d364d138f2170a4ba7f29d7ea7ab3251a6efbaf05ccac91a7252c6047c97cfff50edb59a3d3ba5b10cc96481a1f6654cc4e9dcaffca850ea43ba5317ac68f0eaf50530f6b1a380569706b350fe0491ddf1bf3c565ec6e6611e7e6e39e1e7ddb82dde2486dcbdcf819ccce640eff6a9c66bd0554d8", @typed={0x8, 0x24, 0x0, 0x0, @pid=r6}, @generic="c846557cf6649ab121ba70329851e359b9730e91634e282f4c91789a000bf04c4606763076ea72e7fbb849fe45dc32ec0bf93a3945213794016992b48deba45b4f2c9d135efcc38a8543a257b17538ae773d39b2210e36a9f0561588d0b2cbaf9c40a0bc911808d2cc2b4722bed95f099656f46c98f059057cd2b75fff1458bf23d42699ddd1a8ae3ff50a2aa728657ab314be4b7492e53464a1821b28f9afbb9966d55f1e8d8c938377399abf55fe82bcef5a"]}, @typed={0xc, 0x147, 0x0, 0x0, @u64=0xeb}, @generic="1c43035f7e82c9084781069b9a07629b89e9161a2e6e8387ad9f91997d7121c57022a6def69d3ef4bcc4b6253077c0d8923dda89586f4ee7cb650001a8cb0c0856bc08a98b016859835c74b43815239cf5b53198b2dbbf31317d64bb4ebc1e9b2e71737f37366f024353ef432f7ef85d99209eff4f1082c53e6226d12903d0d3405db7133d6d71e5d917f43adcc68b7535b64ce2270b56d709b324ba0cafa4db496e0d9d03b240ed8e17ff4fc0f1b2ca365ee252f477d040978dd1c544bb996f376d496f131110db"]}, 0x69c}}, 0x40000) r7 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r9 = dup(r8) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b000000eccd"]) ioctl$KVM_SET_LAPIC(r9, 0x4400ae8f, &(0x7f0000000100)={"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"}) r10 = openat$zero(0xffffff9c, &(0x7f0000000600), 0x436802, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_tracing={0x1a, 0x1, &(0x7f00000007c0)=ANY=[@ANYBLOB="21e0e0ffffffff025fc7ac8999fb353f8a62147255a96263435806a5b3598fe7def036f0fa9450f55bde7b8b3d8f82b149a0fe3510a169ac471388294dbfc8435a4a8e759431f4c598c5e6ee59dc63ad62631ee22eebfad12f314fdaab409d3dcfd5a4e10c227b746bcc3729412879fc6b7b43e3374e52fcca06011eb673f879b485c56a7c0ae84a4596498e2f0f49da47f6cc4e0d2458c185cf6c92c044446550efd854099d2eba3a37100f3d3b54c9147227484fd55707b0e1515332a241e1776e78b26efba6f834822bbef4ea7409f3a9f9"], &(0x7f0000000180)='GPL\x00', 0x0, 0xae, &(0x7f00000001c0)=""/174, 0x40f00, 0x0, '\x00', r2, 0x1a, r3, 0x8, &(0x7f0000000580)={0x0, 0x2}, 0x8, 0x10, &(0x7f00000005c0)={0x5, 0x8, 0x5, 0x8}, 0x10, 0xe256, 0xffffffffffffffff, 0x7, &(0x7f0000000640)=[r9, 0x1, r10], &(0x7f0000000680)=[{0x4, 0x1, 0x5, 0x2}, {0x3, 0x1, 0x8, 0x3}, {0x2, 0x1, 0xc, 0x4}, {0x4, 0x5, 0xb, 0x7}, {0x5, 0x5, 0xc, 0x8}, {0x0, 0x2, 0x0, 0xb}, {0x4, 0x3, 0x2, 0x9}], 0x10, 0x5, @void, @value}, 0x94) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000100)={{&(0x7f00003ea000/0x400000)=nil, 0x400000}, 0x1}) clock_gettime(0x0, &(0x7f0000000000)) 10.500343037s ago: executing program 3 (id=436): syz_open_dev$vcsu(&(0x7f0000000000), 0x7c, 0x604800) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x62, 0x8, 0xe6, 0x20, 0x525, 0x1080, 0x585f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x71, 0x0, 0x1, 0x4f, 0xe4, 0x3d, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x1ec}}, 0x0) 10.483658167s ago: executing program 2 (id=437): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r0, 0x0) r1 = io_uring_setup(0x30d5, &(0x7f00000000c0)={0x0, 0x9f23, 0x10, 0x0, 0x38e}) close_range(r1, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) (fail_nth: 37) 9.505754571s ago: executing program 2 (id=438): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000002020102000000000000000002000008300002802c0001801400030020010000000000000400200100"/68], 0x44}, 0x1, 0x0, 0x0, 0x48000}, 0x8000) 9.123836854s ago: executing program 2 (id=440): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback={0xffffffffffffff91}}, 0x1c) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000101c1b1e1c000000000001090224000100040000010300000009210000000122050009058103000000000000000000"], 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000008c0)=ANY=[@ANYRES16=r1], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x40810) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0xf, &(0x7f0000000900)=@raw=[@alu={0x4, 0x1, 0x7, 0x9, 0x8, 0x40, 0xfffffffffffffffc}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0xffffffffffffffff}], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xfffffdac) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) dup(r1) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000780)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000d00)={'geneve0\x00', &(0x7f0000000000)=@ethtool_sset_info={0x37, 0x0, 0xfffffffffffffffc}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000280)={'syztnl0\x00', &(0x7f00000001c0)={'sit0\x00', 0x0, 0x80, 0x80, 0x3, 0x3, {{0x1f, 0x4, 0x2, 0x1e, 0x7c, 0x66, 0x0, 0x81, 0x4, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_prespec={0x44, 0x24, 0xe0, 0x3, 0x0, [{@loopback, 0x10000}, {@remote, 0xffffffe0}, {@multicast2, 0x94f}, {@rand_addr=0x64010100, 0x30000000}]}, @generic={0x88, 0xd, "e9af892ae933adbf8af8a2"}, @generic={0x89, 0xd, "b3eb22f12305b35322e355"}, @timestamp={0x44, 0x1c, 0x8, 0x0, 0x0, [0x0, 0xfffffffb, 0x7ff, 0x9, 0x1, 0xfff]}, @generic={0x83, 0xe, "f368dd347d9484d82b6602ce"}]}}}}}) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', r4, 0x0, 0x4, 0x0, 0xffffffff, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0xc}, {0xac}}, [], {{0x7, 0x1, 0x3, 0x8, 0x9, 0x8004}, {0x4, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) utimes(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, &(0x7f0000000000)=@v1={0x0, @adiantum, 0x0, @desc1}) syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12014000f273a440cd061501c3d90102030109021b0001000000000904000c019d0178000905", @ANYBLOB="872ff7"], 0x0) socket$kcm(0x29, 0x5, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000bc0)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x40050}, 0x20048801) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r6, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000e00)=""/264, 0x108}], 0x1}, 0x1f00) sendmsg$tipc(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x73220c8b}], 0x1}, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000380)={0x14, &(0x7f00000002c0)={0x20, 0xa, 0x72, {0x72, 0x24, "88918a9456fcb337059acf76a35610dbb5fb508c4129c20cef833858c06b3875f79f7b3dd2abde2a21ba055e1eed0a0cea2e6e305ef15fcbcda4979dad992b3eb4a65799129eb8caf193187fce74f1fa5d6fbf642ba275f50698dddb4faa7f59d816cfe43e072415aa889e14d64be247"}}, &(0x7f0000000400)=ANY=[@ANYBLOB="00030400000004037504d2095cb38c47082ecaf6b6c575a45c5a990ca5893f08ca51a8ba93c2e3d5e92fcc27563fc4e316da3a57cfd10de3d7bad4a5fb477945c4e87e74487ae6cab4cf1fd0fbb71bc9d2561fe92976c78c930163aa5fd471b41094f4a2805adfebd4ecfafc7f76"]}, &(0x7f0000000a00)={0x34, &(0x7f0000000540)={0x40, 0x16, 0xbc, "56b8d6d8497a575cf0a82ff127b44b5bb013ee5754fb682f96b8a78fc72d434b73702d15da522dd45696e9abbe51cb5ebe5f1f2ddd0b8392b563ea9a08dd5e9461c6057e2a1d0f10a392cdec963636707c834925a885291d4c501346ca5456b5563d9cc0532e279cebf66b200141c70d05f191e2e0685b33e072a102877db29e2327bcbd79b050ba94b6db540e153dfc839809608b34e973258e22850e40bf1682a0cd962c62a51b871ccfe27f4fbfa8c7f58db7179d5092f4840295"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000680)={0x20, 0x0, 0xe2, {0xe0, "f605ff59b95567f30e419790fcebd2e121d85c78f4a25a9f2899690b0de6bd8b461a59ad861e705472e89063c91279afe57ef1516bd93055d4cc1611cd8d4743e897a95000e013d3526722ef87fe8d79a3881cee4d28408bbefa85a82529756d12c035b80c7d51b71849363586eb079397e6180372cb1b5530a4105d02eaa245a74f75312e67688ffcafb9cc4830cb6d576a1530f6203cc05fba4450f04aa2f73971ab47782cb7fc77877d61292b6273f58eb19a0f8475fb9dbad963de57f332aa71fde49c53ae978016aa83104f29e8b26769ba6a0f2ff6bd95e22b01048a17"}}, &(0x7f0000000980)={0x20, 0x1, 0x1, 0x5}, &(0x7f00000009c0)={0x20, 0x0, 0x1, 0x7}}) setsockopt$TIPC_CONN_TIMEOUT(r6, 0x10f, 0x8a, &(0x7f00000000c0)=0x2000000, 0x4) 8.666360059s ago: executing program 0 (id=441): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}], 0x1, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6(0xa, 0x80002, 0x0) syz_emit_ethernet(0x2a, 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) read$FUSE(r1, &(0x7f00000103c0)={0x2020, 0x0, 0x0}, 0x2020) syz_usb_connect$cdc_ncm(0x5, 0x0, 0x0, 0x0) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ecc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb190df08747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb81035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22263e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485a4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6bb06500f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784776f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2245eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e44312c24c2ce8e642bb73c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a768cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d0500e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8656b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad64c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc5908", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x80101, 0x21) write$tcp_congestion(r3, &(0x7f00000000c0)='lp\x00', 0xfffffdef) 8.277524403s ago: executing program 3 (id=442): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$iommufd(0xffffff9c, &(0x7f0000000000), 0x480100, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY(r1, 0x3b83, &(0x7f0000000080)={0x28, 0x4, 0x0, r2, 0x8, 0xf5d1, 0x4}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f00000000c0)={0x48, 0x5, r2, 0x0, 0xffffffffffffffff, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000200)={&(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x0, 0xfbfbfbfb}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000300)={&(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000400)={&(0x7f0000000380)=[0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x0, 0xbbbbbbbb}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000500)={0x1, 0x0, &(0x7f00000004c0)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000640)={&(0x7f0000000540)=[0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0], 0x1, 0x9, 0x3, 0x3}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000006c0)={&(0x7f0000000680)=[0x0], 0x1, 0x0, 0x0}) r15 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r15, 0x8914, &(0x7f0000000040)={'macsec0\x00', 0x1fe}) ioctl$sock_inet_SIOCSIFFLAGS(r15, 0x8914, &(0x7f0000000240)={'macsec0\x00', 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000840)={&(0x7f00000007c0)=[0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0], 0x3, 0x0, 0xfbfbfbfb}) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000000900)={0x0, 0x9, &(0x7f0000000740)=[r3, r4, r5, r6, 0x0, r7, r8, r11, r14], &(0x7f0000000780)=[0xcf, 0x6, 0x73d8, 0x0], &(0x7f0000000880)=[0x0, r16], &(0x7f00000008c0)=[0x8000000000000000, 0x4], 0x0, 0xfffffffffffffff1}) ioctl$KVM_CAP_X86_USER_SPACE_MSR(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000940)={0xbc, 0x0, 0x2}) r18 = openat$drirender128(0xffffff9c, &(0x7f00000009c0), 0xa000, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000a00)={0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r18, 0xc008640a, &(0x7f0000000a40)={r19}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a80)) openat$sequencer(0xffffff9c, &(0x7f0000000ac0), 0x20000, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r18, 0xc01064bd, &(0x7f0000001b00)={&(0x7f0000000b00)="f201d78d813d458276b1441cb61f8627b11aede730c955ae6f9f6c4dbc87f51f571dbcbade81c12c28cf838bc565bcec511a8cc98861a86884d36ed75b6281ef4b26855ba55a84e98973bb1dcdc1176f41d0896805928ed85e99e0598a9f283053b2e46dbff6254bb1df09204dfcb2b52162d9853d416d8466a7e15f68aad141cc4953e33b06ac1d389b8707017ebd4eb551f6e8182df7d8297a9b6cc2fae13da2b37447e3a30fb80e0d4c1f4b4e80a248a5d56b5b8fb91b85e6004ab49987803e7fe667d0cf6f9e27507a467dabf80dc6291bc74c69960356383ea6f77b8f8b9e3629608a84975e060c67510a6307dfdb90b73634ae5e0a18ad2c511f580ec3e84c0b0e332c3150d0f689c8ffcb9a89965e2e95ce49ef4a8f8fd79fb834a9fcf7961c45f47ab23598025b421d7132c6e994309a6450c36b770310e8d60cba98245658b390d80b0f877abc4f4882486db8e642735048f522ce038d8c17e6b546092527c9e81197e7b61360e384c9d83de97a72a1b7b2eb2eebc481e3b4a7d744695ba316c5b6c2456a9e9379b41673dc39ca0a2d619cff80dddc3f3d0f333b78229bd4c6d5d7f9caccc028d463a2f4dd6975e99dd2d4f26d947058396d4bb9830229be53f233c27ae275831590187dc96a5fff79903e8bdc5545fa5285329b7f639164c4600db9d12d3b9712c70873fffd86fe0727bc4f9881b5013d874ec48c144efc8836ce15b5724dd38068ef7fc4ea5c132cd4a09349ed475c801b3bf763b9f6cd18c1dcfe72c39b571cdc6d19b230e61c70cef216642eaee1ee097cac4dc1d56cd00d634551710f3f2319d438243939f950767d93d65165f40cc8e47d3b6f8f73c3b195ca6cd4121f44ab9d0e6760f70d57923dc0068723601c6b79e9305aa635512379de14fe6e4f46487093285ff5252b776d1f4719d976eedb3606bf03be25b087e68689f498f90dfe27a37d48ac03d95863b05863ac1ab3738cd2478f4de3a993f71fa44d9e91a6352001dbe6dbaefc955fb72821c3d5ebbf61594912bd423b7f3c5cc378dc4cfcd1438051d1597a7cf158e6e34bc8a8590da84615b372cde2aa36745da6cdd54c8c07f10c31e9ba5818efea9b9b7297881aef6fbe43d1c3e3fc443fbb9a678dd92c1349bd8cd4be198257e055ab02414f986bf8b7e85a46a6f466511d7196ffec52105c87dd790ba17e6c6d5dfe9d615e7b2798217045472c7ca8cd63ccda2df4d8626e14999e24420ca1e05afcabb2d879559a05fd7d3c01d245735809e3657d8d9d40d2c58b4099a1e6e456180e5725520208b87eb8a8b504837ca6c1d628be7123a3bea5453276f87d09548c822410f4b46dada27076ecebf04a676bc3909e7d4cc9bbc202ef9a5b7f260b68ce81454d0d656a3689f173b358a522c7b43d8a01333e92141deaa4d87fbd399fb81a5b300dbba3eda5204f54ea22b2a3749c0bfb0186af8b9d0f9fb69da309cefe074398458af335ef3dac8bda69cc111f8728a097b9d91e434a54228721940094ba130bc793ac4ef0981f273b280e90421509570b6bf63de6626d6243fed2d372d4863a169d70d6da01416f9321e0aad21eca4dfbeb837d84711ccd10f2baaa295a482fcfc5280b67b6e61f0a14a3f653c88e459207cbeb19ed0bf3e8aaa206ead16ffa3aeb01a7315b4dfde6375565573270fa8b2742f178081f329759cd0cb5e2f1a3ef5e124e1809e30bc2eadd66acc6d0ae021bcda5afc80929abf6d18acbdffb17667c2461f75312133a94257ab815c9b5e135c45f5bb469e0d29fbffb3da318c008f241513acd728b5e09b1d299c61882d38a0450f07f78b20442855ebe271098ce4816fd6e46a297d542f1a85fa43d64992171cfe4ebd20b43028a90e60a478afae1cc97617fca907e4b9a714d918b568c196506c96c89770d1e74d6389c22b29e211e680bc80da3d7a1a5a0a9bf608d2b23ce5a90331930592ebc53425b39babdb92f5441676d600ccb8c223702865c798c52fcc980383dff60bfa538a260f93e4aef2532c0e27245061b3806d6248056c2c97ab3d2dab96b4336f3c7b5ae9893ac988739a585c8fffa26a739aabb531203f8b0735b1584ec1de68919843f254808194be2b19a4e9d0400b4f0496d99583841b0a291f4f8f890ac34d1dd68ccbe9ab47c0811b8ec5d79609524fc143c64c6978784b0c5f095b29633f6aabbcdef812d74c7dd6a68fd6bad49ef5ca55c618a0a19ed09a222bde1aabf2aa4f24ac90357fac1579e2bb166ca3fcd710c7bc88cf5e98206574a4db8eb528ba9c1981130060a2618c0749abfc2e873449823384eadbb77aa7fab47e16fa3a7ec57a6181f59be973cbff49a263fdcdb6afbd17396d7739f958af581a1cb21dd4a0d4ef025db4395e9a774660ef001ba42fa6b643488d6889f23267017d98d0c8c113b1dc798a47cf4416edb4bee09129103a984162a1cf9557295bbbaa44f0282da8a193a0e5f67597a20988f133951a7cad22c14f33339eda583f83f0bea866043a88459e0720bf08fdb304ef6036642d8f3f4008b2d8528434f462a85167815a0039b7715b09067bb88da731943f9c758bde9bd26dd3cd007155fcff67929eb740bd986ec026dff1ddcb6e25b63d5f45ad3808e63b3af2a3871ca706208e2e631146d09de2fb6f591b653ff8a8419a42b94231580f7899ecbc5b6201e801084dc666b4e4b1c01194255ed3889ce47e551f0c789ef3daa6a4803f724b726e723f4f5b23f2e39f2692609401b1319b268a19a67552ba4af1f61b593dae4299ddcf4988d839c949f9643fac716b7824d6c1a3d5eec2129d896259b9d989e30644b4bc063b36b6b8466b57f6047dddc5288de53176c37d8e0a0967a8058354cdcb1a1081d1c3926f31b5fea89137711c1abe09a6a4ed49344e6aafa1e6741beb915da6ba08c87c5d20bf1434a6dd2bfc13369b3079428880ba6eca8a5c1fc32c739eca1c50309088fd71ea41a5f84e6c29684cc441a368e9362f8166d62172c413dc0186d350b6cc4671795eb2b058705f62396db059062df7be52768ea32802ed4721b16518a47d4f407c83164690dddb5e03ef075683925a33bff3698f8b37339301af41e84b0954995fa6ac1638597f39ebc82a829b03f4ab374c12c6e9fc27301b2ca6e6051bd7093fb7556c3586e36ff2ce63a3e133e1e418bdc36b95f6fa412335db8aab865988abfc2dd747a9a601cbf573b260a010f5c37202c69ba265fd7cf78f2afcdc18814fd88715af08ed61d063ca6f3c2c51741d00162a1839dd2e6fe6102f25088865485450c70534fbdbe5e82caa9801a44a0acfeeebdd4419bbd83ee16f48fe186c68538b9fb4dda920c19b5b93742f6345a17e3254a0a46063f0926248d427f223d296464667d6e1930b518f962909508b75ec070427d9da5fabe0df0b521ca9b03c09a822d2c4787925bd93c2fc618db09679727dd93f951c0bac5dc77d5384380f2e292fbcda7cd0db1a858d233dacdba5f6acdc9466bc9080bc661d8dfa5d10007734bb08743ee0825c84b65eaf088354a1b93d6d3dc4b9c6b7b3256402d80732fc365050145c095d9bd4cf55423ae9b81e479035b9d8f55ceff8574197427189d5233461b23c7fa3e24a4975eec233ea8d76d9bf8cd826faa89d93a9359091209e6b9e5eef0b81045ea822ccbe6ae22f11de43dd49f9b7e2212ed362ee7d0c301f4dbca0f5d20eed4ef26efd430780047dd6d05d7ff7b9a2a36efdf2b5e551ee32b5b360bb627a0a957fbb8d229291d5c90a62220924985d142a0be349c864c01cb932f03b1065901533579c1c7b743a98297b5f5663429585fe244be9e378024c71b0ea0297d1e05d4fc6b0b373159ee55f9be3c0b68e57ae6b3c5979af263a58b7054ce3d8f5fe41157c4b85b8bf869f2a5ccdf5cb6091e7752923adef85167af85a1b489bd898ce1e36b7ce36980aac7bc19783a75db8af841fc8a9db8a8064248fe9b4f3c4cd8772836b463279bdac9c0d2088f257ac4ad85f655cf801eb3fe9ac5092ecdaf56e4c8ed79b19b94ee40a018549303eb6dfd943b9263716de4ce925fd834bb5ad65e39f8373d4407e42e5d96f16f34ef67c79ef3b15d457588b9385e93ae1c82d7d12ab2a542a0261f46cddfd4de9c2502ac4a4c41587daf626800fa72de51a7089bec21d9793c334bef8867709e6e8a471847c55a478d3c7b627de59087734edf1196253af2f84e6449112655a66886452a623eea2e745bbd52bb772d563c1efe7449445a9f52502416cdedf174374e6dd4c6788e535f4c92ec20d21467ef12e35ba619aa16e85fe88e8d189a054a774f6959b8a4bf645b633cc38ac145482783e2ca75d758581813d30c8e6a65574713394f08db85642f0e267a4816f6984a430f1370e7de05ca3a47d56ea254ca382b883b081afa25ca585345a15e1428dca8b9f2e95e40fff2515dd2edfc678a8a595bd3526c5e55e15a177479bab96973140b5ffde0d49bed4df554302b161dc70bb00bbd0bae54aa0dd92bbccf8deee10f84d81533ef7b6fcd47a6d5990d5c74baf6d11a09aa3c3e2826ba98c5908d43796e071cf5d348d51ae96754e40b229d84cff1c1849010dc7abf801ddc7c4712de41e33468144bd0eb6475dc0a76dc0d609f327ee0e1ec531bb745d19ff8ce39a1a24e883f459708ce29a1153849914771c69f64b7e1960c26049d2d4218244f4c4bd465efd61852b05dfb0095292bc30e37a76110c9bcfea38328dbcbf9c53c586afe0764677dce22b4f25aa5cc00b7c195a24d4edf2f6c7ac0e989f760de571a0ff4b7ec847ad092146dbedcd4efb2d5eab67d8717e90535995c6e3c38b46301829187b694fa2faa1aea7c09df332e209902b5cc60f24eebe7bb5d5ef8c673acd49e856fa64242eaadf17f4fd2785cdfa4c06a79a45d5f3e5fa67e0a546833d3f3ee08574db1206c85bdac07f980f40b1761b8793a49d08e5347fb02018ef96eae81970325b73023479e55fb79a249be298d248de5c3ae39ec5ee7bb5c1ee4a84cc10cf71d143743a41fb66f0d821651e867a8d0cd82136b4c0e319dab97705907ecda57b030fb56382af2d4ab9f6a79af8abf936431d6a56cd42957d1482937577c01016219e0147171194f024732111fe38c5bc3b410ba428607c294dfe41268af4d64373f18fa07d8848f42d82dc073c8987750dfdd0c559f2e0424fb7395a05f8dd6df2ffcd94128c6d39480c79d518a6d0c1ac4095625630173a12a763e3409e993d12b2d95c0565eb12931f1fbe7dcb87f95719a96304f509478af2116d18d1fab7896aebd114da3e695dfc28ea6455a67ac2f0b38e0ff7765716c94006b14428c152796c6e383721220c99aaa7a6c8d4558cfc4094e036ee2ea5bb1ce973ec014085591f5dfc2f8f518d0d8da7966cab6345b3c5efe3de447fd51fb8459045d7c19a39dfdd2a1f33dbf481c3f4ac9716a688caabad655076f1bbd7eab5ce3f2d3df341d3a1a49dfa033dea8c96ad65ce3eeb535985a4210121d3ce8d55fa822d2f3cc83395c58be5153db50aab1cd672ffb44661c98351b9cb391257995d8b76f90a3903b085535572fe709ab3c026f5693ded37f011cf3c099d0d9329b59eed589e9e6bd497f08ce7458eb0ce18258c9c23ea5ed7e494dbf90804b00f09fc83cf96503af03ee2b24842b850ccc4f1436947ecc48197f89db9af8e144202dfcef62dcda26235d095698a08d2e0220e1a27f64137e8240e16bd893756e48ffdb33889ab972fbce53415b473a568e", 0xffe, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r18, 0xc00464be, &(0x7f0000001b40)={r20}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r18, 0xc05064a7, &(0x7f0000001d40)={&(0x7f0000001c00)=[0x0, 0x0], &(0x7f0000001c40)=[{}], &(0x7f0000001cc0)=[0x0, 0x0], &(0x7f0000001d00)=[0x0, 0x0], 0x1, 0x2, 0x2, 0x0, r13}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r18, 0xc02064b9, &(0x7f0000001e40)={&(0x7f0000001dc0)=[0x0], &(0x7f0000001e00)=[0x0], 0x1, r12, 0xe0e0e0e0}) ioctl$DRM_IOCTL_MODE_ATOMIC(r18, 0xc03864bc, &(0x7f0000001f00)={0x400, 0x2, &(0x7f0000001b80)=[r10, r9], &(0x7f0000001bc0)=[0xbc], &(0x7f0000001e80)=[r17, r17, r16, r21, r22, r8], &(0x7f0000001ec0)=[0xf13d, 0x4, 0x7fffffffffffffff], 0x0, 0x9}) 7.614440819s ago: executing program 4 (id=444): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000040), 0xc) read(r0, &(0x7f0000000000)=""/49, 0x31) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) ioctl$sock_qrtr_TIOCINQ(r0, 0x8918, 0x0) 7.614064578s ago: executing program 3 (id=445): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x58) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)="d80000001c0081044e81f782db44b9040a1d080214000000020009a118000c000300000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r2 = signalfd4(r1, &(0x7f0000000040)={[0x4]}, 0x8, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f00000000c0)={0x48}) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, 0x0) 6.526922667s ago: executing program 4 (id=446): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x1001}, 0x4) sendmmsg(r1, &(0x7f0000007fc0), 0x91, 0x60000000) 6.079184661s ago: executing program 4 (id=447): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000200)={0x79, 0x0, 0x400000000000000}) 5.726424292s ago: executing program 2 (id=448): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x54}}, 0x0) write$binfmt_misc(r3, &(0x7f0000000000), 0xfffffecc) splice(r2, 0x0, r4, 0x0, 0x4ffe6, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000bcc000/0x4000)=nil, 0x4000}}) syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, r1}, &(0x7f0000000040), &(0x7f0000000240)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), r8}}, 0x18) 5.646832321s ago: executing program 0 (id=449): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000100)={0x15, 0x65, 0xffff, 0x863, 0x8, '9P2000.u'}, 0x15) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5c00000010000100000040000000000000000000", @ANYRES32=r2, @ANYBLOB="c89904bd0000000008000d000000000034001680300001802c000c80140001"], 0x5c}}, 0x0) 5.534848724s ago: executing program 3 (id=450): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000001c0)={0x24, &(0x7f0000000680)=ANY=[@ANYBLOB="0005bb000000bb08eb30030dd6f60792b37418f53c34d39b4444bd1bce25d6daa5f2942e47e87271747a9fa48d0416f3177679477e2f8a486dd30400d42013d04df422863272814f7735bbc6f3c88592306a53c9fd0e01b97c0c7a8f0941f76aea3662d8d8410a9bb69a5c4f9050eb400248c8e81e288e6df6a87e31bd18af9be8f26c7772ff81341d9dd631788a8372529d8b7e4b6bec930500000000000000763c6ba7ed4e815a8cf0f66546a210625c6c0954a5d1a69d5e2b7b489224c4ca5021"], 0x0, 0x0, 0x0}, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket(0x2, 0x80805, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r4 = syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x5, 0x40, 0x7, [{{0x9, 0x4, 0x0, 0x10, 0x1, 0x7, 0x1, 0x2, 0x7d, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0x81, 0x5, 0x7f}}, [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x7, 0x6, 0x1}}]}}}]}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x250, 0x2, 0x40, 0x40, 0x40, 0x1f}, 0xf, &(0x7f0000000180)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x0, 0x7, 0x9}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x409}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x421}}, {0x7b, &(0x7f0000000300)=@string={0x7b, 0x3, "5dc685089474d7b4fdd2fc12889154c8e3575a42f47f820bd422ef3fef2aee07711affa62239b50f3e815b0aee2b579ad7d7b90b56fe34828d1b928025ce0906aeeb1ee570432c99d5478e8cca81951a2f81b7d10af69daf2d87e793b0cb39c835a1f281ccf5ea9dbb7b54370197b08d549101169a94f08268"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x418}}]}) syz_usb_ep_read(r4, 0x9, 0x87, &(0x7f0000000440)=""/135) write$binfmt_elf64(r3, &(0x7f0000001480)=ANY=[@ANYBLOB="7f454c4600000000000000000000000003003e0000000000000000230000000040000000000000000000000000000000000000000000380001000000000000000300000000000000ffffffffffffff7f000000000000000000000000000000000008"], 0x78) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) dup2(r2, r1) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r5, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000600)={0x0, 0x1000}, &(0x7f0000000640)=0x8) 4.142220886s ago: executing program 4 (id=451): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000380)={0xaa, 0x4a8}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={r1, 0x58, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000480)=""/235, 0x8e, 0xeb, 0x0, 0x2, 0x10000, @value}, 0x28) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = syz_clone3(&(0x7f0000000d00)={0xf214381abe2e1591, &(0x7f0000000a80), &(0x7f0000000ac0), &(0x7f0000000b00), {0xe}, &(0x7f0000000b40)=""/244, 0xf4, &(0x7f0000000c40)=""/87, &(0x7f0000000cc0)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0xa}, 0x58) r6 = syz_clone(0x88200, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r6, 0x0) sendmsg$nl_generic(r4, &(0x7f0000001480)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001440)={&(0x7f0000000d80)={0x69c, 0x32, 0x1, 0x621969ad, 0x25dfdbfe, {0xb7}, [@generic="1139cd61360cef6ae1f71a0f6cbb7600aebdbb742e28c080c53780e76ea7cc3a150083a2bb4b27bf63a4b265954289d51f40fda562eb331b693196666d50f34f2c97dcb9b347bb135a76a1afb642cf94b1158ec1ac0e7d2dffabab768e8528e0e5024fceb8041355258e7f265e5617b7fa4785825e0b5551479f9ca7f3c986081069efb9c62a1306d695cbb844ed09c547954f5b33a123578b1c9dafe43d9b35e46f560ab862c272bf85fa67b4564fd21513ccbd7d3647c926ccfd417638ed6e7ce162590254be8d6c4db20df2ecc02b43dd5a34254b6c7b920d879ede82d1c57b9f90c58bc4b258bffba50559ef54e9f651", @generic="d0381927183fcc9f97d2d1c515737d6acb68d219e5256e9c47def44644dc0e42ae7a671d50f2c108a13da2bfa2a82f7d22d1ba71f3d06d4f7f5bf8c20898fcc2f7ea569989792595d52b9d7f81acf140aeca56e5799642b58b84908456d008", @nested={0x24e, 0xa8, 0x0, 0x1, [@generic="1f0fbd4e3ace160f2d835b526ce89bfa56293a2453fb3cdd5e3af9e4485a2c6d20af0ff0d90dd665c89188271d8485b3fbc03ed5e0e9e05833d0f0c1c639dac1c0735a48aab9b8a33bfe993fc9ed5efa5013e9c86424eead8ddcabcb12c1ae79a73be7183b2df009ef433c8beec6a51495a9575d67c0a711100a76c9f76c1220558286c34ce3c3807d0bd6e0360393b92238105912896622f56021a9eb672ae7de2acaf2067b90ab9c574e77e599b6c8a3d5e404a9e5b9ba1fd5f3795391439af4a4bdffb3583da824e5e663bed302eb8e6177a0a394bf3b1e8a3bf1cce3ec293602174503c9f8f9376fd6", @typed={0x14, 0x6b, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @generic="8cc969cda61fd986b463637ea7943ee50fba944e", @typed={0x14, 0x13c, 0x0, 0x0, @ipv6=@mcast2}, @typed={0x8, 0x18, 0x0, 0x0, @pid=r5}, @typed={0x8, 0xd4, 0x0, 0x0, @fd=r1}, @typed={0x8, 0x93, 0x0, 0x0, @str='GPL\x00'}, @typed={0xd9, 0xd8, 0x0, 0x0, @binary="20f529c9096b2eeb4b2fc3c46834844ea17b53ed3b53fb53bbe124e42a46b5da3d9eee62e77d1cf11138030f6d9128511848258d2f4fbf9845cb6bab741e4dc4daa760fab48ff4e7babf67277ac356230526d61260b7ca2c871ffd64715e176907347abbdb6fa2ace95ab459a5670c9dfb185c07c0c47ad9f09d3fe58a5cabf006ed9753d30d668053c4c420e9e852460afe0dd15a38dce6e6e7aa04fa0703a4298983431ee91896a8b72698835d0f37dca50e1a730044f23e212ebe548a97aad2cf42244f6b52c5ca0dcd8a159dac7e741bcaf960"}, @typed={0x8, 0x9f, 0x0, 0x0, @u32=0x10000}, @generic="2739a73823799bb3e32f2ad9919fe468bc4e0a69ac40825b3efa6a486211e3f7bf4b4c9f2aa37b"]}, @nested={0x20f, 0x62, 0x0, 0x1, [@generic="d98cad00c5b91e491c02cdd091719cb86769e169630dc78d68877bf50748f0f5ed2c293715097ab81bbee4fe0562e8b87e645fae0dcd9c0ba0a6cae64dc542b1679d76b5f477064a125aef30554a409f094cbfbfa5689be4583074b0316be1441e7b43f3402420d6ffca7f3e08f27642bf", @generic="9d773326739d4ad54d4bd0ed9f3cf3e115cc2a76fcd9ad23a1069f21226e098f3249f9266c866207a1d77ba2a2b7083e68774cee6d1f06d9c13ab4398744c8b444afa9bead93011c6f889ccef73b33be379a03975b6cd6d464d53baf57e2e7d10ee2875f8a03cb0af0f49d364d138f2170a4ba7f29d7ea7ab3251a6efbaf05ccac91a7252c6047c97cfff50edb59a3d3ba5b10cc96481a1f6654cc4e9dcaffca850ea43ba5317ac68f0eaf50530f6b1a380569706b350fe0491ddf1bf3c565ec6e6611e7e6e39e1e7ddb82dde2486dcbdcf819ccce640eff6a9c66bd0554d8", @typed={0x8, 0x24, 0x0, 0x0, @pid=r6}, @generic="c846557cf6649ab121ba70329851e359b9730e91634e282f4c91789a000bf04c4606763076ea72e7fbb849fe45dc32ec0bf93a3945213794016992b48deba45b4f2c9d135efcc38a8543a257b17538ae773d39b2210e36a9f0561588d0b2cbaf9c40a0bc911808d2cc2b4722bed95f099656f46c98f059057cd2b75fff1458bf23d42699ddd1a8ae3ff50a2aa728657ab314be4b7492e53464a1821b28f9afbb9966d55f1e8d8c938377399abf55fe82bcef5a"]}, @typed={0xc, 0x147, 0x0, 0x0, @u64=0xeb}, @generic="1c43035f7e82c9084781069b9a07629b89e9161a2e6e8387ad9f91997d7121c57022a6def69d3ef4bcc4b6253077c0d8923dda89586f4ee7cb650001a8cb0c0856bc08a98b016859835c74b43815239cf5b53198b2dbbf31317d64bb4ebc1e9b2e71737f37366f024353ef432f7ef85d99209eff4f1082c53e6226d12903d0d3405db7133d6d71e5d917f43adcc68b7535b64ce2270b56d709b324ba0cafa4db496e0d9d03b240ed8e17ff4fc0f1b2ca365ee252f477d040978dd1c544bb996f376d496f131110db"]}, 0x69c}}, 0x40000) r7 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r9 = dup(r8) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b000000eccd"]) ioctl$KVM_SET_LAPIC(r9, 0x4400ae8f, &(0x7f0000000100)={"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"}) r10 = openat$zero(0xffffff9c, &(0x7f0000000600), 0x436802, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_tracing={0x1a, 0x1, &(0x7f00000007c0)=ANY=[@ANYBLOB="21e0e0ffffffff025fc7ac8999fb353f8a62147255a96263435806a5b3598fe7def036f0fa9450f55bde7b8b3d8f82b149a0fe3510a169ac471388294dbfc8435a4a8e759431f4c598c5e6ee59dc63ad62631ee22eebfad12f314fdaab409d3dcfd5a4e10c227b746bcc3729412879fc6b7b43e3374e52fcca06011eb673f879b485c56a7c0ae84a4596498e2f0f49da47f6cc4e0d2458c185cf6c92c044446550efd854099d2eba3a37100f3d3b54c9147227484fd55707b0e1515332a241e1776e78b26efba6f834822bbef4ea7409f3a9f9"], &(0x7f0000000180)='GPL\x00', 0x0, 0xae, &(0x7f00000001c0)=""/174, 0x40f00, 0x0, '\x00', r2, 0x1a, r3, 0x8, &(0x7f0000000580)={0x0, 0x2}, 0x8, 0x10, &(0x7f00000005c0)={0x5, 0x8, 0x5, 0x8}, 0x10, 0xe256, 0xffffffffffffffff, 0x7, &(0x7f0000000640)=[r9, 0x1, r10], &(0x7f0000000680)=[{0x4, 0x1, 0x5, 0x2}, {0x3, 0x1, 0x8, 0x3}, {0x2, 0x1, 0xc, 0x4}, {0x4, 0x5, 0xb, 0x7}, {0x5, 0x5, 0xc, 0x8}, {0x0, 0x2, 0x0, 0xb}, {0x4, 0x3, 0x2, 0x9}], 0x10, 0x5, @void, @value}, 0x94) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000100)={{&(0x7f00003ea000/0x400000)=nil, 0x400000}, 0x1}) clock_gettime(0x0, &(0x7f0000000000)) 2.294713237s ago: executing program 3 (id=452): ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000001c0)=0x0) timer_create(0x3, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=r0}, &(0x7f0000000000)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0400000004000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x48) syz_open_dev$vim2m(&(0x7f0000000000), 0x6, 0x2) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) preadv(r1, &(0x7f0000001d00)=[{0x0}, {&(0x7f00000019c0)=""/200, 0xc8}, {&(0x7f0000001ac0)=""/133, 0x85}, {&(0x7f00000006c0)=""/114, 0x72}, {&(0x7f0000001b80)=""/248, 0xf8}], 0x5, 0x8, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b7020000010000e1850000008600000018"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006cb87f10cd06080120bb0102030109021b0001000000000904"], 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0xa) sendmsg$TIPC_NL_MEDIA_SET(r3, 0x0, 0x4060) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r4, 0x0, 0x4, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, 0x0, 0x4010) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000740)='syz_tun\x00', 0x10) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) connect$inet(r4, 0x0, 0x0) setsockopt$inet_int(r4, 0x0, 0x13, &(0x7f0000000040)=0x80000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000000c0), 0x4) timer_settime(0x0, 0x0, 0x0, 0x0) 718.261661ms ago: executing program 3 (id=454): r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f00000005c0)={0x2, 0x0, @remote}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x28, 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000019c0)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) connect$netlink(r0, &(0x7f0000000140)=@unspec, 0xc) r4 = socket(0x10, 0x2, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="341000003b0007010000000000000000017c00000400000014000180080016000000000006000600800a0000080002"], 0x1034}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', r7, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @dev={0xfe, 0x80, '\x00', 0x2}}}) setsockopt$inet6_udp_int(r2, 0x11, 0xa, &(0x7f0000000280)=0xe3, 0x4) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'syztnl1\x00', r8, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) 74.546969ms ago: executing program 4 (id=455): bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)={@ifindex, 0xffffffffffffffff, 0xf, 0x8, 0x0, @void, @value}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x10, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) sendmsg$unix(r0, &(0x7f0000000640)={&(0x7f00000005c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001680)=[{&(0x7f0000001280)='\\', 0xffffffe3}], 0x1}, 0x24004044) 0s ago: executing program 4 (id=456): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x2d}}}}, 0x108) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setaffinity(r0, 0x8, &(0x7f0000000480)=0x5) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000040)) add_key$fscrypt_v1(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0xd4}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x2004cb], 0x0, 0x202}) ioctl$KVM_SET_PIT2(r3, 0x4070aea0, &(0x7f0000000240)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}]}) r5 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) ioctl$I2C_SMBUS(r5, 0x720, &(0x7f00000000c0)={0x0, 0x0, 0x4, &(0x7f0000000080)={0x0, "90f541a5e64f61909103f1fbbc2bd3c9f144d76e44c7b2986eb5e52829e7cb8393"}}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000020180)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0'}, 0x3e3f) r7 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0) ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f00000004c0)={'tunl0\x00', {0x2, 0x0, @multicast1}}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r7, 0xc040564a, &(0x7f0000000080)={0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) unshare(0x68040200) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r8, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x3e8, 0x200, 0x200, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2}}, {@mac}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x4}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x2}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local}, {@mac=@multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) kernel console output (not intermixed with test programs): batadv_slave_1 [ 248.300813][ T6420] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 248.328596][ T6420] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 248.377751][ T6460] netlink: 20 bytes leftover after parsing attributes in process `syz.3.187'. [ 248.641263][ T6420] hsr_slave_0: entered promiscuous mode [ 248.684623][ T6420] hsr_slave_1: entered promiscuous mode [ 249.210151][ T62] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.462563][ T62] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.507062][ T5236] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 249.517499][ T5236] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 249.535711][ T5236] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 249.565297][ T5236] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 249.576985][ T5236] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 249.585293][ T5236] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 249.636414][ T5229] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 249.783714][ T62] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.842098][ T5229] usb 2-1: Using ep0 maxpacket: 32 [ 249.878874][ T62] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.885039][ T5229] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 249.908548][ T5229] usb 2-1: New USB device found, idVendor=0424, idProduct=7505, bcdDevice=32.a8 [ 249.922778][ T5229] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.934403][ T5301] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 249.970266][ T5229] usb 2-1: config 0 descriptor?? [ 250.004535][ T937] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 250.106519][ T5301] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 250.117720][ T5301] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 250.128216][ T5301] usb 5-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 250.138179][ T5301] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.149493][ T5301] usb 5-1: config 0 descriptor?? [ 250.206676][ T937] usb 4-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 250.220536][ T937] usb 4-1: New USB device found, idVendor=06cd, idProduct=0108, bcdDevice=bb.20 [ 250.239448][ T937] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.257635][ T62] bridge_slave_1: left allmulticast mode [ 250.263427][ T937] usb 4-1: Product: syz [ 250.276286][ T937] usb 4-1: Manufacturer: syz [ 250.283684][ T62] bridge_slave_1: left promiscuous mode [ 250.314392][ T937] usb 4-1: SerialNumber: syz [ 250.326082][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.326944][ T937] usb 4-1: config 0 descriptor?? [ 250.344629][ T937] keyspan 4-1:0.0: Keyspan 1 port adapter converter detected [ 250.352321][ T937] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 87 [ 250.354592][ T5236] Bluetooth: hci1: command tx timeout [ 250.376974][ T62] bridge_slave_0: left allmulticast mode [ 250.383079][ T62] bridge_slave_0: left promiscuous mode [ 250.388977][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.398259][ T937] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 7 [ 250.431747][ T937] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 81 [ 250.489385][ T937] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 1 [ 250.502849][ T937] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 2 [ 250.521201][ T937] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 85 [ 250.579193][ T937] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 5 [ 250.581179][ T29] audit: type=1326 audit(1728317060.059:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6522 comm="syz.3.202" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f00e2b7dff9 code=0x0 [ 250.591365][ T5301] magicmouse 0003:05AC:0265.0008: unknown main item tag 0x0 [ 250.651812][ T937] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 250.725857][ T5301] magicmouse 0003:05AC:0265.0008: unknown main item tag 0x0 [ 250.758735][ T5301] magicmouse 0003:05AC:0265.0008: unknown main item tag 0x0 [ 250.793000][ T5301] magicmouse 0003:05AC:0265.0008: hidraw0: USB HID v0.00 Device [HID 05ac:0265] on usb-dummy_hcd.4-1/input0 [ 250.821377][ T6520] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.867429][ T5301] magicmouse 0003:05AC:0265.0008: magicmouse input not registered [ 250.905424][ T6520] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.941461][ T5301] magicmouse 0003:05AC:0265.0008: probe with driver magicmouse failed with error -12 [ 251.032748][ T5301] usb 5-1: USB disconnect, device number 15 [ 251.634861][ T5236] Bluetooth: hci0: command tx timeout [ 251.692695][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 251.742827][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 251.781508][ T62] bond0 (unregistering): Released all slaves [ 251.820112][ T6420] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 251.876388][ T6518] chnl_net:caif_netlink_parms(): no params data found [ 251.946232][ T6420] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 251.956919][ T6420] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 252.110368][ T6420] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 252.432964][ T62] hsr_slave_0: left promiscuous mode [ 252.440635][ T5236] Bluetooth: hci1: command tx timeout [ 252.482134][ T62] hsr_slave_1: left promiscuous mode [ 252.519305][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 252.544373][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 252.562633][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 252.572263][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 252.612257][ T62] veth1_macvtap: left promiscuous mode [ 252.651290][ T62] veth0_macvtap: left promiscuous mode [ 252.657439][ T62] veth1_vlan: left promiscuous mode [ 252.663134][ T62] veth0_vlan: left promiscuous mode [ 252.860165][ T5308] usb 4-1: USB disconnect, device number 18 [ 252.889719][ T5308] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 252.940834][ T5308] keyspan 4-1:0.0: device disconnected [ 253.066517][ T25] usb 2-1: USB disconnect, device number 13 [ 253.715225][ T5236] Bluetooth: hci0: command tx timeout [ 254.255124][ T62] team0 (unregistering): Port device team_slave_1 removed [ 254.445077][ T62] team0 (unregistering): Port device team_slave_0 removed [ 255.106675][ T6518] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.114451][ T6518] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.121615][ T6518] bridge_slave_0: entered allmulticast mode [ 255.129395][ T6518] bridge_slave_0: entered promiscuous mode [ 255.143217][ T6584] netlink: 4 bytes leftover after parsing attributes in process `syz.1.210'. [ 255.186880][ T6518] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.214369][ T6518] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.231269][ T6518] bridge_slave_1: entered allmulticast mode [ 255.249842][ T6518] bridge_slave_1: entered promiscuous mode [ 255.353627][ T6518] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 255.408316][ T6518] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 255.510037][ T6518] team0: Port device team_slave_0 added [ 255.532907][ T6518] team0: Port device team_slave_1 added [ 255.617643][ T6518] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 255.635676][ T5308] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 255.644717][ T6518] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 255.672418][ T6518] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 255.685975][ T6518] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 255.693020][ T6518] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 255.746855][ T6518] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 255.800477][ T5236] Bluetooth: hci0: command tx timeout [ 255.814945][ T5308] usb 2-1: Using ep0 maxpacket: 8 [ 255.827633][ T5308] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 255.855115][ T5308] usb 2-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 255.864200][ T5308] usb 2-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 255.882537][ T6518] hsr_slave_0: entered promiscuous mode [ 255.888259][ T5308] usb 2-1: Product: syz [ 255.892446][ T5308] usb 2-1: Manufacturer: syz [ 255.900923][ T5308] usb 2-1: SerialNumber: syz [ 255.901186][ T6518] hsr_slave_1: entered promiscuous mode [ 255.929076][ T6518] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 255.947925][ T6518] Cannot create hsr debugfs directory [ 256.013093][ T6420] 8021q: adding VLAN 0 to HW filter on device bond0 [ 256.036121][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.042513][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.169936][ T6645] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 256.195906][ T6420] 8021q: adding VLAN 0 to HW filter on device team0 [ 256.237553][ T5308] usb 2-1: palm_os_3_probe - error -110 getting connection information [ 256.254653][ T6645] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 256.266720][ T5308] visor 2-1:1.0: probe with driver visor failed with error -110 [ 256.301400][ T937] usb 2-1: USB disconnect, device number 14 [ 256.363021][ T1122] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.370184][ T1122] bridge0: port 1(bridge_slave_0) entered forwarding state [ 256.380714][ T6667] fuse: Bad value for 'fd' [ 256.435083][ T2988] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.442295][ T2988] bridge0: port 2(bridge_slave_1) entered forwarding state [ 256.517526][ T6420] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 256.534454][ T25] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 256.587607][ T6420] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 256.686330][ T25] usb 5-1: Using ep0 maxpacket: 8 [ 256.696142][ T25] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 256.708401][ T25] usb 5-1: config 179 has no interface number 0 [ 256.719435][ T25] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 256.732277][ T25] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 256.772088][ T6420] veth0_vlan: entered promiscuous mode [ 256.781002][ T25] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 256.820433][ T6420] veth1_vlan: entered promiscuous mode [ 256.833144][ T25] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 256.869817][ T25] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 256.947551][ T25] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 256.961940][ T6420] veth0_macvtap: entered promiscuous mode [ 256.969934][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.983579][ T6420] veth1_macvtap: entered promiscuous mode [ 256.992424][ T6665] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 257.111515][ T6420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.122509][ T6420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.153063][ T6420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.171899][ T6420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.182414][ T6420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.194763][ T6420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.206863][ T6420] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 257.229518][ T6518] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 257.256155][ T6518] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 257.282476][ T51] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input10 [ 257.297891][ T6420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.313359][ T6420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.324716][ T6420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.346120][ T6420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.369933][ T6420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.388340][ T6420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.416896][ T6420] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 257.429237][ T6518] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 257.459226][ T6518] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 257.490800][ T6420] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.519574][ T6420] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.529401][ T6420] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.538628][ T6420] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.553114][ T25] usb 5-1: USB disconnect, device number 16 [ 257.553177][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 257.553215][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 257.601098][ T25] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 257.757007][ T2534] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 257.784523][ T2534] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 257.788105][ T9] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 257.839233][ T6518] 8021q: adding VLAN 0 to HW filter on device bond0 [ 257.870615][ T2903] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 257.884771][ T5236] Bluetooth: hci0: command tx timeout [ 257.905215][ T2903] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 257.976433][ T6518] 8021q: adding VLAN 0 to HW filter on device team0 [ 258.004424][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 258.013358][ T9] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 258.033045][ T9] usb 2-1: New USB device found, idVendor=0424, idProduct=7505, bcdDevice=32.a8 [ 258.034344][ T2534] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.049483][ T2534] bridge0: port 1(bridge_slave_0) entered forwarding state [ 258.059572][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.115744][ T2534] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.122878][ T2534] bridge0: port 2(bridge_slave_1) entered forwarding state [ 258.141332][ T9] usb 2-1: config 0 descriptor?? [ 258.307482][ T6518] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 258.381187][ T6518] veth0_vlan: entered promiscuous mode [ 258.410407][ T6518] veth1_vlan: entered promiscuous mode [ 258.469270][ T6518] veth0_macvtap: entered promiscuous mode [ 258.542719][ T6518] veth1_macvtap: entered promiscuous mode [ 258.690950][ T6518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.806402][ T6518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.826595][ T6518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.868489][ T6518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.921750][ T6518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.982141][ T6518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.031767][ T6518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 259.113548][ T6518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.194150][ T6518] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 259.265252][ T6738] netlink: 14601 bytes leftover after parsing attributes in process `syz.3.228'. [ 259.351162][ T6518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.413702][ T6518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.465671][ T6518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.497056][ T6518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.519107][ T6518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.537326][ T6745] x_tables: duplicate underflow at hook 1 [ 259.559509][ T6518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.593557][ T6518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.677222][ T6518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.757109][ T6518] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 259.857318][ T6751] fuse: Bad value for 'fd' [ 259.871241][ T6518] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.938949][ T6518] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.966929][ T6518] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.976163][ T6518] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.127330][ T1067] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 260.147441][ T1067] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 260.203421][ T1067] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 260.226143][ T1067] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 261.006183][ T25] usb 2-1: USB disconnect, device number 15 [ 261.414490][ T25] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 261.585448][ T25] usb 2-1: Using ep0 maxpacket: 16 [ 261.594390][ T9] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 261.595019][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 261.613347][ T25] usb 2-1: New USB device found, idVendor=258a, idProduct=0033, bcdDevice= 0.00 [ 261.622983][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.636740][ T25] usb 2-1: config 0 descriptor?? [ 261.717376][ T6814] fuse: Bad value for 'rootmode' [ 261.744734][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 261.757625][ T9] usb 5-1: config 0 has an invalid interface number: 113 but max is 0 [ 261.773792][ T9] usb 5-1: config 0 has no interface number 0 [ 261.786519][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=1080, bcdDevice=58.5f [ 261.808686][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.822983][ T9] usb 5-1: Product: syz [ 261.836970][ T9] usb 5-1: Manufacturer: syz [ 261.841859][ T9] usb 5-1: SerialNumber: syz [ 261.866749][ T9] usb 5-1: config 0 descriptor?? [ 261.894106][ T9] net1080 5-1:0.113: probe with driver net1080 failed with error -22 [ 262.064495][ T51] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 262.085338][ T6806] netlink: 56 bytes leftover after parsing attributes in process `syz.4.245'. [ 262.100077][ T6806] netlink: 16 bytes leftover after parsing attributes in process `syz.4.245'. [ 262.111477][ T25] usbhid 2-1:0.0: can't add hid device: -71 [ 262.121128][ T5229] usb 5-1: USB disconnect, device number 17 [ 262.123492][ T25] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 262.174152][ T25] usb 2-1: USB disconnect, device number 16 [ 262.215824][ T51] usb 4-1: Using ep0 maxpacket: 16 [ 262.225984][ T51] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 262.243896][ T51] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.265416][ T51] usb 4-1: config 0 descriptor?? [ 262.273486][ T51] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 262.356228][ T6829] FAULT_INJECTION: forcing a failure. [ 262.356228][ T6829] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 262.370690][ T6829] CPU: 1 UID: 0 PID: 6829 Comm: syz.2.254 Not tainted 6.12.0-rc2-syzkaller #0 [ 262.379572][ T6829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 262.389652][ T6829] Call Trace: [ 262.392932][ T6829] [ 262.395864][ T6829] dump_stack_lvl+0x241/0x360 [ 262.400551][ T6829] ? __pfx_dump_stack_lvl+0x10/0x10 [ 262.405753][ T6829] ? __pfx__printk+0x10/0x10 [ 262.410471][ T6829] ? __pfx_lock_release+0x10/0x10 [ 262.415522][ T6829] should_fail_ex+0x3b0/0x4e0 [ 262.420217][ T6829] _copy_from_user+0x2f/0xe0 [ 262.424824][ T6829] copy_msghdr_from_user+0xae/0x680 [ 262.430033][ T6829] ? __pfx___might_resched+0x10/0x10 [ 262.435324][ T6829] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 262.441142][ T6829] ? rcu_is_watching+0x15/0xb0 [ 262.445915][ T6829] ? __might_fault+0xaa/0x120 [ 262.450593][ T6829] do_recvmmsg+0x3f9/0xad0 [ 262.455024][ T6829] ? __pfx_do_recvmmsg+0x10/0x10 [ 262.459981][ T6829] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 262.465890][ T6829] ? ksys_write+0x229/0x2b0 [ 262.470404][ T6829] ? __pfx_lock_release+0x10/0x10 [ 262.475454][ T6829] ? vfs_write+0x7bf/0xc90 [ 262.479885][ T6829] ? kmem_cache_free+0x1a2/0x420 [ 262.484860][ T6829] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 262.490887][ T6829] __x64_sys_recvmmsg+0x199/0x250 [ 262.495938][ T6829] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 262.501508][ T6829] ? do_syscall_64+0x100/0x230 [ 262.506289][ T6829] ? do_syscall_64+0xb6/0x230 [ 262.510976][ T6829] do_syscall_64+0xf3/0x230 [ 262.515488][ T6829] ? clear_bhb_loop+0x35/0x90 [ 262.520178][ T6829] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.526102][ T6829] RIP: 0033:0x7fe52297dff9 [ 262.530535][ T6829] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 262.550151][ T6829] RSP: 002b:00007fe5237b6038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 262.558586][ T6829] RAX: ffffffffffffffda RBX: 00007fe522b35f80 RCX: 00007fe52297dff9 [ 262.566572][ T6829] RDX: 0000000000000a0d RSI: 00000000200066c0 RDI: 0000000000000003 [ 262.574545][ T6829] RBP: 00007fe5237b6090 R08: 0000000000000000 R09: 0000000000000000 [ 262.582513][ T6829] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 262.590482][ T6829] R13: 0000000000000000 R14: 00007fe522b35f80 R15: 00007fe522c5fa28 [ 262.598467][ T6829] [ 262.601582][ C1] vkms_vblank_simulate: vblank timer overrun [ 262.672471][ T6831] netlink: 'syz.2.255': attribute type 23 has an invalid length. [ 262.754945][ T5229] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 262.800101][ T6833] fuse: Bad value for 'fd' [ 262.914801][ T5229] usb 1-1: Using ep0 maxpacket: 8 [ 262.933708][ T5229] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10ae, bcdDevice=8a.18 [ 262.955971][ T5229] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.973360][ T5229] usb 1-1: config 0 descriptor?? [ 262.983381][ T5229] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 262.990219][ T5229] dvb_usb_af9035 1-1:0.0: probe with driver dvb_usb_af9035 failed with error -22 [ 263.032150][ T6835] netlink: 'syz.1.257': attribute type 2 has an invalid length. [ 263.085269][ T6835] netlink: 195592 bytes leftover after parsing attributes in process `syz.1.257'. [ 263.195631][ T25] usb 1-1: USB disconnect, device number 9 [ 263.325781][ T51] gspca_sonixj: reg_w1 err -110 [ 263.330794][ T51] sonixj 4-1:0.0: probe with driver sonixj failed with error -110 [ 263.416172][ T5229] usb 4-1: USB disconnect, device number 19 [ 263.754401][ T9] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 263.947967][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 264.016883][ T9] usb 5-1: config 0 has an invalid interface number: 35 but max is 0 [ 264.025599][ T9] usb 5-1: config 0 has no interface number 0 [ 264.043166][ T9] usb 5-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 264.053185][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.064111][ T9] usb 5-1: Product: syz [ 264.068503][ T9] usb 5-1: Manufacturer: syz [ 264.073307][ T9] usb 5-1: SerialNumber: syz [ 264.112694][ T9] usb 5-1: config 0 descriptor?? [ 264.132514][ T9] radio-si470x 5-1:0.35: could not find interrupt in endpoint [ 264.202110][ T9] radio-si470x 5-1:0.35: probe with driver radio-si470x failed with error -5 [ 264.334915][ T9] radio-raremono 5-1:0.35: this is not Thanko's Raremono. [ 264.348627][ T9] usbhid 5-1:0.35: couldn't find an input interrupt endpoint [ 264.541919][ T6870] FAULT_INJECTION: forcing a failure. [ 264.541919][ T6870] name failslab, interval 1, probability 0, space 0, times 0 [ 264.554881][ T6870] CPU: 0 UID: 0 PID: 6870 Comm: syz.1.268 Not tainted 6.12.0-rc2-syzkaller #0 [ 264.563749][ T6870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 264.573795][ T6870] Call Trace: [ 264.577072][ T6870] [ 264.580004][ T6870] dump_stack_lvl+0x241/0x360 [ 264.584699][ T6870] ? __pfx_dump_stack_lvl+0x10/0x10 [ 264.589933][ T6870] ? __pfx__printk+0x10/0x10 [ 264.594535][ T6870] ? __kmalloc_cache_noprof+0x44/0x2c0 [ 264.600018][ T6870] ? __pfx___might_resched+0x10/0x10 [ 264.605318][ T6870] should_fail_ex+0x3b0/0x4e0 [ 264.609996][ T6870] should_failslab+0xac/0x100 [ 264.614681][ T6870] ? ovs_flow_tbl_init+0xfa/0x890 [ 264.619748][ T6870] __kmalloc_cache_noprof+0x6c/0x2c0 [ 264.625045][ T6870] ovs_flow_tbl_init+0xfa/0x890 [ 264.629911][ T6870] ? ovs_dp_cmd_new+0x1a9/0xc10 [ 264.634755][ T6870] ? __kmalloc_cache_noprof+0x19c/0x2c0 [ 264.640304][ T6870] ovs_dp_cmd_new+0x246/0xc10 [ 264.644983][ T6870] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 264.650197][ T6870] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 264.656529][ T6870] genl_rcv_msg+0xb14/0xec0 [ 264.661032][ T6870] ? mark_lock+0x9a/0x360 [ 264.665368][ T6870] ? __pfx_genl_rcv_msg+0x10/0x10 [ 264.670408][ T6870] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 264.676328][ T6870] ? __pfx_lock_acquire+0x10/0x10 [ 264.681361][ T6870] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 264.686552][ T6870] ? __pfx___might_resched+0x10/0x10 [ 264.691843][ T6870] netlink_rcv_skb+0x1e3/0x430 [ 264.696615][ T6870] ? __pfx_genl_rcv_msg+0x10/0x10 [ 264.701662][ T6870] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 264.706962][ T6870] ? __netlink_deliver_tap+0x77e/0x7c0 [ 264.712442][ T6870] genl_rcv+0x28/0x40 [ 264.714425][ T6151] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 264.716427][ T6870] netlink_unicast+0x7f6/0x990 [ 264.728735][ T6870] ? __pfx_netlink_unicast+0x10/0x10 [ 264.734122][ T6870] ? __virt_addr_valid+0x183/0x530 [ 264.739290][ T6870] ? __check_object_size+0x48e/0x900 [ 264.744607][ T6870] netlink_sendmsg+0x8e4/0xcb0 [ 264.749378][ T6870] ? __pfx_netlink_sendmsg+0x10/0x10 [ 264.754667][ T6870] ? aa_sock_msg_perm+0x91/0x160 [ 264.759617][ T6870] ? __pfx_netlink_sendmsg+0x10/0x10 [ 264.764909][ T6870] __sock_sendmsg+0x221/0x270 [ 264.769612][ T6870] ____sys_sendmsg+0x52a/0x7e0 [ 264.774385][ T6870] ? __pfx_____sys_sendmsg+0x10/0x10 [ 264.779677][ T6870] __sys_sendmsg+0x292/0x380 [ 264.784278][ T6870] ? __pfx___sys_sendmsg+0x10/0x10 [ 264.789413][ T6870] ? __pfx_vfs_write+0x10/0x10 [ 264.794179][ T6870] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 264.800517][ T6870] ? do_syscall_64+0x100/0x230 [ 264.805295][ T6870] ? do_syscall_64+0xb6/0x230 [ 264.809985][ T6870] do_syscall_64+0xf3/0x230 [ 264.814488][ T6870] ? clear_bhb_loop+0x35/0x90 [ 264.819251][ T6870] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.825168][ T6870] RIP: 0033:0x7f54f6d7dff9 [ 264.829583][ T6870] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 264.849187][ T6870] RSP: 002b:00007f54f67ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 264.857603][ T6870] RAX: ffffffffffffffda RBX: 00007f54f6f36058 RCX: 00007f54f6d7dff9 [ 264.865572][ T6870] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 000000000000000c [ 264.873620][ T6870] RBP: 00007f54f67ff090 R08: 0000000000000000 R09: 0000000000000000 [ 264.881582][ T6870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 264.889543][ T6870] R13: 0000000000000000 R14: 00007f54f6f36058 R15: 00007f54f705fa28 [ 264.897524][ T6870] [ 265.055821][ T6151] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 265.068310][ T6151] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 265.084792][ T9] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 265.110759][ T6151] usb 3-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00 [ 265.131650][ T6861] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2248643489 (17989147912 ns) > initial count (11631199424 ns). Using initial count to start timer. [ 265.150283][ T6151] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.170779][ T6151] usb 3-1: config 0 descriptor?? [ 265.254352][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 265.261901][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 265.272126][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 265.297068][ T9] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 265.306662][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.315285][ T9] usb 4-1: Product: syz [ 265.319476][ T9] usb 4-1: Manufacturer: syz [ 265.324107][ T9] usb 4-1: SerialNumber: syz [ 265.615139][ T6151] hid-multitouch 0003:0EEF:72D0.0009: hidraw0: USB HID v0.00 Device [HID 0eef:72d0] on usb-dummy_hcd.2-1/input0 [ 265.807022][ T6151] usb 3-1: USB disconnect, device number 12 [ 265.846995][ T9] usb 4-1: 0:2 : does not exist [ 265.870110][ T6884] netlink: 8 bytes leftover after parsing attributes in process `syz.0.270'. [ 265.904412][ T9] usb 4-1: USB disconnect, device number 20 [ 265.959876][ T5976] udevd[5976]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 266.006308][ T6884] : entered promiscuous mode [ 266.317910][ T25] usb 5-1: USB disconnect, device number 18 [ 266.404473][ T5301] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 266.590946][ T5301] usb 2-1: config index 0 descriptor too short (expected 25529, got 441) [ 266.608785][ T5301] usb 2-1: config 0 has too many interfaces: 109, using maximum allowed: 32 [ 266.634378][ T5301] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 266.652956][ T5301] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 109 [ 266.678689][ T5301] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 266.704422][ T5301] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.753854][ T5301] usb 2-1: config 0 descriptor?? [ 266.811497][ T1067] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.986068][ T1067] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.014583][ T6888] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 267.039808][ T937] usb 2-1: USB disconnect, device number 17 [ 267.166547][ T1067] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.204836][ T9] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 267.275050][ T1067] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.391850][ T54] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 267.403168][ T54] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 267.411342][ T54] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 267.423519][ T54] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 267.444401][ T54] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 267.452477][ T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 267.494652][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 267.556396][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 267.660080][ T9] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 267.699633][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.751714][ T9] usb 1-1: config 0 descriptor?? [ 267.775255][ T1067] bridge_slave_1: left allmulticast mode [ 267.782305][ T1067] bridge_slave_1: left promiscuous mode [ 267.797532][ T9] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 267.805469][ T1067] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.831492][ T6919] vim2m vim2m.0: Fourcc format (0x47524247) invalid. [ 267.841471][ T1067] bridge_slave_0: left allmulticast mode [ 267.860989][ T1067] bridge_slave_0: left promiscuous mode [ 267.876204][ T1067] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.989669][ T29] audit: type=1326 audit(1728317077.469:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6923 comm="syz.2.287" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe52297dff9 code=0x0 [ 268.428545][ T1067] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 268.443889][ T1067] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 268.461357][ T1067] bond0 (unregistering): Released all slaves [ 268.989024][ T1067] hsr_slave_0: left promiscuous mode [ 269.011518][ T1067] hsr_slave_1: left promiscuous mode [ 269.040913][ T1067] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 269.050523][ T1067] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 269.066839][ T6948] FAULT_INJECTION: forcing a failure. [ 269.066839][ T6948] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 269.082338][ T1067] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 269.086933][ T6948] CPU: 1 UID: 0 PID: 6948 Comm: syz.3.290 Not tainted 6.12.0-rc2-syzkaller #0 [ 269.098688][ T6948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 269.101535][ T1067] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 269.108745][ T6948] Call Trace: [ 269.108755][ T6948] [ 269.108765][ T6948] dump_stack_lvl+0x241/0x360 [ 269.108794][ T6948] ? __pfx_dump_stack_lvl+0x10/0x10 [ 269.132039][ T6948] ? __pfx__printk+0x10/0x10 [ 269.136705][ T6948] ? __pfx_lock_release+0x10/0x10 [ 269.141782][ T6948] should_fail_ex+0x3b0/0x4e0 [ 269.146500][ T6948] _copy_from_iter+0x1ed/0x1d60 [ 269.151383][ T6948] ? __virt_addr_valid+0x183/0x530 [ 269.156522][ T6948] ? __pfx_lock_release+0x10/0x10 [ 269.161601][ T6948] ? __alloc_skb+0x28f/0x440 [ 269.166220][ T6948] ? __pfx__copy_from_iter+0x10/0x10 [ 269.171544][ T6948] ? __virt_addr_valid+0x183/0x530 [ 269.176705][ T6948] ? __virt_addr_valid+0x183/0x530 [ 269.181819][ T6948] ? __virt_addr_valid+0x45f/0x530 [ 269.186947][ T6948] ? __check_object_size+0x48e/0x900 [ 269.192238][ T6948] netlink_sendmsg+0x73d/0xcb0 [ 269.197007][ T6948] ? __pfx_netlink_sendmsg+0x10/0x10 [ 269.202290][ T6948] ? aa_sock_msg_perm+0x91/0x160 [ 269.207226][ T6948] ? __pfx_netlink_sendmsg+0x10/0x10 [ 269.212507][ T6948] __sock_sendmsg+0x221/0x270 [ 269.217191][ T6948] ____sys_sendmsg+0x52a/0x7e0 [ 269.221960][ T6948] ? __pfx_____sys_sendmsg+0x10/0x10 [ 269.227255][ T6948] __sys_sendmsg+0x292/0x380 [ 269.231851][ T6948] ? __pfx___sys_sendmsg+0x10/0x10 [ 269.234621][ T5229] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 269.236968][ T6948] ? __pfx_vfs_write+0x10/0x10 [ 269.249294][ T6948] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 269.255635][ T6948] ? do_syscall_64+0x100/0x230 [ 269.260415][ T6948] ? do_syscall_64+0xb6/0x230 [ 269.265090][ T6948] do_syscall_64+0xf3/0x230 [ 269.269594][ T6948] ? clear_bhb_loop+0x35/0x90 [ 269.274363][ T6948] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.280267][ T6948] RIP: 0033:0x7f00e2b7dff9 [ 269.284723][ T6948] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 269.304359][ T6948] RSP: 002b:00007f00e3a26038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 269.312779][ T6948] RAX: ffffffffffffffda RBX: 00007f00e2d35f80 RCX: 00007f00e2b7dff9 [ 269.320748][ T6948] RDX: 0000000020000004 RSI: 0000000020000240 RDI: 0000000000000003 [ 269.328712][ T6948] RBP: 00007f00e3a26090 R08: 0000000000000000 R09: 0000000000000000 [ 269.336715][ T6948] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 269.344693][ T6948] R13: 0000000000000000 R14: 00007f00e2d35f80 R15: 00007f00e2e5fa28 [ 269.352685][ T6948] [ 269.383033][ T1067] veth1_macvtap: left promiscuous mode [ 269.397725][ T1067] veth0_macvtap: left promiscuous mode [ 269.410560][ T1067] veth1_vlan: left promiscuous mode [ 269.418266][ T1067] veth0_vlan: left promiscuous mode [ 269.428108][ T5229] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 269.450664][ T5229] usb 3-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 269.463181][ T5229] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.494484][ T5229] usb 3-1: Product: syz [ 269.498780][ T5229] usb 3-1: Manufacturer: syz [ 269.511350][ T5229] usb 3-1: SerialNumber: syz [ 269.525079][ T5229] usb 3-1: config 0 descriptor?? [ 269.538027][ T5229] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 269.555187][ T54] Bluetooth: hci4: command tx timeout [ 269.676956][ T937] usb 1-1: USB disconnect, device number 10 [ 269.830498][ T5229] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 269.898527][ T5976] udevd[5976]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 270.297096][ T1067] team0 (unregistering): Port device team_slave_1 removed [ 270.373380][ T1067] team0 (unregistering): Port device team_slave_0 removed [ 270.376078][ T6151] usb 3-1: USB disconnect, device number 13 [ 270.606822][ T6969] FAULT_INJECTION: forcing a failure. [ 270.606822][ T6969] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 270.638277][ T6969] CPU: 1 UID: 0 PID: 6969 Comm: syz.3.294 Not tainted 6.12.0-rc2-syzkaller #0 [ 270.647203][ T6969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 270.657303][ T6969] Call Trace: [ 270.660611][ T6969] [ 270.663566][ T6969] dump_stack_lvl+0x241/0x360 [ 270.668284][ T6969] ? __pfx_dump_stack_lvl+0x10/0x10 [ 270.673514][ T6969] ? __pfx__printk+0x10/0x10 [ 270.678154][ T6969] ? __pfx_lock_release+0x10/0x10 [ 270.683235][ T6969] should_fail_ex+0x3b0/0x4e0 [ 270.687969][ T6969] _copy_from_user+0x2f/0xe0 [ 270.692608][ T6969] copy_msghdr_from_user+0xae/0x680 [ 270.697937][ T6969] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 270.703805][ T6969] __sys_sendmmsg+0x36d/0x730 [ 270.708532][ T6969] ? __pfx___sys_sendmmsg+0x10/0x10 [ 270.713786][ T6969] ? __pfx_lock_release+0x10/0x10 [ 270.718858][ T6969] ? kstrtouint_from_user+0x128/0x190 [ 270.724288][ T6969] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 270.730216][ T6969] ? ksys_write+0x229/0x2b0 [ 270.734750][ T6969] ? __pfx_lock_release+0x10/0x10 [ 270.739829][ T6969] ? vfs_write+0x7bf/0xc90 [ 270.744279][ T6969] ? kmem_cache_free+0x1a2/0x420 [ 270.749251][ T6969] ? __mutex_unlock_slowpath+0x21d/0x750 [ 270.754920][ T6969] ? __fget_files+0x3f3/0x470 [ 270.759648][ T6969] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 270.765690][ T6969] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 270.772056][ T6969] ? do_syscall_64+0x100/0x230 [ 270.776864][ T6969] __x64_sys_sendmmsg+0xa0/0xb0 [ 270.781758][ T6969] do_syscall_64+0xf3/0x230 [ 270.786289][ T6969] ? clear_bhb_loop+0x35/0x90 [ 270.790998][ T6969] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.796933][ T6969] RIP: 0033:0x7f00e2b7dff9 [ 270.801374][ T6969] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 270.821010][ T6969] RSP: 002b:00007f00e3a05038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 270.829453][ T6969] RAX: ffffffffffffffda RBX: 00007f00e2d36058 RCX: 00007f00e2b7dff9 [ 270.837453][ T6969] RDX: 0000000000000001 RSI: 0000000020000440 RDI: 0000000000000004 [ 270.845455][ T6969] RBP: 00007f00e3a05090 R08: 0000000000000000 R09: 0000000000000000 [ 270.853453][ T6969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 270.861473][ T6969] R13: 0000000000000000 R14: 00007f00e2d36058 R15: 00007f00e2e5fa28 [ 270.869483][ T6969] [ 271.574466][ T25] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 271.634415][ T54] Bluetooth: hci4: command tx timeout [ 271.734434][ T25] usb 4-1: Using ep0 maxpacket: 16 [ 271.744491][ T25] usb 4-1: too many configurations: 175, using maximum allowed: 8 [ 271.764233][ T25] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 271.771932][ T25] usb 4-1: can't read configurations, error -61 [ 271.803049][ T6915] chnl_net:caif_netlink_parms(): no params data found [ 271.914388][ T25] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 272.064340][ T25] usb 4-1: Using ep0 maxpacket: 16 [ 272.070096][ T25] usb 4-1: too many configurations: 175, using maximum allowed: 8 [ 272.080464][ T25] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 272.094358][ T25] usb 4-1: can't read configurations, error -61 [ 272.101200][ T25] usb usb4-port1: attempt power cycle [ 272.455308][ T25] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 272.467427][ T6915] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.468490][ T7016] netlink: 8 bytes leftover after parsing attributes in process `syz.1.305'. [ 272.474760][ T6915] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.491153][ T6915] bridge_slave_0: entered allmulticast mode [ 272.498393][ T6915] bridge_slave_0: entered promiscuous mode [ 272.506463][ T25] usb 4-1: Using ep0 maxpacket: 16 [ 272.512221][ T25] usb 4-1: too many configurations: 175, using maximum allowed: 8 [ 272.523401][ T25] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 272.533006][ T25] usb 4-1: can't read configurations, error -61 [ 272.598530][ T6915] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.615596][ T6915] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.633199][ T6915] bridge_slave_1: entered allmulticast mode [ 272.640336][ T51] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 272.656266][ T6915] bridge_slave_1: entered promiscuous mode [ 272.664473][ T25] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 272.697329][ T25] usb 4-1: Using ep0 maxpacket: 16 [ 272.703150][ T25] usb 4-1: too many configurations: 175, using maximum allowed: 8 [ 272.717466][ T25] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 272.725733][ T25] usb 4-1: can't read configurations, error -61 [ 272.754480][ T25] usb usb4-port1: unable to enumerate USB device [ 272.780016][ T6915] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 272.795084][ T51] usb 3-1: Using ep0 maxpacket: 32 [ 272.804190][ T51] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 272.825254][ T6915] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 272.841771][ T51] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 272.860772][ T51] usb 3-1: New USB device found, idVendor=172f, idProduct=0501, bcdDevice= 0.00 [ 272.872038][ T51] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.901803][ T51] usb 3-1: config 0 descriptor?? [ 272.987642][ T6915] team0: Port device team_slave_0 added [ 273.002310][ T6915] team0: Port device team_slave_1 added [ 273.052369][ T6915] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 273.060022][ T6915] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 273.092339][ T6915] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 273.113045][ T6915] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 273.120266][ T6915] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 273.156206][ T6915] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 273.210079][ T6915] hsr_slave_0: entered promiscuous mode [ 273.216497][ T6915] hsr_slave_1: entered promiscuous mode [ 273.222748][ T6915] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 273.230419][ T6915] Cannot create hsr debugfs directory [ 273.326356][ T51] waltop 0003:172F:0501.000A: unknown main item tag 0x0 [ 273.335589][ T51] waltop 0003:172F:0501.000A: item fetching failed at offset 5/8 [ 273.349020][ T51] waltop 0003:172F:0501.000A: probe with driver waltop failed with error -22 [ 273.434417][ T5284] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 273.535394][ T51] usb 3-1: USB disconnect, device number 14 [ 273.605142][ T5284] usb 1-1: Using ep0 maxpacket: 16 [ 273.613311][ T5284] usb 1-1: config 1 has an invalid interface number: 183 but max is 0 [ 273.624637][ T5284] usb 1-1: config 1 has no interface number 0 [ 273.637282][ T5284] usb 1-1: New USB device found, idVendor=0fcf, idProduct=1004, bcdDevice= 5.dc [ 273.654397][ T5284] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.664849][ T5284] usb 1-1: Product: syz [ 273.669044][ T5284] usb 1-1: Manufacturer: syz [ 273.690637][ T5284] usb 1-1: SerialNumber: syz [ 273.714557][ T54] Bluetooth: hci4: command tx timeout [ 273.728890][ T5284] cp210x 1-1:1.183: cp210x converter detected [ 273.922901][ T6915] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 273.947957][ T6915] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 273.965554][ T6915] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 273.985047][ T6915] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 274.157166][ T7053] bridge0: port 3(ipvlan2) entered blocking state [ 274.171766][ T7053] bridge0: port 3(ipvlan2) entered disabled state [ 274.190389][ T7053] ipvlan2: entered allmulticast mode [ 274.196498][ T7053] bridge0: entered allmulticast mode [ 274.213218][ T7053] ipvlan2: left allmulticast mode [ 274.223272][ T7053] bridge0: left allmulticast mode [ 274.355912][ T6915] 8021q: adding VLAN 0 to HW filter on device bond0 [ 274.428025][ T6915] 8021q: adding VLAN 0 to HW filter on device team0 [ 274.510662][ T7065] FAULT_INJECTION: forcing a failure. [ 274.510662][ T7065] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 274.555435][ T7065] CPU: 1 UID: 0 PID: 7065 Comm: syz.1.314 Not tainted 6.12.0-rc2-syzkaller #0 [ 274.561271][ T1067] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.564326][ T7065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 274.564362][ T7065] Call Trace: [ 274.571510][ T1067] bridge0: port 1(bridge_slave_0) entered forwarding state [ 274.581423][ T7065] [ 274.581435][ T7065] dump_stack_lvl+0x241/0x360 [ 274.581464][ T7065] ? __pfx_dump_stack_lvl+0x10/0x10 [ 274.594626][ T1067] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.594864][ T7065] ? __pfx__printk+0x10/0x10 [ 274.599697][ T1067] bridge0: port 2(bridge_slave_1) entered forwarding state [ 274.604739][ T7065] ? snprintf+0xda/0x120 [ 274.604785][ T7065] should_fail_ex+0x3b0/0x4e0 [ 274.632580][ T7065] _copy_to_user+0x2f/0xb0 [ 274.637014][ T7065] simple_read_from_buffer+0xca/0x150 [ 274.642412][ T7065] proc_fail_nth_read+0x1e9/0x250 [ 274.647454][ T7065] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 274.653017][ T7065] ? rw_verify_area+0x55e/0x6f0 [ 274.657890][ T7065] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 274.663449][ T7065] vfs_read+0x201/0xbc0 [ 274.667627][ T7065] ? __pfx_lock_release+0x10/0x10 [ 274.672698][ T7065] ? __pfx_vfs_read+0x10/0x10 [ 274.677406][ T7065] ? __fget_files+0x3f3/0x470 [ 274.682103][ T7065] ? fdget_pos+0x24e/0x320 [ 274.686528][ T7065] ksys_read+0x183/0x2b0 [ 274.690778][ T7065] ? __pfx_ksys_read+0x10/0x10 [ 274.695546][ T7065] ? do_syscall_64+0x100/0x230 [ 274.700316][ T7065] ? do_syscall_64+0xb6/0x230 [ 274.704993][ T7065] do_syscall_64+0xf3/0x230 [ 274.709494][ T7065] ? clear_bhb_loop+0x35/0x90 [ 274.714175][ T7065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.720089][ T7065] RIP: 0033:0x7f54f6d7ca3c [ 274.724511][ T7065] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 274.744137][ T7065] RSP: 002b:00007f54f7aaa030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 274.752554][ T7065] RAX: ffffffffffffffda RBX: 00007f54f6f35f80 RCX: 00007f54f6d7ca3c [ 274.760528][ T7065] RDX: 000000000000000f RSI: 00007f54f7aaa0a0 RDI: 0000000000000004 [ 274.768497][ T7065] RBP: 00007f54f7aaa090 R08: 0000000000000000 R09: 0000000000000000 [ 274.776468][ T7065] R10: 0000000024000004 R11: 0000000000000246 R12: 0000000000000002 [ 274.784449][ T7065] R13: 0000000000000000 R14: 00007f54f6f35f80 R15: 00007f54f705fa28 [ 274.792449][ T7065] [ 275.057806][ T6915] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 275.162030][ T6915] veth0_vlan: entered promiscuous mode [ 275.190163][ T6915] veth1_vlan: entered promiscuous mode [ 275.213811][ T6915] veth0_macvtap: entered promiscuous mode [ 275.238999][ T6915] veth1_macvtap: entered promiscuous mode [ 275.258366][ T6915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.268955][ T6915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.279098][ T6915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.290077][ T6915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.300443][ T6915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.310952][ T6915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.320931][ T6915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.331625][ T6915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.346194][ T6915] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 275.356469][ T6915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 275.374455][ T6915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.399274][ T6915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 275.409844][ T6915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.419776][ T6915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 275.430283][ T6915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.440215][ T6915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 275.450795][ T6915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.462928][ T6915] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 275.675810][ T6915] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.684836][ T6915] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.693641][ T6915] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.702871][ T6915] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.801787][ T54] Bluetooth: hci4: command tx timeout [ 275.979962][ T1122] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.103066][ T5894] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 276.150389][ T5894] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 276.294535][ T51] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 276.299318][ T1122] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.479242][ T7103] netlink: 12 bytes leftover after parsing attributes in process `syz.3.323'. [ 276.503159][ T51] usb 2-1: config 0 interface 0 altsetting 12 endpoint 0x87 has an invalid bInterval 97, changing to 10 [ 276.517848][ T51] usb 2-1: config 0 interface 0 altsetting 12 endpoint 0x87 has invalid maxpacket 25079, setting to 1024 [ 276.530294][ T51] usb 2-1: config 0 interface 0 has no altsetting 0 [ 276.540096][ T51] usb 2-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3 [ 276.552634][ T5284] cp210x 1-1:1.183: failed to get vendor val 0x370b size 1: -71 [ 276.558264][ T1122] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.564474][ T5284] cp210x 1-1:1.183: querying part number failed [ 276.578685][ T51] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.604761][ T51] usb 2-1: Product: syz [ 276.611714][ T5284] usb 1-1: cp210x converter now attached to ttyUSB0 [ 276.624499][ T51] usb 2-1: Manufacturer: syz [ 276.635294][ T51] usb 2-1: SerialNumber: syz [ 276.642642][ T5284] usb 1-1: USB disconnect, device number 11 [ 276.661099][ T51] usb 2-1: config 0 descriptor?? [ 276.667157][ T5894] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 276.716523][ T51] keyspan 2-1:0.0: Keyspan 2 port adapter converter detected [ 276.725771][ T5894] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 276.755077][ T5284] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 276.763316][ T5284] cp210x 1-1:1.183: device disconnected [ 276.770419][ T51] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 7 [ 276.798770][ T51] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 81 [ 276.838080][ T51] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 1 [ 276.877142][ T51] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 2 [ 276.906091][ T51] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 85 [ 276.913915][ T51] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 5 [ 276.999281][ T1122] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.015451][ T51] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 277.076543][ T51] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 83 [ 277.110643][ T51] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 3 [ 277.150273][ T51] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 4 [ 277.184498][ T51] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 86 [ 277.192518][ T51] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 6 [ 277.255252][ T5236] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 277.263506][ T51] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 277.285233][ T5236] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 277.294418][ T51] usb 2-1: USB disconnect, device number 18 [ 277.307799][ T51] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 277.334693][ T5236] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 277.350676][ T51] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 277.363137][ T51] keyspan 2-1:0.0: device disconnected [ 277.374613][ T5236] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 277.404385][ T5236] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 277.424068][ T5236] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 277.459368][ T1122] bridge_slave_1: left allmulticast mode [ 277.494442][ T1122] bridge_slave_1: left promiscuous mode [ 277.501861][ T1122] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.655739][ T1122] bridge_slave_0: left allmulticast mode [ 277.661443][ T1122] bridge_slave_0: left promiscuous mode [ 277.754561][ T1122] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.876541][ T7135] FAULT_INJECTION: forcing a failure. [ 277.876541][ T7135] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 277.952424][ T7135] CPU: 0 UID: 0 PID: 7135 Comm: syz.0.328 Not tainted 6.12.0-rc2-syzkaller #0 [ 277.961347][ T7135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 277.971445][ T7135] Call Trace: [ 277.974756][ T7135] [ 277.977712][ T7135] dump_stack_lvl+0x241/0x360 [ 277.982432][ T7135] ? __pfx_dump_stack_lvl+0x10/0x10 [ 277.987675][ T7135] ? __pfx__printk+0x10/0x10 [ 277.992325][ T7135] ? __pfx_lock_release+0x10/0x10 [ 277.997420][ T7135] should_fail_ex+0x3b0/0x4e0 [ 278.002222][ T7135] _copy_from_user+0x2f/0xe0 [ 278.006833][ T7135] copy_msghdr_from_user+0xae/0x680 [ 278.012047][ T7135] ? __pfx___might_resched+0x10/0x10 [ 278.014526][ T6151] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 278.017332][ T7135] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 278.017375][ T7135] ? rcu_is_watching+0x15/0xb0 [ 278.035578][ T7135] ? __might_fault+0xaa/0x120 [ 278.040266][ T7135] do_recvmmsg+0x3f9/0xad0 [ 278.044701][ T7135] ? __pfx_do_recvmmsg+0x10/0x10 [ 278.049658][ T7135] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 278.055576][ T7135] ? ksys_write+0x229/0x2b0 [ 278.060091][ T7135] ? __pfx_lock_release+0x10/0x10 [ 278.065143][ T7135] ? vfs_write+0x7bf/0xc90 [ 278.069571][ T7135] ? kmem_cache_free+0x1a2/0x420 [ 278.074533][ T7135] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 278.080541][ T7135] __x64_sys_recvmmsg+0x199/0x250 [ 278.085576][ T7135] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 278.091143][ T7135] ? do_syscall_64+0x100/0x230 [ 278.095930][ T7135] ? do_syscall_64+0xb6/0x230 [ 278.100612][ T7135] do_syscall_64+0xf3/0x230 [ 278.105116][ T7135] ? clear_bhb_loop+0x35/0x90 [ 278.109802][ T7135] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.115713][ T7135] RIP: 0033:0x7f916eb7dff9 [ 278.120133][ T7135] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 278.139783][ T7135] RSP: 002b:00007f916f8d2038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 278.148227][ T7135] RAX: ffffffffffffffda RBX: 00007f916ed35f80 RCX: 00007f916eb7dff9 [ 278.156201][ T7135] RDX: 0000000000000a0d RSI: 00000000200066c0 RDI: 0000000000000003 [ 278.164175][ T7135] RBP: 00007f916f8d2090 R08: 0000000000000000 R09: 0000000000000000 [ 278.172155][ T7135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 278.180145][ T7135] R13: 0000000000000000 R14: 00007f916ed35f80 R15: 00007f916ee5fa28 [ 278.188166][ T7135] [ 278.364380][ T6151] usb 5-1: Using ep0 maxpacket: 8 [ 278.438695][ T6151] usb 5-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 278.455076][ T6151] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.470407][ T6151] usb 5-1: Product: syz [ 278.475232][ T6151] usb 5-1: Manufacturer: syz [ 278.479869][ T6151] usb 5-1: SerialNumber: syz [ 278.494534][ T6151] usb 5-1: config 0 descriptor?? [ 278.507908][ T6151] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 278.508514][ T7154] fuse: Bad value for 'group_id' [ 278.540467][ T7154] fuse: Bad value for 'group_id' [ 278.601800][ T7154] binder: BINDER_SET_CONTEXT_MGR already set [ 278.624433][ T7154] binder: 7147:7154 ioctl 4018620d 20000040 returned -16 [ 279.033130][ T1122] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 279.046283][ T6151] gspca_sonixj: reg_r err -32 [ 279.052065][ T6151] sonixj 5-1:0.0: probe with driver sonixj failed with error -32 [ 279.110159][ T1122] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 279.183463][ T1122] bond0 (unregistering): Released all slaves [ 279.718570][ T5236] Bluetooth: hci1: command tx timeout [ 279.916088][ T7185] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.338'. [ 279.930725][ T7128] chnl_net:caif_netlink_parms(): no params data found [ 279.955525][ T7185] openvswitch: netlink: Multiple metadata blocks provided [ 280.119304][ T1122] hsr_slave_0: left promiscuous mode [ 280.148541][ T1122] hsr_slave_1: left promiscuous mode [ 280.172290][ T1122] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 280.203488][ T1122] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 280.224574][ T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 280.232837][ T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 280.240833][ T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 280.250500][ T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 280.262739][ T1122] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 280.275506][ T54] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 280.283625][ T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 280.324398][ T6151] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 280.340842][ T1122] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 280.422892][ T1122] veth1_macvtap: left promiscuous mode [ 280.433151][ T1122] veth0_macvtap: left promiscuous mode [ 280.446319][ T1122] veth1_vlan: left promiscuous mode [ 280.454083][ T1122] veth0_vlan: left promiscuous mode [ 280.494504][ T6151] usb 1-1: Using ep0 maxpacket: 8 [ 280.523577][ T6151] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 280.539924][ T6151] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.550063][ T6151] usb 1-1: Product: syz [ 280.555185][ T6151] usb 1-1: Manufacturer: syz [ 280.560392][ T6151] usb 1-1: SerialNumber: syz [ 280.610578][ T6151] usb 1-1: config 0 descriptor?? [ 280.836710][ T5284] usb 5-1: USB disconnect, device number 19 [ 280.852164][ T6151] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 281.209516][ T7207] ptrace attach of "./syz-executor exec"[7214] was attempted by " [ 281.249479][ T7216] binder: 7215:7216 unknown command 1077961494 [ 281.383965][ T7216] binder: 7215:7216 ioctl c0306201 20004a40 returned -22 [ 281.781488][ T1122] team0 (unregistering): Port device team_slave_1 removed [ 281.800049][ T5236] Bluetooth: hci1: command tx timeout [ 281.839361][ T1122] team0 (unregistering): Port device team_slave_0 removed [ 282.325836][ T7224] macvlan0: entered allmulticast mode [ 282.331326][ T7224] veth1_vlan: entered allmulticast mode [ 282.361149][ T5236] Bluetooth: hci3: command tx timeout [ 282.391488][ T7225] pim6reg: entered allmulticast mode [ 282.420093][ T7226] veth1_vlan: left allmulticast mode [ 282.441874][ T7226] macvlan0 (unregistering): left allmulticast mode [ 282.489589][ T6151] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 282.516285][ T6151] usb 1-1: USB disconnect, device number 12 [ 282.658725][ T7128] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.696661][ T7128] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.704140][ T7128] bridge_slave_0: entered allmulticast mode [ 282.717571][ T7128] bridge_slave_0: entered promiscuous mode [ 282.736303][ T7128] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.750311][ T7128] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.758021][ T7128] bridge_slave_1: entered allmulticast mode [ 282.766087][ T7128] bridge_slave_1: entered promiscuous mode [ 282.892925][ T7128] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 282.927578][ T7128] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 283.147203][ T7128] team0: Port device team_slave_0 added [ 283.169070][ T7128] team0: Port device team_slave_1 added [ 283.302779][ T7254] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.348'. [ 283.384881][ T7128] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 283.407174][ T7254] openvswitch: netlink: Multiple metadata blocks provided [ 283.430170][ T7128] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 283.456207][ C0] vkms_vblank_simulate: vblank timer overrun [ 283.502548][ T7128] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 283.582177][ T7128] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 283.593113][ T7128] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 283.636331][ T7128] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 283.662834][ T7197] chnl_net:caif_netlink_parms(): no params data found [ 283.874649][ T5236] Bluetooth: hci1: command tx timeout [ 284.027920][ T1122] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.063477][ T7128] hsr_slave_0: entered promiscuous mode [ 284.070541][ T7128] hsr_slave_1: entered promiscuous mode [ 284.178422][ T1122] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.322575][ T1122] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.384448][ T7197] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.391608][ T7197] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.420245][ T7197] bridge_slave_0: entered allmulticast mode [ 284.434374][ T5236] Bluetooth: hci3: command tx timeout [ 284.441009][ T7197] bridge_slave_0: entered promiscuous mode [ 284.537409][ T7282] sctp: [Deprecated]: syz.0.354 (pid 7282) Use of struct sctp_assoc_value in delayed_ack socket option. [ 284.537409][ T7282] Use struct sctp_sack_info instead [ 284.576530][ T7283] binfmt_misc: register: failed to install interpreter file ./file0 [ 284.599096][ T7282] binfmt_misc: register: failed to install interpreter file ./file0 [ 284.637782][ T1122] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.661809][ T7197] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.678160][ T7197] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.690613][ T7197] bridge_slave_1: entered allmulticast mode [ 284.700130][ T7197] bridge_slave_1: entered promiscuous mode [ 284.793543][ T7197] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 284.869619][ T7197] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 284.894442][ T8] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 285.056665][ T8] usb 5-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 285.073344][ T7197] team0: Port device team_slave_0 added [ 285.096549][ T8] usb 5-1: New USB device found, idVendor=06cd, idProduct=0108, bcdDevice=bb.20 [ 285.117849][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.125071][ T7197] team0: Port device team_slave_1 added [ 285.144350][ T8] usb 5-1: Product: syz [ 285.153278][ T8] usb 5-1: Manufacturer: syz [ 285.174543][ T8] usb 5-1: SerialNumber: syz [ 285.198488][ T8] usb 5-1: config 0 descriptor?? [ 285.236159][ T8] keyspan 5-1:0.0: Keyspan 1 port adapter converter detected [ 285.251927][ T8] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 87 [ 285.279546][ T8] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 7 [ 285.319071][ T8] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 81 [ 285.398374][ T7197] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 285.421721][ T7197] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 285.466330][ T8] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 1 [ 285.479993][ T7197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 285.515254][ T8] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 2 [ 285.532518][ T8] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 85 [ 285.556533][ T8] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 5 [ 285.580003][ T7197] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 285.581152][ T8] usb 5-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 285.620291][ T7197] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 285.626390][ T8] usb 5-1: USB disconnect, device number 20 [ 285.691286][ T7197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 285.744584][ T8] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 285.750766][ T1122] bridge_slave_1: left allmulticast mode [ 285.774165][ T8] keyspan 5-1:0.0: device disconnected [ 285.780573][ T1122] bridge_slave_1: left promiscuous mode [ 285.791190][ T1122] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.810697][ T1122] bridge_slave_0: left allmulticast mode [ 285.820216][ T1122] bridge_slave_0: left promiscuous mode [ 285.830402][ T1122] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.955143][ T5236] Bluetooth: hci1: command tx timeout [ 286.530373][ T5236] Bluetooth: hci3: command tx timeout [ 286.608720][ T7311] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.359'. [ 286.624520][ T7311] openvswitch: netlink: Multiple metadata blocks provided [ 286.737924][ T1122] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 286.762703][ T1122] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 286.783531][ T1122] bond0 (unregistering): Released all slaves [ 287.192493][ T7197] hsr_slave_0: entered promiscuous mode [ 287.213081][ T7197] hsr_slave_1: entered promiscuous mode [ 287.231097][ T7197] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 287.254314][ T7197] Cannot create hsr debugfs directory [ 287.593546][ T1122] hsr_slave_0: left promiscuous mode [ 287.623550][ T1122] hsr_slave_1: left promiscuous mode [ 287.644639][ T1122] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 287.679532][ T1122] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 287.738481][ T1122] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 287.785077][ T1122] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 287.862230][ T1122] veth1_macvtap: left promiscuous mode [ 287.896534][ T1122] veth0_macvtap: left promiscuous mode [ 287.934942][ T1122] veth1_vlan: left promiscuous mode [ 287.940264][ T1122] veth0_vlan: left promiscuous mode [ 287.977624][ T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 287.987177][ T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 288.026239][ T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 288.037559][ T5245] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 288.062648][ T5245] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 288.084643][ T5245] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 288.381095][ T7341] netlink: 4 bytes leftover after parsing attributes in process `syz.4.366'. [ 288.414425][ T25] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 288.564461][ T25] usb 1-1: Using ep0 maxpacket: 32 [ 288.575806][ T25] usb 1-1: config 1 interface 0 altsetting 5 bulk endpoint 0x1 has invalid maxpacket 32 [ 288.586003][ T25] usb 1-1: config 1 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 288.603558][ T25] usb 1-1: config 1 interface 0 has no altsetting 0 [ 288.610572][ T5236] Bluetooth: hci3: command tx timeout [ 288.618113][ T25] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 288.627533][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.635672][ T25] usb 1-1: Product: 惢襂ꭆ觍챮㳂䩔攏팇㚛䯲蚈杌ꄬ扮꘥֫覮꾉゚诊삚㱠턇紙睵齯䵶먚 [ 288.648729][ T25] usb 1-1: Manufacturer: Ⰻ [ 288.653363][ T25] usb 1-1: SerialNumber: syz [ 288.660638][ T7332] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 288.668046][ T7332] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 288.695778][ T1122] team0 (unregistering): Port device team_slave_1 removed [ 288.741769][ T1122] team0 (unregistering): Port device team_slave_0 removed [ 289.193615][ T25] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 13 if 0 alt 5 proto 1 vid 0x0525 pid 0xA4A8 [ 289.229589][ T25] usb 1-1: USB disconnect, device number 13 [ 289.269753][ T25] usblp0: removed [ 289.306832][ T7128] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 289.340690][ T7128] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 289.368767][ T7128] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 289.382559][ T7128] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 290.061346][ T62] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.123425][ T7334] chnl_net:caif_netlink_parms(): no params data found [ 290.176611][ T7128] 8021q: adding VLAN 0 to HW filter on device bond0 [ 290.194531][ T5236] Bluetooth: hci2: command tx timeout [ 290.298084][ T62] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.542245][ T62] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.712932][ T62] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.768966][ T7128] 8021q: adding VLAN 0 to HW filter on device team0 [ 290.831279][ T7197] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 290.863033][ T7197] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 290.884891][ T7334] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.892006][ T7334] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.902197][ T7334] bridge_slave_0: entered allmulticast mode [ 290.912644][ T7334] bridge_slave_0: entered promiscuous mode [ 290.922549][ T1122] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.929719][ T1122] bridge0: port 1(bridge_slave_0) entered forwarding state [ 290.948299][ T7197] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 290.984582][ T7197] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 291.015069][ T7334] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.022203][ T7334] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.033690][ T7334] bridge_slave_1: entered allmulticast mode [ 291.043358][ T7334] bridge_slave_1: entered promiscuous mode [ 291.094225][ T1122] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.101397][ T1122] bridge0: port 2(bridge_slave_1) entered forwarding state [ 291.110297][ T7377] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2248643489 (17989147912 ns) > initial count (11631199424 ns). Using initial count to start timer. [ 291.263573][ T7334] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 291.291549][ T7334] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 291.334607][ T62] bridge_slave_1: left allmulticast mode [ 291.350491][ T62] bridge_slave_1: left promiscuous mode [ 291.374522][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.383599][ T62] bridge_slave_0: left allmulticast mode [ 291.397407][ T62] bridge_slave_0: left promiscuous mode [ 291.403230][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.544235][ T29] audit: type=1326 audit(1728317101.019:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7399 comm="syz.0.372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f916eb7dff9 code=0x7ffc0000 [ 291.595025][ T29] audit: type=1326 audit(1728317101.039:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7399 comm="syz.0.372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f916eb7dff9 code=0x7ffc0000 [ 291.630938][ T7402] netlink: 16 bytes leftover after parsing attributes in process `syz.4.373'. [ 291.644405][ T29] audit: type=1326 audit(1728317101.069:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7399 comm="syz.0.372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7f916eb7dff9 code=0x7ffc0000 [ 291.715234][ T29] audit: type=1326 audit(1728317101.069:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7399 comm="syz.0.372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f916eb7dff9 code=0x7ffc0000 [ 291.784980][ T29] audit: type=1326 audit(1728317101.069:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7399 comm="syz.0.372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f916eb7dff9 code=0x7ffc0000 [ 291.854384][ T29] audit: type=1326 audit(1728317101.079:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7399 comm="syz.0.372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f916eb7dff9 code=0x7ffc0000 [ 291.910125][ T29] audit: type=1326 audit(1728317101.079:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7399 comm="syz.0.372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f916eb7dff9 code=0x7ffc0000 [ 291.974349][ T29] audit: type=1326 audit(1728317101.079:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7399 comm="syz.0.372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f916eb7dff9 code=0x7ffc0000 [ 292.024353][ T29] audit: type=1326 audit(1728317101.079:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7399 comm="syz.0.372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f916eb7dff9 code=0x7ffc0000 [ 292.084352][ T29] audit: type=1326 audit(1728317101.079:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7399 comm="syz.0.372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f916eb7dff9 code=0x7ffc0000 [ 292.274516][ T5236] Bluetooth: hci2: command tx timeout [ 292.735254][ T7418] xt_CT: No such helper "netbios-ns" [ 292.763840][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 292.788065][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 292.799577][ T62] bond0 (unregistering): Released all slaves [ 292.847835][ T7420] openvswitch: : Dropping previously announced user features [ 292.942168][ T7334] team0: Port device team_slave_0 added [ 292.962912][ T7334] team0: Port device team_slave_1 added [ 293.166300][ T7334] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 293.182979][ T7334] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 293.226439][ T7334] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 293.336331][ T7334] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 293.374476][ T7334] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 293.403644][ T7334] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 293.598159][ T7334] hsr_slave_0: entered promiscuous mode [ 293.620329][ T7334] hsr_slave_1: entered promiscuous mode [ 293.644367][ T7334] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 293.651966][ T7334] Cannot create hsr debugfs directory [ 293.763543][ T62] hsr_slave_0: left promiscuous mode [ 293.769636][ T62] hsr_slave_1: left promiscuous mode [ 293.781162][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 293.799084][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 293.819193][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 293.845381][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 293.906358][ T62] veth1_macvtap: left promiscuous mode [ 293.922753][ T62] veth0_macvtap: left promiscuous mode [ 293.934554][ T62] veth1_vlan: left promiscuous mode [ 293.939952][ T62] veth0_vlan: left promiscuous mode [ 294.354341][ T5236] Bluetooth: hci2: command tx timeout [ 294.709154][ T62] team0 (unregistering): Port device team_slave_1 removed [ 294.762668][ T62] team0 (unregistering): Port device team_slave_0 removed [ 295.417760][ T7128] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 295.424357][ T8] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 295.514086][ T7128] veth0_vlan: entered promiscuous mode [ 295.594455][ T8] usb 1-1: Using ep0 maxpacket: 32 [ 295.616251][ T8] usb 1-1: New USB device found, idVendor=1d6f, idProduct=0010, bcdDevice= a.a7 [ 295.625827][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.635863][ T8] usb 1-1: Product: syz [ 295.642880][ T8] usb 1-1: Manufacturer: syz [ 295.654148][ T7128] veth1_vlan: entered promiscuous mode [ 295.661504][ T8] usb 1-1: SerialNumber: syz [ 295.676687][ T8] usb 1-1: config 0 descriptor?? [ 295.695302][ T8] usb 1-1: bad CDC descriptors [ 295.700642][ T8] cp210x 1-1:0.0: cp210x converter detected [ 295.713282][ T7197] 8021q: adding VLAN 0 to HW filter on device bond0 [ 295.891686][ T7197] 8021q: adding VLAN 0 to HW filter on device team0 [ 295.902978][ T7451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 295.930644][ T7128] veth0_macvtap: entered promiscuous mode [ 295.945746][ T7451] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 295.968339][ T7451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 295.990719][ T2534] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.997959][ T2534] bridge0: port 1(bridge_slave_0) entered forwarding state [ 296.006354][ T7451] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 296.036564][ T7128] veth1_macvtap: entered promiscuous mode [ 296.112682][ T2534] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.119883][ T2534] bridge0: port 2(bridge_slave_1) entered forwarding state [ 296.188167][ T8] cp210x 1-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 296.221274][ T7128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 296.231986][ T8] cp210x 1-1:0.0: querying part number failed [ 296.241521][ T7128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.256180][ T8] usb 1-1: cp210x converter now attached to ttyUSB0 [ 296.262598][ T7128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 296.276968][ T7128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.277569][ T8] usb 1-1: USB disconnect, device number 14 [ 296.323190][ T8] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 296.325446][ T7128] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 296.339732][ T8] cp210x 1-1:0.0: device disconnected [ 296.420555][ T7128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 296.434821][ T5236] Bluetooth: hci2: command tx timeout [ 296.454385][ T7128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.464890][ T7128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 296.484483][ T7128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.503268][ T7128] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 296.611993][ T7128] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.622069][ T7128] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.636212][ T7128] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.652030][ T7128] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.771617][ T7197] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 296.844389][ T6151] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 296.939442][ T7334] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 296.973342][ T7334] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 297.007550][ T6151] usb 5-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 297.039181][ T7334] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 297.059979][ T5894] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 297.076505][ T6151] usb 5-1: New USB device found, idVendor=06cd, idProduct=0108, bcdDevice=bb.20 [ 297.077127][ T5894] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 297.103499][ T6151] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.117565][ T7334] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 297.135101][ T5301] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 297.140149][ T6151] usb 5-1: Product: syz [ 297.169723][ T7197] veth0_vlan: entered promiscuous mode [ 297.175340][ T6151] usb 5-1: Manufacturer: syz [ 297.179976][ T6151] usb 5-1: SerialNumber: syz [ 297.210814][ T6151] usb 5-1: config 0 descriptor?? [ 297.227642][ T6151] keyspan 5-1:0.0: Keyspan 1 port adapter converter detected [ 297.245400][ T2534] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 297.264433][ T6151] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 87 [ 297.270560][ T2534] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 297.272129][ T6151] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 7 [ 297.307628][ T7197] veth1_vlan: entered promiscuous mode [ 297.313415][ T5301] usb 1-1: Using ep0 maxpacket: 8 [ 297.349909][ T5301] usb 1-1: config 0 has no interfaces? [ 297.353152][ T6151] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 81 [ 297.365182][ T6151] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 1 [ 297.367878][ T5301] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 297.410812][ T7197] veth0_macvtap: entered promiscuous mode [ 297.422796][ T6151] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 2 [ 297.430934][ T5301] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.460205][ T6151] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 85 [ 297.466515][ T5301] usb 1-1: config 0 descriptor?? [ 297.488009][ T7197] veth1_macvtap: entered promiscuous mode [ 297.500837][ T6151] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 5 [ 297.540287][ T6151] usb 5-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 297.550973][ T7334] 8021q: adding VLAN 0 to HW filter on device bond0 [ 297.589529][ T6151] usb 5-1: USB disconnect, device number 21 [ 297.602996][ T7197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 297.637632][ T6151] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 297.659810][ T6151] keyspan 5-1:0.0: device disconnected [ 297.662841][ T7197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.687223][ T7197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 297.700323][ T7197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.764352][ T7197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 297.794928][ T7197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.806869][ T7197] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 297.840510][ T7197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 297.868925][ T7197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.894326][ T7197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 297.914306][ T7197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.944415][ T7197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 297.979597][ T7197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.005538][ T7197] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 298.050966][ T7197] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.074327][ T7197] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.084008][ T7197] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.104562][ T7197] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.126555][ T7334] 8021q: adding VLAN 0 to HW filter on device team0 [ 298.191001][ T2903] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.198190][ T2903] bridge0: port 1(bridge_slave_0) entered forwarding state [ 298.226199][ T2903] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.233419][ T2903] bridge0: port 2(bridge_slave_1) entered forwarding state [ 298.408671][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 298.456945][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 298.460650][ T7520] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 298.473403][ T7520] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 298.482252][ T7520] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 298.491037][ T7520] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 298.570356][ T2534] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 298.601441][ T2534] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 298.631862][ T7334] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 298.731908][ T7334] veth0_vlan: entered promiscuous mode [ 298.754449][ T8] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 298.764075][ T7334] veth1_vlan: entered promiscuous mode [ 298.814763][ T7531] sctp: [Deprecated]: syz.3.336 (pid 7531) Use of int in maxseg socket option. [ 298.814763][ T7531] Use struct sctp_assoc_value instead [ 298.848047][ T7334] veth0_macvtap: entered promiscuous mode [ 298.859591][ T7532] sctp: [Deprecated]: syz.3.336 (pid 7532) Use of int in maxseg socket option. [ 298.859591][ T7532] Use struct sctp_assoc_value instead [ 298.891519][ T7334] veth1_macvtap: entered promiscuous mode [ 298.922720][ T7519] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 299.102654][ T7334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 299.119303][ T7334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.131712][ T8] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 299.144376][ T8] usb 3-1: can't read configurations, error -71 [ 299.152872][ T7334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 299.186989][ T7334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.217989][ T7334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 299.242271][ T7334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.252898][ T7334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 299.264215][ T7334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.288158][ T7334] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 299.309767][ T7334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.331150][ T7334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.341938][ T7334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.364299][ T7334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.384420][ T7334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.398571][ T7334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.411412][ T7334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.432063][ T7334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.446246][ T7334] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 299.477790][ T7334] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.505699][ T7334] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.544404][ T7334] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.553156][ T7334] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.710179][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 299.737573][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 299.790250][ T2534] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 299.804064][ T2534] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 299.864451][ T5301] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 299.912446][ T937] usb 1-1: USB disconnect, device number 15 [ 300.064414][ T5301] usb 4-1: Using ep0 maxpacket: 8 [ 300.104686][ T5301] usb 4-1: config 0 has no interfaces? [ 300.112627][ T5301] usb 4-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 300.144329][ T5301] usb 4-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 300.152413][ T5301] usb 4-1: Product: syz [ 300.167789][ T5301] usb 4-1: Manufacturer: syz [ 300.173766][ T5301] usb 4-1: SerialNumber: syz [ 300.198567][ T5301] usb 4-1: config 0 descriptor?? [ 300.403368][ T7560] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2248643489 (17989147912 ns) > initial count (11631199424 ns). Using initial count to start timer. [ 300.481946][ T29] kauditd_printk_skb: 28 callbacks suppressed [ 300.481965][ T29] audit: type=1326 audit(1728317109.959:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7581 comm="syz.0.394" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f916eb7dff9 code=0x0 [ 300.616771][ T937] usb 4-1: USB disconnect, device number 25 [ 301.063303][ T7595] loop2: detected capacity change from 0 to 7 [ 301.065053][ T937] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 301.082949][ T7595] Dev loop2: unable to read RDB block 7 [ 301.096400][ T7595] loop2: unable to read partition table [ 301.105650][ T7597] fuse: Bad value for 'fd' [ 301.116963][ T7595] loop2: partition table beyond EOD, truncated [ 301.123644][ T7595] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 301.144703][ T7598] fuse: Bad value for 'fd' [ 301.266218][ T937] usb 5-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 301.353124][ T937] usb 5-1: New USB device found, idVendor=06cd, idProduct=0108, bcdDevice=bb.20 [ 301.363404][ T7604] FAULT_INJECTION: forcing a failure. [ 301.363404][ T7604] name failslab, interval 1, probability 0, space 0, times 0 [ 301.386041][ T7604] CPU: 1 UID: 0 PID: 7604 Comm: syz.3.400 Not tainted 6.12.0-rc2-syzkaller #0 [ 301.394908][ T7604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 301.404978][ T7604] Call Trace: [ 301.408250][ T7604] [ 301.411169][ T7604] dump_stack_lvl+0x241/0x360 [ 301.415847][ T7604] ? __pfx_dump_stack_lvl+0x10/0x10 [ 301.421041][ T7604] ? __pfx__printk+0x10/0x10 [ 301.425635][ T7604] ? fs_reclaim_acquire+0x93/0x140 [ 301.430738][ T7604] ? __pfx___might_resched+0x10/0x10 [ 301.436023][ T7604] should_fail_ex+0x3b0/0x4e0 [ 301.440697][ T7604] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 301.446407][ T7604] should_failslab+0xac/0x100 [ 301.451076][ T7604] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 301.456812][ T7604] __kmalloc_noprof+0xd8/0x400 [ 301.461583][ T7604] tomoyo_realpath_from_path+0xcf/0x5e0 [ 301.467136][ T7604] tomoyo_path_number_perm+0x23a/0x880 [ 301.472607][ T7604] ? tomoyo_path_number_perm+0x208/0x880 [ 301.478244][ T7604] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 301.484266][ T7604] ? __fget_files+0x29/0x470 [ 301.488872][ T7604] ? __fget_files+0x3f3/0x470 [ 301.493558][ T7604] security_file_ioctl+0xc6/0x2a0 [ 301.498606][ T7604] __se_sys_ioctl+0x47/0x170 [ 301.503238][ T7604] do_syscall_64+0xf3/0x230 [ 301.507745][ T7604] ? clear_bhb_loop+0x35/0x90 [ 301.512426][ T7604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.518324][ T7604] RIP: 0033:0x7f2a5097dff9 [ 301.522739][ T7604] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 301.542341][ T7604] RSP: 002b:00007f2a51844038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 301.550757][ T7604] RAX: ffffffffffffffda RBX: 00007f2a50b35f80 RCX: 00007f2a5097dff9 [ 301.558726][ T7604] RDX: 0000000020000080 RSI: 00000000c0d05640 RDI: 0000000000000003 [ 301.566701][ T7604] RBP: 00007f2a51844090 R08: 0000000000000000 R09: 0000000000000000 [ 301.574675][ T7604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 301.582729][ T7604] R13: 0000000000000000 R14: 00007f2a50b35f80 R15: 00007f2a50c5fa28 [ 301.590710][ T7604] [ 301.604342][ T937] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.636599][ T937] usb 5-1: Product: syz [ 301.640819][ T937] usb 5-1: Manufacturer: syz [ 301.645714][ T7604] ERROR: Out of memory at tomoyo_realpath_from_path. [ 301.653491][ T937] usb 5-1: SerialNumber: syz [ 301.716521][ T937] usb 5-1: config 0 descriptor?? [ 301.727874][ T937] keyspan 5-1:0.0: Keyspan 1 port adapter converter detected [ 301.735938][ T937] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 87 [ 301.743636][ T937] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 7 [ 301.752657][ T937] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 81 [ 301.762738][ T937] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 1 [ 301.770511][ T937] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 2 [ 301.779000][ T937] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 85 [ 301.788318][ T937] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 5 [ 301.797650][ T937] usb 5-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 301.942651][ T937] usb 5-1: USB disconnect, device number 22 [ 301.962525][ T937] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 301.999417][ T937] keyspan 5-1:0.0: device disconnected [ 302.056333][ T29] audit: type=1400 audit(1728317111.539:48): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=7617 comm="syz.3.407" [ 302.474437][ T8] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 302.524781][ T6151] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 302.614467][ T5308] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 302.634602][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 302.652554][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 302.663907][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 302.685223][ T8] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 302.694752][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.709281][ T8] usb 2-1: config 0 descriptor?? [ 302.714539][ T6151] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 302.727790][ T6151] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 302.760618][ T6151] usb 4-1: New USB device found, idVendor=06cd, idProduct=011a, bcdDevice=17.cb [ 302.770384][ T6151] usb 4-1: New USB device strings: Mfr=1, Product=10, SerialNumber=3 [ 302.786297][ T5308] usb 3-1: Using ep0 maxpacket: 8 [ 302.791586][ T6151] usb 4-1: Product: syz [ 302.799311][ T6151] usb 4-1: Manufacturer: syz [ 302.824380][ T6151] usb 4-1: SerialNumber: syz [ 302.831988][ T5308] usb 3-1: config 0 has no interfaces? [ 302.850252][ T6151] usb 4-1: config 0 descriptor?? [ 302.865276][ T5308] usb 3-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 302.884925][ T5308] usb 3-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 302.904315][ T5308] usb 3-1: Product: syz [ 302.908791][ T5308] usb 3-1: Manufacturer: syz [ 302.913693][ T5308] usb 3-1: SerialNumber: syz [ 302.941154][ T5308] usb 3-1: config 0 descriptor?? [ 303.097617][ T7630] binder: 7626:7630 ioctl c0306201 20000240 returned -22 [ 303.116449][ T5308] usb 4-1: USB disconnect, device number 26 [ 303.130257][ T8] corsair 0003:1B1C:1B02.000B: unknown main item tag 0x0 [ 303.163554][ T8] corsair 0003:1B1C:1B02.000B: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.1-1/input0 [ 303.339385][ T8] corsair 0003:1B1C:1B02.000B: Failed to get K90 initial state (error -71). [ 303.341675][ T8] usb 2-1: USB disconnect, device number 19 [ 303.661972][ T7649] netlink: 'syz.4.417': attribute type 4 has an invalid length. [ 303.720998][ T5245] Bluetooth: hci2: command 0x0405 tx timeout [ 304.052603][ T7664] netlink: 8 bytes leftover after parsing attributes in process `syz.4.420'. [ 304.158267][ T7664] netlink: 28 bytes leftover after parsing attributes in process `syz.4.420'. [ 304.255986][ T7665] bridge0: port 3(syz_tun) entered blocking state [ 304.309010][ T7665] bridge0: port 3(syz_tun) entered disabled state [ 304.351022][ T7665] syz_tun: entered allmulticast mode [ 304.420421][ T7665] syz_tun: entered promiscuous mode [ 304.438664][ T7665] bridge0: port 3(syz_tun) entered blocking state [ 304.445527][ T7665] bridge0: port 3(syz_tun) entered forwarding state [ 304.511313][ T7669] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 304.600866][ T7669] batadv_slave_0: entered allmulticast mode [ 305.083549][ T7677] netlink: 176 bytes leftover after parsing attributes in process `syz.4.425'. [ 305.331931][ T51] usb 3-1: USB disconnect, device number 17 [ 305.550300][ T7681] netlink: 'syz.2.427': attribute type 23 has an invalid length. [ 306.937901][ T5308] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 307.174609][ T5308] usb 2-1: config 1 interface 0 altsetting 7 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 307.198461][ T5308] usb 2-1: config 1 interface 0 altsetting 7 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 307.232045][ T5308] usb 2-1: config 1 interface 0 has no altsetting 0 [ 307.261034][ T5308] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 307.283445][ T5308] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.307583][ T5308] usb 2-1: SerialNumber: 랹ᨇ卥쳳≤ᅠ姧䊟쁮⚢貞䟊椠⡨ꇇ㒘瑝ƚ綌砆媓ꙭ幭휃軦荈ꉒ鰊䏲쑧溩᙭䠞鯗뿾鲉붦흌יּ៴밉녱ጌ勓裬苝 [ 307.379631][ T7701] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 308.231241][ T7717] FAULT_INJECTION: forcing a failure. [ 308.231241][ T7717] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 308.288861][ T7717] CPU: 1 UID: 0 PID: 7717 Comm: syz.2.437 Not tainted 6.12.0-rc2-syzkaller #0 [ 308.297784][ T7717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 308.307894][ T7717] Call Trace: [ 308.311186][ T7717] [ 308.314133][ T7717] dump_stack_lvl+0x241/0x360 [ 308.318842][ T7717] ? __pfx_dump_stack_lvl+0x10/0x10 [ 308.324068][ T7717] ? __pfx__printk+0x10/0x10 [ 308.328694][ T7717] ? __pfx_lock_release+0x10/0x10 [ 308.333760][ T7717] should_fail_ex+0x3b0/0x4e0 [ 308.338475][ T7717] _copy_from_user+0x2f/0xe0 [ 308.343099][ T7717] copy_msghdr_from_user+0xae/0x680 [ 308.348421][ T7717] ? __pfx___might_resched+0x10/0x10 [ 308.353742][ T7717] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 308.359579][ T7717] ? rcu_is_watching+0x15/0xb0 [ 308.364465][ T7717] ? __might_fault+0xaa/0x120 [ 308.369170][ T7717] do_recvmmsg+0x3f9/0xad0 [ 308.373628][ T7717] ? __pfx_do_recvmmsg+0x10/0x10 [ 308.378609][ T7717] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 308.384541][ T7717] ? ksys_write+0x229/0x2b0 [ 308.389080][ T7717] ? __pfx_lock_release+0x10/0x10 [ 308.394142][ T7717] ? vfs_write+0x7bf/0xc90 [ 308.398582][ T7717] ? kmem_cache_free+0x1a2/0x420 [ 308.403559][ T7717] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 308.409572][ T7717] __x64_sys_recvmmsg+0x199/0x250 [ 308.414631][ T7717] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 308.420201][ T7717] ? do_syscall_64+0x100/0x230 [ 308.424984][ T7717] ? do_syscall_64+0xb6/0x230 [ 308.429679][ T7717] do_syscall_64+0xf3/0x230 [ 308.434208][ T7717] ? clear_bhb_loop+0x35/0x90 [ 308.438912][ T7717] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.444928][ T7717] RIP: 0033:0x7fb68237dff9 [ 308.449382][ T7717] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 308.469011][ T7717] RSP: 002b:00007fb6830da038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 308.477458][ T7717] RAX: ffffffffffffffda RBX: 00007fb682535f80 RCX: 00007fb68237dff9 [ 308.485459][ T7717] RDX: 0000000000000a0d RSI: 00000000200066c0 RDI: 0000000000000003 [ 308.493454][ T7717] RBP: 00007fb6830da090 R08: 0000000000000000 R09: 0000000000000000 [ 308.501450][ T7717] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 308.509440][ T7717] R13: 0000000000000000 R14: 00007fb682535f80 R15: 00007fb68265fa28 [ 308.517454][ T7717] [ 308.824621][ T6151] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 309.024564][ T6151] usb 4-1: Using ep0 maxpacket: 32 [ 309.033764][ T6151] usb 4-1: config 0 has an invalid interface number: 113 but max is 0 [ 309.045982][ T6151] usb 4-1: config 0 has no interface number 0 [ 309.093145][ T6151] usb 4-1: New USB device found, idVendor=0525, idProduct=1080, bcdDevice=58.5f [ 309.133487][ T6151] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.172681][ T6151] usb 4-1: Product: syz [ 309.192276][ T6151] usb 4-1: Manufacturer: syz [ 309.212186][ T7719] netlink: 20 bytes leftover after parsing attributes in process `syz.2.438'. [ 309.237999][ T6151] usb 4-1: SerialNumber: syz [ 309.257662][ T6151] usb 4-1: config 0 descriptor?? [ 309.327906][ T6151] net1080 4-1:0.113: probe with driver net1080 failed with error -22 [ 309.533394][ T7716] netlink: 56 bytes leftover after parsing attributes in process `syz.3.436'. [ 309.592075][ T7716] netlink: 16 bytes leftover after parsing attributes in process `syz.3.436'. [ 309.673467][ T25] usb 4-1: USB disconnect, device number 27 [ 309.769087][ T7724] netlink: 341 bytes leftover after parsing attributes in process `syz.4.439'. [ 309.986339][ T6151] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 310.174364][ T6151] usb 3-1: Using ep0 maxpacket: 16 [ 310.188966][ T6151] usb 3-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 310.230878][ T6151] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 310.280847][ T6151] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1c1e, bcdDevice= 0.00 [ 310.322840][ T6151] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.378517][ T6151] usb 3-1: config 0 descriptor?? [ 310.490476][ T7728] veth1_macvtap: left promiscuous mode [ 310.524301][ T7728] macsec0: entered promiscuous mode [ 310.612565][ T7729] veth1_macvtap: entered promiscuous mode [ 310.625460][ T7723] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 310.706774][ T7729] macsec0: left promiscuous mode [ 310.734595][ T7723] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 311.116535][ T7736] netlink: 'syz.3.445': attribute type 12 has an invalid length. [ 311.150005][ T7736] netlink: 132 bytes leftover after parsing attributes in process `syz.3.445'. [ 312.745724][ T6151] usb 3-1: string descriptor 0 read error: -71 [ 312.792517][ T6151] usb 3-1: USB disconnect, device number 18 [ 313.425464][ T6151] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 313.606384][ T6151] usb 4-1: not running at top speed; connect to a high speed hub [ 313.621859][ T6151] usb 4-1: config 1 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 313.646893][ T6151] usb 4-1: config 1 interface 0 has no altsetting 0 [ 313.660152][ T6151] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 313.671914][ T6151] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.688756][ T6151] usb 4-1: Product: 왝ࢅ璔듗틽ዼ醈졔埣䉚翴ஂ⋔㿯⫯߮ᩱ꛿㤢ྵ脾ਜ਼⯮驗ퟗஹ﹖舴ᮍ肒츥؉䍰餬䟕貎臊᪕脯톷꾝蜭鏧쮰젹ꄵ臲鷪箻㝔霁趰酔ᘁ钚苰 [ 313.715768][ T6151] usb 4-1: Manufacturer: С [ 313.723604][ T6151] usb 4-1: SerialNumber: И [ 316.206321][ T6151] usb 4-1: USB disconnect, device number 28 [ 316.705879][ T6151] usb 4-1: new full-speed USB device number 29 using dummy_hcd [ 316.905871][ T6151] usb 4-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 316.939268][ T6151] usb 4-1: New USB device found, idVendor=06cd, idProduct=0108, bcdDevice=bb.20 [ 316.964206][ T6151] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.972385][ T6151] usb 4-1: Product: syz [ 316.993341][ T6151] usb 4-1: Manufacturer: syz [ 317.018171][ T6151] usb 4-1: SerialNumber: syz [ 317.034766][ T6151] usb 4-1: config 0 descriptor?? [ 317.067241][ T6151] keyspan 4-1:0.0: Keyspan 1 port adapter converter detected [ 317.116263][ T6151] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 87 [ 317.155876][ T6151] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 7 [ 317.193379][ T6151] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 81 [ 317.221545][ T6151] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 1 [ 317.258867][ T6151] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 2 [ 317.299551][ T6151] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 85 [ 317.346166][ T6151] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 5 [ 317.380339][ T6151] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 317.438273][ T6151] usb 4-1: USB disconnect, device number 29 [ 317.475517][ T6151] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 317.514694][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.521064][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.564689][ T6151] keyspan 4-1:0.0: device disconnected [ 317.886788][ T5236] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 317.896201][ T5236] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 317.910119][ T5236] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 317.920600][ T5236] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 317.930938][ T5236] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 317.939963][ T5236] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 317.950309][ T7769] netlink: 4096 bytes leftover after parsing attributes in process `syz.3.454'. [ 317.990416][ T7769] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 320.035855][ T5245] Bluetooth: hci5: command tx timeout [ 322.118396][ T5245] Bluetooth: hci5: command tx timeout [ 324.128345][ T5236] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 324.137532][ T5236] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 324.145659][ T5236] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 324.163678][ T5236] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 324.171248][ T5236] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 324.179088][ T5236] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 324.194658][ T5245] Bluetooth: hci5: command tx timeout [ 324.253128][ T5236] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 324.270067][ T5236] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 324.285319][ T5236] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 324.294108][ T5236] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 324.302798][ T5236] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 324.311980][ T5236] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 326.274427][ T5245] Bluetooth: hci5: command tx timeout [ 326.279954][ T5236] Bluetooth: hci6: command tx timeout [ 326.354570][ T5236] Bluetooth: hci7: command tx timeout [ 328.355638][ T5236] Bluetooth: hci6: command tx timeout [ 328.434531][ T5236] Bluetooth: hci7: command tx timeout [ 328.929752][ T5245] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 328.942686][ T5245] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 328.954420][ T5245] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 328.964103][ T5245] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 328.972150][ T5245] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 328.979484][ T5245] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 329.858510][ T5236] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 329.868193][ T5236] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 329.876773][ T5236] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 329.889126][ T5236] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 329.897275][ T5236] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 329.904974][ T5236] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 330.434517][ T5236] Bluetooth: hci6: command tx timeout [ 330.514571][ T5236] Bluetooth: hci7: command tx timeout [ 331.074609][ T5236] Bluetooth: hci8: command tx timeout [ 331.954577][ T5236] Bluetooth: hci9: command tx timeout [ 332.516084][ T5236] Bluetooth: hci6: command tx timeout [ 332.594435][ T5236] Bluetooth: hci7: command tx timeout [ 333.154888][ T5236] Bluetooth: hci8: command tx timeout [ 334.044544][ T5236] Bluetooth: hci9: command tx timeout [ 335.234539][ T5236] Bluetooth: hci8: command tx timeout [ 336.114378][ T5236] Bluetooth: hci9: command tx timeout [ 337.314687][ T5245] Bluetooth: hci8: command tx timeout [ 338.194609][ T5236] Bluetooth: hci9: command tx timeout [ 375.880093][ T5245] Bluetooth: hci0: command 0x0406 tx timeout [ 378.471809][ T5245] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 378.482641][ T5245] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 378.494442][ T5245] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 378.502334][ T5245] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 378.511064][ T5245] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 378.521604][ T5245] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 378.923216][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.930268][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.594576][ T5245] Bluetooth: hci10: command tx timeout [ 382.674429][ T5245] Bluetooth: hci10: command tx timeout [ 384.758575][ T5245] Bluetooth: hci10: command tx timeout [ 385.282151][ T5236] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 385.293772][ T5236] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 385.301996][ T5236] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 385.313646][ T5236] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 385.324858][ T5236] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 385.333741][ T5236] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 385.418950][ T5245] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 385.427757][ T5245] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 385.436362][ T5245] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 385.452782][ T5245] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 385.460470][ T5245] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 385.468262][ T5245] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 386.834447][ T5245] Bluetooth: hci10: command tx timeout [ 387.394439][ T5245] Bluetooth: hci11: command tx timeout [ 387.554461][ T5245] Bluetooth: hci12: command tx timeout [ 389.474444][ T5245] Bluetooth: hci11: command tx timeout [ 389.634541][ T5245] Bluetooth: hci12: command tx timeout [ 389.889179][ T54] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 389.899044][ T54] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 389.907340][ T54] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 389.915579][ T54] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 389.923448][ T54] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 389.933097][ T54] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 390.886340][ T54] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 390.898296][ T54] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 390.906128][ T54] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 390.914100][ T54] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 390.922451][ T54] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 390.930067][ T54] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 391.244249][ T54] Bluetooth: hci4: command 0x0406 tx timeout [ 391.554467][ T5236] Bluetooth: hci11: command tx timeout [ 391.714346][ T5236] Bluetooth: hci12: command tx timeout [ 391.954345][ T5236] Bluetooth: hci13: command tx timeout [ 392.994581][ T5236] Bluetooth: hci14: command tx timeout [ 393.634703][ T5236] Bluetooth: hci11: command tx timeout [ 393.794312][ T5236] Bluetooth: hci12: command tx timeout [ 394.034336][ T5236] Bluetooth: hci13: command tx timeout [ 395.074362][ T5236] Bluetooth: hci14: command tx timeout [ 396.130002][ T5236] Bluetooth: hci13: command tx timeout [ 397.154463][ T5236] Bluetooth: hci14: command tx timeout [ 398.194552][ T5236] Bluetooth: hci13: command tx timeout [ 399.234403][ T5236] Bluetooth: hci14: command tx timeout [ 401.474600][ T5236] Bluetooth: hci1: command 0x0406 tx timeout [ 406.604625][ T5236] Bluetooth: hci3: command 0x0406 tx timeout [ 408.017716][ T9] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 411.717545][ T5236] Bluetooth: hci2: command 0x0405 tx timeout [ 431.438202][ T7755] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 431.507070][ T7755] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 439.391618][ T5245] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 439.400873][ T5245] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 439.409218][ T5245] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 439.419222][ T5245] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 439.438688][ T5245] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 439.446431][ T5245] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 440.374605][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.380975][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.554571][ T54] Bluetooth: hci15: command tx timeout [ 442.444521][ T54] Bluetooth: hci5: command 0x0406 tx timeout [ 443.634360][ T54] Bluetooth: hci15: command tx timeout [ 445.593809][ T7836] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 445.603023][ T7836] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 445.611193][ T7836] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 445.621453][ T7836] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 445.629545][ T7836] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3 [ 445.638096][ T7836] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 445.658330][ T5245] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 445.668241][ T5245] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 445.680844][ T5245] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 445.696030][ T5245] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 445.710827][ T5245] Bluetooth: hci17: unexpected cc 0x0c25 length: 249 > 3 [ 445.718725][ T5245] Bluetooth: hci15: command tx timeout [ 445.724826][ T5245] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 447.559995][ T7838] Bluetooth: hci7: command 0x0406 tx timeout [ 447.566172][ T5233] Bluetooth: hci6: command 0x0406 tx timeout [ 447.794659][ T7838] Bluetooth: hci15: command tx timeout [ 450.474035][ T5233] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 450.489937][ T5233] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 450.499400][ T5233] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 450.518432][ T5233] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 450.526381][ T5233] Bluetooth: hci18: unexpected cc 0x0c25 length: 249 > 3 [ 450.533822][ T5233] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 451.608872][ T7851] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 451.619798][ T7851] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 451.627765][ T7851] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 451.640781][ T7851] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 451.649020][ T7851] Bluetooth: hci19: unexpected cc 0x0c25 length: 249 > 3 [ 451.657456][ T7851] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 452.688168][ T7849] Bluetooth: hci8: command 0x0406 tx timeout [ 452.704268][ T7849] Bluetooth: hci9: command 0x0406 tx timeout [ 464.034493][ T30] INFO: task syz.2.448:7748 blocked for more than 143 seconds. [ 464.044309][ T30] Not tainted 6.12.0-rc2-syzkaller #0 [ 464.050263][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 464.102611][ T30] task:syz.2.448 state:D stack:27392 pid:7748 tgid:7746 ppid:7128 flags:0x00004004 [ 464.171698][ T30] Call Trace: [ 464.181792][ T30] [ 464.254380][ T30] __schedule+0x1895/0x4b30 [ 464.259017][ T30] ? __pfx___schedule+0x10/0x10 [ 464.263928][ T30] ? __pfx_lock_release+0x10/0x10 [ 464.364268][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 464.369842][ T30] ? schedule+0x90/0x320 [ 464.374142][ T30] schedule+0x14b/0x320 [ 464.418539][ T30] schedule_preempt_disabled+0x13/0x30 [ 464.472640][ T30] __mutex_lock+0x6a7/0xd70 [ 464.494390][ T30] ? __mutex_lock+0x52a/0xd70 [ 464.499165][ T30] ? pipe_write+0xd5b/0x1a30 [ 464.503810][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 464.604365][ T30] ? prepare_to_wait_event+0x3bd/0x400 [ 464.609920][ T30] ? schedule+0x90/0x320 [ 464.664251][ T30] ? schedule+0x90/0x320 [ 464.668594][ T30] ? schedule+0x155/0x320 [ 464.672980][ T30] pipe_write+0xd5b/0x1a30 [ 464.754315][ T30] ? mark_lock+0x9a/0x360 [ 464.758766][ T30] ? __pfx_pipe_write+0x10/0x10 [ 464.763691][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 464.826737][ T30] ? bpf_lsm_file_permission+0x9/0x10 [ 464.832609][ T30] ? security_file_permission+0x74/0x280 [ 464.899156][ T30] vfs_write+0xa6d/0xc90 [ 464.903505][ T30] ? __pfx_pipe_write+0x10/0x10 [ 464.924255][ T30] ? __pfx_vfs_write+0x10/0x10 [ 464.929128][ T30] ? fdget_pos+0x19a/0x320 [ 464.970481][ T30] ksys_write+0x183/0x2b0 [ 464.984357][ T30] ? __pfx_ksys_write+0x10/0x10 [ 464.989342][ T30] ? exc_page_fault+0x590/0x8c0 [ 465.030382][ T30] ? do_syscall_64+0xb6/0x230 [ 465.050321][ T30] do_syscall_64+0xf3/0x230 [ 465.061890][ T30] ? clear_bhb_loop+0x35/0x90 [ 465.094315][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.100326][ T30] RIP: 0033:0x7fb68237dff9 [ 465.134260][ T30] RSP: 002b:00007fb6830b9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 465.178900][ T30] RAX: ffffffffffffffda RBX: 00007fb682536058 RCX: 00007fb68237dff9 [ 465.198235][ T30] RDX: 00000000fffffecc RSI: 0000000020000000 RDI: 0000000000000006 [ 465.214259][ T30] RBP: 00007fb6823f0296 R08: 0000000000000000 R09: 0000000000000000 [ 465.223510][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 465.234432][ T30] R13: 0000000000000001 R14: 00007fb682536058 R15: 00007fb68265fa28 [ 465.251567][ T30] [ 465.256307][ T30] [ 465.256307][ T30] Showing all locks held in the system: [ 465.272666][ T30] 6 locks held by kworker/0:1/9: [ 465.279320][ T30] 2 locks held by kworker/1:0/25: [ 465.289420][ T30] #0: ffff88801ac80948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 465.302302][ T30] #1: ffffc900001f7d00 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 465.321060][ T30] 1 lock held by khungtaskd/30: [ 465.328424][ T30] #0: ffffffff8e937de0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 465.340768][ T30] 3 locks held by kworker/u8:2/35: [ 465.351114][ T30] #0: ffff88814b5f6948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 465.365631][ T30] #1: ffffc90000ab7d00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 465.387529][ T30] #2: ffffffff8fcd1cc8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 [ 465.402363][ T30] 5 locks held by kworker/u9:0/54: [ 465.409184][ T30] #0: ffff88809df1b148 ((wq_completion)hci7){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 465.442430][ T30] #1: ffffc90000bf7d00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 465.467249][ T30] #2: ffff888067230d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 [ 465.481083][ T30] #3: ffff888067230078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0 [ 465.495001][ T30] #4: ffffffff8fe3e568 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x15d/0x300 [ 465.511936][ T30] 8 locks held by kworker/0:2/937: [ 465.518799][ T30] 3 locks held by kworker/u8:9/2903: [ 465.524155][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 465.543635][ T30] #1: ffffc90009cd7d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 465.561802][ T30] #2: ffffffff8fcd1cc8 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 465.580825][ T30] 2 locks held by getty/4989: [ 465.585931][ T30] #0: ffff88814b6ef0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 465.602301][ T30] #1: ffffc900031332f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 465.615071][ T30] 5 locks held by kworker/u9:2/5230: [ 465.620423][ T30] #0: ffff888065b6e148 ((wq_completion)hci6){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 465.634399][ T30] #1: ffffc9000362fd00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 465.654208][ T30] #2: ffff888057498d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 [ 465.673565][ T30] #3: ffff888057498078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0 [ 465.683781][ T30] #4: ffffffff8fe3e568 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x15d/0x300 [ 465.700239][ T30] 4 locks held by kworker/u9:3/5233: [ 465.706029][ T30] #0: ffff888060bcd148 ((wq_completion)hci18#2){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 465.724761][ T30] #1: ffffc900036efd00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 465.743903][ T30] #2: ffff8880122c4078 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x97/0xaa0 [ 465.756336][ T30] #3: ffffffff8fe3e568 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x473/0xaa0 [ 465.772493][ T30] 5 locks held by kworker/u9:4/5236: [ 465.782701][ T30] #0: ffff888029a18948 ((wq_completion)hci5){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 465.798970][ T30] #1: ffffc9000371fd00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 465.813405][ T30] #2: ffff88805a520d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 [ 465.828634][ T30] #3: ffff88805a520078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0 [ 465.841993][ T30] #4: ffffffff8fe3e568 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x15d/0x300 [ 465.859005][ T30] 5 locks held by kworker/u9:8/5245: [ 465.865943][ T30] #0: ffff88806336a948 ((wq_completion)hci8){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 465.884282][ T30] #1: ffffc90003acfd00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 465.904851][ T30] #2: ffff88804376cd80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 [ 465.921336][ T30] #3: ffff88804376c078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0 [ 465.931532][ T30] #4: ffffffff8fe3e568 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x15d/0x300 [ 465.947933][ T30] 3 locks held by kworker/1:6/5308: [ 465.953219][ T30] #0: ffff88801ac81948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 465.980407][ T30] #1: ffffc90003ef7d00 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 465.992568][ T30] #2: ffffffff8fcd1cc8 (rtnl_mutex){+.+.}-{3:3}, at: reg_check_chans_work+0x99/0xfd0 [ 466.010851][ T30] 1 lock held by syz.1.433/7701: [ 466.017429][ T30] 1 lock held by syz.2.448/7748: [ 466.022424][ T30] #0: ffff888031a24868 (&pipe->mutex){+.+.}-{3:3}, at: pipe_write+0xd5b/0x1a30 [ 466.038284][ T30] 2 locks held by syz.2.448/7749: [ 466.043390][ T30] #0: ffff888031a24868 (&pipe->mutex){+.+.}-{3:3}, at: splice_to_socket+0xee/0x10b0 [ 466.060399][ T30] #1: ffffffff8fcd1cc8 (rtnl_mutex){+.+.}-{3:3}, at: netdev_run_todo+0x7b2/0x1000 [ 466.072530][ T30] 3 locks held by syz.0.449/7755: [ 466.084298][ T30] #0: ffff888028730d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510 [ 466.100643][ T30] #1: ffff888028730078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x572/0x11a0 [ 466.111005][ T30] #2: ffffffff8fe3e568 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa6/0x240 [ 466.126666][ T30] 3 locks held by syz-executor/7770: [ 466.132049][ T30] #0: ffffffff8fcc51d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 466.148046][ T30] #1: ffffffff8fcd1cc8 (rtnl_mutex){+.+.}-{3:3}, at: caif_exit_net+0x6f/0x4a0 [ 466.161238][ T30] #2: ffff8880357d4280 (&caifn->caifdevs.lock){+.+.}-{3:3}, at: caif_exit_net+0x82/0x4a0 [ 466.179615][ T30] 2 locks held by syz-executor/7783: [ 466.188676][ T30] #0: ffffffff8fcc51d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 466.202627][ T30] #1: ffffffff8fcd1cc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 466.216122][ T30] 2 locks held by syz-executor/7785: [ 466.221478][ T30] #0: ffffffff8fcc51d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 466.242221][ T30] #1: ffffffff8fcd1cc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 466.255293][ T30] 2 locks held by syz-executor/7789: [ 466.260657][ T30] #0: ffffffff8fcc51d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 466.280716][ T30] #1: ffffffff8fcd1cc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 466.299502][ T30] 2 locks held by syz-executor/7794: [ 466.306624][ T30] #0: ffffffff8fcc51d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 466.321193][ T30] #1: ffffffff8fcd1cc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 466.333527][ T30] 2 locks held by syz-executor/7805: [ 466.347022][ T30] #0: ffffffff8fcc51d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 466.363964][ T30] #1: ffffffff8fcd1cc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 466.381302][ T30] 2 locks held by syz-executor/7811: [ 466.388241][ T30] #0: ffffffff8fcc51d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 466.406552][ T30] #1: ffffffff8fcd1cc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 466.423009][ T30] 2 locks held by syz-executor/7815: [ 466.428800][ T30] #0: ffffffff8fcc51d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 466.444250][ T30] #1: ffffffff8fcd1cc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 466.462454][ T30] 2 locks held by syz-executor/7819: [ 466.468944][ T30] #0: ffffffff8fcc51d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 466.484536][ T30] #1: ffffffff8fcd1cc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 466.501253][ T30] 2 locks held by syz-executor/7824: [ 466.507084][ T30] #0: ffffffff8fcc51d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 466.524226][ T30] #1: ffffffff8fcd1cc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 466.540485][ T30] 2 locks held by syz-executor/7831: [ 466.546698][ T30] #0: ffffffff8fcc51d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 466.561448][ T30] #1: ffffffff8fcd1cc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 466.580113][ T30] 4 locks held by kworker/u9:1/7836: [ 466.587356][ T30] #0: ffff88808d986148 ((wq_completion)hci16#2){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 466.609018][ T30] #1: ffffc90004f1fd00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 466.624040][ T30] #2: ffff88808d070078 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x97/0xaa0 [ 466.642709][ T30] #3: ffffffff8fe3e568 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x473/0xaa0 [ 466.653793][ T30] 5 locks held by kworker/u9:5/7838: [ 466.664321][ T30] #0: ffff88806486a948 ((wq_completion)hci9){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 466.684886][ T30] #1: ffffc90009177d00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 466.705090][ T30] #2: ffff88806496cd80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 [ 466.720207][ T30] #3: ffff88806496c078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0 [ 466.731658][ T30] #4: ffffffff8fe3e568 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x15d/0x300 [ 466.746791][ T30] 4 locks held by kworker/u9:6/7840: [ 466.752162][ T30] #0: ffff88808d984948 ((wq_completion)hci17#2){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 466.769855][ T30] #1: ffffc90009207d00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 466.790015][ T30] #2: ffff88808d074078 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x97/0xaa0 [ 466.803573][ T30] #3: ffffffff8fe3e568 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x473/0xaa0 [ 466.820462][ T30] 2 locks held by syz-executor/7842: [ 466.826167][ T30] #0: ffffffff8fcc51d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 466.844254][ T30] #1: ffffffff8fcd1cc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 466.862489][ T30] 2 locks held by syz-executor/7843: [ 466.868304][ T30] #0: ffffffff8fcc51d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 466.884251][ T30] #1: ffffffff8fcd1cc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 466.901552][ T30] 2 locks held by syz-executor/7847: [ 466.909301][ T30] #0: ffffffff8fcc51d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 466.926592][ T30] #1: ffffffff8fcd1cc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 466.939645][ T30] 4 locks held by kworker/u9:10/7851: [ 466.949032][ T30] #0: ffff88807a54b948 ((wq_completion)hci19#2){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 466.968809][ T30] #1: ffffc90009257d00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 466.983465][ T30] #2: ffff888031094078 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x97/0xaa0 [ 466.998839][ T30] #3: ffffffff8fe3e568 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x473/0xaa0 [ 467.023653][ T30] 2 locks held by syz-executor/7853: [ 467.029461][ T30] #0: ffffffff8fcc51d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 467.044319][ T30] #1: ffffffff8fcd1cc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 467.060780][ T30] [ 467.063177][ T30] ============================================= [ 467.063177][ T30] [ 467.080501][ T30] NMI backtrace for cpu 1 [ 467.084909][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc2-syzkaller #0 [ 467.093730][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 467.103846][ T30] Call Trace: [ 467.107169][ T30] [ 467.110145][ T30] dump_stack_lvl+0x241/0x360 [ 467.114880][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 467.120128][ T30] ? __pfx__printk+0x10/0x10 [ 467.124793][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 467.129797][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 467.135309][ T30] ? _printk+0xd5/0x120 [ 467.139530][ T30] ? __pfx__printk+0x10/0x10 [ 467.144178][ T30] ? __wake_up_klogd+0xcc/0x110 [ 467.149083][ T30] ? __pfx__printk+0x10/0x10 [ 467.153752][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 467.158905][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 467.164969][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 467.171037][ T30] watchdog+0xff4/0x1040 [ 467.175343][ T30] ? watchdog+0x1ea/0x1040 [ 467.179856][ T30] ? __pfx_watchdog+0x10/0x10 [ 467.184592][ T30] kthread+0x2f0/0x390 [ 467.188722][ T30] ? __pfx_watchdog+0x10/0x10 [ 467.193467][ T30] ? __pfx_kthread+0x10/0x10 [ 467.198108][ T30] ret_from_fork+0x4b/0x80 [ 467.202582][ T30] ? __pfx_kthread+0x10/0x10 [ 467.207223][ T30] ret_from_fork_asm+0x1a/0x30 [ 467.212062][ T30] [ 467.215883][ T30] Sending NMI from CPU 1 to CPUs 0: [ 467.221173][ C0] NMI backtrace for cpu 0 [ 467.221189][ C0] CPU: 0 UID: 0 PID: 937 Comm: kworker/0:2 Not tainted 6.12.0-rc2-syzkaller #0 [ 467.221211][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 467.221224][ C0] Workqueue: events_power_efficient gc_worker [ 467.221249][ C0] RIP: 0010:__lock_acquire+0x98d/0x2050 [ 467.221281][ C0] Code: 81 c3 c6 00 00 00 48 89 d8 48 c1 e8 03 0f b6 04 10 84 c0 0f 85 a8 00 00 00 80 3b 02 74 31 49 ff c6 48 8b 44 24 38 0f b6 04 10 <84> c0 75 6b 48 8b 44 24 48 48 63 00 49 83 c7 28 49 83 c5 28 41 ff [ 467.221297][ C0] RSP: 0018:ffffc90000006910 EFLAGS: 00000003 [ 467.221313][ C0] RAX: 0000000000000000 RBX: ffffffff93c3f216 RCX: 0000000000000002 [ 467.221326][ C0] RDX: dffffc0000000000 RSI: 0000000000000008 RDI: ffffffff942c5800 [ 467.221339][ C0] RBP: 0000000000000002 R08: ffffffff942c5807 R09: 1ffffffff2858b00 [ 467.221353][ C0] R10: dffffc0000000000 R11: fffffbfff2858b01 R12: 0000000000000003 [ 467.221367][ C0] R13: ffff888025f68b78 R14: 0000000000000004 R15: ffff888025f68b78 [ 467.221380][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 467.221396][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 467.221410][ C0] CR2: 000000110c2a5fae CR3: 000000000e734000 CR4: 00000000003526f0 [ 467.221426][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 467.221438][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 467.221450][ C0] Call Trace: [ 467.221457][ C0] [ 467.221465][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 467.221488][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 467.221523][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 467.221550][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 467.221576][ C0] ? nmi_handle+0x14f/0x5a0 [ 467.221596][ C0] ? nmi_handle+0x2a/0x5a0 [ 467.221615][ C0] ? __lock_acquire+0x98d/0x2050 [ 467.221642][ C0] ? default_do_nmi+0x63/0x160 [ 467.221665][ C0] ? exc_nmi+0x123/0x1f0 [ 467.221686][ C0] ? end_repeat_nmi+0xf/0x53 [ 467.221707][ C0] ? __lock_acquire+0x98d/0x2050 [ 467.221735][ C0] ? __lock_acquire+0x98d/0x2050 [ 467.221764][ C0] ? __lock_acquire+0x98d/0x2050 [ 467.221792][ C0] [ 467.221798][ C0] [ 467.221810][ C0] lock_acquire+0x1ed/0x550 [ 467.221837][ C0] ? __dev_queue_xmit+0x2da/0x3ed0 [ 467.221859][ C0] ? __pfx_validate_chain+0x10/0x10 [ 467.221881][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 467.221910][ C0] ? __dev_queue_xmit+0x2da/0x3ed0 [ 467.221930][ C0] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 467.221957][ C0] ? synproxy_pernet+0x23/0x240 [ 467.221982][ C0] ? __dev_queue_xmit+0x2da/0x3ed0 [ 467.222003][ C0] __dev_queue_xmit+0x30b/0x3ed0 [ 467.222022][ C0] ? __dev_queue_xmit+0x2da/0x3ed0 [ 467.222047][ C0] ? __dev_queue_xmit+0x2da/0x3ed0 [ 467.222067][ C0] ? __lock_acquire+0x1384/0x2050 [ 467.222096][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 467.222124][ C0] ? mark_lock+0x9a/0x360 [ 467.222144][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 467.222175][ C0] ? ip_finish_output2+0xa14/0x1390 [ 467.222203][ C0] ? ip_finish_output2+0x45f/0x1390 [ 467.222231][ C0] ip_finish_output2+0xd41/0x1390 [ 467.222260][ C0] ? ip_finish_output2+0x45f/0x1390 [ 467.222290][ C0] ? __pfx_ip_finish_output2+0x10/0x10 [ 467.222318][ C0] ? ip_skb_dst_mtu+0x6ba/0x9b0 [ 467.222345][ C0] ? __ip_finish_output+0x349/0x400 [ 467.222374][ C0] synproxy_send_client_synack+0x8b8/0xf30 [ 467.222404][ C0] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 467.222469][ C0] ? synproxy_pernet+0x45/0x270 [ 467.222505][ C0] nft_synproxy_eval_v4+0x3ca/0x610 [ 467.222535][ C0] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 467.222562][ C0] ? nf_ip_checksum+0x13a/0x500 [ 467.222592][ C0] nft_synproxy_do_eval+0x362/0xa60 [ 467.222621][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 467.222650][ C0] ? __pfx_validate_chain+0x10/0x10 [ 467.222691][ C0] nft_do_chain+0x4ad/0x1da0 [ 467.222724][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 467.222751][ C0] ? __local_bh_enable_ip+0x168/0x200 [ 467.222786][ C0] ? __pfx_nf_nat_inet_fn+0x10/0x10 [ 467.222806][ C0] nft_do_chain_inet+0x418/0x6b0 [ 467.222834][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 467.222860][ C0] ? ipt_do_table+0x312/0x1860 [ 467.222893][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 467.222919][ C0] nf_hook_slow+0xc3/0x220 [ 467.222943][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 467.222964][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 467.222985][ C0] NF_HOOK+0x29e/0x450 [ 467.223006][ C0] ? NF_HOOK+0x9a/0x450 [ 467.223025][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 467.223045][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 467.223069][ C0] ? ip_rcv_finish+0x406/0x560 [ 467.223090][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 467.223110][ C0] NF_HOOK+0x3a4/0x450 [ 467.223129][ C0] ? __lock_acquire+0x1384/0x2050 [ 467.223158][ C0] ? NF_HOOK+0x9a/0x450 [ 467.223177][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 467.223195][ C0] ? ip_rcv_core+0x801/0xd10 [ 467.223216][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 467.223239][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 467.223259][ C0] __netif_receive_skb+0x2bf/0x650 [ 467.223283][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 467.223310][ C0] ? __pfx___netif_receive_skb+0x10/0x10 [ 467.223332][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 467.223359][ C0] ? __pfx_lock_release+0x10/0x10 [ 467.223387][ C0] ? _raw_spin_lock_irq+0xdf/0x120 [ 467.223417][ C0] process_backlog+0x662/0x15b0 [ 467.223462][ C0] ? process_backlog+0x33b/0x15b0 [ 467.223489][ C0] ? __pfx_process_backlog+0x10/0x10 [ 467.223519][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 467.223547][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 467.223577][ C0] __napi_poll+0xcb/0x490 [ 467.223600][ C0] net_rx_action+0x89b/0x1240 [ 467.223632][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 467.223656][ C0] ? __pfx_tmigr_handle_remote+0x10/0x10 [ 467.223695][ C0] handle_softirqs+0x2c5/0x980 [ 467.223722][ C0] ? __irq_exit_rcu+0xf4/0x1c0 [ 467.223747][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 467.223773][ C0] ? irqtime_account_irq+0xd4/0x1e0 [ 467.223793][ C0] __irq_exit_rcu+0xf4/0x1c0 [ 467.223817][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 467.223845][ C0] irq_exit_rcu+0x9/0x30 [ 467.223868][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 467.223894][ C0] [ 467.223900][ C0] [ 467.223907][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 467.223936][ C0] RIP: 0010:lock_acquire+0x264/0x550 [ 467.223964][ C0] Code: 2b 00 74 08 4c 89 f7 e8 ba 40 8e 00 f6 44 24 61 02 0f 85 85 01 00 00 41 f7 c7 00 02 00 00 74 01 fb 48 c7 44 24 40 0e 36 e0 45 <4b> c7 44 25 00 00 00 00 00 43 c7 44 25 09 00 00 00 00 43 c7 44 25 [ 467.223979][ C0] RSP: 0018:ffffc90003cf7900 EFLAGS: 00000206 [ 467.223995][ C0] RAX: 0000000000000001 RBX: 1ffff9200079ef2c RCX: 126d328701d0f200 [ 467.224009][ C0] RDX: dffffc0000000000 RSI: ffffffff8c0adba0 RDI: ffffffff8c60fae0 [ 467.224024][ C0] RBP: ffffc90003cf7a48 R08: ffffffff942c5807 R09: 1ffffffff2858b00 [ 467.224038][ C0] R10: dffffc0000000000 R11: fffffbfff2858b01 R12: 1ffff9200079ef28 [ 467.224052][ C0] R13: dffffc0000000000 R14: ffffc90003cf7960 R15: 0000000000000246 [ 467.224072][ C0] ? gc_worker+0x26b/0x1530 [ 467.224091][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 467.224118][ C0] ? gc_worker+0x26b/0x1530 [ 467.224135][ C0] ? __pfx___might_resched+0x10/0x10 [ 467.224163][ C0] ? seqcount_lockdep_reader_access+0x1d7/0x220 [ 467.224215][ C0] gc_worker+0x28c/0x1530 [ 467.224235][ C0] ? gc_worker+0x26b/0x1530 [ 467.224255][ C0] ? gc_worker+0x26b/0x1530 [ 467.224278][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 467.224313][ C0] ? __pfx_gc_worker+0x10/0x10 [ 467.224337][ C0] ? process_scheduled_works+0x976/0x1850 [ 467.224368][ C0] process_scheduled_works+0xa63/0x1850 [ 467.224411][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 467.224448][ C0] ? assign_work+0x364/0x3d0 [ 467.224480][ C0] worker_thread+0x870/0xd30 [ 467.224523][ C0] ? __kthread_parkme+0x169/0x1d0 [ 467.224553][ C0] ? __pfx_worker_thread+0x10/0x10 [ 467.224580][ C0] kthread+0x2f0/0x390 [ 467.224599][ C0] ? __pfx_worker_thread+0x10/0x10 [ 467.224626][ C0] ? __pfx_kthread+0x10/0x10 [ 467.224645][ C0] ret_from_fork+0x4b/0x80 [ 467.224674][ C0] ? __pfx_kthread+0x10/0x10 [ 467.224692][ C0] ret_from_fork_asm+0x1a/0x30 [ 467.224726][ C0] [ 468.079312][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 468.086246][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc2-syzkaller #0 [ 468.095059][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 468.105160][ T30] Call Trace: [ 468.108479][ T30] [ 468.111445][ T30] dump_stack_lvl+0x241/0x360 [ 468.116272][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 468.121764][ T30] ? __pfx__printk+0x10/0x10 [ 468.126421][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 468.132647][ T30] ? vscnprintf+0x5d/0x90 [ 468.137041][ T30] panic+0x349/0x880 [ 468.140997][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 468.147217][ T30] ? __pfx_panic+0x10/0x10 [ 468.151690][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 468.157117][ T30] ? __irq_work_queue_local+0x137/0x410 [ 468.162722][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 468.168148][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 468.174359][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 468.180585][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 468.186814][ T30] watchdog+0x1033/0x1040 [ 468.192013][ T30] ? watchdog+0x1ea/0x1040 [ 468.196639][ T30] ? __pfx_watchdog+0x10/0x10 [ 468.201381][ T30] kthread+0x2f0/0x390 [ 468.205515][ T30] ? __pfx_watchdog+0x10/0x10 [ 468.210249][ T30] ? __pfx_kthread+0x10/0x10 [ 468.214913][ T30] ret_from_fork+0x4b/0x80 [ 468.219398][ T30] ? __pfx_kthread+0x10/0x10 [ 468.224050][ T30] ret_from_fork_asm+0x1a/0x30 [ 468.228883][ T30] [ 468.232257][ T30] Kernel Offset: disabled [ 468.236606][ T30] Rebooting in 86400 seconds..